@trailmix-cms/cms 0.4.4 → 0.7.1

package/dist/dto/organization.dto.d.ts

@@ -0,0 +1,57 @@
+import { z } from 'zod';
+export declare const OrganizationResponseSchema: z.ZodObject<{
+    _id: z.ZodCodec<z.ZodString, z.ZodCustom<import("bson").ObjectId, import("bson").ObjectId>>;
+    created_at: z.ZodCodec<z.ZodISODateTime, z.ZodDate>;
+    updated_at: z.ZodOptional<z.ZodCodec<z.ZodISODateTime, z.ZodDate>>;
+    name: z.ZodString;
+}, z.core.$strip>;
+declare const OrganizationResponseDto_base: import("nestjs-zod").ZodDto<z.ZodObject<{
+    _id: z.ZodCodec<z.ZodString, z.ZodCustom<import("bson").ObjectId, import("bson").ObjectId>>;
+    created_at: z.ZodCodec<z.ZodISODateTime, z.ZodDate>;
+    updated_at: z.ZodOptional<z.ZodCodec<z.ZodISODateTime, z.ZodDate>>;
+    name: z.ZodString;
+}, z.core.$strip>, false>;
+export declare class OrganizationResponseDto extends OrganizationResponseDto_base {
+}
+export declare const CreateOrganizationSchema: z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+declare const CreateOrganizationDto_base: import("nestjs-zod").ZodDto<z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, false>;
+export declare class CreateOrganizationDto extends CreateOrganizationDto_base {
+}
+export declare const UpdateOrganizationSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+declare const UpdateOrganizationDto_base: import("nestjs-zod").ZodDto<z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, false>;
+export declare class UpdateOrganizationDto extends UpdateOrganizationDto_base {
+}
+export declare const OrganizationListResponseSchema: z.ZodObject<{
+    items: z.ZodArray<z.ZodObject<{
+        _id: z.ZodCodec<z.ZodString, z.ZodCustom<import("bson").ObjectId, import("bson").ObjectId>>;
+        created_at: z.ZodCodec<z.ZodISODateTime, z.ZodDate>;
+        updated_at: z.ZodOptional<z.ZodCodec<z.ZodISODateTime, z.ZodDate>>;
+        name: z.ZodString;
+    }, z.core.$strip>>;
+    count: z.ZodNumber;
+}, z.core.$strip>;
+declare const OrganizationListResponseDto_base: import("nestjs-zod").ZodDto<z.ZodObject<{
+    items: z.ZodArray<z.ZodObject<{
+        _id: z.ZodCodec<z.ZodString, z.ZodCustom<import("bson").ObjectId, import("bson").ObjectId>>;
+        created_at: z.ZodCodec<z.ZodISODateTime, z.ZodDate>;
+        updated_at: z.ZodOptional<z.ZodCodec<z.ZodISODateTime, z.ZodDate>>;
+        name: z.ZodString;
+    }, z.core.$strip>>;
+    count: z.ZodNumber;
+}, z.core.$strip>, false>;
+export declare class OrganizationListResponseDto extends OrganizationListResponseDto_base {
+}
+export {};
+//# sourceMappingURL=organization.dto.d.ts.map

package/dist/dto/organization.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization.dto.d.ts","sourceRoot":"","sources":["../../src/dto/organization.dto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,0BAA0B;;;;;iBAAsB,CAAC;;;;;;;AAC9D,qBAAa,uBAAwB,SAAQ,4BAAwC;CAAI;AAEzF,eAAO,MAAM,wBAAwB;;;iBAGnC,CAAC;;;;;AACH,qBAAa,qBAAsB,SAAQ,0BAAsC;CAAI;AAErF,eAAO,MAAM,wBAAwB;;;iBAGnC,CAAC;;;;;AACH,qBAAa,qBAAsB,SAAQ,0BAAsC;CAAI;AAErF,eAAO,MAAM,8BAA8B;;;;;;;;iBAGzC,CAAC;;;;;;;;;;AACH,qBAAa,2BAA4B,SAAQ,gCAA4C;CAAI"}

