@spfn/auth 0.1.0-alpha.0 → 0.1.0-alpha.1

package/dist/server/entities/permissions.js

@@ -0,0 +1,44 @@
+// src/server/entities/permissions.ts
+import { text, boolean, index } from "drizzle-orm/pg-core";
+import { id, timestamps, createFunctionSchema } from "@spfn/core/db";
+var schema = createFunctionSchema("@spfn/auth");
+var permissions = schema.table(
+  "permissions",
+  {
+    // Primary key
+    id: id(),
+    // Permission identifier (e.g., 'user:delete', 'post:publish')
+    // Format: resource:action or namespace:resource:action
+    // Must be unique
+    name: text("name").notNull().unique(),
+    // Display name for UI
+    displayName: text("display_name").notNull(),
+    // Permission description
+    description: text("description"),
+    // Category for grouping (e.g., 'user', 'post', 'admin', 'system')
+    category: text("category"),
+    // Built-in permission flag
+    // true: Core package permissions - cannot be deleted
+    // false: Custom or preset permissions
+    isBuiltin: boolean("is_builtin").notNull().default(false),
+    // System permission flag
+    // true: Defined in code (builtin or preset)
+    // false: Runtime created custom permission
+    isSystem: boolean("is_system").notNull().default(false),
+    // Active status
+    // false: Deactivated permission (not enforced)
+    isActive: boolean("is_active").notNull().default(true),
+    ...timestamps()
+  },
+  (table) => [
+    index("permissions_name_idx").on(table.name),
+    index("permissions_category_idx").on(table.category),
+    index("permissions_is_system_idx").on(table.isSystem),
+    index("permissions_is_active_idx").on(table.isActive),
+    index("permissions_is_builtin_idx").on(table.isBuiltin)
+  ]
+);
+export {
+  permissions
+};
+//# sourceMappingURL=permissions.js.map

package/dist/server/entities/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/server/entities/permissions.ts"],"sourcesContent":["/**\n * @spfn/auth - Permissions Entity\n *\n * Granular permissions for RBAC system\n *\n * Features:\n * - Built-in permissions (auth:*, user:*, rbac:*) - required for package\n * - System permissions (preset permissions) - optional\n * - Custom permissions (app-specific) - defined by developers\n * - Category grouping for organization\n */\n\nimport { text, boolean, index } from 'drizzle-orm/pg-core';\nimport { id, timestamps, createFunctionSchema } from '@spfn/core/db';\n\nconst schema = createFunctionSchema('@spfn/auth');\n\nexport const permissions = schema.table('permissions',\n    {\n        // Primary key\n        id: id(),\n\n        // Permission identifier (e.g., 'user:delete', 'post:publish')\n        // Format: resource:action or namespace:resource:action\n        // Must be unique\n        name: text('name').notNull().unique(),\n\n        // Display name for UI\n        displayName: text('display_name').notNull(),\n\n        // Permission description\n        description: text('description'),\n\n        // Category for grouping (e.g., 'user', 'post', 'admin', 'system')\n        category: text('category'),\n\n        // Built-in permission flag\n        // true: Core package permissions - cannot be deleted\n        // false: Custom or preset permissions\n        isBuiltin: boolean('is_builtin').notNull().default(false),\n\n        // System permission flag\n        // true: Defined in code (builtin or preset)\n        // false: Runtime created custom permission\n        isSystem: boolean('is_system').notNull().default(false),\n\n        // Active status\n        // false: Deactivated permission (not enforced)\n        isActive: boolean('is_active').notNull().default(true),\n\n        ...timestamps(),\n    },\n    (table) => [\n        index('permissions_name_idx').on(table.name),\n        index('permissions_category_idx').on(table.category),\n        index('permissions_is_system_idx').on(table.isSystem),\n        index('permissions_is_active_idx').on(table.isActive),\n        index('permissions_is_builtin_idx').on(table.isBuiltin),\n    ]\n);\n\n// Type exports\nexport type PermissionEntity = typeof permissions.