@webiny/api-core 0.0.0-unstable.3c5210ad37

package/features/security/permissions/types.d.ts

@@ -0,0 +1,137 @@
+/**
+ * An action definition on an entity.
+ *
+ * Built-in actions:
+ * - `{ name: "rwd" }` — read/write/delete (serialized as joined string, e.g. "rw")
+ * - `{ name: "pw" }` — publish/unpublish (serialized as joined string, e.g. "pu")
+ *
+ * Custom actions:
+ * - `{ name: "install" }` — boolean flag (serialized as `install: true`)
+ */
+export interface ActionDefinition {
+    /** Key on the permission object (e.g. "rwd", "pw", "install"). */
+    name: string;
+    /** Display label for the UI. Required for custom actions; ignored for built-in "rwd"/"pw". */
+    label?: string;
+}
+/**
+ * Defines an entity within a permission schema.
+ */
+export interface EntityDefinition {
+    /** Unique ID, used for form field naming: ${id}AccessScope, ${id}RWD, etc. */
+    id: string;
+    /** Display title for the UI renderer (e.g. "Files", "Settings"). */
+    title?: string;
+    /** Permission name emitted for this entity (e.g. "fm.file"). */
+    permission: string;
+    /** Available access scopes. */
+    scopes: readonly ("full" | "own")[];
+    /** Action definitions for this entity. */
+    actions?: readonly ActionDefinition[];
+    /** Dependency on another entity. */
+    dependsOn?: {
+        /** ID of parent entity. */
+        entity: string;
+        /** Required action character (e.g. "r"). */
+        requires: string;
+    };
+}
+/**
+ * Configuration for creating a permission schema.
+ */
+export interface PermissionSchemaConfig {
+    /** Permission prefix — used to filter permissions from the array. */
+    prefix: string;
+    /**
+     * Full access configuration.
+     * - `true` — emits `{ name: "${prefix}.*" }`.
+     * - `{ ...extras }` — emits `{ name: "${prefix}.*", ...extras }`.
+     */
+    fullAccess: boolean | {
+        [key: string]: any;
+    };
+    /** Entity definitions (optional — simple apps have none). */
+    entities?: readonly EntityDefinition[];
+}
+/**
+ * Item that may have an owner (used for own-scope permission checks).
+ */
+export interface OwnableItem {
+    createdBy?: {
+        id: string;
+    } | null;
+}
+/**
+ * Extract the union of entity definitions from a schema config type.
+ */
+type EntitiesOf<S extends PermissionSchemaConfig> = S extends {
+    entities: ReadonlyArray<infer E extends EntityDefinition>;
+} ? E : never;
+/**
+ * Extract entity IDs whose actions array contains an action with the given name.
+ */
+type EntityIdWithAction<S extends PermissionSchemaConfig, A extends string> = {
+    [K in EntitiesOf<S> as K extends {
+        actions: ReadonlyArray<infer Act>;
+    } ? Act extends {
+        name: A;
+    } ? K["id"] : never : never]: never;
+} extends infer M ? keyof M & string : never;
+/**
+ * All entity IDs in the schema.
+ */
+export type AllEntityIds<S extends PermissionSchemaConfig> = EntitiesOf<S>["id"];
+/**
+ * Entity IDs that have the "rwd" action.
+ */
+export type RwdEntityId<S extends PermissionSchemaConfig> = EntityIdWithAction<S, "rwd">;
+/**
+ * Entity IDs that have the "pw" action.
+ */
+export type PwEntityId<S extends PermissionSchemaConfig> = EntityIdWithAction<S, "pw">;
+/**
+ * Custom (non-builtin) action names across all entities.
+ */
+export type CustomActionNames<S extends PermissionSchemaConfig> = Exclude<EntitiesOf<S> extends {
+    actions: ReadonlyArray<infer Act extends ActionDefinition>;
+} ? Act["name"] : never, "rwd" | "pw">;
+/**
+ * Typed permissions interface for a given schema.
+ *
+ * When the schema has literal entity types, methods are narrowed to only accept valid entity IDs.
+ * When the schema is dynamically typed, all methods accept `string`.
+ */
+export type Permissions<S extends PermissionSchemaConfig> = string extends AllEntityIds<S> ? PermissionsUntyped : PermissionsTyped<S>;
+export interface PermissionsUntyped {
+    canAccess(entityId: string, item?: OwnableItem): Promise<boolean>;
+    onlyOwnRecords(entityId: string): Promise<boolean>;
+    canRead(entityId: string): Promise<boolean>;
+    canCreate(entityId: string): Promise<boolean>;
+    canEdit(entityId: string, item?: OwnableItem): Promise<boolean>;
+    canDelete(entityId: string, item?: OwnableItem): Promise<boolean>;
+    canPublish(entityId: string): Promise<boolean>;
+    canUnpublish(entityId: string): Promise<boolean>;
+    canAction(action: string, entityId: string): Promise<boolean>;
+}
+export type PermissionsTyped<S extends PermissionSchemaConfig> = {
+    canAccess(entityId: AllEntityIds<S>, item?: OwnableItem): Promise<boolean>;
+    onlyOwnRecords(entityId: AllEntityIds<S>): Promise<boolean>;
+    canAction(action: CustomActionNames<S> extends never ? string : CustomActionNames<S>, entityId: AllEntityIds<S>): Promise<boolean>;
+} & ([RwdEntityId<S>] extends [never] ? {
+    canRead(entityId: string): Promise<boolean>;
+    canCreate(entityId: string): Promise<boolean>;
+    canEdit(entityId: string, item?: OwnableItem): Promise<boolean>;
+    canDelete(entityId: string, item?: OwnableItem): Promise<boolean>;
+} : {
+    canRead(entityId: RwdEntityId<S>): Promise<boolean>;
+    canCreate(entityId: RwdEntityId<S>): Promise<boolean>;
+    canEdit(entityId: RwdEntityId<S>, item?: OwnableItem): Promise<boolean>;
+    canDelete(entityId: RwdEntityId<S>, item?: OwnableItem): Promise<boolean>;
+}) & ([PwEntityId<S>] extends [never] ? {
+    canPublish(entityId: string): Promise<boolean>;
+    canUnpublish(entityId: string): Promise<boolean>;
+} : {
+    canPublish(entityId: PwEntityId<S>): Promise<boolean>;
+    canUnpublish(entityId: PwEntityId<S>): Promise<boolean>;
+});
+export {};

