@wardby/cli 0.2.1 → 0.3.0

package/dist/generated/prisma/models/AuthUser.d.ts

@@ -31,6 +31,7 @@ export type AuthUserCountAggregateOutputType = {
     principalId: number;
     displayName: number;
     status: number;
+    roles: number;
     createdAt: number;
     updatedAt: number;
     _all: number;
@@ -56,6 +57,7 @@ export type AuthUserCountAggregateInputType = {
     principalId?: true;
     displayName?: true;
     status?: true;
+    roles?: true;
     createdAt?: true;
     updatedAt?: true;
     _all?: true;
@@ -127,6 +129,7 @@ export type AuthUserGroupByOutputType = {
     principalId: string;
     displayName: string | null;
     status: string;
+    roles: string[];
     createdAt: Date;
     updatedAt: Date;
     _count: AuthUserCountAggregateOutputType | null;
@@ -144,6 +147,7 @@ export type AuthUserWhereInput = {
     principalId?: Prisma.StringFilter<"AuthUser"> | string;
     displayName?: Prisma.StringNullableFilter<"AuthUser"> | string | null;
     status?: Prisma.StringFilter<"AuthUser"> | string;
+    roles?: Prisma.StringNullableListFilter<"AuthUser">;
     createdAt?: Prisma.DateTimeFilter<"AuthUser"> | Date | string;
     updatedAt?: Prisma.DateTimeFilter<"AuthUser"> | Date | string;
     principal?: Prisma.XOR<Prisma.PrincipalScalarRelationFilter, Prisma.PrincipalWhereInput>;
@@ -157,6 +161,7 @@ export type AuthUserOrderByWithRelationInput = {
     principalId?: Prisma.SortOrder;
     displayName?: Prisma.SortOrderInput | Prisma.SortOrder;
     status?: Prisma.SortOrder;
+    roles?: Prisma.SortOrder;
     createdAt?: Prisma.SortOrder;
     updatedAt?: Prisma.SortOrder;
     principal?: Prisma.PrincipalOrderByWithRelationInput;
@@ -173,6 +178,7 @@ export type AuthUserWhereUniqueInput = Prisma.AtLeast<{
     NOT?: Prisma.AuthUserWhereInput | Prisma.AuthUserWhereInput[];
     displayName?: Prisma.StringNullableFilter<"AuthUser"> | string | null;
     status?: Prisma.StringFilter<"AuthUser"> | string;
+    roles?: Prisma.StringNullableListFilter<"AuthUser">;
     createdAt?: Prisma.DateTimeFilter<"AuthUser"> | Date | string;
     updatedAt?: Prisma.DateTimeFilter<"AuthUser"> | Date | string;
     principal?: Prisma.XOR<Prisma.PrincipalScalarRelationFilter, Prisma.PrincipalWhereInput>;
@@ -186,6 +192,7 @@ export type AuthUserOrderByWithAggregationInput = {
     principalId?: Prisma.SortOrder;
     displayName?: Prisma.SortOrderInput | Prisma.SortOrder;
     status?: Prisma.SortOrder;
+    roles?: Prisma.SortOrder;
     createdAt?: Prisma.SortOrder;
     updatedAt?: Prisma.SortOrder;
     _count?: Prisma.AuthUserCountOrderByAggregateInput;
@@ -200,6 +207,7 @@ export type AuthUserScalarWhereWithAggregatesInput = {
     principalId?: Prisma.StringWithAggregatesFilter<"AuthUser"> | string;
     displayName?: Prisma.StringNullableWithAggregatesFilter<"AuthUser"> | string | null;
     status?: Prisma.StringWithAggregatesFilter<"AuthUser"> | string;
+    roles?: Prisma.StringNullableListFilter<"AuthUser">;
     createdAt?: Prisma.DateTimeWithAggregatesFilter<"AuthUser"> | Date | string;
     updatedAt?: Prisma.DateTimeWithAggregatesFilter<"AuthUser"> | Date | string;
 };
@@ -207,6 +215,7 @@ export type AuthUserCreateInput = {
     id?: string;
     displayName?: string | null;
     status?: string;
+    roles?: Prisma.AuthUserCreaterolesInput | string[];
     createdAt?: Date | string;
     updatedAt?: Date | string;
     principal: Prisma.PrincipalCreateNestedOneWithoutAuthUserInput;
@@ -220,6 +229,7 @@ export type AuthUserUncheckedCreateInput = {
     principalId: string;
     displayName?: string | null;
     status?: string;
+    roles?: Prisma.AuthUserCreaterolesInput | string[];
     createdAt?: Date | string;
     updatedAt?: Date | string;
     loginKeys?: Prisma.AuthLoginKeyUncheckedCreateNestedManyWithoutUserInput;