$inferSelect;\nexport type NewPermissionEntity = typeof permissions.$inferInsert;\n\n// Legacy alias for backward compatibility\nexport type Permission = PermissionEntity;\nexport type NewPermission = NewPermissionEntity;"],"mappings":";AAYA,SAAS,MAAM,SAAS,aAAa;AACrC,SAAS,IAAI,YAAY,4BAA4B;AAErD,IAAM,SAAS,qBAAqB,YAAY;AAEzC,IAAM,cAAc,OAAO;AAAA,EAAM;AAAA,EACpC;AAAA;AAAA,IAEI,IAAI,GAAG;AAAA;AAAA;AAAA;AAAA,IAKP,MAAM,KAAK,MAAM,EAAE,QAAQ,EAAE,OAAO;AAAA;AAAA,IAGpC,aAAa,KAAK,cAAc,EAAE,QAAQ;AAAA;AAAA,IAG1C,aAAa,KAAK,aAAa;AAAA;AAAA,IAG/B,UAAU,KAAK,UAAU;AAAA;AAAA;AAAA;AAAA,IAKzB,WAAW,QAAQ,YAAY,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA;AAAA;AAAA;AAAA,IAKxD,UAAU,QAAQ,WAAW,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA;AAAA;AAAA,IAItD,UAAU,QAAQ,WAAW,EAAE,QAAQ,EAAE,QAAQ,IAAI;AAAA,IAErD,GAAG,WAAW;AAAA,EAClB;AAAA,EACA,CAAC,UAAU;AAAA,IACP,MAAM,sBAAsB,EAAE,GAAG,MAAM,IAAI;AAAA,IAC3C,MAAM,0BAA0B,EAAE,GAAG,MAAM,QAAQ;AAAA,IACnD,MAAM,2BAA2B,EAAE,GAAG,MAAM,QAAQ;AAAA,IACpD,MAAM,2BAA2B,EAAE,GAAG,MAAM,QAAQ;AAAA,IACpD,MAAM,4BAA4B,EAAE,GAAG,MAAM,SAAS;AAAA,EAC1D;AACJ;","names":[]}

package/dist/server/entities/role-permissions.d.ts

@@ -0,0 +1,107 @@
+import * as drizzle_orm_pg_core from 'drizzle-orm/pg-core';
+
+/**
+ * @spfn/auth - Role-Permissions Mapping Entity
+ *
+ * Many-to-many relationship between roles and permissions
+ *
+ * Usage:
+ * - Defines which permissions each role has
+ * - Cascade delete when role or permission is deleted
+ */
+declare const rolePermissions: drizzle_orm_pg_core.PgTableWithColumns<{
+    name: "role_permissions";
+    schema: string;
+    columns: {
+        createdAt: drizzle_orm_pg_core.PgColumn<{
+            name: "created_at";
+            tableName: "role_permissions";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        updatedAt: drizzle_orm_pg_core.PgColumn<{
+            name: "updated_at";
+            tableName: "role_permissions";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        id: drizzle_orm_pg_core.PgColumn<{
+            name: "id";
+            tableName: "role_permissions";
+            dataType: "number";
+            columnType: "PgBigSerial53";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        roleId: drizzle_orm_pg_core.PgColumn<{
+            name: "role_id";
+            tableName: "role_permissions";
+            dataType: "number";
+            columnType: "PgBigInt53";
+            data: number;
+            driverParam: string | number;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        permissionId: drizzle_orm_pg_core.PgColumn<{
+            name: "permission_id";
+            tableName: "role_permissions";
+            dataType: "number";
+            columnType: "PgBigInt53";
+            data: number;
+            driverParam: string | number;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>;
+type RolePermission = typeof rolePermissions.$inferSelect;
+type NewRolePermission = typeof rolePermissions.$inferInsert;
+
+export { type NewRolePermission, type RolePermission, rolePermissions };

package/dist/server/entities/role-permissions.js

@@ -0,0 +1,112 @@
+// src/server/entities/role-permissions.ts
+import { bigint, index as index3, unique } from "drizzle-orm/pg-core";