package/features/security/permissions/types.js

@@ -0,0 +1,3 @@
+export {};
+
+//# sourceMappingURL=types.js.map

package/features/security/permissions/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["types.ts"],"sourcesContent":["/**\n * An action definition on an entity.\n *\n * Built-in actions:\n * - `{ name: \"rwd\" }` — read/write/delete (serialized as joined string, e.g. \"rw\")\n * - `{ name: \"pw\" }` — publish/unpublish (serialized as joined string, e.g. \"pu\")\n *\n * Custom actions:\n * - `{ name: \"install\" }` — boolean flag (serialized as `install: true`)\n */\nexport interface ActionDefinition {\n    /** Key on the permission object (e.g. \"rwd\", \"pw\", \"install\"). */\n    name: string;\n    /** Display label for the UI. Required for custom actions; ignored for built-in \"rwd\"/\"pw\". */\n    label?: string;\n}\n\n/**\n * Defines an entity within a permission schema.\n */\nexport interface EntityDefinition {\n    /** Unique ID, used for form field naming: ${id}AccessScope, ${id}RWD, etc. */\n    id: string;\n    /** Display title for the UI renderer (e.g. \"Files\", \"Settings\"). */\n    title?: string;\n    /** Permission name emitted for this entity (e.g. \"fm.file\"). */\n    permission: string;\n    /** Available access scopes. */\n    scopes: readonly (\"full\" | \"own\")[];\n    /** Action definitions for this entity. */\n    actions?: readonly ActionDefinition[];\n    /** Dependency on another entity. */\n    dependsOn?: {\n        /** ID of parent entity. */\n        entity: string;\n        /** Required action character (e.g. \"r\"). */\n        requires: string;\n    };\n}\n\n/**\n * Configuration for creating a permission schema.\n */\nexport interface PermissionSchemaConfig {\n    /** Permission prefix — used to filter permissions from the array. */\n    prefix: string;\n    /**\n     * Full access configuration.\n     * - `true` — emits `{ name: \"${prefix}.*\" }`.\n     * - `{ ...extras }` — emits `{ name: \"${prefix}.*\", ...extras }`.\n     */\n    fullAccess: boolean | { [key: string]: any };\n    /** Entity definitions (optional — simple apps have none). */\n    entities?: readonly EntityDefinition[];\n}\n\n/**\n * Item that may have an owner (used for own-scope permission checks).\n */\nexport interface OwnableItem {\n    createdBy?: { id: string } | null;\n}\n\n/**\n * Extract the union of entity definitions from a schema config type.\n */\ntype EntitiesOf<S extends PermissionSchemaConfig> = S extends {\n    entities: ReadonlyArray<infer E extends EntityDefinition>;\n}\n    ? E\n    : never;\n\n/**\n * Extract entity IDs whose actions array contains an action with the given name.\n */\ntype EntityIdWithAction<S extends PermissionSchemaConfig, A extends string> = {\n    [K in EntitiesOf<S> as K extends { actions: ReadonlyArray<infer Act> }\n        ? Act extends { name: A }\n            ? K[\"id\"]\n            : never\n        : never]: never;\n} extends infer M\n    ? keyof M & string\n    : never;\n\n/**\n * All entity IDs in the schema.\n */\nexport type AllEntityIds<S extends PermissionSchemaConfig> = EntitiesOf<S>[\"id\"];\n\n/**\n * Entity IDs that have the \"rwd\" action.\n */\nexport type RwdEntityId<S extends PermissionSchemaConfig> = EntityIdWithAction<S, \"rwd\">;\n\n/**\n * Entity IDs that have the \"pw\" action.\n */\nexport type PwEntityId<S extends PermissionSchemaConfig> = EntityIdWithAction<S, \"pw\">;\n\n/**\n * Custom (non-builtin) action names across all entities.\n */\nexport type CustomActionNames<S extends PermissionSchemaConfig> = Exclude<\n    EntitiesOf<S> extends { actions: ReadonlyArray<infer Act extends ActionDefinition> }\n        ? Act[\"name\"]\n        : never,\n    \"rwd\" | \"pw\"\n>;\n\n/**\n * Typed permissions interface for a given schema.\n *\n * When the schema has literal entity types, methods are narrowed to only accept valid entity IDs.\n * When the schema is dynamically typed, all methods accept `string`.\n */\nexport type Permissions<S extends PermissionSchemaConfig> =\n    string extends AllEntityIds<S> ? PermissionsUntyped : PermissionsTyped<S>;\n\nexport interface PermissionsUntyped {\n    canAccess(entityId: string, item?: OwnableItem): Promise<boolean>;\n    onlyOwnRecords(entityId: string): Promise<boolean>;\n    canRead(entityId: string): Promise<boolean>;\n    canCreate(entityId: string): Promise<boolean>;\n    canEdit(entityId: string, item?: OwnableItem): Promise<boolean>;\n    canDelete(entityId: string, item?: OwnableItem): Promise<boolean>;\n    canPublish(entityId: string): Promise<boolean>;\n    canUnpublish(entityId: string): Promise<boolean>;\n    canAction(action: string, entityId: string): Promise<boolean>;\n}\n\nexport type PermissionsTyped<S extends PermissionSchemaConfig> = {\n    canAccess(entityId: AllEntityIds<S>, item?: OwnableItem): Promise<boolean>;\n    onlyOwnRecords(entityId: AllEntityIds<S>): Promise<boolean>;\n    canAction(\n        action: CustomActionNames<S> extends never ? string : CustomActionNames<S>,\n        entityId: AllEntityIds<S>\n    ): Promise<boolean>;\n} & ([RwdEntityId<S>] extends [never]\n    ? {\n          canRead(entityId: string): Promise<boolean>;\n          canCreate(entityId: string): Promise<boolean>;\n          canEdit(entityId: string, item?: OwnableItem): Promise<boolean>;\n          canDelete(entityId: string, item?: OwnableItem): Promise<boolean>;\n      }\n    : {\n          canRead(entityId: RwdEntityId<S>): Promise<boolean>;\n          canCreate(entityId: RwdEntityId<S>): Promise<boolean>;\n          canEdit(entityId: RwdEntityId<S>, item?: OwnableItem): Promise<boolean>;\n          canDelete(entityId: RwdEntityId<S>, item?: OwnableItem): Promise<boolean>;\n      }) &\n    ([PwEntityId<S>] extends [never]\n        ? {\n              canPublish(entityId: string): Promise<boolean>;\n              canUnpublish(entityId: string): Promise<boolean>;\n          }\n        : {\n              canPublish(entityId: PwEntityId<S>): Promise<boolean>;\n              canUnpublish(entityId: PwEntityId<S>): Promise<boolean>;\n          });\n"],"mappings":"","ignoreList":[]}

package/features/security/roles/CreateRole/CreateRoleUseCase.d.ts

@@ -0,0 +1,17 @@
+import { Result } from "@webiny/feature/api";
+import { TenantContext } from "../../../../features/tenancy/TenantContext/index.js";
+import { EventPublisher } from "../../../../features/eventPublisher/index.js";
+import { CreateRoleUseCase as UseCaseAbstraction } from "./abstractions.js";
+import { RolesRepository } from "../shared/abstractions.js";
+import { IdentityContext } from "../../IdentityContext/abstractions.js";
+import type { Role, CreateRoleInput } from "../shared/types.js";
+declare class CreateRoleUseCaseImpl implements UseCaseAbstraction.Interface {
+    private tenantContext;
+    private identityContext;
+    private eventPublisher;
+    private repository;
+    constructor(tenantContext: TenantContext.Interface, identityContext: IdentityContext.Interface, eventPublisher: EventPublisher.Interface, repository: RolesRepository.Interface);
+    execute(input: CreateRoleInput): Promise<Result<Role, UseCaseAbstraction.Error>>;
+}
+export declare const CreateRoleUseCase: import("@webiny/di").Implementation<typeof CreateRoleUseCaseImpl>;
+export {};