package/dist/dto/organization.dto.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrganizationListResponseDto = exports.OrganizationListResponseSchema = exports.UpdateOrganizationDto = exports.UpdateOrganizationSchema = exports.CreateOrganizationDto = exports.CreateOrganizationSchema = exports.OrganizationResponseDto = exports.OrganizationResponseSchema = void 0;
+const zod_1 = require("zod");
+const nestjs_zod_1 = require("nestjs-zod");
+const models_1 = require("@trailmix-cms/models");
+exports.OrganizationResponseSchema = models_1.Organization.schema;
+class OrganizationResponseDto extends (0, nestjs_zod_1.createZodDto)(exports.OrganizationResponseSchema) {
+}
+exports.OrganizationResponseDto = OrganizationResponseDto;
+exports.CreateOrganizationSchema = zod_1.z.object({
+    name: zod_1.z.string().min(1),
+    description: zod_1.z.string().optional(),
+});
+class CreateOrganizationDto extends (0, nestjs_zod_1.createZodDto)(exports.CreateOrganizationSchema) {
+}
+exports.CreateOrganizationDto = CreateOrganizationDto;
+exports.UpdateOrganizationSchema = zod_1.z.object({
+    name: zod_1.z.string().min(1).optional(),
+    description: zod_1.z.string().optional(),
+});
+class UpdateOrganizationDto extends (0, nestjs_zod_1.createZodDto)(exports.UpdateOrganizationSchema) {
+}
+exports.UpdateOrganizationDto = UpdateOrganizationDto;
+exports.OrganizationListResponseSchema = zod_1.z.object({
+    items: zod_1.z.array(models_1.Organization.schema),
+    count: zod_1.z.number(),
+});
+class OrganizationListResponseDto extends (0, nestjs_zod_1.createZodDto)(exports.OrganizationListResponseSchema) {
+}
+exports.OrganizationListResponseDto = OrganizationListResponseDto;
+//# sourceMappingURL=organization.dto.js.map

package/dist/dto/organization.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization.dto.js","sourceRoot":"","sources":["../../src/dto/organization.dto.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,2CAA0C;AAC1C,iDAAoD;AAEvC,QAAA,0BAA0B,GAAG,qBAAY,CAAC,MAAM,CAAC;AAC9D,MAAa,uBAAwB,SAAQ,IAAA,yBAAY,EAAC,kCAA0B,CAAC;CAAI;AAAzF,0DAAyF;AAE5E,QAAA,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AACH,MAAa,qBAAsB,SAAQ,IAAA,yBAAY,EAAC,gCAAwB,CAAC;CAAI;AAArF,sDAAqF;AAExE,QAAA,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AACH,MAAa,qBAAsB,SAAQ,IAAA,yBAAY,EAAC,gCAAwB,CAAC;CAAI;AAArF,sDAAqF;AAExE,QAAA,8BAA8B,GAAG,OAAC,CAAC,MAAM,CAAC;IACnD,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,qBAAY,CAAC,MAAM,CAAC;IACnC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AACH,MAAa,2BAA4B,SAAQ,IAAA,yBAAY,EAAC,sCAA8B,CAAC;CAAI;AAAjG,kEAAiG"}

