@selvajs/platform 0.14.2 → 0.15.0-beta.1

package/src/pagination.ts

@@ -1,45 +0,0 @@
-import type { DefinitionStatus } from './definitions/types.js';
-
-/**
- * Cursor-paginated list options. Adapters MUST provide sensible defaults
- * (limit=50, orderBy=createdAt desc) and clamp limit to a safe upper bound.
- *
- * Cursors are opaque — adapters may use row ids, offsets, or keyset
- * encodings. Callers must not inspect them.
- */
-export interface ListOptions {
-	limit?: number;
-	cursor?: string;
-	orderBy?: 'createdAt' | 'updatedAt' | 'name';
-	/** Default: 'desc'. */
-	orderDir?: 'asc' | 'desc';
-}
-
-/** Definition-specific filtering on top of `ListOptions`. */
-export interface DefinitionListOptions extends Omit<ListOptions, 'orderBy'> {
-	orderBy?: 'createdAt' | 'updatedAt' | 'name' | 'solveCount';
-	/**
-	 * Include records with `status='pending'`. Default false — consumers don't
-	 * see half-written state unless they explicitly opt in.
-	 */
-	includePending?: boolean;
-	/**
-	 * Include records with `status='archived'`. Default false — archived
-	 * definitions are hidden from normal views; opt in for archive browsers.
-	 */
-	includeArchived?: boolean;
-	/**
-	 * Filter to specific editorial statuses. Omit for the default view (all
-	 * non-pending, non-archived). Pass `['published']` for the runner home.
-	 * When set, `includePending` / `includeArchived` are ignored.
-	 */
-	statuses?: DefinitionStatus[];
-}
-
-export interface Page<T> {
-	items: T[];
-	nextCursor?: string;
-}
-
-export const DEFAULT_PAGE_LIMIT = 50;
-export const MAX_PAGE_LIMIT = 200;

package/src/permissions/index.ts

@@ -1,3 +0,0 @@
-export type { PlatformPermission } from './types.js';
-export { PlatformPermissionSchema, ALL_PLATFORM_PERMISSIONS } from './types.js';
-export type { IPlatformPermissionStore } from './interface.js';

package/src/permissions/interface.ts

@@ -1,60 +0,0 @@
-import type { UserManagementResult } from '../auth/types.js';
-import type { RequestContext } from '../context.js';
-import type { PlatformPermission } from './types.js';
-
-/**
- * Per-user platform permissions. Lives at the data layer (not on
- * `IAuthProvider`) so external IdPs don't need to model Selva-specific
- * authorization.
- *
- * **The sole-`instance_admin` invariant is enforced here.** Any operation
- * that would leave zero users holding `instance_admin` MUST return
- * `'last_admin'`. Auth providers consult `countInstanceAdminsExcluding`
- * before any destructive op so the invariant holds across edits, deletes,
- * and disables.
- *
- * Reads are scoped to "self or admin"; writes restricted to `instance_admin`.
- * Pass `SYSTEM_CONTEXT` for trusted server flows (bootstrap, hooks).
- */
-export interface IPlatformPermissionStore {
-	/**
-	 * Read permissions for a single user. Empty array for users with no
-	 * admin grants (the common case). Non-admin callers may only read self.
-	 */
-	getFor(ctx: RequestContext, userId: string): Promise<PlatformPermission[]>;
-
-	/** Batch-read for the admin user list. Admin-only. */
-	getForBatch(
-		ctx: RequestContext,
-		userIds: readonly string[]
-	): Promise<Map<string, PlatformPermission[]>>;
-
-	/**
-	 * Replace the user's permissions. Idempotent. Returns:
-	 * - `ok` — succeeded
-	 * - `not_found` — target user doesn't exist
-	 * - `last_admin` — refused; would leave zero `instance_admin` users
-	 *
-	 * `not_supported` is intentionally absent — every deployment must provide
-	 * a permission store.
-	 */
-	set(
-		ctx: RequestContext,
-		userId: string,
-		permissions: readonly PlatformPermission[]
-	): Promise<UserManagementResult>;
-
-	/**
-	 * True if at least one *enabled* user holds `instance_admin`. Used by
-	 * first-run detection and the destructive-op invariant check. Adapters
-	 * MUST exclude disabled users (over-count is safer than under-count).
-	 */
-	hasInstanceAdmin(ctx: RequestContext): Promise<boolean>;
-
-	/**
-	 * Count *other* users holding `instance_admin`. `deleteUser` / `disableUser`
-	 * call this BEFORE the destructive op — `count === 0` ⇒ `'last_admin'`.
-	 * MUST exclude disabled users.
-	 */
-	countInstanceAdminsExcluding(ctx: RequestContext, excludeUserId: string): Promise<number>;
-}