package/features/security/roles/CreateRole/CreateRoleUseCase.js

@@ -0,0 +1,76 @@
+import { mdbid } from "@webiny/utils";
+import { createImplementation } from "@webiny/feature/api";
+import { Result } from "@webiny/feature/api";
+import { TenantContext } from "../../../tenancy/TenantContext/index.js";
+import { EventPublisher } from "../../../eventPublisher/index.js";
+import { CreateRoleUseCase as UseCaseAbstraction } from "./abstractions.js";
+import { RolesRepository } from "../shared/abstractions.js";
+import { IdentityContext } from "../../IdentityContext/abstractions.js";
+import { createRoleValidation } from "./schema.js";
+import { RoleBeforeCreateEvent, RoleAfterCreateEvent } from "./events.js";
+import { NotAuthorizedError, RoleExistsError, RoleValidationError } from "../shared/errors.js";
+class CreateRoleUseCaseImpl {
+  constructor(tenantContext, identityContext, eventPublisher, repository) {
+    this.tenantContext = tenantContext;
+    this.identityContext = identityContext;
+    this.eventPublisher = eventPublisher;
+    this.repository = repository;
+  }
+  async execute(input) {
+    const hasPermission = await this.identityContext.getPermission("security.role");
+    if (!hasPermission) {
+      return Result.fail(new NotAuthorizedError());
+    }
+    const validation = createRoleValidation.safeParse(input);
+    if (!validation.success) {
+      return Result.fail(new RoleValidationError(validation.error.errors[0].message));
+    }
+    const tenant = this.tenantContext.getTenant();
+    const identity = this.identityContext.getIdentity();
+    const data = validation.data;
+
+    // Check if role with same slug already exists
+    const existingRoleResult = await this.repository.get({
+      slug: data.slug
+    });
+    if (existingRoleResult.isOk()) {
+      return Result.fail(new RoleExistsError(data.slug));
+    }
+    const role = {
+      id: mdbid(),
+      name: data.name,
+      slug: data.slug,
+      description: data.description,
+      permissions: data.permissions,
+      system: input.system || false,
+      tenant: tenant.id,
+      createdOn: new Date().toISOString(),
+      createdBy: {
+        id: identity.id,
+        displayName: identity.displayName,
+        type: identity.type
+      },
+      plugin: false
+    };
+    await this.eventPublisher.publish(new RoleBeforeCreateEvent({
+      role,
+      input: validation.data
+    }));
+    const result = await this.repository.create(role);
+    if (result.isFail()) {
+      return Result.fail(result.error);
+    }
+    await this.eventPublisher.publish(new RoleAfterCreateEvent({
+      role,
+      input: validation.data
+    }));
+    return Result.ok(role);
+  }
+}
+export const CreateRoleUseCase = createImplementation({
+  abstraction: UseCaseAbstraction,
+  implementation: CreateRoleUseCaseImpl,
+  dependencies: [TenantContext, IdentityContext, EventPublisher, RolesRepository]
+});
+
+//# sourceMappingURL=CreateRoleUseCase.js.map

package/features/security/roles/CreateRole/CreateRoleUseCase.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["mdbid","createImplementation","Result","TenantContext","EventPublisher","CreateRoleUseCase","UseCaseAbstraction","RolesRepository","IdentityContext","createRoleValidation","RoleBeforeCreateEvent","RoleAfterCreateEvent","NotAuthorizedError","RoleExistsError","RoleValidationError","CreateRoleUseCaseImpl","constructor","tenantContext","identityContext","eventPublisher","repository","execute","input","hasPermission","getPermission","fail","validation","safeParse","success","error","errors","message","tenant","getTenant","identity","getIdentity","data","existingRoleResult","get","slug","isOk","role","id","name","description","permissions","system","createdOn","Date","toISOString","createdBy","displayName","type","plugin","publish","result","create","isFail","ok","abstraction","implementation","dependencies"],"sources":["CreateRoleUseCase.ts"],"sourcesContent":["import { mdbid } from \"@webiny/utils\";\nimport { createImplementation } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport { TenantContext } from \"~/features/tenancy/TenantContext/index.js\";\nimport { EventPublisher } from \"~/features/eventPublisher/index.js\";\nimport { CreateRoleUseCase as UseCaseAbstraction } from \"./abstractions.js\";\nimport { RolesRepository } from \"../shared/abstractions.js\";\nimport { IdentityContext } from \"../../IdentityContext/abstractions.js\";\nimport { createRoleValidation } from \"./schema.js\";\nimport { RoleBeforeCreateEvent, RoleAfterCreateEvent } from \"./events.js\";\nimport type { Role, CreateRoleInput } from \"../shared/types.js\";\nimport { NotAuthorizedError, RoleExistsError, RoleValidationError } from \"../shared/errors.js\";\n\nclass CreateRoleUseCaseImpl implements UseCaseAbstraction.Interface {\n    constructor(\n        private tenantContext: TenantContext.Interface,\n        private identityContext: IdentityContext.Interface,\n        private eventPublisher: EventPublisher.Interface,\n        private repository: RolesRepository.Interface\n    ) {}\n\n    async execute(input: CreateRoleInput): Promise<Result<Role, UseCaseAbstraction.Error>> {\n        const hasPermission = await this.identityContext.getPermission(\"security.role\");\n\n        if (!hasPermission) {\n            return Result.fail(new NotAuthorizedError());\n        }\n\n        const validation = createRoleValidation.safeParse(input);\n        if (!validation.success) {\n            return Result.fail(new RoleValidationError(validation.error.errors[0].message));\n        }\n\n        const tenant = this.tenantContext.getTenant();\n        const identity = this.identityContext.getIdentity();\n        const data = validation.data;\n\n        // Check if role with same slug already exists\n        const existingRoleResult = await this.repository.get({ slug: data.slug });\n        if (existingRoleResult.isOk()) {\n            return Result.fail(new RoleExistsError(data.slug));\n        }\n\n        const role: Role = {\n            id: mdbid(),\n            name: data.name,\n            slug: data.slug,\n            description: data.description,\n            permissions: data.permissions,\n            system: input.system || false,\n            tenant: tenant.id,\n            createdOn: new Date().toISOString(),\n            createdBy: {\n                id: identity.id,\n                displayName: identity.displayName,\n                type: identity.type\n            },\n            plugin: false\n        };\n\n        await this.eventPublisher.publish(\n            new RoleBeforeCreateEvent({ role, input: validation.data })\n        );\n\n        const result = await this.repository.create(role);\n\n        if (result.isFail()) {\n            return Result.fail(result.error);\n        }\n\n        await this.eventPublisher.publish(\n            new RoleAfterCreateEvent({ role, input: validation.data })\n        );\n\n        return Result.ok(role);\n    }\n}\n\nexport const CreateRoleUseCase = createImplementation({\n    abstraction: UseCaseAbstraction,\n    implementation: CreateRoleUseCaseImpl,\n    dependencies: [TenantContext, IdentityContext, EventPublisher, RolesRepository]\n});\n"],"mappings":"AAAA,SAASA,KAAK,QAAQ,eAAe;AACrC,SAASC,oBAAoB,QAAQ,qBAAqB;AAC1D,SAASC,MAAM,QAAQ,qBAAqB;AAC5C,SAASC,aAAa;AACtB,SAASC,cAAc;AACvB,SAASC,iBAAiB,IAAIC,kBAAkB;AAChD,SAASC,eAAe;AACxB,SAASC,eAAe;AACxB,SAASC,oBAAoB;AAC7B,SAASC,qBAAqB,EAAEC,oBAAoB;AAEpD,SAASC,kBAAkB,EAAEC,eAAe,EAAEC,mBAAmB;AAEjE,MAAMC,qBAAqB,CAAyC;EAChEC,WAAWA,CACCC,aAAsC,EACtCC,eAA0C,EAC1CC,cAAwC,EACxCC,UAAqC,EAC/C;IAAA,KAJUH,aAAsC,GAAtCA,aAAsC;IAAA,KACtCC,eAA0C,GAA1CA,eAA0C;IAAA,KAC1CC,cAAwC,GAAxCA,cAAwC;IAAA,KACxCC,UAAqC,GAArCA,UAAqC;EAC9C;EAEH,MAAMC,OAAOA,CAACC,KAAsB,EAAmD;IACnF,MAAMC,aAAa,GAAG,MAAM,IAAI,CAACL,eAAe,CAACM,aAAa,CAAC,eAAe,CAAC;IAE/E,IAAI,CAACD,aAAa,EAAE;MAChB,OAAOrB,MAAM,CAACuB,IAAI,CAAC,IAAIb,kBAAkB,CAAC,CAAC,CAAC;IAChD;IAEA,MAAMc,UAAU,GAAGjB,oBAAoB,CAACkB,SAAS,CAACL,KAAK,CAAC;IACxD,IAAI,CAACI,UAAU,CAACE,OAAO,EAAE;MACrB,OAAO1B,MAAM,CAACuB,IAAI,CAAC,IAAIX,mBAAmB,CAACY,UAAU,CAACG,KAAK,CAACC,MAAM,CAAC,CAAC,CAAC,CAACC,OAAO,CAAC,CAAC;IACnF;IAEA,MAAMC,MAAM,GAAG,IAAI,CAACf,aAAa,CAACgB,SAAS,CAAC,CAAC;IAC7C,MAAMC,QAAQ,GAAG,IAAI,CAAChB,eAAe,CAACiB,WAAW,CAAC,CAAC;IACnD,MAAMC,IAAI,GAAGV,UAAU,CAACU,IAAI;;IAE5B;IACA,MAAMC,kBAAkB,GAAG,MAAM,IAAI,CAACjB,UAAU,CAACkB,GAAG,CAAC;MAAEC,IAAI,EAAEH,IAAI,CAACG;IAAK,CAAC,CAAC;IACzE,IAAIF,kBAAkB,CAACG,IAAI,CAAC,CAAC,EAAE;MAC3B,OAAOtC,MAAM,CAACuB,IAAI,CAAC,IAAIZ,eAAe,CAACuB,IAAI,CAACG,IAAI,CAAC,CAAC;IACtD;IAEA,MAAME,IAAU,GAAG;MACfC,EAAE,EAAE1C,KAAK,CAAC,CAAC;MACX2C,IAAI,EAAEP,IAAI,CAACO,IAAI;MACfJ,IAAI,EAAEH,IAAI,CAACG,IAAI;MACfK,WAAW,EAAER,IAAI,CAACQ,WAAW;MAC7BC,WAAW,EAAET,IAAI,CAACS,WAAW;MAC7BC,MAAM,EAAExB,KAAK,CAACwB,MAAM,IAAI,KAAK;MAC7Bd,MAAM,EAAEA,MAAM,CAACU,EAAE;MACjBK,SAAS,EAAE,IAAIC,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC;MACnCC,SAAS,EAAE;QACPR,EAAE,EAAER,QAAQ,CAACQ,EAAE;QACfS,WAAW,EAAEjB,QAAQ,CAACiB,WAAW;QACjCC,IAAI,EAAElB,QAAQ,CAACkB;MACnB,CAAC;MACDC,MAAM,EAAE;IACZ,CAAC;IAED,MAAM,IAAI,CAAClC,cAAc,CAACmC,OAAO,CAC7B,IAAI5C,qBAAqB,CAAC;MAAE+B,IAAI;MAAEnB,KAAK,EAAEI,UAAU,CAACU;IAAK,CAAC,CAC9D,CAAC;IAED,MAAMmB,MAAM,GAAG,MAAM,IAAI,CAACnC,UAAU,CAACoC,MAAM,CAACf,IAAI,CAAC;IAEjD,IAAIc,MAAM,CAACE,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOvD,MAAM,CAACuB,IAAI,CAAC8B,MAAM,CAAC1B,KAAK,CAAC;IACpC;IAEA,MAAM,IAAI,CAACV,cAAc,CAACmC,OAAO,CAC7B,IAAI3C,oBAAoB,CAAC;MAAE8B,IAAI;MAAEnB,KAAK,EAAEI,UAAU,CAACU;IAAK,CAAC,CAC7D,CAAC;IAED,OAAOlC,MAAM,CAACwD,EAAE,CAACjB,IAAI,CAAC;EAC1B;AACJ;AAEA,OAAO,MAAMpC,iBAAiB,GAAGJ,oBAAoB,CAAC;EAClD0D,WAAW,EAAErD,kBAAkB;EAC/BsD,cAAc,EAAE7C,qBAAqB;EACrC8C,YAAY,EAAE,CAAC1D,aAAa,EAAEK,eAAe,EAAEJ,cAAc,EAAEG,eAAe;AAClF,CAAC,CAAC","ignoreList":[]}

