@substrat-run/contracts 0.2.0 → 0.3.0

package/dist/permission.d.ts

@@ -1,257 +1,79 @@
 import { z } from 'zod';
 export declare const node: z.ZodObject<{
-    tenantId: z.ZodBranded<z.ZodString, "TenantId">;
-    scopeId: z.ZodNullable<z.ZodBranded<z.ZodString, "ScopeId">>;
-}, "strip", z.ZodTypeAny, {
-    tenantId: string & z.BRAND<"TenantId">;
-    scopeId: (string & z.BRAND<"ScopeId">) | null;
-}, {
-    tenantId: string;
-    scopeId: string | null;
-}>;
+    tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+    scopeId: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "ScopeId", "out">>;
+}, z.core.$strip>;
 export type Node = z.infer<typeof node>;
 export declare const roleKey: z.ZodString;
 export declare const roleDefinition: z.ZodObject<{
     key: z.ZodString;
-    permissions: z.ZodArray<z.ZodBranded<z.ZodString, "PermissionKey">, "many">;
-    source: z.ZodUnion<[z.ZodBranded<z.ZodString, "ModuleId">, z.ZodLiteral<"vertical">]>;
-}, "strip", z.ZodTypeAny, {
-    key: string;
-    permissions: (string & z.BRAND<"PermissionKey">)[];
-    source: (string & z.BRAND<"ModuleId">) | "vertical";
-}, {
-    key: string;
-    permissions: string[];
-    source: string;
-}>;
+    permissions: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PermissionKey", "out">>;
+    source: z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "ModuleId", "out">, z.ZodLiteral<"vertical">]>;
+}, z.core.$strip>;
 export type RoleDefinition = z.infer<typeof roleDefinition>;
 export declare const roleAssignment: z.ZodObject<{
-    principalId: z.ZodBranded<z.ZodString, "PrincipalId">;
+    principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
     roleKey: z.ZodString;
     node: z.ZodObject<{
-        tenantId: z.ZodBranded<z.ZodString, "TenantId">;
-        scopeId: z.ZodNullable<z.ZodBranded<z.ZodString, "ScopeId">>;
-    }, "strip", z.ZodTypeAny, {
-        tenantId: string & z.BRAND<"TenantId">;
-        scopeId: (string & z.BRAND<"ScopeId">) | null;
-    }, {
-        tenantId: string;
-        scopeId: string | null;
-    }>;
-}, "strip", z.ZodTypeAny, {
-    principalId: string & z.BRAND<"PrincipalId">;
-    roleKey: string;
-    node: {
-        tenantId: string & z.BRAND<"TenantId">;
-        scopeId: (string & z.BRAND<"ScopeId">) | null;
-    };
-}, {
-    principalId: string;
-    roleKey: string;
-    node: {
-        tenantId: string;
-        scopeId: string | null;
-    };
-}>;
+        tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+        scopeId: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "ScopeId", "out">>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
 export type RoleAssignment = z.infer<typeof roleAssignment>;
 export declare const capabilityGrant: z.ZodObject<{
-    principalId: z.ZodBranded<z.ZodString, "PrincipalId">;
-    permission: z.ZodBranded<z.ZodString, "PermissionKey">;
+    principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+    permission: z.core.$ZodBranded<z.ZodString, "PermissionKey", "out">;
     node: z.ZodObject<{
-        tenantId: z.ZodBranded<z.ZodString, "TenantId">;
-        scopeId: z.ZodNullable<z.ZodBranded<z.ZodString, "ScopeId">>;
-    }, "strip", z.ZodTypeAny, {
-        tenantId: string & z.BRAND<"TenantId">;
-        scopeId: (string & z.BRAND<"ScopeId">) | null;
-    }, {
-        tenantId: string;
-        scopeId: string | null;
-    }>;
+        tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+        scopeId: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "ScopeId", "out">>;
+    }, z.core.$strip>;
     entity: z.ZodOptional<z.ZodObject<{
         entityType: z.ZodString;
         entityId: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        entityType: string;
-        entityId: string;
-    }, {
-        entityType: string;
-        entityId: string;
-    }>>;
-    expiresAt: z.ZodOptional<z.ZodBranded<z.ZodString, "Instant">>;
-    grantedBy: z.ZodBranded<z.ZodString, "PrincipalId">;
-}, "strip", z.ZodTypeAny, {
-    principalId: string & z.BRAND<"PrincipalId">;
-    node: {
-        tenantId: string & z.BRAND<"TenantId">;
-        scopeId: (string & z.BRAND<"ScopeId">) | null;
-    };
-    permission: string & z.BRAND<"PermissionKey">;
-    grantedBy: string & z.BRAND<"PrincipalId">;
-    entity?: {
-        entityType: string;
-        entityId: string;
-    } | undefined;
-    expiresAt?: (string & z.BRAND<"Instant">) | undefined;
-}, {
-    principalId: string;
-    node: {
-        tenantId: string;
-        scopeId: string | null;
-    };
-    permission: string;
-    grantedBy: string;
-    entity?: {
-        entityType: string;
-        entityId: string;
-    } | undefined;
-    expiresAt?: string | undefined;
-}>;
+    }, z.core.$strip>>;
+    expiresAt: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "Instant", "out">>;
+    grantedBy: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+}, z.core.$strip>;
 export type CapabilityGrant = z.infer<typeof capabilityGrant>;
-export declare const objectRef: z.ZodBranded<z.ZodString, "ObjectRef">;
+export declare const objectRef: z.core.$ZodBranded<z.ZodString, "ObjectRef", "out">;
 export type ObjectRef = z.infer<typeof objectRef>;
 export declare const relationName: z.ZodString;
 export declare const relationTuple: z.ZodObject<{
-    subject: z.ZodBranded<z.ZodString, "ObjectRef">;
+    subject: z.core.$ZodBranded<z.ZodString, "ObjectRef", "out">;
     relation: z.ZodString;
-    object: z.ZodBranded<z.ZodString, "ObjectRef">;
-}, "strip", z.ZodTypeAny, {
-    object: string & z.BRAND<"ObjectRef">;