package/src/permissions/types.ts

@@ -1,21 +0,0 @@
-import { z } from 'zod';
-
-/**
- * Platform-scope permissions. Reserved for Selva-staff and instance operators;
- * regular users hold an empty array.
- *
- * - `instance_admin`        — superuser; implies every other permission.
- * - `manage_compute`        — configure the instance-wide Rhino.Compute pool.
- * - `manage_instance_users` — disable/enable any user on the instance.
- * - `manage_updates`        — run system updates.
- */
-export const PlatformPermissionSchema = z.enum([
-	'instance_admin',
-	'manage_compute',
-	'manage_instance_users',
-	'manage_updates'
-]);
-export type PlatformPermission = z.infer<typeof PlatformPermissionSchema>;
-
-export const ALL_PLATFORM_PERMISSIONS: readonly PlatformPermission[] =
-	PlatformPermissionSchema.options;

package/src/platformProjects/index.ts

@@ -1,3 +0,0 @@
-export type { PlatformProjectGrant, PlatformProjectGranteeType } from './types.js';
-export type { IPlatformProjectGrantStore } from './interface.js';
-export { PlatformProjectGrantSchema, PlatformProjectGranteeTypeSchema } from './schemas.js';

package/src/platformProjects/interface.ts

@@ -1,27 +0,0 @@
-import type { RequestContext } from '../context.js';
-import type { PlatformProjectGrant } from './types.js';
-
-/**
- * Grants for `platform`-visibility projects. Enables `instance_admin` to
- * grant orgs or individual users view-only or view+solve access without
- * creating project membership rows.
- *
- * All deletes are hard-deletes — grants have no downstream references and
- * revocation is immediate.
- */
-export interface IPlatformProjectGrantStore {
-	listByProject(ctx: RequestContext, projectId: string): Promise<PlatformProjectGrant[]>;
-	create(ctx: RequestContext, grant: PlatformProjectGrant): Promise<void>;
-	delete(ctx: RequestContext, id: string): Promise<void>;
-	/**
-	 * Cascade hook: drop every grant for a project. Called by `deleteProject`.
-	 * No-op when none exist.
-	 */
-	deleteByProject(ctx: RequestContext, projectId: string): Promise<void>;
-	/**
-	 * Cascade hook: drop every org grant whose `granteeId === orgId`. Called by
-	 * `deleteOrg`. User grants are identity-scoped and remain. No-op when none
-	 * exist.
-	 */
-	deleteByGranteeOrg(ctx: RequestContext, orgId: string): Promise<void>;
-}

package/src/platformProjects/schemas.ts

@@ -1,13 +0,0 @@
-import { z } from 'zod';
-
-export const PlatformProjectGranteeTypeSchema = z.enum(['org', 'user']);
-
-export const PlatformProjectGrantSchema = z.object({
-	id: z.string(),
-	projectId: z.string(),
-	granteeType: PlatformProjectGranteeTypeSchema,
-	granteeId: z.string(),
-	canSolve: z.boolean(),
-	createdBy: z.string(),
-	createdAt: z.string()
-});

package/src/platformProjects/types.ts

@@ -1,22 +0,0 @@
-export type PlatformProjectGranteeType = 'org' | 'user';
-
-/**
- * Grants view-only or view+solve access to a `platform`-visibility project
- * for an org or an individual user, without creating project membership rows.
- *
- * - `granteeType: 'org'`  → applies to all members of that org
- * - `granteeType: 'user'` → applies to that specific user regardless of org
- * - `canSolve: false`     → schema fetch / view only; submit-solve is blocked
- * - `canSolve: true`      → view + solve
- *
- * Grants are hard-deleted on revocation — no soft-delete.
- */
-export interface PlatformProjectGrant {
-	id: string;
-	projectId: string;
-	granteeType: PlatformProjectGranteeType;
-	granteeId: string;
-	canSolve: boolean;
-	createdBy: string;
-	createdAt: string;
-}