@@ -231,6 +241,7 @@ export type AuthUserUpdateInput = {
     id?: Prisma.StringFieldUpdateOperationsInput | string;
     displayName?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
     status?: Prisma.StringFieldUpdateOperationsInput | string;
+    roles?: Prisma.AuthUserUpdaterolesInput | string[];
     createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     updatedAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     principal?: Prisma.PrincipalUpdateOneRequiredWithoutAuthUserNestedInput;
@@ -244,6 +255,7 @@ export type AuthUserUncheckedUpdateInput = {
     principalId?: Prisma.StringFieldUpdateOperationsInput | string;
     displayName?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
     status?: Prisma.StringFieldUpdateOperationsInput | string;
+    roles?: Prisma.AuthUserUpdaterolesInput | string[];
     createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     updatedAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     loginKeys?: Prisma.AuthLoginKeyUncheckedUpdateManyWithoutUserNestedInput;
@@ -256,6 +268,7 @@ export type AuthUserCreateManyInput = {
     principalId: string;
     displayName?: string | null;
     status?: string;
+    roles?: Prisma.AuthUserCreaterolesInput | string[];
     createdAt?: Date | string;
     updatedAt?: Date | string;
 };
@@ -263,6 +276,7 @@ export type AuthUserUpdateManyMutationInput = {
     id?: Prisma.StringFieldUpdateOperationsInput | string;
     displayName?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
     status?: Prisma.StringFieldUpdateOperationsInput | string;
+    roles?: Prisma.AuthUserUpdaterolesInput | string[];
     createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     updatedAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
 };
@@ -271,6 +285,7 @@ export type AuthUserUncheckedUpdateManyInput = {
     principalId?: Prisma.StringFieldUpdateOperationsInput | string;
     displayName?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
     status?: Prisma.StringFieldUpdateOperationsInput | string;
+    roles?: Prisma.AuthUserUpdaterolesInput | string[];
     createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     updatedAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
 };
@@ -283,6 +298,7 @@ export type AuthUserCountOrderByAggregateInput = {
     principalId?: Prisma.SortOrder;
     displayName?: Prisma.SortOrder;
     status?: Prisma.SortOrder;
+    roles?: Prisma.SortOrder;
     createdAt?: Prisma.SortOrder;
     updatedAt?: Prisma.SortOrder;
 };
@@ -334,6 +350,13 @@ export type AuthUserUncheckedUpdateOneWithoutPrincipalNestedInput = {
     connect?: Prisma.AuthUserWhereUniqueInput;
     update?: Prisma.XOR<Prisma.XOR<Prisma.AuthUserUpdateToOneWithWhereWithoutPrincipalInput, Prisma.AuthUserUpdateWithoutPrincipalInput>, Prisma.AuthUserUncheckedUpdateWithoutPrincipalInput>;
 };
+export type AuthUserCreaterolesInput = {
+    set: string[];
+};
+export type AuthUserUpdaterolesInput = {
+    set?: string[];
+    push?: string | string[];
+};
 export type AuthUserCreateNestedOneWithoutLoginKeysInput = {
     create?: Prisma.XOR<Prisma.AuthUserCreateWithoutLoginKeysInput, Prisma.AuthUserUncheckedCreateWithoutLoginKeysInput>;
     connectOrCreate?: Prisma.AuthUserCreateOrConnectWithoutLoginKeysInput;
@@ -386,6 +409,7 @@ export type AuthUserCreateWithoutPrincipalInput = {
     id?: string;
     displayName?: string | null;
     status?: string;
+    roles?: Prisma.AuthUserCreaterolesInput | string[];
     createdAt?: Date | string;
     updatedAt?: Date | string;
     loginKeys?: Prisma.AuthLoginKeyCreateNestedManyWithoutUserInput;
@@ -397,6 +421,7 @@ export type AuthUserUncheckedCreateWithoutPrincipalInput = {
     id?: string;
     displayName?: string | null;
     status?: string;
+    roles?: Prisma.AuthUserCreaterolesInput | string[];