package/dist/dto/security-audit.dto.d.ts

@@ -0,0 +1,95 @@
+import { z } from 'zod';
+export declare const GetSecurityAuditsQuerySchema: z.ZodObject<{
+    principal_id: z.ZodOptional<z.ZodCodec<z.ZodString, z.ZodCustom<import("bson").ObjectId, import("bson").ObjectId>>>;
+    principal_type: z.ZodOptional<z.ZodEnum<{
+        account: "account";
+        api_key: "api_key";
+    }>>;
+    event_type: z.ZodOptional<z.ZodEnum<{
+        unauthorized_access: "unauthorized_access";
+    }>>;
+}, z.core.$strip>;
+declare const GetSecurityAuditsQueryDto_base: import("nestjs-zod").ZodDto<z.ZodObject<{
+    principal_id: z.ZodOptional<z.ZodCodec<z.ZodString, z.ZodCustom<import("bson").ObjectId, import("bson").ObjectId>>>;
+    principal_type: z.ZodOptional<z.ZodEnum<{
+        account: "account";
+        api_key: "api_key";
+    }>>;
+    event_type: z.ZodOptional<z.ZodEnum<{
+        unauthorized_access: "unauthorized_access";
+    }>>;
+}, z.core.$strip>, false>;
+export declare class GetSecurityAuditsQueryDto extends GetSecurityAuditsQueryDto_base {
+}
+export declare const SecurityAuditResponseSchema: z.ZodObject<{
+    _id: z.ZodCodec<z.ZodString, z.ZodCustom<import("bson").ObjectId, import("bson").ObjectId>>;
+    created_at: z.ZodCodec<z.ZodISODateTime, z.ZodDate>;
+    updated_at: z.ZodOptional<z.ZodCodec<z.ZodISODateTime, z.ZodDate>>;
+    event_type: z.ZodEnum<{
+        unauthorized_access: "unauthorized_access";
+    }>;
+    principal_id: z.ZodCodec<z.ZodString, z.ZodCustom<import("bson").ObjectId, import("bson").ObjectId>>;
+    principal_type: z.ZodEnum<{
+        account: "account";
+        api_key: "api_key";
+    }>;
+    message: z.ZodOptional<z.ZodString>;
+    source: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+declare const SecurityAuditResponseDto_base: import("nestjs-zod").ZodDto<z.ZodObject<{
+    _id: z.ZodCodec<z.ZodString, z.ZodCustom<import("bson").ObjectId, import("bson").ObjectId>>;
+    created_at: z.ZodCodec<z.ZodISODateTime, z.ZodDate>;
+    updated_at: z.ZodOptional<z.ZodCodec<z.ZodISODateTime, z.ZodDate>>;
+    event_type: z.ZodEnum<{
+        unauthorized_access: "unauthorized_access";
+    }>;
+    principal_id: z.ZodCodec<z.ZodString, z.ZodCustom<import("bson").ObjectId, import("bson").ObjectId>>;
+    principal_type: z.ZodEnum<{
+        account: "account";
+        api_key: "api_key";
+    }>;
+    message: z.ZodOptional<z.ZodString>;
+    source: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, false>;
+export declare class SecurityAuditResponseDto extends SecurityAuditResponseDto_base {
+}
+export declare const SecurityAuditListResponseSchema: z.ZodObject<{
+    items: z.ZodArray<z.ZodObject<{
+        _id: z.ZodCodec<z.ZodString, z.ZodCustom<import("bson").ObjectId, import("bson").ObjectId>>;
+        created_at: z.ZodCodec<z.ZodISODateTime, z.ZodDate>;
+        updated_at: z.ZodOptional<z.ZodCodec<z.ZodISODateTime, z.ZodDate>>;
+        event_type: z.ZodEnum<{
+            unauthorized_access: "unauthorized_access";
+        }>;
+        principal_id: z.ZodCodec<z.ZodString, z.ZodCustom<import("bson").ObjectId, import("bson").ObjectId>>;
+        principal_type: z.ZodEnum<{
+            account: "account";
+            api_key: "api_key";
+        }>;
+        message: z.ZodOptional<z.ZodString>;
+        source: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    count: z.ZodNumber;
+}, z.core.$strip>;
+declare const SecurityAuditListResponseDto_base: import("nestjs-zod").ZodDto<z.ZodObject<{
+    items: z.ZodArray<z.ZodObject<{
+        _id: z.ZodCodec<z.ZodString, z.ZodCustom<import("bson").ObjectId, import("bson").ObjectId>>;
+        created_at: z.ZodCodec<z.ZodISODateTime, z.ZodDate>;
+        updated_at: z.ZodOptional<z.ZodCodec<z.ZodISODateTime, z.ZodDate>>;
+        event_type: z.ZodEnum<{
+            unauthorized_access: "unauthorized_access";
+        }>;
+        principal_id: z.ZodCodec<z.ZodString, z.ZodCustom<import("bson").ObjectId, import("bson").ObjectId>>;
+        principal_type: z.ZodEnum<{
+            account: "account";
+            api_key: "api_key";
+        }>;
+        message: z.ZodOptional<z.ZodString>;
+        source: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    count: z.ZodNumber;
+}, z.core.$strip>, false>;
+export declare class SecurityAuditListResponseDto extends SecurityAuditListResponseDto_base {
+}
+export {};
+//# sourceMappingURL=security-audit.dto.d.ts.map