+import { id as id3, timestamps as timestamps3, createFunctionSchema as createFunctionSchema3 } from "@spfn/core/db";
+
+// src/server/entities/roles.ts
+import { text, boolean, integer, index } from "drizzle-orm/pg-core";
+import { id, timestamps, createFunctionSchema } from "@spfn/core/db";
+var schema = createFunctionSchema("@spfn/auth");
+var roles = schema.table(
+  "roles",
+  {
+    // Primary key
+    id: id(),
+    // Role identifier (used in code, e.g., 'admin', 'editor')
+    // Must be unique, lowercase, kebab-case recommended
+    name: text("name").notNull().unique(),
+    // Display name for UI (e.g., 'Administrator', 'Content Editor')
+    displayName: text("display_name").notNull(),
+    // Role description
+    description: text("description"),
+    // Built-in role flag
+    // true: Core package roles (user, admin, superadmin) - cannot be deleted
+    // false: Custom or preset roles - can be deleted
+    isBuiltin: boolean("is_builtin").notNull().default(false),
+    // System role flag
+    // true: Defined in code (builtin or preset) - deletion restricted
+    // false: Runtime created custom role - fully manageable
+    isSystem: boolean("is_system").notNull().default(false),
+    // Active status
+    // false: Deactivated role (users cannot be assigned)
+    isActive: boolean("is_active").notNull().default(true),
+    // Priority level (higher = more privileged)
+    // superadmin: 100, admin: 80, user: 10
+    // Used for role hierarchy and conflict resolution
+    priority: integer("priority").notNull().default(10),
+    ...timestamps()
+  },
+  (table) => [
+    index("roles_name_idx").on(table.name),
+    index("roles_is_system_idx").on(table.isSystem),
+    index("roles_is_active_idx").on(table.isActive),
+    index("roles_is_builtin_idx").on(table.isBuiltin),
+    index("roles_priority_idx").on(table.priority)
+  ]
+);
+
+// src/server/entities/permissions.ts
+import { text as text2, boolean as boolean2, index as index2 } from "drizzle-orm/pg-core";
+import { id as id2, timestamps as timestamps2, createFunctionSchema as createFunctionSchema2 } from "@spfn/core/db";
+var schema2 = createFunctionSchema2("@spfn/auth");
+var permissions = schema2.table(
+  "permissions",
+  {
+    // Primary key
+    id: id2(),
+    // Permission identifier (e.g., 'user:delete', 'post:publish')
+    // Format: resource:action or namespace:resource:action
+    // Must be unique
+    name: text2("name").notNull().unique(),
+    // Display name for UI
+    displayName: text2("display_name").notNull(),
+    // Permission description
+    description: text2("description"),
+    // Category for grouping (e.g., 'user', 'post', 'admin', 'system')
+    category: text2("category"),
+    // Built-in permission flag
+    // true: Core package permissions - cannot be deleted
+    // false: Custom or preset permissions
+    isBuiltin: boolean2("is_builtin").notNull().default(false),
+    // System permission flag
+    // true: Defined in code (builtin or preset)
+    // false: Runtime created custom permission
+    isSystem: boolean2("is_system").notNull().default(false),
+    // Active status
+    // false: Deactivated permission (not enforced)
+    isActive: boolean2("is_active").notNull().default(true),
+    ...timestamps2()
+  },
+  (table) => [
+    index2("permissions_name_idx").on(table.name),
+    index2("permissions_category_idx").on(table.category),
+    index2("permissions_is_system_idx").on(table.isSystem),
+    index2("permissions_is_active_idx").on(table.isActive),
+    index2("permissions_is_builtin_idx").on(table.isBuiltin)
+  ]
+);
+
+// src/server/entities/role-permissions.ts
+var schema3 = createFunctionSchema3("@spfn/auth");
