@yss123/cage-admin 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 shunshunyue and Cage contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,19 @@
-# Temporary Holding Version
+# @yss123/cage-admin
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+组织模型声明与 /admin 系统管理
+
+Cage 是通过 TypeScript 声明业务、由框架统一执行权限和数据规则的中后台框架。此包是框架的一部分。
+
+## 使用
+
+```powershell
+pnpm add @yss123/cage-admin
+```
+
+首次使用建议通过脚手架创建完整项目，所需依赖由模板统一配置。需要 Node.js 24 或更新版本。
+
+- [完整使用说明](https://github.com/shunshunyue/cage/blob/main/docs/使用说明.md)
+- [框架源码与范例](https://github.com/shunshunyue/cage)
+- [问题反馈](https://github.com/shunshunyue/cage/issues)
+
+许可证：[MIT](https://github.com/shunshunyue/cage/blob/main/LICENSE)。

package/dist/bootstrap.d.ts

@@ -0,0 +1,17 @@
+import { type Kernel } from '@yss123/cage-kernel';
+export interface BootstrapResult {
+    created: boolean;
+    username?: string;
+    password?: string;
+    rootDeptId?: string;
+    superadminRoleId?: string;
+}
+export declare function bootstrapOrg(k: Kernel, opts?: {
+    tenantId?: string;
+    adminUsername?: string;
+    adminPassword?: string;
+    rootDeptName?: string;
+}): Promise<BootstrapResult>;
+/** 把能力目录里的全部能力授给某个角色（cage dev 在声明新增命令后调用，生产环境由管理员在 /admin 操作） */
+export declare function grantAll(k: Kernel, roleId: string, tenantId?: string): Promise<number>;
+export declare function grantAllToSuperadmin(k: Kernel, tenantId?: string): Promise<number>;

package/dist/bootstrap.js

@@ -0,0 +1,43 @@
+// 初始化组织：第一次启动时建根部门、超级管理员角色和初始管理员账号。
+// 超级管理员只是一个拥有全部能力、范围为 all 的角色，是数据而不是代码里的特例。
+import { randomBytes } from 'node:crypto';
+import { DEFAULT_TENANT, systemCtx } from '@yss123/cage-kernel';
+function bootstrapCtx(k, tenantId) {
+    return systemCtx({ kind: 'system', name: 'bootstrap', tenantId, capabilities: k.catalogCaps() });
+}
+export async function bootstrapOrg(k, opts = {}) {
+    const tenantId = opts.tenantId ?? DEFAULT_TENANT;
+    const existing = await k.app.selectFrom('sys.user').select((eb) => eb.fn.countAll().as('n')).where('tenant_id', '=', tenantId).executeTakeFirst();
+    if (Number(existing?.n ?? 0) > 0)
+        return { created: false };
+    const ctx = bootstrapCtx(k, tenantId);
+    const root = await k.execute('Dept.create', { name: opts.rootDeptName ?? '总部', code: 'root' }, ctx);
+    const role = await k.execute('Role.create', { code: 'superadmin', name: '超级管理员' }, ctx);
+    await grantAll(k, role.id, tenantId);
+    await k.execute('Role.setScope', { id: role.id, aggregate: '*', combinator: 'all' }, ctx);
+    const username = opts.adminUsername ?? 'admin';
+    const password = opts.adminPassword ?? randomBytes(9).toString('base64url');
+    const user = await k.execute('User.create', { username, name: '管理员', deptId: root.id }, ctx);
+    await k.execute('User.assignRoles', { id: user.id, roleIds: [role.id] }, ctx);
+    await k.execute('User.setPassword', { id: user.id, password }, ctx);
+    return { created: true, username, password, rootDeptId: root.id, superadminRoleId: role.id };
+}
+/** 把能力目录里的全部能力授给某个角色（cage dev 在声明新增命令后调用，生产环境由管理员在 /admin 操作） */
+export async function grantAll(k, roleId, tenantId = DEFAULT_TENANT) {
+    const ctx = bootstrapCtx(k, tenantId);
+    const role = await k.app.selectFrom('sys.role').select('capabilities').where('id', '=', roleId).executeTakeFirst();
+    const have = new Set((role?.capabilities ?? []).map((c) => c.capability));
+    let n = 0;
+    for (const cap of k.catalogCaps()) {
+        if (have.has(cap))
+            continue;
+        await k.execute('Role.grantCapability', { id: roleId, capability: cap, params: cap.endsWith('.approve') ? { ceiling: 1_000_000_000 } : undefined }, ctx);
+        n++;
+    }
+    return n;
+}
+export async function grantAllToSuperadmin(k, tenantId = DEFAULT_TENANT) {
+    const r = await k.app.selectFrom('sys.role').select('id').where('code', '=', 'superadmin').where('tenant_id', '=', tenantId).executeTakeFirst();
+    return r ? grantAll(k, r.id, tenantId) : 0;
+}
+//# sourceMappingURL=bootstrap.js.map