-    subject: string & z.BRAND<"ObjectRef">;
-    relation: string;
-}, {
-    object: string;
-    subject: string;
-    relation: string;
-}>;
+    object: z.core.$ZodBranded<z.ZodString, "ObjectRef", "out">;
+}, z.core.$strip>;
 export type RelationTuple = z.infer<typeof relationTuple>;
-export declare const decision: z.ZodDiscriminatedUnion<"allowed", [z.ZodObject<{
+export declare const decision: z.ZodDiscriminatedUnion<[z.ZodObject<{
     allowed: z.ZodLiteral<true>;
     proof: z.ZodArray<z.ZodObject<{
-        subject: z.ZodBranded<z.ZodString, "ObjectRef">;
+        subject: z.core.$ZodBranded<z.ZodString, "ObjectRef", "out">;
         relation: z.ZodString;
-        object: z.ZodBranded<z.ZodString, "ObjectRef">;
-    }, "strip", z.ZodTypeAny, {
-        object: string & z.BRAND<"ObjectRef">;
-        subject: string & z.BRAND<"ObjectRef">;
-        relation: string;
-    }, {
-        object: string;
-        subject: string;
-        relation: string;
-    }>, "many">;
-}, "strip", z.ZodTypeAny, {
-    allowed: true;
-    proof: {
-        object: string & z.BRAND<"ObjectRef">;
-        subject: string & z.BRAND<"ObjectRef">;
-        relation: string;
-    }[];
-}, {
-    allowed: true;
-    proof: {
-        object: string;
-        subject: string;
-        relation: string;
-    }[];
-}>, z.ZodObject<{
+        object: z.core.$ZodBranded<z.ZodString, "ObjectRef", "out">;
+    }, z.core.$strip>>;
+}, z.core.$strip>, z.ZodObject<{
     allowed: z.ZodLiteral<false>;
-    checked: z.ZodBranded<z.ZodString, "PermissionKey">;
+    checked: z.core.$ZodBranded<z.ZodString, "PermissionKey", "out">;
     node: z.ZodObject<{
-        tenantId: z.ZodBranded<z.ZodString, "TenantId">;
-        scopeId: z.ZodNullable<z.ZodBranded<z.ZodString, "ScopeId">>;
-    }, "strip", z.ZodTypeAny, {
-        tenantId: string & z.BRAND<"TenantId">;
-        scopeId: (string & z.BRAND<"ScopeId">) | null;
-    }, {
-        tenantId: string;
-        scopeId: string | null;
-    }>;
-}, "strip", z.ZodTypeAny, {
-    node: {
-        tenantId: string & z.BRAND<"TenantId">;
-        scopeId: (string & z.BRAND<"ScopeId">) | null;
-    };
-    allowed: false;
-    checked: string & z.BRAND<"PermissionKey">;
-}, {
-    node: {
-        tenantId: string;
-        scopeId: string | null;
-    };
-    allowed: false;
-    checked: string;
-}>]>;
+        tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+        scopeId: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "ScopeId", "out">>;
+    }, z.core.$strip>;
+}, z.core.$strip>], "allowed">;
 export type Decision = z.infer<typeof decision>;
 export declare const effectivePermissions: z.ZodObject<{
-    principalId: z.ZodBranded<z.ZodString, "PrincipalId">;
+    principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
     node: z.ZodObject<{
-        tenantId: z.ZodBranded<z.ZodString, "TenantId">;
-        scopeId: z.ZodNullable<z.ZodBranded<z.ZodString, "ScopeId">>;
-    }, "strip", z.ZodTypeAny, {
-        tenantId: string & z.BRAND<"TenantId">;
-        scopeId: (string & z.BRAND<"ScopeId">) | null;
-    }, {
-        tenantId: string;
-        scopeId: string | null;
-    }>;
+        tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+        scopeId: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "ScopeId", "out">>;
+    }, z.core.$strip>;
     permissions: z.ZodArray<z.ZodObject<{
-        permission: z.ZodBranded<z.ZodString, "PermissionKey">;
+        permission: z.core.$ZodBranded<z.ZodString, "PermissionKey", "out">;
         proof: z.ZodArray<z.ZodObject<{
-            subject: z.ZodBranded<z.ZodString, "ObjectRef">;
+            subject: z.core.$ZodBranded<z.ZodString, "ObjectRef", "out">;
             relation: z.ZodString;
-            object: z.ZodBranded<z.ZodString, "ObjectRef">;
-        }, "strip", z.ZodTypeAny, {
-            object: string & z.BRAND<"ObjectRef">;
-            subject: string & z.BRAND<"ObjectRef">;
-            relation: string;
-        }, {
-            object: string;
-            subject: string;
-            relation: string;
-        }>, "many">;
-    }, "strip", z.ZodTypeAny, {
-        permission: string & z.BRAND<"PermissionKey">;
-        proof: {
-            object: string & z.BRAND<"ObjectRef">;
-            subject: string & z.BRAND<"ObjectRef">;
-            relation: string;
-        }[];
-    }, {
-        permission: string;
-        proof: {
-            object: string;
-            subject: string;
-            relation: string;
-        }[];
-    }>, "many">;
-}, "strip", z.ZodTypeAny, {
-    permissions: {
-        permission: string & z.BRAND<"PermissionKey">;
-        proof: {
-            object: string & z.BRAND<"ObjectRef">;
-            subject: string & z.BRAND<"ObjectRef">;
-            relation: string;
-        }[];
-    }[];
-    principalId: string & z.BRAND<"PrincipalId">;
-    node: {
-        tenantId: string & z.BRAND<"TenantId">;
-        scopeId: (string & z.BRAND<"ScopeId">) | null;
-    };
-}, {
-    permissions: {
-        permission: string;
-        proof: {
-            object: string;
-            subject: string;
-            relation: string;
-        }[];
-    }[];
-    principalId: string;
-    node: {
-        tenantId: string;
-        scopeId: string | null;
-    };
-}>;
+            object: z.core.$ZodBranded<z.ZodString, "ObjectRef", "out">;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
 export type EffectivePermissions = z.infer<typeof effectivePermissions>;
 //# sourceMappingURL=permission.d.ts.map