+var rolePermissions = schema3.table(
+  "role_permissions",
+  {
+    // Primary key
+    id: id3(),
+    // Foreign key to roles table
+    roleId: bigint("role_id", { mode: "number" }).notNull().references(() => roles.id, { onDelete: "cascade" }),
+    // Foreign key to permissions table
+    permissionId: bigint("permission_id", { mode: "number" }).notNull().references(() => permissions.id, { onDelete: "cascade" }),
+    ...timestamps3()
+  },
+  (table) => [
+    // Indexes for query performance
+    index3("role_permissions_role_id_idx").on(table.roleId),
+    index3("role_permissions_permission_id_idx").on(table.permissionId),
+    // Unique constraint: one role-permission pair only
+    unique("role_permissions_unique").on(table.roleId, table.permissionId)
+  ]
+);
+export {
+  rolePermissions
+};
+//# sourceMappingURL=role-permissions.js.map

package/dist/server/entities/role-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/server/entities/role-permissions.ts","../../../src/server/entities/roles.ts","../../../src/server/entities/permissions.ts"],"sourcesContent":["/**\n * @spfn/auth - Role-Permissions Mapping Entity\n *\n * Many-to-many relationship between roles and permissions\n *\n * Usage:\n * - Defines which permissions each role has\n * - Cascade delete when role or permission is deleted\n */\n\nimport { bigint, index, unique } from 'drizzle-orm/pg-core';\nimport { id, timestamps, createFunctionSchema } from '@spfn/core/db';\nimport { roles } from './roles';\nimport { permissions } from './permissions';\n\nconst schema = createFunctionSchema('@spfn/auth');\n\nexport const rolePermissions = schema.table('role_permissions',\n    {\n        // Primary key\n        id: id(),\n\n        // Foreign key to roles table\n        roleId: bigint('role_id', { mode: 'number' })\n            .notNull()\n            .references(() => roles.id, { onDelete: 'cascade' }),\n\n        // Foreign key to permissions table\n        permissionId: bigint('permission_id', { mode: 'number' })\n            .notNull()\n            .references(() => permissions.id, { onDelete: 'cascade' }),\n\n        ...timestamps(),\n    },\n    (table) => [\n        // Indexes for query performance\n        index('role_permissions_role_id_idx').on(table.roleId),\n        index('role_permissions_permission_id_idx').on(table.permissionId),\n\n        // Unique constraint: one role-permission pair only\n        unique('role_permissions_unique').on(table.roleId, table.permissionId),\n    ]\n);\n\n// Type exports\nexport type RolePermission = typeof rolePermissions.$inferSelect;\nexport type NewRolePermission = typeof rolePermissions.$inferInsert;","/**\n * @spfn/auth - Roles Entity\n *\n * Role-based access control (RBAC) roles table\n *\n * Features:\n * - Built-in roles (user, admin, superadmin) - cannot be deleted\n * - System roles (preset roles) - can be deactivated\n * - Custom roles (runtime created) - fully manageable\n * - Priority-based hierarchy\n */\n\nimport { text, boolean, integer, index } from 'drizzle-orm/pg-core';\nimport { id, timestamps, createFunctionSchema } from '@spfn/core/db';\n\nconst schema = createFunctionSchema('@spfn/auth');\n\nexport const roles = schema.table('roles',\n    {\n        // Primary key\n        id: id(),\n\n        // Role identifier (used in code, e.g., 'admin', 'editor')\n        // Must be unique, lowercase, kebab-case recommended\n        name: text('name').notNull().unique(),\n\n        // Display name for UI (e.g., 'Administrator', 'Content Editor')\n        displayName: text('display_name').notNull(),\n\n        // Role description\n        description: text('description'),\n\n        // Built-in role flag\n        // true: Core package roles (user, admin, superadmin) - cannot be deleted\n        // false: Custom or preset roles - can be deleted\n        isBuiltin: boolean('is_builtin').notNull().default(false),\n\n        // System role flag\n        // true: Defined in code (builtin or preset) - deletion restricted\n        // false: Runtime created custom role - fully manageable\n        isSystem: boolean('is_system').notNull().default(false),\n\n        // Active status\n        // false: Deactivated role (users cannot be assigned)\n        isActive: boolean('is_active').notNull().default(true),\n\n        // Priority level (higher = more privileged)\n        // superadmin: 100, admin: 80, user: 10\n        // Used for role hierarchy and conflict resolution\n        priority: integer('priority').notNull().default(10),\n\n        ...timestamps(),\n    },\n    (table) => [\n        index('roles_name_idx').on(table.name),\n        index('roles_is_system_idx').on(table.isSystem),\n        index('roles_is_active_idx').on(table.isActive),\n        index('roles_is_builtin_idx').on(table.isBuiltin),\n        index('roles_priority_idx').on(table.priority),\n    ]\n);\n\n// Type exports\nexport type RoleEntity = typeof roles.$inferSelect;\nexport type NewRoleEntity = typeof roles.$inferInsert;\n\n// Legacy alias for backward compatibility\nexport type Role = RoleEntity;\nexport type NewRole = NewRoleEntity;","/**\n * @spfn/auth - Permissions Entity\n *\n * Granular permissions for RBAC system\n *\n * Features:\n * - Built-in permissions (auth:*, user:*, rbac:*) - required for package\n * - System permissions (preset permissions) - optional\n * - Custom permissions (app-specific) - defined by developers\n * - Category grouping for organization\n */\n\nimport { text, boolean, index } from 'drizzle-orm/pg-core';\nimport { id, timestamps, createFunctionSchema } from '@spfn/core/db';\n\nconst schema = createFunctionSchema('@spfn/auth');\n\nexport const permissions = schema.table('permissions',\n    {\n        // Primary key\n        id: id(),\n\n        // Permission identifier (e.g., 'user:delete', 'post:publish')\n        // Format: resource:action or namespace:resource:action\n        // Must be unique\n        name: text('name').notNull().unique(),\n\n        // Display name for UI\n        displayName: text('display_name').notNull(),\n\n        // Permission description\n        description: text('description'),\n\n        // Category for grouping (e.g., 'user', 'post', 'admin', 'system')\n        category: text('category'),\n\n        // Built-in permission flag\n        // true: Core package permissions - cannot be deleted\n        // false: Custom or preset permissions\n        isBuiltin: boolean('is_builtin').notNull().default(false),\n\n        // System permission flag\n        // true: Defined in code (builtin or preset)\n        // false: Runtime created custom permission\n        isSystem: boolean('is_system').notNull().default(false),\n\n        // Active status\n        // false: Deactivated permission (not enforced)\n        isActive: boolean('is_active').notNull().default(true),\n\n        ...timestamps(),\n    },\n    (table) => [\n        index('permissions_name_idx').on(table.name),\n        index('permissions_category_idx').on(table.category),\n        index('permissions_is_system_idx').on(table.isSystem),\n        index('permissions_is_active_idx').on(table.isActive),\n        index('permissions_is_builtin_idx').on(table.isBuiltin),\n    ]\n);\n\n// Type exports\nexport type PermissionEntity = typeof permissions.$inferSelect;\nexport type NewPermissionEntity = typeof permissions.