package/src/projects/index.ts

@@ -1,4 +0,0 @@
-export type { Project, ProjectMember } from './types.js';
-export type { IProjectStore } from './interface.js';
-export type { ProjectVisibility, ProjectRole } from './schemas.js';
-export { ProjectVisibilitySchema, ProjectRoleSchema, validateProjectFlags } from './schemas.js';

package/src/projects/interface.ts

@@ -1,58 +0,0 @@
-import type { RequestContext } from '../context.js';
-import type { ListOptions, Page } from '../pagination.js';
-import type { Project, ProjectMember } from './types.js';
-import type { ProjectRole } from './schemas.js';
-
-/**
- * Projects + project members. Soft-delete cascades to members and definitions;
- * see also the cross-store cascade hook on `IPlatformProjectGrantStore`.
- */
-export interface IProjectStore {
-	// Projects
-	listProjects(ctx: RequestContext, orgId: string, opts?: ListOptions): Promise<Page<Project>>;
-	getProject(ctx: RequestContext, id: string): Promise<Project | null>;
-	getProjectBySlug(ctx: RequestContext, orgId: string, slug: string): Promise<Project | null>;
-	createProject(ctx: RequestContext, project: Project): Promise<void>;
-	updateProject(
-		ctx: RequestContext,
-		id: string,
-		patch: Partial<
-			Pick<Project, 'name' | 'slug' | 'description' | 'visibility' | 'autoJoinOnUpload'>
-		>
-	): Promise<void>;
-	/**
-	 * Soft-delete the project. Cascades to project members and definitions.
-	 * Definition versions and share links cascade through the definition delete.
-	 */
-	deleteProject(ctx: RequestContext, id: string): Promise<void>;
-	/**
-	 * Reactivate a previously soft-deleted project identified by its org + slug.
-	 * Clears `deleted_at` and reactivates the owner's `project_members` row.
-	 * Returns the live project, or `null` if no tombstone with that slug exists.
-	 *
-	 * Use this when `createProject` fails with a duplicate-key error on a slug
-	 * that was soft-deleted — the unconditional unique constraint blocks creation
-	 * even though `getProjectBySlug` returns null for tombstones.
-	 */
-	reactivateProject(ctx: RequestContext, orgId: string, slug: string): Promise<Project | null>;
-
-	// Project members
-	listProjectMembers(
-		ctx: RequestContext,
-		projectId: string,
-		opts?: ListOptions
-	): Promise<Page<ProjectMember>>;
-	getProjectMember(
-		ctx: RequestContext,
-		projectId: string,
-		userId: string
-	): Promise<ProjectMember | null>;
-	addProjectMember(ctx: RequestContext, member: ProjectMember): Promise<void>;
-	updateProjectMemberRole(
-		ctx: RequestContext,
-		projectId: string,
-		userId: string,
-		role: ProjectRole
-	): Promise<void>;
-	removeProjectMember(ctx: RequestContext, projectId: string, userId: string): Promise<void>;
-}

package/src/projects/schemas.ts

@@ -1,28 +0,0 @@
-import { z } from 'zod';
-
-export const ProjectVisibilitySchema = z.enum(['public', 'org', 'private', 'platform']);
-export type ProjectVisibility = z.infer<typeof ProjectVisibilitySchema>;
-
-export const ProjectRoleSchema = z.enum(['owner', 'editor', 'viewer']);
-export type ProjectRole = z.infer<typeof ProjectRoleSchema>;
-
-/** Cross-field check for PATCH flows. Call on the merged post-patch shape. */
-export function validateProjectFlags(merged: {
-	visibility: ProjectVisibility;
-	autoJoinOnUpload?: boolean;
-}): { path: string; message: string }[] {
-	const issues: { path: string; message: string }[] = [];
-	if (merged.autoJoinOnUpload && merged.visibility !== 'public') {
-		issues.push({
-			path: 'autoJoinOnUpload',
-			message: 'autoJoinOnUpload requires visibility=public'
-		});
-	}
-	if (merged.visibility === 'platform' && merged.autoJoinOnUpload) {
-		issues.push({
-			path: 'autoJoinOnUpload',
-			message: 'autoJoinOnUpload is not allowed on platform projects'
-		});
-	}
-	return issues;
-}