package/dist/permission.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permission.d.ts","sourceRoot":"","sources":["../src/permission.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,eAAO,MAAM,IAAI;;;;;;;;;EAGf,CAAC;AACH,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;AAExC,eAAO,MAAM,OAAO,aAAwD,CAAC;AAE7E,eAAO,MAAM,cAAc;;;;;;;;;;;;EAIzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;EAIzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAM5D,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAO1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAW9D,eAAO,MAAM,SAAS,wCAGC,CAAC;AACxB,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAGlD,eAAO,MAAM,YAAY,aAAqC,CAAC;AAE/D,eAAO,MAAM,aAAa;;;;;;;;;;;;EAIxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAQ1D,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAUnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAS/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}
+{"version":3,"file":"permission.d.ts","sourceRoot":"","sources":["../src/permission.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,eAAO,MAAM,IAAI;;;iBAGf,CAAC;AACH,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;AAExC,eAAO,MAAM,OAAO,aAAwD,CAAC;AAE7E,eAAO,MAAM,cAAc;;;;iBAIzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,cAAc;;;;;;;iBAIzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAM5D,eAAO,MAAM,eAAe;;;;;;;;;;;;;iBAO1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAW9D,eAAO,MAAM,SAAS,qDAGC,CAAC;AACxB,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAGlD,eAAO,MAAM,YAAY,aAAqC,CAAC;AAE/D,eAAO,MAAM,aAAa;;;;iBAIxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAQ1D,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;8BAUnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;iBAS/B,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/tenancy.d.ts