package/features/security/roles/CreateRole/abstractions.d.ts

@@ -0,0 +1,27 @@
+import { Result } from "@webiny/feature/api";
+import type { Role, CreateRoleInput } from "../shared/types.js";
+import { RolesRepository } from "../shared/abstractions.js";
+import { NotAuthorizedError, RoleExistsError, RoleValidationError } from "../shared/errors.js";
+export interface ICreateRoleErrors {
+    notAuthorized: NotAuthorizedError;
+    roleExists: RoleExistsError;
+    validation: RoleValidationError;
+}
+type CreateRoleError = ICreateRoleErrors[keyof ICreateRoleErrors] | RolesRepository.Error;
+export interface ICreateRole {
+    execute(input: CreateRoleInput): Promise<Result<Role, CreateRoleError>>;
+}
+export declare const CreateRoleUseCase: import("@webiny/di").Abstraction<ICreateRole>;
+export declare namespace CreateRoleUseCase {
+    type Interface = ICreateRole;
+    type Error = CreateRoleError;
+}
+export interface RoleBeforeCreatePayload {
+    role: Role;
+    input: CreateRoleInput;
+}
+export interface RoleAfterCreatePayload {
+    role: Role;
+    input: CreateRoleInput;
+}
+export {};

package/features/security/roles/CreateRole/abstractions.js

@@ -0,0 +1,4 @@
+import { createAbstraction } from "@webiny/feature/api";
+export const CreateRoleUseCase = createAbstraction("CreateRoleUseCase");
+
+//# sourceMappingURL=abstractions.js.map

package/features/security/roles/CreateRole/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAbstraction","CreateRoleUseCase"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport type { Role, CreateRoleInput } from \"../shared/types.js\";\nimport { RolesRepository } from \"../shared/abstractions.js\";\nimport { NotAuthorizedError, RoleExistsError, RoleValidationError } from \"../shared/errors.js\";\n\nexport interface ICreateRoleErrors {\n    notAuthorized: NotAuthorizedError;\n    roleExists: RoleExistsError;\n    validation: RoleValidationError;\n}\n\ntype CreateRoleError = ICreateRoleErrors[keyof ICreateRoleErrors] | RolesRepository.Error;\n\nexport interface ICreateRole {\n    execute(input: CreateRoleInput): Promise<Result<Role, CreateRoleError>>;\n}\n\nexport const CreateRoleUseCase = createAbstraction<ICreateRole>(\"CreateRoleUseCase\");\n\nexport namespace CreateRoleUseCase {\n    export type Interface = ICreateRole;\n    export type Error = CreateRoleError;\n}\n\nexport interface RoleBeforeCreatePayload {\n    role: Role;\n    input: CreateRoleInput;\n}\n\nexport interface RoleAfterCreatePayload {\n    role: Role;\n    input: CreateRoleInput;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAkBvD,OAAO,MAAMC,iBAAiB,GAAGD,iBAAiB,CAAc,mBAAmB,CAAC","ignoreList":[]}