package/dist/dto/security-audit.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-audit.dto.d.ts","sourceRoot":"","sources":["../../src/dto/security-audit.dto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,4BAA4B;;;;;;;;;iBAIvC,CAAC;;;;;;;;;;;AAEH,qBAAa,yBAA0B,SAAQ,8BAA0C;CAAI;AAE7F,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;iBAAuB,CAAC;;;;;;;;;;;;;;;;AAChE,qBAAa,wBAAyB,SAAQ,6BAAyC;CAAI;AAE3F,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;iBAG1C,CAAC;;;;;;;;;;;;;;;;;;;AAEH,qBAAa,4BAA6B,SAAQ,iCAA6C;CAAI"}

package/dist/dto/security-audit.dto.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecurityAuditListResponseDto = exports.SecurityAuditListResponseSchema = exports.SecurityAuditResponseDto = exports.SecurityAuditResponseSchema = exports.GetSecurityAuditsQueryDto = exports.GetSecurityAuditsQuerySchema = void 0;
+const zod_1 = require("zod");
+const nestjs_zod_1 = require("nestjs-zod");
+const models_1 = require("@trailmix-cms/models");
+exports.GetSecurityAuditsQuerySchema = zod_1.z.object({
+    principal_id: models_1.Codecs.ObjectId.optional(),
+    principal_type: zod_1.z.enum(Object.values(models_1.Principal)).optional(),
+    event_type: zod_1.z.enum(Object.values(models_1.SecurityAuditEventType)).optional(),
+});
+class GetSecurityAuditsQueryDto extends (0, nestjs_zod_1.createZodDto)(exports.GetSecurityAuditsQuerySchema) {
+}
+exports.GetSecurityAuditsQueryDto = GetSecurityAuditsQueryDto;
+exports.SecurityAuditResponseSchema = models_1.SecurityAudit.schema;
+class SecurityAuditResponseDto extends (0, nestjs_zod_1.createZodDto)(exports.SecurityAuditResponseSchema) {
+}
+exports.SecurityAuditResponseDto = SecurityAuditResponseDto;
+exports.SecurityAuditListResponseSchema = zod_1.z.object({
+    items: zod_1.z.array(models_1.SecurityAudit.schema),
+    count: zod_1.z.number(),
+});
+class SecurityAuditListResponseDto extends (0, nestjs_zod_1.createZodDto)(exports.SecurityAuditListResponseSchema) {
+}
+exports.SecurityAuditListResponseDto = SecurityAuditListResponseDto;
+//# sourceMappingURL=security-audit.dto.js.map

package/dist/dto/security-audit.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-audit.dto.js","sourceRoot":"","sources":["../../src/dto/security-audit.dto.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,2CAA0C;AAC1C,iDAAgG;AAEnF,QAAA,4BAA4B,GAAG,OAAC,CAAC,MAAM,CAAC;IACjD,YAAY,EAAE,eAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE;IACxC,cAAc,EAAE,OAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3D,UAAU,EAAE,OAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,+BAAsB,CAAC,CAAC,CAAC,QAAQ,EAAE;CACvE,CAAC,CAAC;AAEH,MAAa,yBAA0B,SAAQ,IAAA,yBAAY,EAAC,oCAA4B,CAAC;CAAI;AAA7F,8DAA6F;AAEhF,QAAA,2BAA2B,GAAG,sBAAa,CAAC,MAAM,CAAC;AAChE,MAAa,wBAAyB,SAAQ,IAAA,yBAAY,EAAC,mCAA2B,CAAC;CAAI;AAA3F,4DAA2F;AAE9E,QAAA,+BAA+B,GAAG,OAAC,CAAC,MAAM,CAAC;IACpD,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,sBAAa,CAAC,MAAM,CAAC;IACpC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAEH,MAAa,4BAA6B,SAAQ,IAAA,yBAAY,EAAC,uCAA+B,CAAC;CAAI;AAAnG,oEAAmG"}