@@ -1,68 +1,68 @@
 import { z } from 'zod';
-export declare const tenantStatus: z.ZodEnum<["active", "suspended", "deleting"]>;
+export declare const tenantStatus: z.ZodEnum<{
+    active: "active";
+    suspended: "suspended";
+    deleting: "deleting";
+}>;
 export type TenantStatus = z.infer<typeof tenantStatus>;
 export declare const tenant: z.ZodObject<{
-    id: z.ZodBranded<z.ZodString, "TenantId">;
+    id: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
     slug: z.ZodString;
     name: z.ZodString;
-    status: z.ZodEnum<["active", "suspended", "deleting"]>;
-    createdAt: z.ZodBranded<z.ZodString, "Instant">;
-}, "strip", z.ZodTypeAny, {
-    status: "active" | "suspended" | "deleting";
-    id: string & z.BRAND<"TenantId">;
-    slug: string;
-    name: string;
-    createdAt: string & z.BRAND<"Instant">;
-}, {
-    status: "active" | "suspended" | "deleting";
-    id: string;
-    slug: string;
-    name: string;
-    createdAt: string;
-}>;
+    status: z.ZodEnum<{
+        active: "active";
+        suspended: "suspended";
+        deleting: "deleting";
+    }>;
+    createdAt: z.core.$ZodBranded<z.ZodString, "Instant", "out">;
+}, z.core.$strip>;
 export type Tenant = z.infer<typeof tenant>;
-export declare const scopeStatus: z.ZodEnum<["provisioning", "active", "suspended", "archiving", "archived"]>;
+export declare const createTenantInput: z.ZodObject<{
+    id: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+    slug: z.ZodString;
+    name: z.ZodString;
+}, z.core.$strip>;
+export type CreateTenantInput = z.infer<typeof createTenantInput>;
+export declare const scopeStatus: z.ZodEnum<{
+    active: "active";
+    suspended: "suspended";
+    provisioning: "provisioning";
+    archiving: "archiving";
+    archived: "archived";
+}>;
 export type ScopeStatus = z.infer<typeof scopeStatus>;
-export declare const storageShape: z.ZodEnum<["A", "B"]>;
+export declare const storageShape: z.ZodEnum<{
+    A: "A";
+    B: "B";
+}>;
 export type StorageShape = z.infer<typeof storageShape>;
-export declare const jurisdiction: z.ZodNullable<z.ZodEnum<["eu"]>>;
+export declare const jurisdiction: z.ZodNullable<z.ZodEnum<{
+    eu: "eu";
+}>>;
 export type Jurisdiction = z.infer<typeof jurisdiction>;
 export declare const scope: z.ZodObject<{
-    id: z.ZodBranded<z.ZodString, "ScopeId">;
-    tenantId: z.ZodBranded<z.ZodString, "TenantId">;
-    parentScopeId: z.ZodNullable<z.ZodBranded<z.ZodString, "ScopeId">>;
+    id: z.core.$ZodBranded<z.ZodString, "ScopeId", "out">;
+    tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+    parentScopeId: z.ZodNullable<z.core.$ZodBranded<z.ZodString, "ScopeId", "out">>;
     slug: z.ZodString;
     kind: z.ZodString;
     name: z.ZodString;
-    status: z.ZodEnum<["provisioning", "active", "suspended", "archiving", "archived"]>;
-    storageShape: z.ZodEnum<["A", "B"]>;
-    jurisdiction: z.ZodNullable<z.ZodEnum<["eu"]>>;
+    status: z.ZodEnum<{
+        active: "active";
+        suspended: "suspended";
+        provisioning: "provisioning";
+        archiving: "archiving";
+        archived: "archived";
+    }>;
+    storageShape: z.ZodEnum<{
+        A: "A";
+        B: "B";
+    }>;
+    jurisdiction: z.ZodNullable<z.ZodEnum<{
+        eu: "eu";
+    }>>;
     schemaVersion: z.ZodString;
-    createdAt: z.ZodBranded<z.ZodString, "Instant">;
-}, "strip", z.ZodTypeAny, {
-    status: "active" | "suspended" | "provisioning" | "archiving" | "archived";
-    schemaVersion: string;
-    id: string & z.BRAND<"ScopeId">;
-    tenantId: string & z.BRAND<"TenantId">;
-    slug: string;
-    name: string;
-    createdAt: string & z.BRAND<"Instant">;
-    parentScopeId: (string & z.BRAND<"ScopeId">) | null;
-    kind: string;
-    storageShape: "A" | "B";
-    jurisdiction: "eu" | null;
-}, {
-    status: "active" | "suspended" | "provisioning" | "archiving" | "archived";
-    schemaVersion: string;
-    id: string;
-    tenantId: string;
-    slug: string;
-    name: string;
-    createdAt: string;
-    parentScopeId: string | null;
-    kind: string;
-    storageShape: "A" | "B";
-    jurisdiction: "eu" | null;
-}>;
+    createdAt: z.core.$ZodBranded<z.ZodString, "Instant", "out">;
+}, z.core.$strip>;
 export type Scope = z.infer<typeof scope>;
 //# sourceMappingURL=tenancy.d.ts.map