package/features/security/roles/CreateRole/events.d.ts

@@ -0,0 +1,21 @@
+import { DomainEvent } from "../../../../features/eventPublisher/index.js";
+import type { IEventHandler } from "../../../../features/eventPublisher/index.js";
+import type { RoleBeforeCreatePayload, RoleAfterCreatePayload } from "./abstractions.js";
+export declare class RoleBeforeCreateEvent extends DomainEvent<RoleBeforeCreatePayload> {
+    eventType: "role.beforeCreate";
+    getHandlerAbstraction(): import("@webiny/di").Abstraction<IEventHandler<RoleBeforeCreateEvent>>;
+}
+export declare const RoleBeforeCreateHandler: import("@webiny/di").Abstraction<IEventHandler<RoleBeforeCreateEvent>>;
+export declare namespace RoleBeforeCreateHandler {
+    type Interface = IEventHandler<RoleBeforeCreateEvent>;
+    type Event = RoleBeforeCreateEvent;
+}
+export declare class RoleAfterCreateEvent extends DomainEvent<RoleAfterCreatePayload> {
+    eventType: "role.afterCreate";
+    getHandlerAbstraction(): import("@webiny/di").Abstraction<IEventHandler<RoleAfterCreateEvent>>;
+}
+export declare const RoleAfterCreateHandler: import("@webiny/di").Abstraction<IEventHandler<RoleAfterCreateEvent>>;
+export declare namespace RoleAfterCreateHandler {
+    type Interface = IEventHandler<RoleAfterCreateEvent>;
+    type Event = RoleAfterCreateEvent;
+}

package/features/security/roles/CreateRole/events.js

@@ -0,0 +1,18 @@
+import { createAbstraction } from "@webiny/feature/api";
+import { DomainEvent } from "../../../eventPublisher/index.js";
+export class RoleBeforeCreateEvent extends DomainEvent {
+  eventType = "role.beforeCreate";
+  getHandlerAbstraction() {
+    return RoleBeforeCreateHandler;
+  }
+}
+export const RoleBeforeCreateHandler = createAbstraction("RoleBeforeCreateHandler");
+export class RoleAfterCreateEvent extends DomainEvent {
+  eventType = "role.afterCreate";
+  getHandlerAbstraction() {
+    return RoleAfterCreateHandler;
+  }
+}
+export const RoleAfterCreateHandler = createAbstraction("RoleAfterCreateHandler");
+
+//# sourceMappingURL=events.js.map

package/features/security/roles/CreateRole/events.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAbstraction","DomainEvent","RoleBeforeCreateEvent","eventType","getHandlerAbstraction","RoleBeforeCreateHandler","RoleAfterCreateEvent","RoleAfterCreateHandler"],"sources":["events.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { DomainEvent } from \"~/features/eventPublisher/index.js\";\nimport type { IEventHandler } from \"~/features/eventPublisher/index.js\";\nimport type { RoleBeforeCreatePayload, RoleAfterCreatePayload } from \"./abstractions.js\";\n\nexport class RoleBeforeCreateEvent extends DomainEvent<RoleBeforeCreatePayload> {\n    eventType = \"role.beforeCreate\" as const;\n\n    getHandlerAbstraction() {\n        return RoleBeforeCreateHandler;\n    }\n}\n\nexport const RoleBeforeCreateHandler =\n    createAbstraction<IEventHandler<RoleBeforeCreateEvent>>(\"RoleBeforeCreateHandler\");\n\nexport namespace RoleBeforeCreateHandler {\n    export type Interface = IEventHandler<RoleBeforeCreateEvent>;\n    export type Event = RoleBeforeCreateEvent;\n}\n\nexport class RoleAfterCreateEvent extends DomainEvent<RoleAfterCreatePayload> {\n    eventType = \"role.afterCreate\" as const;\n\n    getHandlerAbstraction() {\n        return RoleAfterCreateHandler;\n    }\n}\n\nexport const RoleAfterCreateHandler =\n    createAbstraction<IEventHandler<RoleAfterCreateEvent>>(\"RoleAfterCreateHandler\");\n\nexport namespace RoleAfterCreateHandler {\n    export type Interface = IEventHandler<RoleAfterCreateEvent>;\n    export type Event = RoleAfterCreateEvent;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AACvD,SAASC,WAAW;AAIpB,OAAO,MAAMC,qBAAqB,SAASD,WAAW,CAA0B;EAC5EE,SAAS,GAAG,mBAAmB;EAE/BC,qBAAqBA,CAAA,EAAG;IACpB,OAAOC,uBAAuB;EAClC;AACJ;AAEA,OAAO,MAAMA,uBAAuB,GAChCL,iBAAiB,CAAuC,yBAAyB,CAAC;AAOtF,OAAO,MAAMM,oBAAoB,SAASL,WAAW,CAAyB;EAC1EE,SAAS,GAAG,kBAAkB;EAE9BC,qBAAqBA,CAAA,EAAG;IACpB,OAAOG,sBAAsB;EACjC;AACJ;AAEA,OAAO,MAAMA,sBAAsB,GAC/BP,iBAAiB,CAAsC,wBAAwB,CAAC","ignoreList":[]}

package/features/security/roles/CreateRole/feature.d.ts

@@ -0,0 +1 @@
+export declare const CreateRoleFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<unknown>;

package/features/security/roles/CreateRole/feature.js

@@ -0,0 +1,10 @@
+import { createFeature } from "@webiny/feature/api";
+import { CreateRoleUseCase } from "./CreateRoleUseCase.js";
+export const CreateRoleFeature = createFeature({
+  name: "CreateRole",
+  register(container) {
+    container.register(CreateRoleUseCase);
+  }
+});
+
+//# sourceMappingURL=feature.js.map

package/features/security/roles/CreateRole/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createFeature","CreateRoleUseCase","CreateRoleFeature","name","register","container"],"sources":["feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { CreateRoleUseCase } from \"./CreateRoleUseCase.js\";\n\nexport const CreateRoleFeature = createFeature({\n    name: \"CreateRole\",\n    register(container) {\n        container.register(CreateRoleUseCase);\n    }\n});\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,qBAAqB;AACnD,SAASC,iBAAiB;AAE1B,OAAO,MAAMC,iBAAiB,GAAGF,aAAa,CAAC;EAC3CG,IAAI,EAAE,YAAY;EAClBC,QAAQA,CAACC,SAAS,EAAE;IAChBA,SAAS,CAACD,QAAQ,CAACH,iBAAiB,CAAC;EACzC;AACJ,CAAC,CAAC","ignoreList":[]}

package/features/security/roles/CreateRole/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./abstractions.js";
+export * from "./events.js";

package/features/security/roles/CreateRole/index.js

@@ -0,0 +1,4 @@
+export * from "./abstractions.js";
+export * from "./events.js";
+
+//# sourceMappingURL=index.js.map

package/features/security/roles/CreateRole/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sources":["index.ts"],"sourcesContent":["export * from \"./abstractions.js\";\nexport * from \"./events.js\";\n"],"mappings":"AAAA;AACA","ignoreList":[]}