     createdAt?: Date | string;
     updatedAt?: Date | string;
     loginKeys?: Prisma.AuthLoginKeyUncheckedCreateNestedManyWithoutUserInput;
@@ -421,6 +446,7 @@ export type AuthUserUpdateWithoutPrincipalInput = {
     id?: Prisma.StringFieldUpdateOperationsInput | string;
     displayName?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
     status?: Prisma.StringFieldUpdateOperationsInput | string;
+    roles?: Prisma.AuthUserUpdaterolesInput | string[];
     createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     updatedAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     loginKeys?: Prisma.AuthLoginKeyUpdateManyWithoutUserNestedInput;
@@ -432,6 +458,7 @@ export type AuthUserUncheckedUpdateWithoutPrincipalInput = {
     id?: Prisma.StringFieldUpdateOperationsInput | string;
     displayName?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
     status?: Prisma.StringFieldUpdateOperationsInput | string;
+    roles?: Prisma.AuthUserUpdaterolesInput | string[];
     createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     updatedAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     loginKeys?: Prisma.AuthLoginKeyUncheckedUpdateManyWithoutUserNestedInput;
@@ -443,6 +470,7 @@ export type AuthUserCreateWithoutLoginKeysInput = {
     id?: string;
     displayName?: string | null;
     status?: string;
+    roles?: Prisma.AuthUserCreaterolesInput | string[];
     createdAt?: Date | string;
     updatedAt?: Date | string;
     principal: Prisma.PrincipalCreateNestedOneWithoutAuthUserInput;
@@ -455,6 +483,7 @@ export type AuthUserUncheckedCreateWithoutLoginKeysInput = {
     principalId: string;
     displayName?: string | null;
     status?: string;
+    roles?: Prisma.AuthUserCreaterolesInput | string[];
     createdAt?: Date | string;
     updatedAt?: Date | string;
     sessions?: Prisma.AuthSessionUncheckedCreateNestedManyWithoutUserInput;
@@ -478,6 +507,7 @@ export type AuthUserUpdateWithoutLoginKeysInput = {
     id?: Prisma.StringFieldUpdateOperationsInput | string;
     displayName?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
     status?: Prisma.StringFieldUpdateOperationsInput | string;
+    roles?: Prisma.AuthUserUpdaterolesInput | string[];
     createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     updatedAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     principal?: Prisma.PrincipalUpdateOneRequiredWithoutAuthUserNestedInput;
@@ -490,6 +520,7 @@ export type AuthUserUncheckedUpdateWithoutLoginKeysInput = {
     principalId?: Prisma.StringFieldUpdateOperationsInput | string;
     displayName?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
     status?: Prisma.StringFieldUpdateOperationsInput | string;
+    roles?: Prisma.AuthUserUpdaterolesInput | string[];
     createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     updatedAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     sessions?: Prisma.AuthSessionUncheckedUpdateManyWithoutUserNestedInput;
@@ -500,6 +531,7 @@ export type AuthUserCreateWithoutSessionsInput = {
     id?: string;
     displayName?: string | null;
     status?: string;
+    roles?: Prisma.AuthUserCreaterolesInput | string[];
     createdAt?: Date | string;
     updatedAt?: Date | string;
     principal: Prisma.PrincipalCreateNestedOneWithoutAuthUserInput;
@@ -512,6 +544,7 @@ export type AuthUserUncheckedCreateWithoutSessionsInput = {
     principalId: string;
     displayName?: string | null;
     status?: string;
+    roles?: Prisma.AuthUserCreaterolesInput | string[];
     createdAt?: Date | string;
     updatedAt?: Date | string;
     loginKeys?: Prisma.AuthLoginKeyUncheckedCreateNestedManyWithoutUserInput;
@@ -535,6 +568,7 @@ export type AuthUserUpdateWithoutSessionsInput = {
     id?: Prisma.StringFieldUpdateOperationsInput | string;