package/src/projects/types.ts

@@ -1,36 +0,0 @@
-import type { ProjectRole, ProjectVisibility } from './schemas.js';
-
-/**
- * Visibility:
- * - `public`   — any authenticated user can view/solve (cross-org gated by `ALLOW_CROSS_ORG_PUBLIC`)
- * - `org`      — any member of the parent organization
- * - `private`  — only listed `ProjectMember`s
- * - `platform` — instance-admin-managed; access via `IPlatformProjectGrantStore`
- */
-export interface Project {
-	id: string;
-	orgId: string;
-	name: string;
-	slug: string;
-	description?: string;
-	visibility: ProjectVisibility;
-	/** Transferable; distinct from `createdBy`. */
-	ownerId: string;
-	createdBy: string;
-	updatedBy: string;
-	/** Commons mode — only valid when `visibility='public'`. */
-	autoJoinOnUpload: boolean;
-	createdAt: string;
-	updatedAt: string;
-	deletedAt?: string | null;
-}
-
-export interface ProjectMember {
-	projectId: string;
-	userId: string;
-	role: ProjectRole;
-	joinedAt: string;
-	updatedAt: string;
-	updatedBy: string;
-	deletedAt?: string | null;
-}

package/src/shareLinks/index.ts

@@ -1,5 +0,0 @@
-export type { ShareLink } from './types.js';
-export type { IShareLinkStore } from './interface.js';
-export { DEFAULT_SHARE_LINK_MAX_SOLVES } from './types.js';
-export type { CreateShareLinkInput } from './schemas.js';
-export { CreateShareLinkInputSchema } from './schemas.js';

package/src/shareLinks/interface.ts

@@ -1,35 +0,0 @@
-import type { RequestContext } from '../context.js';
-import type { ListOptions, Page } from '../pagination.js';
-import type { ShareLink } from './types.js';
-
-/**
- * Per-definition tokens granting unauthenticated access to one
- * (definitionId, channel). The store sees only the HMAC hash; the raw token
- * is generated and shown to the minter at the route layer.
- *
- * Reads filter `revokedAt IS NULL` defensively.
- */
-export interface IShareLinkStore {
-	/** Insert a new link. Caller has already hashed the raw token. */
-	create(ctx: RequestContext, link: ShareLink): Promise<void>;
-	/** Newest first by `createdAt`. Excludes revoked links. */
-	listByDefinition(
-		ctx: RequestContext,
-		definitionId: string,
-		opts?: ListOptions
-	): Promise<Page<ShareLink>>;
-	getById(ctx: RequestContext, id: string): Promise<ShareLink | null>;
-	/**
-	 * Lookup by HMAC hash. Returns null when the link doesn't exist OR is
-	 * revoked OR its parent definition is soft-deleted.
-	 */
-	getByTokenHash(ctx: RequestContext, tokenHash: string): Promise<ShareLink | null>;
-	/** Soft-delete (set `revokedAt`). Idempotent. */
-	revoke(ctx: RequestContext, id: string): Promise<void>;
-	/**
-	 * Atomic check-and-increment. Returns the new `solveCount`, or null when
-	 * the cap was reached. MUST be a single statement — read-then-write races
-	 * under load. `null` maxSolves means uncapped.
-	 */
-	tryIncrementSolveCount(ctx: RequestContext, id: string): Promise<number | null>;
-}

package/src/shareLinks/schemas.ts

@@ -1,21 +0,0 @@
-import { z } from 'zod';
-import { DefinitionChannelSchema } from '../definitions/schemas.js';
-
-/**
- * HTTP body for `POST /api/definitions/[guid]/share-links`. The route returns
- * the raw token exactly once.
- */
-export const CreateShareLinkInputSchema = z.object({
-	channel: DefinitionChannelSchema.default('live'),
-	name: z.string().max(128).optional(),
-	allowSolve: z.boolean().default(true),
-	/**
-	 * Null explicitly removes the cap. Omitted = apply default — null is the
-	 * minter's deliberate "uncap" choice.
-	 */
-	maxSolves: z.number().int().min(1).nullable().optional(),
-	/** Optional ISO timestamp. Resolution compares to `now()`. */
-	expiresAt: z.iso.datetime().nullable().optional()
-});
-
-export type CreateShareLinkInput = z.infer<typeof CreateShareLinkInputSchema>;