$inferInsert;\n\n// Legacy alias for backward compatibility\nexport type Permission = PermissionEntity;\nexport type NewPermission = NewPermissionEntity;"],"mappings":";AAUA,SAAS,QAAQ,SAAAA,QAAO,cAAc;AACtC,SAAS,MAAAC,KAAI,cAAAC,aAAY,wBAAAC,6BAA4B;;;ACCrD,SAAS,MAAM,SAAS,SAAS,aAAa;AAC9C,SAAS,IAAI,YAAY,4BAA4B;AAErD,IAAM,SAAS,qBAAqB,YAAY;AAEzC,IAAM,QAAQ,OAAO;AAAA,EAAM;AAAA,EAC9B;AAAA;AAAA,IAEI,IAAI,GAAG;AAAA;AAAA;AAAA,IAIP,MAAM,KAAK,MAAM,EAAE,QAAQ,EAAE,OAAO;AAAA;AAAA,IAGpC,aAAa,KAAK,cAAc,EAAE,QAAQ;AAAA;AAAA,IAG1C,aAAa,KAAK,aAAa;AAAA;AAAA;AAAA;AAAA,IAK/B,WAAW,QAAQ,YAAY,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA;AAAA;AAAA;AAAA,IAKxD,UAAU,QAAQ,WAAW,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA;AAAA;AAAA,IAItD,UAAU,QAAQ,WAAW,EAAE,QAAQ,EAAE,QAAQ,IAAI;AAAA;AAAA;AAAA;AAAA,IAKrD,UAAU,QAAQ,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE;AAAA,IAElD,GAAG,WAAW;AAAA,EAClB;AAAA,EACA,CAAC,UAAU;AAAA,IACP,MAAM,gBAAgB,EAAE,GAAG,MAAM,IAAI;AAAA,IACrC,MAAM,qBAAqB,EAAE,GAAG,MAAM,QAAQ;AAAA,IAC9C,MAAM,qBAAqB,EAAE,GAAG,MAAM,QAAQ;AAAA,IAC9C,MAAM,sBAAsB,EAAE,GAAG,MAAM,SAAS;AAAA,IAChD,MAAM,oBAAoB,EAAE,GAAG,MAAM,QAAQ;AAAA,EACjD;AACJ;;;AChDA,SAAS,QAAAC,OAAM,WAAAC,UAAS,SAAAC,cAAa;AACrC,SAAS,MAAAC,KAAI,cAAAC,aAAY,wBAAAC,6BAA4B;AAErD,IAAMC,UAASD,sBAAqB,YAAY;AAEzC,IAAM,cAAcC,QAAO;AAAA,EAAM;AAAA,EACpC;AAAA;AAAA,IAEI,IAAIH,IAAG;AAAA;AAAA;AAAA;AAAA,IAKP,MAAMH,MAAK,MAAM,EAAE,QAAQ,EAAE,OAAO;AAAA;AAAA,IAGpC,aAAaA,MAAK,cAAc,EAAE,QAAQ;AAAA;AAAA,IAG1C,aAAaA,MAAK,aAAa;AAAA;AAAA,IAG/B,UAAUA,MAAK,UAAU;AAAA;AAAA;AAAA;AAAA,IAKzB,WAAWC,SAAQ,YAAY,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA;AAAA;AAAA;AAAA,IAKxD,UAAUA,SAAQ,WAAW,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA;AAAA;AAAA,IAItD,UAAUA,SAAQ,WAAW,EAAE,QAAQ,EAAE,QAAQ,IAAI;AAAA,IAErD,GAAGG,YAAW;AAAA,EAClB;AAAA,EACA,CAAC,UAAU;AAAA,IACPF,OAAM,sBAAsB,EAAE,GAAG,MAAM,IAAI;AAAA,IAC3CA,OAAM,0BAA0B,EAAE,GAAG,MAAM,QAAQ;AAAA,IACnDA,OAAM,2BAA2B,EAAE,GAAG,MAAM,QAAQ;AAAA,IACpDA,OAAM,2BAA2B,EAAE,GAAG,MAAM,QAAQ;AAAA,IACpDA,OAAM,4BAA4B,EAAE,GAAG,MAAM,SAAS;AAAA,EAC1D;AACJ;;;AF5CA,IAAMK,UAASC,sBAAqB,YAAY;AAEzC,IAAM,kBAAkBD,QAAO;AAAA,EAAM;AAAA,EACxC;AAAA;AAAA,IAEI,IAAIE,IAAG;AAAA;AAAA,IAGP,QAAQ,OAAO,WAAW,EAAE,MAAM,SAAS,CAAC,EACvC,QAAQ,EACR,WAAW,MAAM,MAAM,IAAI,EAAE,UAAU,UAAU,CAAC;AAAA;AAAA,IAGvD,cAAc,OAAO,iBAAiB,EAAE,MAAM,SAAS,CAAC,EACnD,QAAQ,EACR,WAAW,MAAM,YAAY,IAAI,EAAE,UAAU,UAAU,CAAC;AAAA,IAE7D,GAAGC,YAAW;AAAA,EAClB;AAAA,EACA,CAAC,UAAU;AAAA;AAAA,IAEPC,OAAM,8BAA8B,EAAE,GAAG,MAAM,MAAM;AAAA,IACrDA,OAAM,oCAAoC,EAAE,GAAG,MAAM,YAAY;AAAA;AAAA,IAGjE,OAAO,yBAAyB,EAAE,GAAG,MAAM,QAAQ,MAAM,YAAY;AAAA,EACzE;AACJ;","names":["index","id","timestamps","createFunctionSchema","text","boolean","index","id","timestamps","createFunctionSchema","schema","schema","createFunctionSchema","id","timestamps","index"]}

package/dist/server/entities/roles.d.ts

@@ -0,0 +1,196 @@
+import * as drizzle_orm_pg_core from 'drizzle-orm/pg-core';
+
+/**
+ * @spfn/auth - Roles Entity
+ *
+ * Role-based access control (RBAC) roles table
+ *
+ * Features:
+ * - Built-in roles (user, admin, superadmin) - cannot be deleted
+ * - System roles (preset roles) - can be deactivated
+ * - Custom roles (runtime created) - fully manageable
+ * - Priority-based hierarchy
+ */
+declare const roles: drizzle_orm_pg_core.PgTableWithColumns<{
+    name: "roles";
+    schema: string;
+    columns: {
+        createdAt: drizzle_orm_pg_core.PgColumn<{
+            name: "created_at";
+            tableName: "roles";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        updatedAt: drizzle_orm_pg_core.PgColumn<{
+            name: "updated_at";
+            tableName: "roles";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        id: drizzle_orm_pg_core.PgColumn<{