     displayName?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
     status?: Prisma.StringFieldUpdateOperationsInput | string;
+    roles?: Prisma.AuthUserUpdaterolesInput | string[];
     createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     updatedAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     principal?: Prisma.PrincipalUpdateOneRequiredWithoutAuthUserNestedInput;
@@ -547,6 +581,7 @@ export type AuthUserUncheckedUpdateWithoutSessionsInput = {
     principalId?: Prisma.StringFieldUpdateOperationsInput | string;
     displayName?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
     status?: Prisma.StringFieldUpdateOperationsInput | string;
+    roles?: Prisma.AuthUserUpdaterolesInput | string[];
     createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     updatedAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     loginKeys?: Prisma.AuthLoginKeyUncheckedUpdateManyWithoutUserNestedInput;
@@ -557,6 +592,7 @@ export type AuthUserCreateWithoutCodesInput = {
     id?: string;
     displayName?: string | null;
     status?: string;
+    roles?: Prisma.AuthUserCreaterolesInput | string[];
     createdAt?: Date | string;
     updatedAt?: Date | string;
     principal: Prisma.PrincipalCreateNestedOneWithoutAuthUserInput;
@@ -569,6 +605,7 @@ export type AuthUserUncheckedCreateWithoutCodesInput = {
     principalId: string;
     displayName?: string | null;
     status?: string;
+    roles?: Prisma.AuthUserCreaterolesInput | string[];
     createdAt?: Date | string;
     updatedAt?: Date | string;
     loginKeys?: Prisma.AuthLoginKeyUncheckedCreateNestedManyWithoutUserInput;
@@ -592,6 +629,7 @@ export type AuthUserUpdateWithoutCodesInput = {
     id?: Prisma.StringFieldUpdateOperationsInput | string;
     displayName?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
     status?: Prisma.StringFieldUpdateOperationsInput | string;
+    roles?: Prisma.AuthUserUpdaterolesInput | string[];
     createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     updatedAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     principal?: Prisma.PrincipalUpdateOneRequiredWithoutAuthUserNestedInput;
@@ -604,6 +642,7 @@ export type AuthUserUncheckedUpdateWithoutCodesInput = {
     principalId?: Prisma.StringFieldUpdateOperationsInput | string;
     displayName?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
     status?: Prisma.StringFieldUpdateOperationsInput | string;
+    roles?: Prisma.AuthUserUpdaterolesInput | string[];
     createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     updatedAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     loginKeys?: Prisma.AuthLoginKeyUncheckedUpdateManyWithoutUserNestedInput;
@@ -614,6 +653,7 @@ export type AuthUserCreateWithoutFamiliesInput = {
     id?: string;
     displayName?: string | null;
     status?: string;
+    roles?: Prisma.AuthUserCreaterolesInput | string[];
     createdAt?: Date | string;
     updatedAt?: Date | string;
     principal: Prisma.PrincipalCreateNestedOneWithoutAuthUserInput;
@@ -626,6 +666,7 @@ export type AuthUserUncheckedCreateWithoutFamiliesInput = {
     principalId: string;
     displayName?: string | null;
     status?: string;
+    roles?: Prisma.AuthUserCreaterolesInput | string[];
     createdAt?: Date | string;
     updatedAt?: Date | string;
     loginKeys?: Prisma.AuthLoginKeyUncheckedCreateNestedManyWithoutUserInput;
@@ -649,6 +690,7 @@ export type AuthUserUpdateWithoutFamiliesInput = {
     id?: Prisma.StringFieldUpdateOperationsInput | string;
     displayName?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
     status?: Prisma.StringFieldUpdateOperationsInput | string;
+    roles?: Prisma.AuthUserUpdaterolesInput | string[];
     createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     updatedAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     principal?: Prisma.PrincipalUpdateOneRequiredWithoutAuthUserNestedInput;
@@ -661,6 +703,7 @@ export type AuthUserUncheckedUpdateWithoutFamiliesInput = {
     principalId?: Prisma.StringFieldUpdateOperationsInput | string;
     displayName?: Prisma.NullableStringFieldUpdateOperationsInput | string | null;
     status?: Prisma.StringFieldUpdateOperationsInput | string;
+    roles?: Prisma.AuthUserUpdaterolesInput | string[];
     createdAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     updatedAt?: Prisma.DateTimeFieldUpdateOperationsInput | Date | string;
     loginKeys?: Prisma.AuthLoginKeyUncheckedUpdateManyWithoutUserNestedInput;
@@ -720,6 +763,7 @@ export type AuthUserSelect<ExtArgs extends runtime.Types.Extensions.InternalArgs
     principalId?: boolean;
     displayName?: boolean;
     status?: boolean;
+    roles?: boolean;
     createdAt?: boolean;
     updatedAt?: boolean;
     principal?: boolean | Prisma.PrincipalDefaultArgs<ExtArgs>;
@@ -734,6 +778,7 @@ export type AuthUserSelectCreateManyAndReturn<ExtArgs extends runtime.Types.Exte
     principalId?: boolean;
     displayName?: boolean;
     status?: boolean;
+    roles?: boolean;
     createdAt?: boolean;
     updatedAt?: boolean;
     principal?: boolean | Prisma.PrincipalDefaultArgs<ExtArgs>;
@@ -743,6 +788,7 @@ export type AuthUserSelectUpdateManyAndReturn<ExtArgs extends runtime.Types.Exte
     principalId?: boolean;
     displayName?: boolean;
     status?: boolean;
+    roles?: boolean;
     createdAt?: boolean;
     updatedAt?: boolean;
     principal?: boolean | Prisma.PrincipalDefaultArgs<ExtArgs>;
@@ -752,10 +798,11 @@ export type AuthUserSelectScalar = {
     principalId?: boolean;
     displayName?: boolean;
     status?: boolean;
+    roles?: boolean;
     createdAt?: boolean;
     updatedAt?: boolean;
 };
-export type AuthUserOmit<ExtArgs extends runtime.Types.Extensions.InternalArgs = runtime.Types.Extensions.DefaultArgs> = runtime.Types.Extensions.GetOmit<"id" | "principalId" | "displayName" | "status" | "createdAt" | "updatedAt", ExtArgs["result"]["authUser"]>;
+export type AuthUserOmit<ExtArgs extends runtime.Types.Extensions.InternalArgs = runtime.Types.Extensions.DefaultArgs> = runtime.Types.Extensions.GetOmit<"id" | "principalId" | "displayName" | "status" | "roles" | "createdAt" | "updatedAt", ExtArgs["result"]["authUser"]>;
 export type AuthUserInclude<ExtArgs extends runtime.Types.Extensions.InternalArgs = runtime.Types.Extensions.DefaultArgs> = {
     principal?: boolean | Prisma.PrincipalDefaultArgs<ExtArgs>;
     loginKeys?: boolean | Prisma.AuthUser$loginKeysArgs<ExtArgs>;
@@ -784,6 +831,13 @@ export type $AuthUserPayload<ExtArgs extends runtime.Types.Extensions.InternalAr
         principalId: string;
         displayName: string | null;
         status: string;
+        /**
+         * wardby roles (src/mcp/auth/resource-server.ts ROLE_PERMISSIONS: admin,
+         * package-approver, service-manager), set with `wardby auth user grant`. Empty = member.
+         * A privileged operation needs its scope on the token AND a role here
+         * that grants it; unknown values grant nothing.
+         */
+        roles: string[];
         createdAt: Date;
         updatedAt: Date;
     }, ExtArgs["result"]["authUser"]>;
@@ -1149,6 +1203,7 @@ export interface AuthUserFieldRefs {
     readonly principalId: Prisma.FieldRef<"AuthUser", 'String'>;
     readonly displayName: Prisma.FieldRef<"AuthUser", 'String'>;
     readonly status: Prisma.FieldRef<"AuthUser", 'String'>;
+    readonly roles: Prisma.FieldRef<"AuthUser", 'String[]'>;
     readonly createdAt: Prisma.FieldRef<"AuthUser", 'DateTime'>;
     readonly updatedAt: Prisma.FieldRef<"AuthUser", 'DateTime'>;
 }