package/dist/index.d.ts

@@ -2,8 +2,13 @@ export * from './constants';
 export * from './decorators/auth.decorator';
 export * from './decorators/audit-context.decorator';
 export * from './decorators/account.decorator';
-export * from './cms.module';
-export * from './auth-guard-hook';
+export * from './module';
+export * from './config';
+export * from './types/hooks/auth-guard-hook';
+export * from './types/hooks/organization-delete-hook';
+export * from './types';
 export * from './utils/provider-helpers';
+export * as Services from './services';
 export * as Controllers from './controllers';
+export * as Collections from './collections';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sCAAsC,CAAC;AACrD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,OAAO,KAAK,WAAW,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,sCAAsC,CAAC;AACrD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,+BAA+B,CAAC;AAC9C,cAAc,wCAAwC,CAAC;AACvD,cAAc,SAAS,CAAC;AACxB,cAAc,0BAA0B,CAAC;AACzC,OAAO,KAAK,QAAQ,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,WAAW,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,WAAW,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -36,13 +36,18 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.Controllers = void 0;
+exports.Collections = exports.Controllers = exports.Services = void 0;
 __exportStar(require("./constants"), exports);
 __exportStar(require("./decorators/auth.decorator"), exports);
 __exportStar(require("./decorators/audit-context.decorator"), exports);
 __exportStar(require("./decorators/account.decorator"), exports);
-__exportStar(require("./cms.module"), exports);
-__exportStar(require("./auth-guard-hook"), exports);
+__exportStar(require("./module"), exports);
+__exportStar(require("./config"), exports);
+__exportStar(require("./types/hooks/auth-guard-hook"), exports);
+__exportStar(require("./types/hooks/organization-delete-hook"), exports);
+__exportStar(require("./types"), exports);
 __exportStar(require("./utils/provider-helpers"), exports);
+exports.Services = __importStar(require("./services"));
 exports.Controllers = __importStar(require("./controllers"));
+exports.Collections = __importStar(require("./collections"));
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8CAA4B;AAC5B,8DAA4C;AAC5C,uEAAqD;AACrD,iEAA+C;AAC/C,+CAA6B;AAC7B,oDAAkC;AAClC,2DAAyC;AACzC,6DAA6C"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,8CAA4B;AAC5B,8DAA4C;AAC5C,uEAAqD;AACrD,iEAA+C;AAC/C,2CAAyB;AACzB,2CAAyB;AACzB,gEAA8C;AAC9C,yEAAuD;AACvD,0CAAwB;AACxB,2DAAyC;AACzC,uDAAuC;AACvC,6DAA6C;AAC7C,6DAA6C"}

package/dist/managers/global-role.manager.d.ts

@@ -0,0 +1,42 @@
+import { ObjectId } from 'mongodb';
+import * as models from '@trailmix-cms/models';
+import { Utils } from '@trailmix-cms/db';
+import { GlobalRoleService, AuthorizationService } from '../services';
+import { RequestPrincipal } from '../types';
+import { SecurityAuditCollection } from '../collections';
+export type CreateGlobalRoleParams = Utils.Creatable<models.GlobalRole.Model>;
+export type FindGlobalRolesParams = Partial<models.GlobalRole.Model>;
+export declare class GlobalRoleManager {
+    private readonly globalRoleService;
+    private readonly authorizationService;
+    private readonly securityAuditCollection;
+    private readonly logger;
+    constructor(globalRoleService: GlobalRoleService, authorizationService: AuthorizationService, securityAuditCollection: SecurityAuditCollection);
+    private authorizeGlobalAdmin;
+    insertOne(params: CreateGlobalRoleParams, principal: RequestPrincipal, auditContext: models.AuditContext.Model): Promise<{
+        _id: ObjectId;
+        created_at: Date;
+        principal_id: ObjectId;
+        principal_type: "account" | "api_key";
+        role: string;
+        updated_at?: Date | undefined;
+    }>;
+    find(query: FindGlobalRolesParams, principal: RequestPrincipal): Promise<{
+        _id: ObjectId;
+        created_at: Date;
+        principal_id: ObjectId;
+        principal_type: "account" | "api_key";
+        role: string;
+        updated_at?: Date | undefined;
+    }[]>;
+    get(id: ObjectId, principal: RequestPrincipal): Promise<{
+        _id: ObjectId;
+        created_at: Date;
+        principal_id: ObjectId;
+        principal_type: "account" | "api_key";
+        role: string;
+        updated_at?: Date | undefined;
+    }>;
+    deleteOne(id: ObjectId, principal: RequestPrincipal, auditContext: models.AuditContext.Model): Promise<void>;
+}
+//# sourceMappingURL=global-role.manager.d.ts.map