package/dist/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../src/bootstrap.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,4CAA4C;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,SAAS,EAAyB,MAAM,qBAAqB,CAAC;AAUvF,SAAS,YAAY,CAAC,CAAS,EAAE,QAAgB;IAC/C,OAAO,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACnG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,CAAS,EACT,OAAqG,EAAE;IAEvG,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,cAAc,CAAC;IACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAU,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC1J,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5D,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;IACpG,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;IACxF,MAAM,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IACrC,MAAM,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,IAAI,OAAO,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7F,MAAM,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9E,MAAM,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;IACpE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;AAC/F,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,CAAS,EAAE,MAAc,EAAE,QAAQ,GAAG,cAAc;IACjF,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACnH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAS,CAAC,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACvF,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,MAAM,CAAC,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;QACzJ,CAAC,EAAE,CAAC;IACN,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,CAAS,EAAE,QAAQ,GAAG,cAAc;IAC7E,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAChJ,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC"}

package/dist/domain/constraints.d.ts

@@ -0,0 +1,9 @@
+import { type Constraint } from '@yss123/cage-kernel';
+/** 只能授出能力目录里存在的能力点 */
+export declare const knownCapability: () => Constraint;
+/** 防提权：不能授出自己没有的能力点；数值参数（额度）不能超过自己的 */
+export declare const noEscalation: () => Constraint;
+/** 不能授出比自己更宽的数据范围 */
+export declare const noWiderScope: () => Constraint;
+/** 分配角色也是授权：被分配角色里的每个能力点和范围，操作人自己都必须有 */
+export declare const noEscalationViaRoles: () => Constraint;