package/src/shareLinks/types.ts

@@ -1,34 +0,0 @@
-import type { DefinitionChannel } from '../definitions/types.js';
-
-/**
- * Per-definition token granting access to one (definitionId, channel)
- * without an account. The raw token is HMAC-hashed at rest; `tokenHash` is
- * the stored value. The plaintext token is shown to the minter exactly once.
- */
-export interface ShareLink {
-	id: string;
-	definitionId: string;
-	channel: DefinitionChannel;
-	/** HMAC of the raw token. Lookup hashes the supplied token, then matches. */
-	tokenHash: string;
-	/** Optional UX label, e.g. "Demo for Acme". */
-	name?: string;
-	createdBy: string;
-	createdAt: string;
-	/** Null = never expires. */
-	expiresAt?: string | null;
-	/** Non-null = revoked. Resolution checks IS NULL. */
-	revokedAt?: string | null;
-	/** false = view/schema only; true = solve allowed. */
-	allowSolve: boolean;
-	/** Per-link cap. Null = unlimited. */
-	maxSolves?: number | null;
-	solveCount: number;
-}
-
-/**
- * Default cap applied when the minter doesn't specify one. Tokens are
- * leak-prone by design (visible in iframes), so a default bounds the
- * worst-case denial-of-wallet damage.
- */
-export const DEFAULT_SHARE_LINK_MAX_SOLVES = 1000;

package/src/storage/image.ts

@@ -1,77 +0,0 @@
-/**
- * Shared image-transcoding helper for `IStorageProvider` implementations.
- * Cover images are normalized to WebP at upload time (capped at 1200px,
- * quality 85) so storage/bandwidth stays predictable and the viewer path
- * is uniform.
- *
- * `sharp` is loaded via a dynamic import so the platform package has no
- * hard runtime dependency on it — install it in providers that need
- * transcoding (optional peer dependency).
- */
-
-export const IMAGE_MAX_WIDTH = 1200;
-export const IMAGE_WEBP_QUALITY = 85;
-
-export interface TranscodeResult {
-	data: Uint8Array;
-	contentType: string;
-	/** Possibly-rewritten path (non-webp inputs become `.webp`). */
-	path: string;
-}
-
-/** True if the input looks like an image to process — by content type or path extension. */
-export function isImageUpload(contentType: string | undefined, storagePath: string): boolean {
-	if (contentType?.startsWith('image/')) return true;
-	return /\.(webp|png|jpe?g|gif|bmp|tif?f)$/i.test(storagePath);
-}
-
-/** Rewrite a path's extension to `.webp`. Unchanged if not a recognized image extension. */
-export function toWebpPath(storagePath: string): string {
-	return storagePath.replace(/\.(png|jpe?g|gif|bmp|tif?f)$/i, '.webp');
-}
-
-/**
- * If the input is an image, transcode to WebP (capped + re-encoded) and
- * return rewritten bytes/content-type/path. Non-images pass through, so
- * providers can call this unconditionally before `put`.
- *
- * Throws if `sharp` isn't installed — that's a config error, not a fallback.
- */
-export async function transcodeImageIfNeeded(
-	data: Uint8Array,
-	contentType: string | undefined,
-	storagePath: string
-): Promise<TranscodeResult> {
-	if (!isImageUpload(contentType, storagePath)) {
-		return { data, contentType: contentType ?? 'application/octet-stream', path: storagePath };
-	}
-
-	const sharp = await loadSharp();
-	const compressed = await sharp(Buffer.from(data))
-		.resize({ width: IMAGE_MAX_WIDTH, withoutEnlargement: true })
-		.webp({ quality: IMAGE_WEBP_QUALITY })
-		.toBuffer();
-
-	return {
-		data: new Uint8Array(compressed),
-		contentType: 'image/webp',
-		path: toWebpPath(storagePath)
-	};
-}
-
-type SharpFn = typeof import('sharp');
-let cachedSharp: SharpFn | null = null;
-
-async function loadSharp(): Promise<SharpFn> {
-	if (cachedSharp) return cachedSharp;
-	try {
-		const mod = (await import('sharp')) as unknown as { default: SharpFn };
-		cachedSharp = mod.default ?? (mod as unknown as SharpFn);
-		return cachedSharp;
-	} catch (err) {
-		throw new Error(
-			'Image transcoding requires `sharp` to be installed. Add it as a dependency in your provider package.',
-			{ cause: err as Error }
-		);
-	}
-}