package/features/security/roles/CreateRole/schema.d.ts

@@ -0,0 +1,27 @@
+import { z } from "zod";
+export declare const createRoleValidation: z.ZodObject<{
+    name: z.ZodString;
+    slug: z.ZodString;
+    description: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    permissions: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        name: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        name: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">>, "many">;
+}, "strip", z.ZodTypeAny, {
+    permissions: z.objectOutputType<{
+        name: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">[];
+    name: string;
+    description: string;
+    slug: string;
+}, {
+    permissions: z.objectInputType<{
+        name: z.ZodString;
+    }, z.ZodTypeAny, "passthrough">[];
+    name: string;
+    slug: string;
+    description?: string | undefined;
+}>;

package/features/security/roles/CreateRole/schema.js

@@ -0,0 +1,11 @@
+import { z } from "zod";
+export const createRoleValidation = z.object({
+  name: z.string().min(3),
+  slug: z.string().min(3),
+  description: z.string().max(500).optional().default(""),
+  permissions: z.array(z.object({
+    name: z.string()
+  }).passthrough())
+});
+
+//# sourceMappingURL=schema.js.map

package/features/security/roles/CreateRole/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["z","createRoleValidation","object","name","string","min","slug","description","max","optional","default","permissions","array","passthrough"],"sources":["schema.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const createRoleValidation = z.object({\n    name: z.string().min(3),\n    slug: z.string().min(3),\n    description: z.string().max(500).optional().default(\"\"),\n    permissions: z.array(z.object({ name: z.string() }).passthrough())\n});\n"],"mappings":"AAAA,SAASA,CAAC,QAAQ,KAAK;AAEvB,OAAO,MAAMC,oBAAoB,GAAGD,CAAC,CAACE,MAAM,CAAC;EACzCC,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC;EACvBC,IAAI,EAAEN,CAAC,CAACI,MAAM,CAAC,CAAC,CAACC,GAAG,CAAC,CAAC,CAAC;EACvBE,WAAW,EAAEP,CAAC,CAACI,MAAM,CAAC,CAAC,CAACI,GAAG,CAAC,GAAG,CAAC,CAACC,QAAQ,CAAC,CAAC,CAACC,OAAO,CAAC,EAAE,CAAC;EACvDC,WAAW,EAAEX,CAAC,CAACY,KAAK,CAACZ,CAAC,CAACE,MAAM,CAAC;IAAEC,IAAI,EAAEH,CAAC,CAACI,MAAM,CAAC;EAAE,CAAC,CAAC,CAACS,WAAW,CAAC,CAAC;AACrE,CAAC,CAAC","ignoreList":[]}

package/features/security/roles/DeleteRole/DeleteRoleUseCase.d.ts

@@ -0,0 +1,14 @@
+import { Result } from "@webiny/feature/api";
+import { DeleteRoleUseCase as UseCaseAbstraction } from "./abstractions.js";
+import { RolesRepository } from "../shared/abstractions.js";
+import { IdentityContext } from "../../IdentityContext/abstractions.js";
+import { EventPublisher } from "../../../../features/eventPublisher/index.js";
+declare class DeleteRoleUseCaseImpl implements UseCaseAbstraction.Interface {
+    private repository;
+    private identityContext;
+    private eventPublisher;
+    constructor(repository: RolesRepository.Interface, identityContext: IdentityContext.Interface, eventPublisher: EventPublisher.Interface);
+    execute(id: string): Promise<Result<void, UseCaseAbstraction.Error>>;
+}
+export declare const DeleteRoleUseCase: import("@webiny/di").Implementation<typeof DeleteRoleUseCaseImpl>;
+export {};

package/features/security/roles/DeleteRole/DeleteRoleUseCase.js

@@ -0,0 +1,51 @@
+import { createImplementation } from "@webiny/feature/api";
+import { Result } from "@webiny/feature/api";
+import { DeleteRoleUseCase as UseCaseAbstraction } from "./abstractions.js";
+import { RolesRepository } from "../shared/abstractions.js";
+import { IdentityContext } from "../../IdentityContext/abstractions.js";
+import { EventPublisher } from "../../../eventPublisher/index.js";
+import { RoleBeforeDeleteEvent, RoleAfterDeleteEvent } from "./events.js";
+import { NotAuthorizedError, CannotDeletePluginRolesError } from "../shared/errors.js";
+class DeleteRoleUseCaseImpl {
+  constructor(repository, identityContext, eventPublisher) {
+    this.repository = repository;
+    this.identityContext = identityContext;
+    this.eventPublisher = eventPublisher;
+  }
+  async execute(id) {
+    const hasPermission = await this.identityContext.getPermission("security.role");
+    if (!hasPermission) {
+      return Result.fail(new NotAuthorizedError());
+    }
+    const existingResult = await this.repository.get({
+      id
+    });
+    if (existingResult.isFail()) {
+      return Result.fail(existingResult.error);
+    }
+    const existingRole = existingResult.value;
+
+    // Check if role is created via plugin
+    if (existingRole.plugin) {
+      return Result.fail(new CannotDeletePluginRolesError());
+    }
+    await this.eventPublisher.publish(new RoleBeforeDeleteEvent({
+      role: existingRole
+    }));
+    const result = await this.repository.delete(existingRole);
+    if (result.isFail()) {
+      return result;
+    }
+    await this.eventPublisher.publish(new RoleAfterDeleteEvent({
+      role: existingRole
+    }));
+    return Result.ok();
+  }
+}
+export const DeleteRoleUseCase = createImplementation({
+  abstraction: UseCaseAbstraction,
+  implementation: DeleteRoleUseCaseImpl,
+  dependencies: [RolesRepository, IdentityContext, EventPublisher]
+});
+
+//# sourceMappingURL=DeleteRoleUseCase.js.map