package/dist/domain/constraints.js

@@ -0,0 +1,61 @@
+// 授权类命令的内置硬约束：代码里不存在「管理员跳过检查」的分支，超级管理员也一样要过这些约束。
+import { COMBINATOR_WIDTH, ok, violation } from '@yss123/cage-kernel';
+function ownWidth(ctx, aggregate) {
+    const grants = ctx.scopes[aggregate] ?? ctx.scopes['*'] ?? [{ combinator: 'self' }];
+    return Math.max(...grants.map((g) => COMBINATOR_WIDTH[g.combinator] ?? 0));
+}
+/** 只能授出能力目录里存在的能力点 */
+export const knownCapability = () => ({
+    name: 'knownCapability',
+    check: (_role, _ctx, input, meta) => meta.catalog().includes(input.capability) ? ok() : violation(`[CAGE-GRANT-003] 能力点 ${input.capability} 不在能力目录里`),
+});
+/** 防提权：不能授出自己没有的能力点；数值参数（额度）不能超过自己的 */
+export const noEscalation = () => ({
+    name: 'noEscalation',
+    check: (_role, ctx, input) => {
+        const mine = ctx.capabilities.get(input.capability);
+        if (!mine)
+            return violation('[CAGE-GRANT-001] 不能授出自己没有的能力点');
+        for (const [k, v] of Object.entries(input.params ?? {})) {
+            if (typeof v === 'number' && typeof mine[k] === 'number' && v > mine[k]) {
+                return violation(`[CAGE-GRANT-001] 参数 ${k}=${v} 超过了你自己的 ${mine[k]}`);
+            }
+        }
+        return ok();
+    },
+});
+/** 不能授出比自己更宽的数据范围 */
+export const noWiderScope = () => ({
+    name: 'noWiderScope',
+    check: (_role, ctx, input) => {
+        if (!input.combinator)
+            return ok();
+        const want = COMBINATOR_WIDTH[input.combinator] ?? 99;
+        return want <= ownWidth(ctx, input.aggregate) ? ok() : violation('[CAGE-GRANT-002] 不能授出比自己更宽的数据范围');
+    },
+});
+/** 分配角色也是授权：被分配角色里的每个能力点和范围，操作人自己都必须有 */
+export const noEscalationViaRoles = () => ({
+    name: 'noEscalationViaRoles',
+    check: async (user, ctx, input, meta) => {
+        const before = new Set(user.roleIds ?? []);
+        for (const rid of input.roleIds) {
+            if (before.has(rid))
+                continue;
+            const role = await meta.load('Role', rid);
+            if (!role)
+                continue; // 交给 handler 报 ROLE_NOT_FOUND
+            for (const c of role.capabilities ?? []) {
+                if (!ctx.capabilities.has(c.capability))
+                    return violation(`[CAGE-GRANT-001] 角色 ${role.code} 含有你没有的能力点 ${c.capability}`);
+            }
+            for (const s of role.scopes ?? []) {
+                if ((COMBINATOR_WIDTH[s.combinator] ?? 99) > ownWidth(ctx, s.aggregate)) {
+                    return violation(`[CAGE-GRANT-002] 角色 ${role.code} 在 ${s.aggregate} 上的范围比你更宽`);
+                }
+            }
+        }
+        return ok();
+    },
+});
+//# sourceMappingURL=constraints.js.map

package/dist/domain/constraints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constraints.js","sourceRoot":"","sources":["../../src/domain/constraints.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,OAAO,EAAE,gBAAgB,EAA8C,EAAE,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAElH,SAAS,QAAQ,CAAC,GAAQ,EAAE,SAAiB;IAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAoB,EAAE,CAAC,CAAC;IAClG,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,sBAAsB;AACtB,MAAM,CAAC,MAAM,eAAe,GAAG,GAAe,EAAE,CAAC,CAAC;IAChD,IAAI,EAAE,iBAAiB;IACvB,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAClC,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,wBAAwB,KAAK,CAAC,UAAU,UAAU,CAAC;CACnH,CAAC,CAAC;AAEH,uCAAuC;AACvC,MAAM,CAAC,MAAM,YAAY,GAAG,GAAe,EAAE,CAAC,CAAC;IAC7C,IAAI,EAAE,cAAc;IACpB,KAAK,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC,+BAA+B,CAAC,CAAC;QAC7D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;YACxD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAI,IAAI,CAAC,CAAC,CAAY,EAAE,CAAC;gBACpF,OAAO,SAAS,CAAC,uBAAuB,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QACD,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;CACF,CAAC,CAAC;AAEH,qBAAqB;AACrB,MAAM,CAAC,MAAM,YAAY,GAAG,GAAe,EAAE,CAAC,CAAC;IAC7C,IAAI,EAAE,cAAc;IACpB,KAAK,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC3B,IAAI,CAAC,KAAK,CAAC,UAAU;YAAE,OAAO,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,UAAwB,CAAC,IAAI,EAAE,CAAC;QACpE,OAAO,IAAI,IAAI,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACtG,CAAC;CACF,CAAC,CAAC;AAEH,yCAAyC;AACzC,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAe,EAAE,CAAC,CAAC;IACrD,IAAI,EAAE,sBAAsB;IAC5B,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACnD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAmB,EAAE,CAAC;YAC5C,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC9B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI;gBAAE,SAAS,CAAC,8BAA8B;YACnD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;gBACxC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;oBAAE,OAAO,SAAS,CAAC,uBAAuB,IAAI,CAAC,IAAI,cAAc,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;YAC1H,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBAClC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAwB,CAAC,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;oBACtF,OAAO,SAAS,CAAC,uBAAuB,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,SAAS,WAAW,CAAC,CAAC;gBACjF,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;CACF,CAAC,CAAC"}