package/dist/managers/global-role.manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"global-role.manager.d.ts","sourceRoot":"","sources":["../../src/managers/global-role.manager.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,MAAM,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,MAAM,MAAM,sBAAsB,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AAC9E,MAAM,MAAM,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AAErE,qBACa,iBAAiB;IAItB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAClC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IAL5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsC;gBAGxC,iBAAiB,EAAE,iBAAiB,EACpC,oBAAoB,EAAE,oBAAoB,EAC1C,uBAAuB,EAAE,uBAAuB;YAGvD,oBAAoB;IAc5B,SAAS,CACX,MAAM,EAAE,sBAAsB,EAC9B,SAAS,EAAE,gBAAgB,EAC3B,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,KAAK;;;;;;;;IAiBrC,IAAI,CACN,KAAK,EAAE,qBAAqB,EAC5B,SAAS,EAAE,gBAAgB;;;;;;;;IAWzB,GAAG,CACL,EAAE,EAAE,QAAQ,EACZ,SAAS,EAAE,gBAAgB;;;;;;;;IAYzB,SAAS,CACX,EAAE,EAAE,QAAQ,EACZ,SAAS,EAAE,gBAAgB,EAC3B,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,KAAK;CAY9C"}

package/dist/managers/global-role.manager.js

@@ -0,0 +1,117 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var GlobalRoleManager_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GlobalRoleManager = void 0;
+const common_1 = require("@nestjs/common");
+const models = __importStar(require("@trailmix-cms/models"));
+const services_1 = require("../services");
+const collections_1 = require("../collections");
+let GlobalRoleManager = GlobalRoleManager_1 = class GlobalRoleManager {
+    globalRoleService;
+    authorizationService;
+    securityAuditCollection;
+    logger = new common_1.Logger(GlobalRoleManager_1.name);
+    constructor(globalRoleService, authorizationService, securityAuditCollection) {
+        this.globalRoleService = globalRoleService;
+        this.authorizationService = authorizationService;
+        this.securityAuditCollection = securityAuditCollection;
+    }
+    async authorizeGlobalAdmin(principal, message) {
+        const isGlobalAdmin = await this.authorizationService.isGlobalAdmin(principal.entity._id, principal.principal_type);
+        if (!isGlobalAdmin) {
+            await this.securityAuditCollection.insertOne({
+                event_type: models.SecurityAuditEventType.UnauthorizedAccess,
+                principal_id: principal.entity._id,
+                principal_type: principal.principal_type,
+                message: message,
+                source: GlobalRoleManager_1.name,
+            });
+            throw new common_1.ForbiddenException(message);
+        }
+    }
+    async insertOne(params, principal, auditContext) {
+        this.logger.log(`Assigning global role ${params.role} to principal ${params.principal_id} (${params.principal_type})`);
+        await this.authorizeGlobalAdmin(principal, 'Insufficient permissions to create global role');
+        // Check if role already exists
+        const existing = await this.globalRoleService.findOne(params);
+        if (existing) {
+            throw new common_1.BadRequestException('Global role already assigned to this principal');
+        }
+        // Create the role
+        const result = await this.globalRoleService.insertOne(params, auditContext);
+        return result;
+    }
+    async find(query, principal) {
+        this.logger.log(`Getting global role assignments for query: ${JSON.stringify(query)}`);
+        await this.authorizeGlobalAdmin(principal, 'Insufficient permissions to find global roles');
+        const roles = await this.globalRoleService.find(query);
+        return roles;
+    }
+    async get(id, principal) {
+        await this.authorizeGlobalAdmin(principal, 'Insufficient permissions to get global roles');
+        const role = await this.globalRoleService.findOne({ _id: id });
+        if (!role) {
+            throw new common_1.NotFoundException('Global role not found');
+        }
+        return role;
+    }
+    async deleteOne(id, principal, auditContext) {
+        await this.authorizeGlobalAdmin(principal, 'Insufficient permissions to remove global roles');
+        const role = await this.globalRoleService.findOne({ _id: id });
+        if (!role) {
+            throw new common_1.NotFoundException('Global role not found');
+        }
+        await this.globalRoleService.deleteOne(id, auditContext);
+        this.logger.log(`Removed global role ${id}`);
+    }
+};
+exports.GlobalRoleManager = GlobalRoleManager;
+exports.GlobalRoleManager = GlobalRoleManager = GlobalRoleManager_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [services_1.GlobalRoleService,
+        services_1.AuthorizationService,
+        collections_1.SecurityAuditCollection])
+], GlobalRoleManager);
+//# sourceMappingURL=global-role.manager.js.map