package/features/security/roles/DeleteRole/DeleteRoleUseCase.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createImplementation","Result","DeleteRoleUseCase","UseCaseAbstraction","RolesRepository","IdentityContext","EventPublisher","RoleBeforeDeleteEvent","RoleAfterDeleteEvent","NotAuthorizedError","CannotDeletePluginRolesError","DeleteRoleUseCaseImpl","constructor","repository","identityContext","eventPublisher","execute","id","hasPermission","getPermission","fail","existingResult","get","isFail","error","existingRole","value","plugin","publish","role","result","delete","ok","abstraction","implementation","dependencies"],"sources":["DeleteRoleUseCase.ts"],"sourcesContent":["import { createImplementation } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport { DeleteRoleUseCase as UseCaseAbstraction } from \"./abstractions.js\";\nimport { RolesRepository } from \"../shared/abstractions.js\";\nimport { IdentityContext } from \"../../IdentityContext/abstractions.js\";\nimport { EventPublisher } from \"~/features/eventPublisher/index.js\";\nimport { RoleBeforeDeleteEvent, RoleAfterDeleteEvent } from \"./events.js\";\nimport { NotAuthorizedError, CannotDeletePluginRolesError } from \"../shared/errors.js\";\n\nclass DeleteRoleUseCaseImpl implements UseCaseAbstraction.Interface {\n    private repository: RolesRepository.Interface;\n    private identityContext: IdentityContext.Interface;\n    private eventPublisher: EventPublisher.Interface;\n\n    constructor(\n        repository: RolesRepository.Interface,\n        identityContext: IdentityContext.Interface,\n        eventPublisher: EventPublisher.Interface\n    ) {\n        this.repository = repository;\n        this.identityContext = identityContext;\n        this.eventPublisher = eventPublisher;\n    }\n\n    async execute(id: string): Promise<Result<void, UseCaseAbstraction.Error>> {\n        const hasPermission = await this.identityContext.getPermission(\"security.role\");\n        if (!hasPermission) {\n            return Result.fail(new NotAuthorizedError());\n        }\n\n        const existingResult = await this.repository.get({ id });\n        if (existingResult.isFail()) {\n            return Result.fail(existingResult.error);\n        }\n\n        const existingRole = existingResult.value;\n\n        // Check if role is created via plugin\n        if (existingRole.plugin) {\n            return Result.fail(new CannotDeletePluginRolesError());\n        }\n\n        await this.eventPublisher.publish(new RoleBeforeDeleteEvent({ role: existingRole }));\n\n        const result = await this.repository.delete(existingRole);\n\n        if (result.isFail()) {\n            return result;\n        }\n\n        await this.eventPublisher.publish(new RoleAfterDeleteEvent({ role: existingRole }));\n\n        return Result.ok();\n    }\n}\n\nexport const DeleteRoleUseCase = createImplementation({\n    abstraction: UseCaseAbstraction,\n    implementation: DeleteRoleUseCaseImpl,\n    dependencies: [RolesRepository, IdentityContext, EventPublisher]\n});\n"],"mappings":"AAAA,SAASA,oBAAoB,QAAQ,qBAAqB;AAC1D,SAASC,MAAM,QAAQ,qBAAqB;AAC5C,SAASC,iBAAiB,IAAIC,kBAAkB;AAChD,SAASC,eAAe;AACxB,SAASC,eAAe;AACxB,SAASC,cAAc;AACvB,SAASC,qBAAqB,EAAEC,oBAAoB;AACpD,SAASC,kBAAkB,EAAEC,4BAA4B;AAEzD,MAAMC,qBAAqB,CAAyC;EAKhEC,WAAWA,CACPC,UAAqC,EACrCC,eAA0C,EAC1CC,cAAwC,EAC1C;IACE,IAAI,CAACF,UAAU,GAAGA,UAAU;IAC5B,IAAI,CAACC,eAAe,GAAGA,eAAe;IACtC,IAAI,CAACC,cAAc,GAAGA,cAAc;EACxC;EAEA,MAAMC,OAAOA,CAACC,EAAU,EAAmD;IACvE,MAAMC,aAAa,GAAG,MAAM,IAAI,CAACJ,eAAe,CAACK,aAAa,CAAC,eAAe,CAAC;IAC/E,IAAI,CAACD,aAAa,EAAE;MAChB,OAAOjB,MAAM,CAACmB,IAAI,CAAC,IAAIX,kBAAkB,CAAC,CAAC,CAAC;IAChD;IAEA,MAAMY,cAAc,GAAG,MAAM,IAAI,CAACR,UAAU,CAACS,GAAG,CAAC;MAAEL;IAAG,CAAC,CAAC;IACxD,IAAII,cAAc,CAACE,MAAM,CAAC,CAAC,EAAE;MACzB,OAAOtB,MAAM,CAACmB,IAAI,CAACC,cAAc,CAACG,KAAK,CAAC;IAC5C;IAEA,MAAMC,YAAY,GAAGJ,cAAc,CAACK,KAAK;;IAEzC;IACA,IAAID,YAAY,CAACE,MAAM,EAAE;MACrB,OAAO1B,MAAM,CAACmB,IAAI,CAAC,IAAIV,4BAA4B,CAAC,CAAC,CAAC;IAC1D;IAEA,MAAM,IAAI,CAACK,cAAc,CAACa,OAAO,CAAC,IAAIrB,qBAAqB,CAAC;MAAEsB,IAAI,EAAEJ;IAAa,CAAC,CAAC,CAAC;IAEpF,MAAMK,MAAM,GAAG,MAAM,IAAI,CAACjB,UAAU,CAACkB,MAAM,CAACN,YAAY,CAAC;IAEzD,IAAIK,MAAM,CAACP,MAAM,CAAC,CAAC,EAAE;MACjB,OAAOO,MAAM;IACjB;IAEA,MAAM,IAAI,CAACf,cAAc,CAACa,OAAO,CAAC,IAAIpB,oBAAoB,CAAC;MAAEqB,IAAI,EAAEJ;IAAa,CAAC,CAAC,CAAC;IAEnF,OAAOxB,MAAM,CAAC+B,EAAE,CAAC,CAAC;EACtB;AACJ;AAEA,OAAO,MAAM9B,iBAAiB,GAAGF,oBAAoB,CAAC;EAClDiC,WAAW,EAAE9B,kBAAkB;EAC/B+B,cAAc,EAAEvB,qBAAqB;EACrCwB,YAAY,EAAE,CAAC/B,eAAe,EAAEC,eAAe,EAAEC,cAAc;AACnE,CAAC,CAAC","ignoreList":[]}

package/features/security/roles/DeleteRole/abstractions.d.ts

@@ -0,0 +1,24 @@
+import { Result } from "@webiny/feature/api";
+import type { Role } from "../shared/types.js";
+import { RolesRepository } from "../shared/abstractions.js";
+import { NotAuthorizedError, CannotDeletePluginRolesError } from "../shared/errors.js";
+export interface IDeleteRoleErrors {
+    notAuthorized: NotAuthorizedError;
+    cannotDeletePlugin: CannotDeletePluginRolesError;
+}
+type DeleteRoleError = IDeleteRoleErrors[keyof IDeleteRoleErrors] | RolesRepository.Error;
+export interface IDeleteRole {
+    execute(id: string): Promise<Result<void, DeleteRoleError>>;
+}
+export declare const DeleteRoleUseCase: import("@webiny/di").Abstraction<IDeleteRole>;
+export declare namespace DeleteRoleUseCase {
+    type Interface = IDeleteRole;
+    type Error = DeleteRoleError;
+}
+export interface RoleBeforeDeletePayload {
+    role: Role;
+}
+export interface RoleAfterDeletePayload {
+    role: Role;
+}
+export {};

package/features/security/roles/DeleteRole/abstractions.js

@@ -0,0 +1,4 @@
+import { createAbstraction } from "@webiny/feature/api";
+export const DeleteRoleUseCase = createAbstraction("DeleteRoleUseCase");
+
+//# sourceMappingURL=abstractions.js.map

package/features/security/roles/DeleteRole/abstractions.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAbstraction","DeleteRoleUseCase"],"sources":["abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { Result } from \"@webiny/feature/api\";\nimport type { Role } from \"../shared/types.js\";\nimport { RolesRepository } from \"../shared/abstractions.js\";\nimport { NotAuthorizedError, CannotDeletePluginRolesError } from \"../shared/errors.js\";\n\nexport interface IDeleteRoleErrors {\n    notAuthorized: NotAuthorizedError;\n    cannotDeletePlugin: CannotDeletePluginRolesError;\n}\n\ntype DeleteRoleError = IDeleteRoleErrors[keyof IDeleteRoleErrors] | RolesRepository.Error;\n\nexport interface IDeleteRole {\n    execute(id: string): Promise<Result<void, DeleteRoleError>>;\n}\n\nexport const DeleteRoleUseCase = createAbstraction<IDeleteRole>(\"DeleteRoleUseCase\");\n\nexport namespace DeleteRoleUseCase {\n    export type Interface = IDeleteRole;\n    export type Error = DeleteRoleError;\n}\n\nexport interface RoleBeforeDeletePayload {\n    role: Role;\n}\n\nexport interface RoleAfterDeletePayload {\n    role: Role;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AAiBvD,OAAO,MAAMC,iBAAiB,GAAGD,iBAAiB,CAAc,mBAAmB,CAAC","ignoreList":[]}