package/dist/domain/index.d.ts

@@ -0,0 +1 @@
+export { Dept, User, Role, createDept, updateDept, archiveDept, createUser, updateUser, assignRoles, disableUser, enableUser, setPassword, createRole, renameRole, grantCapability, revokeCapability, setScope, archiveRole, } from './org.js';

package/dist/domain/index.js

@@ -0,0 +1,5 @@
+// @yss123/cage-admin/domain：框架自带的组织模型声明。业务 domain 的 index.ts 里写一行
+//   export * from '@yss123/cage-admin/domain';
+// 抽取器、内核、HTTP 层就都能看到部门、用户、角色。
+export { Dept, User, Role, createDept, updateDept, archiveDept, createUser, updateUser, assignRoles, disableUser, enableUser, setPassword, createRole, renameRole, grantCapability, revokeCapability, setScope, archiveRole, } from './org.js';
+//# sourceMappingURL=index.js.map

package/dist/domain/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/domain/index.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,+CAA+C;AAC/C,8BAA8B;AAC9B,OAAO,EACL,IAAI,EAAE,IAAI,EAAE,IAAI,EAChB,UAAU,EAAE,UAAU,EAAE,WAAW,EACnC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EACzE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,gBAAgB,EAAE,QAAQ,EAAE,WAAW,GACjF,MAAM,UAAU,CAAC"}