package/dist/managers/global-role.manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"global-role.manager.js","sourceRoot":"","sources":["../../src/managers/global-role.manager.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAAgH;AAEhH,6DAA+C;AAG/C,0CAAsE;AAEtE,gDAAyD;AAMlD,IAAM,iBAAiB,yBAAvB,MAAM,iBAAiB;IAIL;IACA;IACA;IALJ,MAAM,GAAG,IAAI,eAAM,CAAC,mBAAiB,CAAC,IAAI,CAAC,CAAC;IAE7D,YACqB,iBAAoC,EACpC,oBAA0C,EAC1C,uBAAgD;QAFhD,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,yBAAoB,GAApB,oBAAoB,CAAsB;QAC1C,4BAAuB,GAAvB,uBAAuB,CAAyB;IACjE,CAAC;IAEG,KAAK,CAAC,oBAAoB,CAAC,SAA2B,EAAE,OAAe;QAC3E,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,cAAc,CAAC,CAAC;QACpH,IAAI,CAAC,aAAa,EAAE,CAAC;YACjB,MAAM,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC;gBACzC,UAAU,EAAE,MAAM,CAAC,sBAAsB,CAAC,kBAAkB;gBAC5D,YAAY,EAAE,SAAS,CAAC,MAAM,CAAC,GAAG;gBAClC,cAAc,EAAE,SAAS,CAAC,cAAc;gBACxC,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,mBAAiB,CAAC,IAAI;aACjC,CAAC,CAAC;YACH,MAAM,IAAI,2BAAkB,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CACX,MAA8B,EAC9B,SAA2B,EAC3B,YAAuC;QAEvC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,yBAAyB,MAAM,CAAC,IAAI,iBAAiB,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC;QAEvH,MAAM,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,gDAAgD,CAAC,CAAC;QAE7F,+BAA+B;QAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,QAAQ,EAAE,CAAC;YACX,MAAM,IAAI,4BAAmB,CAAC,gDAAgD,CAAC,CAAC;QACpF,CAAC;QAED,kBAAkB;QAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAC5E,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,IAAI,CACN,KAA4B,EAC5B,SAA2B;QAE3B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,8CAA8C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAEvF,MAAM,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,+CAA+C,CAAC,CAAC;QAE5F,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEvD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,GAAG,CACL,EAAY,EACZ,SAA2B;QAE3B,MAAM,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,8CAA8C,CAAC,CAAC;QAE3F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,IAAI,0BAAiB,CAAC,uBAAuB,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,SAAS,CACX,EAAY,EACZ,SAA2B,EAC3B,YAAuC;QAEvC,MAAM,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,iDAAiD,CAAC,CAAC;QAE9F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,MAAM,IAAI,0BAAiB,CAAC,uBAAuB,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;IACjD,CAAC;CACJ,CAAA;AArFY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAK+B,4BAAiB;QACd,+BAAoB;QACjB,qCAAuB;GAN5D,iBAAiB,CAqF7B"}

package/dist/managers/index.d.ts

@@ -0,0 +1,4 @@
+export * from './global-role.manager';
+export * from './organization-role.manager';
+export * from './organization.manager';
+//# sourceMappingURL=index.d.ts.map

package/dist/managers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/managers/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,wBAAwB,CAAC"}

package/dist/managers/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./global-role.manager"), exports);
+__exportStar(require("./organization-role.manager"), exports);
+__exportStar(require("./organization.manager"), exports);
+//# sourceMappingURL=index.js.map