package/features/security/roles/DeleteRole/events.d.ts

@@ -0,0 +1,21 @@
+import { DomainEvent } from "../../../../features/eventPublisher/index.js";
+import type { IEventHandler } from "../../../../features/eventPublisher/index.js";
+import type { RoleBeforeDeletePayload, RoleAfterDeletePayload } from "./abstractions.js";
+export declare class RoleBeforeDeleteEvent extends DomainEvent<RoleBeforeDeletePayload> {
+    eventType: "role.beforeDelete";
+    getHandlerAbstraction(): import("@webiny/di").Abstraction<IEventHandler<RoleBeforeDeleteEvent>>;
+}
+export declare const RoleBeforeDeleteHandler: import("@webiny/di").Abstraction<IEventHandler<RoleBeforeDeleteEvent>>;
+export declare namespace RoleBeforeDeleteHandler {
+    type Interface = IEventHandler<RoleBeforeDeleteEvent>;
+    type Event = RoleBeforeDeleteEvent;
+}
+export declare class RoleAfterDeleteEvent extends DomainEvent<RoleAfterDeletePayload> {
+    eventType: "role.afterDelete";
+    getHandlerAbstraction(): import("@webiny/di").Abstraction<IEventHandler<RoleAfterDeleteEvent>>;
+}
+export declare const RoleAfterDeleteHandler: import("@webiny/di").Abstraction<IEventHandler<RoleAfterDeleteEvent>>;
+export declare namespace RoleAfterDeleteHandler {
+    type Interface = IEventHandler<RoleAfterDeleteEvent>;
+    type Event = RoleAfterDeleteEvent;
+}

package/features/security/roles/DeleteRole/events.js

@@ -0,0 +1,18 @@
+import { createAbstraction } from "@webiny/feature/api";
+import { DomainEvent } from "../../../eventPublisher/index.js";
+export class RoleBeforeDeleteEvent extends DomainEvent {
+  eventType = "role.beforeDelete";
+  getHandlerAbstraction() {
+    return RoleBeforeDeleteHandler;
+  }
+}
+export const RoleBeforeDeleteHandler = createAbstraction("RoleBeforeDeleteHandler");
+export class RoleAfterDeleteEvent extends DomainEvent {
+  eventType = "role.afterDelete";
+  getHandlerAbstraction() {
+    return RoleAfterDeleteHandler;
+  }
+}
+export const RoleAfterDeleteHandler = createAbstraction("RoleAfterDeleteHandler");
+
+//# sourceMappingURL=events.js.map

package/features/security/roles/DeleteRole/events.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createAbstraction","DomainEvent","RoleBeforeDeleteEvent","eventType","getHandlerAbstraction","RoleBeforeDeleteHandler","RoleAfterDeleteEvent","RoleAfterDeleteHandler"],"sources":["events.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { DomainEvent } from \"~/features/eventPublisher/index.js\";\nimport type { IEventHandler } from \"~/features/eventPublisher/index.js\";\nimport type { RoleBeforeDeletePayload, RoleAfterDeletePayload } from \"./abstractions.js\";\n\nexport class RoleBeforeDeleteEvent extends DomainEvent<RoleBeforeDeletePayload> {\n    eventType = \"role.beforeDelete\" as const;\n\n    getHandlerAbstraction() {\n        return RoleBeforeDeleteHandler;\n    }\n}\n\nexport const RoleBeforeDeleteHandler =\n    createAbstraction<IEventHandler<RoleBeforeDeleteEvent>>(\"RoleBeforeDeleteHandler\");\n\nexport namespace RoleBeforeDeleteHandler {\n    export type Interface = IEventHandler<RoleBeforeDeleteEvent>;\n    export type Event = RoleBeforeDeleteEvent;\n}\n\nexport class RoleAfterDeleteEvent extends DomainEvent<RoleAfterDeletePayload> {\n    eventType = \"role.afterDelete\" as const;\n\n    getHandlerAbstraction() {\n        return RoleAfterDeleteHandler;\n    }\n}\n\nexport const RoleAfterDeleteHandler =\n    createAbstraction<IEventHandler<RoleAfterDeleteEvent>>(\"RoleAfterDeleteHandler\");\n\nexport namespace RoleAfterDeleteHandler {\n    export type Interface = IEventHandler<RoleAfterDeleteEvent>;\n    export type Event = RoleAfterDeleteEvent;\n}\n"],"mappings":"AAAA,SAASA,iBAAiB,QAAQ,qBAAqB;AACvD,SAASC,WAAW;AAIpB,OAAO,MAAMC,qBAAqB,SAASD,WAAW,CAA0B;EAC5EE,SAAS,GAAG,mBAAmB;EAE/BC,qBAAqBA,CAAA,EAAG;IACpB,OAAOC,uBAAuB;EAClC;AACJ;AAEA,OAAO,MAAMA,uBAAuB,GAChCL,iBAAiB,CAAuC,yBAAyB,CAAC;AAOtF,OAAO,MAAMM,oBAAoB,SAASL,WAAW,CAAyB;EAC1EE,SAAS,GAAG,kBAAkB;EAE9BC,qBAAqBA,CAAA,EAAG;IACpB,OAAOG,sBAAsB;EACjC;AACJ;AAEA,OAAO,MAAMA,sBAAsB,GAC/BP,iBAAiB,CAAsC,wBAAwB,CAAC","ignoreList":[]}

package/features/security/roles/DeleteRole/feature.d.ts

@@ -0,0 +1 @@
+export declare const DeleteRoleFeature: import("@webiny/feature/api/createFeature.js").FeatureDefinition<unknown>;

package/features/security/roles/DeleteRole/feature.js

@@ -0,0 +1,10 @@
+import { createFeature } from "@webiny/feature/api";
+import { DeleteRoleUseCase } from "./DeleteRoleUseCase.js";
+export const DeleteRoleFeature = createFeature({
+  name: "DeleteRole",
+  register(container) {
+    container.register(DeleteRoleUseCase);
+  }
+});
+
+//# sourceMappingURL=feature.js.map

package/features/security/roles/DeleteRole/feature.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createFeature","DeleteRoleUseCase","DeleteRoleFeature","name","register","container"],"sources":["feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { DeleteRoleUseCase } from \"./DeleteRoleUseCase.js\";\n\nexport const DeleteRoleFeature = createFeature({\n    name: \"DeleteRole\",\n    register(container) {\n        container.register(DeleteRoleUseCase);\n    }\n});\n"],"mappings":"AAAA,SAASA,aAAa,QAAQ,qBAAqB;AACnD,SAASC,iBAAiB;AAE1B,OAAO,MAAMC,iBAAiB,GAAGF,aAAa,CAAC;EAC3CG,IAAI,EAAE,YAAY;EAClBC,QAAQA,CAACC,SAAS,EAAE;IAChBA,SAAS,CAACD,QAAQ,CAACH,iBAAiB,CAAC;EACzC;AACJ,CAAC,CAAC","ignoreList":[]}

package/features/security/roles/DeleteRole/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./abstractions.js";
+export * from "./events.js";