+            name: "id";
+            tableName: "roles";
+            dataType: "number";
+            columnType: "PgBigSerial53";
+            data: number;
+            driverParam: number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        name: drizzle_orm_pg_core.PgColumn<{
+            name: "name";
+            tableName: "roles";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        displayName: drizzle_orm_pg_core.PgColumn<{
+            name: "display_name";
+            tableName: "roles";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        description: drizzle_orm_pg_core.PgColumn<{
+            name: "description";
+            tableName: "roles";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        isBuiltin: drizzle_orm_pg_core.PgColumn<{
+            name: "is_builtin";
+            tableName: "roles";
+            dataType: "boolean";
+            columnType: "PgBoolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        isSystem: drizzle_orm_pg_core.PgColumn<{
+            name: "is_system";
+            tableName: "roles";
+            dataType: "boolean";
+            columnType: "PgBoolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        isActive: drizzle_orm_pg_core.PgColumn<{
+            name: "is_active";
+            tableName: "roles";
+            dataType: "boolean";
+            columnType: "PgBoolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        priority: drizzle_orm_pg_core.PgColumn<{
+            name: "priority";
+            tableName: "roles";
+            dataType: "number";
+            columnType: "PgInteger";
+            data: number;
+            driverParam: string | number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>;
+type RoleEntity = typeof roles.$inferSelect;
+type NewRoleEntity = typeof roles.$inferInsert;
+type Role = RoleEntity;
+type NewRole = NewRoleEntity;
+
+export { type NewRole, type NewRoleEntity, type Role, type RoleEntity, roles };

package/dist/server/entities/roles.js

@@ -0,0 +1,45 @@
+// src/server/entities/roles.ts
+import { text, boolean, integer, index } from "drizzle-orm/pg-core";
+import { id, timestamps, createFunctionSchema } from "@spfn/core/db";
+var schema = createFunctionSchema("@spfn/auth");
+var roles = schema.table(
+  "roles",
+  {
+    // Primary key
+    id: id(),
+    // Role identifier (used in code, e.g., 'admin', 'editor')
+    // Must be unique, lowercase, kebab-case recommended
+    name: text("name").notNull().unique(),
+    // Display name for UI (e.g., 'Administrator', 'Content Editor')
+    displayName: text("display_name").notNull(),
+    // Role description
+    description: text("description"),
+    // Built-in role flag
+    // true: Core package roles (user, admin, superadmin) - cannot be deleted
+    // false: Custom or preset roles - can be deleted
+    isBuiltin: boolean("is_builtin").notNull().default(false),
+    // System role flag
+    // true: Defined in code (builtin or preset) - deletion restricted
+    // false: Runtime created custom role - fully manageable
+    isSystem: boolean("is_system").notNull().default(false),
+    // Active status
+    // false: Deactivated role (users cannot be assigned)
+    isActive: boolean("is_active").notNull().default(true),
+    // Priority level (higher = more privileged)
+    // superadmin: 100, admin: 80, user: 10
+    // Used for role hierarchy and conflict resolution
+    priority: integer("priority").notNull().default(10),
+    ...timestamps()
+  },
+  (table) => [
+    index("roles_name_idx").on(table.name),
+    index("roles_is_system_idx").on(table.isSystem),
+    index("roles_is_active_idx").on(table.isActive),