package/src/storage/index.ts

@@ -1,9 +0,0 @@
-export type { IStorageProvider } from './interface.js';
-export {
-	IMAGE_MAX_WIDTH,
-	IMAGE_WEBP_QUALITY,
-	isImageUpload,
-	toWebpPath,
-	transcodeImageIfNeeded
-} from './image.js';
-export type { TranscodeResult } from './image.js';

package/src/storage/interface.ts

@@ -1,27 +0,0 @@
-/**
- * Generic path-based blob storage. Implement with: local filesystem, S3,
- * Supabase Storage, Azure Blob, etc.
- *
- * **Authorization is the caller's responsibility.** Methods do NOT take a
- * `RequestContext` — the path itself names the resource, and constructing it
- * requires already-authorized scope. Routes/services MUST authorize against
- * `@selvajs/platform/access` BEFORE constructing the path.
- */
-export interface IStorageProvider {
-	/** Returns null if the path does not exist. */
-	get(path: string): Promise<Uint8Array | null>;
-
-	put(path: string, data: Uint8Array, contentType?: string): Promise<void>;
-
-	/** No-op if the path does not exist. */
-	delete(path: string): Promise<void>;
-
-	/** Delete every file whose path starts with `prefix`. */
-	deletePrefix(prefix: string): Promise<void>;
-
-	/**
-	 * Public URL for a stored file. Local: a relative API path; S3/CDN: a
-	 * full or signed URL.
-	 */
-	getPublicUrl(path: string): string;
-}

package/src/testing/index.ts

@@ -1,47 +0,0 @@
-export { runAuthProviderConformance } from './suites/authProviderSuite.js';
-export type { AuthProviderConformanceOptions } from './suites/authProviderSuite.js';
-
-export { runEmailLinkAuthConformance } from './suites/emailLinkAuthSuite.js';
-export type { EmailLinkAuthConformanceOptions } from './suites/emailLinkAuthSuite.js';
-
-export { runDefinitionStoreConformance } from './suites/definitionStoreSuite.js';
-export type { DefinitionStoreConformanceOptions } from './suites/definitionStoreSuite.js';
-
-export { runOrgStoreConformance } from './suites/orgStoreSuite.js';
-export type { OrgStoreConformanceOptions } from './suites/orgStoreSuite.js';
-
-export { runProjectStoreConformance } from './suites/projectStoreSuite.js';
-export type { ProjectStoreConformanceOptions } from './suites/projectStoreSuite.js';
-
-export { runStorageProviderConformance } from './suites/storageProviderSuite.js';
-export type { StorageProviderConformanceOptions } from './suites/storageProviderSuite.js';
-
-export { runUserProfileStoreConformance } from './suites/userProfileStoreSuite.js';
-export type { UserProfileStoreConformanceOptions } from './suites/userProfileStoreSuite.js';
-
-export { runInviteStoreConformance } from './suites/inviteStoreSuite.js';
-export type { InviteStoreConformanceOptions, InviteTestScope } from './suites/inviteStoreSuite.js';
-
-export { runComputeServerStoreConformance } from './suites/computeServerStoreSuite.js';
-export type { ComputeServerStoreConformanceOptions } from './suites/computeServerStoreSuite.js';
-
-export { runShareLinkStoreConformance } from './suites/shareLinkStoreSuite.js';
-export type {
-	ShareLinkStoreConformanceOptions,
-	ShareLinkTestScope
-} from './suites/shareLinkStoreSuite.js';
-
-export { runEventSinkConformance, RecordingEventSink } from './suites/eventSinkSuite.js';
-export type { EventSinkConformanceOptions } from './suites/eventSinkSuite.js';
-
-export { runSolveMetricSinkConformance } from './suites/solveMetricSinkSuite.js';
-export type {
-	SolveMetricSinkConformanceOptions,
-	RecordedSolveMetric
-} from './suites/solveMetricSinkSuite.js';
-
-export { runPlatformPermissionStoreConformance } from './suites/platformPermissionStoreSuite.js';
-export type { PlatformPermissionStoreConformanceOptions } from './suites/platformPermissionStoreSuite.js';
-
-export { runPlatformProjectGrantStoreConformance } from './suites/platformProjectGrantStoreSuite.js';
-export type { PlatformProjectGrantStoreConformanceOptions } from './suites/platformProjectGrantStoreSuite.js';