package/dist/managers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/managers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAAsC;AACtC,8DAA4C;AAC5C,yDAAuC"}

package/dist/managers/organization-role.manager.d.ts

@@ -0,0 +1,47 @@
+import { ObjectId } from 'mongodb';
+import * as models from '@trailmix-cms/models';
+import { Utils } from '@trailmix-cms/db';
+import { OrganizationRoleService, AuthorizationService } from '../services';
+import { OrganizationCollection, SecurityAuditCollection } from '../collections';
+import { RequestPrincipal } from '../types';
+export type CreateOrganizationRoleParams = Utils.Creatable<models.OrganizationRole.Model>;
+export type FindOrganizationRoleParams = Partial<Utils.Creatable<models.OrganizationRole.Model>>;
+export declare class OrganizationRoleManager {
+    private readonly organizationRoleService;
+    private readonly authorizationService;
+    private readonly organizationCollection;
+    private readonly securityAuditCollection;
+    private readonly logger;
+    constructor(organizationRoleService: OrganizationRoleService, authorizationService: AuthorizationService, organizationCollection: OrganizationCollection, securityAuditCollection: SecurityAuditCollection);
+    private verifyOrganizationExists;
+    private authorizeOrganizationAdmin;
+    insertOne(params: CreateOrganizationRoleParams, principal: RequestPrincipal, auditContext: models.AuditContext.Model): Promise<{
+        _id: ObjectId;
+        created_at: Date;
+        principal_id: ObjectId;
+        principal_type: "account" | "api_key";
+        role: string;
+        organization_id: ObjectId;
+        updated_at?: Date | undefined;
+    }>;
+    find(params: FindOrganizationRoleParams, principal: RequestPrincipal): Promise<{
+        _id: ObjectId;
+        created_at: Date;
+        principal_id: ObjectId;
+        principal_type: "account" | "api_key";
+        role: string;
+        organization_id: ObjectId;
+        updated_at?: Date | undefined;
+    }[]>;
+    get(id: ObjectId, principal: RequestPrincipal): Promise<{
+        _id: ObjectId;
+        created_at: Date;
+        principal_id: ObjectId;
+        principal_type: "account" | "api_key";
+        role: string;
+        organization_id: ObjectId;
+        updated_at?: Date | undefined;
+    }>;
+    deleteOne(roleId: ObjectId, principal: RequestPrincipal, auditContext: models.AuditContext.Model): Promise<void>;
+}
+//# sourceMappingURL=organization-role.manager.d.ts.map

package/dist/managers/organization-role.manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization-role.manager.d.ts","sourceRoot":"","sources":["../../src/managers/organization-role.manager.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,KAAK,MAAM,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAEzC,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAE5C,MAAM,MAAM,4BAA4B,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;AAC1F,MAAM,MAAM,0BAA0B,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;AAEjG,qBACa,uBAAuB;IAI5B,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IACxC,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IACrC,OAAO,CAAC,QAAQ,CAAC,sBAAsB;IACvC,OAAO,CAAC,QAAQ,CAAC,uBAAuB;IAN5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4C;gBAG9C,uBAAuB,EAAE,uBAAuB,EAChD,oBAAoB,EAAE,oBAAoB,EAC1C,sBAAsB,EAAE,sBAAsB,EAC9C,uBAAuB,EAAE,uBAAuB;YAGvD,wBAAwB;YAOxB,0BAA0B;IAwClC,SAAS,CACX,MAAM,EAAE,4BAA4B,EACpC,SAAS,EAAE,gBAAgB,EAC3B,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,KAAK;;;;;;;;;IAuBrC,IAAI,CACN,MAAM,EAAE,0BAA0B,EAClC,SAAS,EAAE,gBAAgB;;;;;;;;;IA4CzB,GAAG,CACL,EAAE,EAAE,QAAQ,EACZ,SAAS,EAAE,gBAAgB;;;;;;;;;IAiDzB,SAAS,CACX,MAAM,EAAE,QAAQ,EAChB,SAAS,EAAE,gBAAgB,EAC3B,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,KAAK,GACxC,OAAO,CAAC,IAAI,CAAC;CAmBnB"}