+    index("roles_is_builtin_idx").on(table.isBuiltin),
+    index("roles_priority_idx").on(table.priority)
+  ]
+);
+export {
+  roles
+};
+//# sourceMappingURL=roles.js.map

package/dist/server/entities/roles.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/server/entities/roles.ts"],"sourcesContent":["/**\n * @spfn/auth - Roles Entity\n *\n * Role-based access control (RBAC) roles table\n *\n * Features:\n * - Built-in roles (user, admin, superadmin) - cannot be deleted\n * - System roles (preset roles) - can be deactivated\n * - Custom roles (runtime created) - fully manageable\n * - Priority-based hierarchy\n */\n\nimport { text, boolean, integer, index } from 'drizzle-orm/pg-core';\nimport { id, timestamps, createFunctionSchema } from '@spfn/core/db';\n\nconst schema = createFunctionSchema('@spfn/auth');\n\nexport const roles = schema.table('roles',\n    {\n        // Primary key\n        id: id(),\n\n        // Role identifier (used in code, e.g., 'admin', 'editor')\n        // Must be unique, lowercase, kebab-case recommended\n        name: text('name').notNull().unique(),\n\n        // Display name for UI (e.g., 'Administrator', 'Content Editor')\n        displayName: text('display_name').notNull(),\n\n        // Role description\n        description: text('description'),\n\n        // Built-in role flag\n        // true: Core package roles (user, admin, superadmin) - cannot be deleted\n        // false: Custom or preset roles - can be deleted\n        isBuiltin: boolean('is_builtin').notNull().default(false),\n\n        // System role flag\n        // true: Defined in code (builtin or preset) - deletion restricted\n        // false: Runtime created custom role - fully manageable\n        isSystem: boolean('is_system').notNull().default(false),\n\n        // Active status\n        // false: Deactivated role (users cannot be assigned)\n        isActive: boolean('is_active').notNull().default(true),\n\n        // Priority level (higher = more privileged)\n        // superadmin: 100, admin: 80, user: 10\n        // Used for role hierarchy and conflict resolution\n        priority: integer('priority').notNull().default(10),\n\n        ...timestamps(),\n    },\n    (table) => [\n        index('roles_name_idx').on(table.name),\n        index('roles_is_system_idx').on(table.isSystem),\n        index('roles_is_active_idx').on(table.isActive),\n        index('roles_is_builtin_idx').on(table.isBuiltin),\n        index('roles_priority_idx').on(table.priority),\n    ]\n);\n\n// Type exports\nexport type RoleEntity = typeof roles.$inferSelect;\nexport type NewRoleEntity = typeof roles.$inferInsert;\n\n// Legacy alias for backward compatibility\nexport type Role = RoleEntity;\nexport type NewRole = NewRoleEntity;"],"mappings":";AAYA,SAAS,MAAM,SAAS,SAAS,aAAa;AAC9C,SAAS,IAAI,YAAY,4BAA4B;AAErD,IAAM,SAAS,qBAAqB,YAAY;AAEzC,IAAM,QAAQ,OAAO;AAAA,EAAM;AAAA,EAC9B;AAAA;AAAA,IAEI,IAAI,GAAG;AAAA;AAAA;AAAA,IAIP,MAAM,KAAK,MAAM,EAAE,QAAQ,EAAE,OAAO;AAAA;AAAA,IAGpC,aAAa,KAAK,cAAc,EAAE,QAAQ;AAAA;AAAA,IAG1C,aAAa,KAAK,aAAa;AAAA;AAAA;AAAA;AAAA,IAK/B,WAAW,QAAQ,YAAY,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA;AAAA;AAAA;AAAA,IAKxD,UAAU,QAAQ,WAAW,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA;AAAA;AAAA,IAItD,UAAU,QAAQ,WAAW,EAAE,QAAQ,EAAE,QAAQ,IAAI;AAAA;AAAA;AAAA;AAAA,IAKrD,UAAU,QAAQ,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE;AAAA,IAElD,GAAG,WAAW;AAAA,EAClB;AAAA,EACA,CAAC,UAAU;AAAA,IACP,MAAM,gBAAgB,EAAE,GAAG,MAAM,IAAI;AAAA,IACrC,MAAM,qBAAqB,EAAE,GAAG,MAAM,QAAQ;AAAA,IAC9C,MAAM,qBAAqB,EAAE,GAAG,MAAM,QAAQ;AAAA,IAC9C,MAAM,sBAAsB,EAAE,GAAG,MAAM,SAAS;AAAA,IAChD,MAAM,oBAAoB,EAAE,GAAG,MAAM,QAAQ;AAAA,EACjD;AACJ;","names":[]}