package/dist/tenancy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tenancy.d.ts","sourceRoot":"","sources":["../src/tenancy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,YAAY,gDAA8C,CAAC;AACxE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;EAMjB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAE5C,eAAO,MAAM,WAAW,6EAMtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAGtD,eAAO,MAAM,YAAY,uBAAqB,CAAC;AAC/C,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAGxD,eAAO,MAAM,YAAY,kCAA4B,CAAC;AACtD,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYhB,CAAC;AACH,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC"}
+{"version":3,"file":"tenancy.d.ts","sourceRoot":"","sources":["../src/tenancy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,YAAY;;;;EAA8C,CAAC;AACxE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,eAAO,MAAM,MAAM;;;;;;;;;;iBAMjB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAI5C,eAAO,MAAM,iBAAiB;;;;iBAAoD,CAAC;AACnF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,WAAW;;;;;;EAMtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAGtD,eAAO,MAAM,YAAY;;;EAAqB,CAAC;AAC/C,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAGxD,eAAO,MAAM,YAAY;;GAA4B,CAAC;AACtD,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;iBAYhB,CAAC;AACH,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC"}

package/dist/tenancy.js

@@ -8,6 +8,9 @@ export const tenant = z.object({
     status: tenantStatus,
     createdAt: instant,
 });
+// What the caller supplies to createTenant (control-plane.md §4.1); `status`
+// (active) and `createdAt` are stamped host-side, never caller-supplied.
+export const createTenantInput = tenant.pick({ id: true, slug: true, name: true });
 export const scopeStatus = z.enum([
     'provisioning',
     'active',

package/dist/tenancy.js.map

@@ -1 +1 @@
-{"version":3,"file":"tenancy.js","sourceRoot":"","sources":["../src/tenancy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAE5D,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;AAGxE,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,EAAE,EAAE,QAAQ;IACZ,IAAI;IACJ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,YAAY;IACpB,SAAS,EAAE,OAAO;CACnB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC;IAChC,cAAc;IACd,QAAQ;IACR,WAAW;IACX,WAAW;IACX,UAAU;CACX,CAAC,CAAC;AAGH,uFAAuF;AACvF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAG/C,8DAA8D;AAC9D,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AAGtD,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,EAAE,EAAE,OAAO,EAAE,6EAA6E;IAC1F,QAAQ;IACR,aAAa,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,4DAA4D;IAC/F,IAAI,EAAE,uBAAuB;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,qEAAqE;IAC9F,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,WAAW;IACnB,YAAY;IACZ,YAAY;IACZ,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,SAAS,EAAE,OAAO;CACnB,CAAC,CAAC"}
+{"version":3,"file":"tenancy.js","sourceRoot":"","sources":["../src/tenancy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAE5D,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;AAGxE,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,EAAE,EAAE,QAAQ;IACZ,IAAI;IACJ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,YAAY;IACpB,SAAS,EAAE,OAAO;CACnB,CAAC,CAAC;AAGH,6EAA6E;AAC7E,yEAAyE;AACzE,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAGnF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC;IAChC,cAAc;IACd,QAAQ;IACR,WAAW;IACX,WAAW;IACX,UAAU;CACX,CAAC,CAAC;AAGH,uFAAuF;AACvF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAG/C,8DAA8D;AAC9D,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AAGtD,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,EAAE,EAAE,OAAO,EAAE,6EAA6E;IAC1F,QAAQ;IACR,aAAa,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,4DAA4D;IAC/F,IAAI,EAAE,uBAAuB;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,qEAAqE;IAC9F,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,WAAW;IACnB,YAAY;IACZ,YAAY;IACZ,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,SAAS,EAAE,OAAO;CACnB,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@substrat-run/contracts",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Substrat kernel contract schemas — Zod is the source of truth (master plan D-22); OAS/JSON Schema are emitted artifacts",
   "license": "Apache-2.0",
   "repository": {
@@ -22,7 +22,7 @@
     "dist"
   ],
   "dependencies": {
-    "zod": "^3.25.0"
+    "zod": "^4.4.3"
   },
   "devDependencies": {
     "typescript": "^5.6.0"