package/dist/domain/org.d.ts

@@ -0,0 +1,387 @@
+import { z } from 'zod';
+export declare const Dept: import("@yss123/cage-kernel").Aggregate<"Dept", {
+    name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    code: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    parentId: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    ancestors: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    leaderId: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+}, string>;
+export declare const User: import("@yss123/cage-kernel").Aggregate<"User", {
+    username: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    deptId: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    roleIds: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodString>, false>;
+    phone: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    email: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    ssoSubject: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    passwordHash: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+}, string>;
+export declare const Role: import("@yss123/cage-kernel").Aggregate<"Role", {
+    code: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    capabilities: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodObject<{
+        capability: z.ZodString;
+        params: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    }, z.core.$strip>>, false>;
+    scopes: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodObject<{
+        aggregate: z.ZodString;
+        combinator: z.ZodEnum<{
+            all: "all";
+            self: "self";
+            dept: "dept";
+            deptSubtree: "deptSubtree";
+            deptSet: "deptSet";
+        }>;
+        deptIds: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+    }, z.core.$strip>>, false>;
+}, string>;
+export declare const createDept: import("@yss123/cage-kernel").Command<import("@yss123/cage-kernel").Aggregate<"Dept", {
+    name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    code: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    parentId: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    ancestors: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    leaderId: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+}, string>, {
+    depts: import("@yss123/cage-kernel").Aggregate<"Dept", {
+        name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+        code: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+        parentId: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+        ancestors: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+        leaderId: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    }, string>;
+}, z.ZodObject<{
+    name: z.ZodString;
+    code: z.ZodOptional<z.ZodString>;
+    parentId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    leaderId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>>;
+export declare const updateDept: import("@yss123/cage-kernel").Command<import("@yss123/cage-kernel").Aggregate<"Dept", {
+    name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    code: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    parentId: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    ancestors: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    leaderId: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+}, string>, {}, z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    code: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    leaderId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>>;
+export declare const archiveDept: import("@yss123/cage-kernel").Command<import("@yss123/cage-kernel").Aggregate<"Dept", {
+    name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    code: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    parentId: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    ancestors: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    leaderId: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+}, string>, {
+    users: import("@yss123/cage-kernel").Aggregate<"User", {
+        username: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+        name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+        deptId: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+        roleIds: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodString>, false>;
+        phone: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+        email: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+        ssoSubject: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+        passwordHash: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    }, string>;
+    depts: import("@yss123/cage-kernel").Aggregate<"Dept", {
+        name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+        code: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+        parentId: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+        ancestors: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+        leaderId: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    }, string>;
+}, z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>>;
+export declare const createUser: import("@yss123/cage-kernel").Command<import("@yss123/cage-kernel").Aggregate<"User", {
+    username: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    deptId: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    roleIds: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodString>, false>;
+    phone: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    email: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    ssoSubject: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    passwordHash: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+}, string>, {
+    users: import("@yss123/cage-kernel").Aggregate<"User", {
+        username: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+        name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+        deptId: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+        roleIds: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodString>, false>;
+        phone: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+        email: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+        ssoSubject: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+        passwordHash: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    }, string>;
+    depts: import("@yss123/cage-kernel").Aggregate<"Dept", {
+        name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+        code: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+        parentId: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+        ancestors: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+        leaderId: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    }, string>;
+}, z.ZodObject<{
+    ssoSubject: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    name: z.ZodString;
+    deptId: z.ZodString;
+    phone: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    email: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    username: z.ZodString;
+}, z.core.$strip>>;
+export declare const updateUser: import("@yss123/cage-kernel").Command<import("@yss123/cage-kernel").Aggregate<"User", {
+    username: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    deptId: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    roleIds: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodString>, false>;
+    phone: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    email: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    ssoSubject: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    passwordHash: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+}, string>, {
+    depts: import("@yss123/cage-kernel").Aggregate<"Dept", {
+        name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+        code: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+        parentId: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+        ancestors: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+        leaderId: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    }, string>;
+}, z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    deptId: z.ZodOptional<z.ZodString>;
+    phone: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    email: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>>;
+export declare const assignRoles: import("@yss123/cage-kernel").Command<import("@yss123/cage-kernel").Aggregate<"User", {
+    username: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    deptId: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    roleIds: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodString>, false>;
+    phone: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    email: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    ssoSubject: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    passwordHash: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+}, string>, {
+    roles: import("@yss123/cage-kernel").Aggregate<"Role", {
+        code: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+        name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+        capabilities: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodObject<{
+            capability: z.ZodString;
+            params: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        }, z.core.$strip>>, false>;
+        scopes: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodObject<{
+            aggregate: z.ZodString;
+            combinator: z.ZodEnum<{
+                all: "all";
+                self: "self";
+                dept: "dept";
+                deptSubtree: "deptSubtree";
+                deptSet: "deptSet";
+            }>;
+            deptIds: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+        }, z.core.$strip>>, false>;
+    }, string>;
+}, z.ZodObject<{
+    id: z.ZodString;
+    roleIds: z.ZodArray<z.ZodString>;
+}, z.core.$strip>>;
+export declare const disableUser: import("@yss123/cage-kernel").Command<import("@yss123/cage-kernel").Aggregate<"User", {
+    username: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    deptId: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    roleIds: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodString>, false>;
+    phone: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    email: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    ssoSubject: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    passwordHash: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+}, string>, {}, z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>>;
+export declare const enableUser: import("@yss123/cage-kernel").Command<import("@yss123/cage-kernel").Aggregate<"User", {
+    username: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    deptId: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    roleIds: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodString>, false>;
+    phone: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    email: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    ssoSubject: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    passwordHash: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+}, string>, {}, z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>>;
+/** 密码哈希：scrypt$盐$哈希（纯计算，不做 IO） */
+export declare function hashPassword(pw: string): string;
+export declare const setPassword: import("@yss123/cage-kernel").Command<import("@yss123/cage-kernel").Aggregate<"User", {
+    username: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    deptId: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    roleIds: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodString>, false>;
+    phone: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    email: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    ssoSubject: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+    passwordHash: import("@yss123/cage-kernel").Field<z.ZodString, true>;
+}, string>, {}, z.ZodObject<{
+    id: z.ZodString;
+    password: z.ZodString;
+}, z.core.$strip>>;
+export declare const createRole: import("@yss123/cage-kernel").Command<import("@yss123/cage-kernel").Aggregate<"Role", {
+    code: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    capabilities: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodObject<{
+        capability: z.ZodString;
+        params: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    }, z.core.$strip>>, false>;
+    scopes: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodObject<{
+        aggregate: z.ZodString;
+        combinator: z.ZodEnum<{
+            all: "all";
+            self: "self";
+            dept: "dept";
+            deptSubtree: "deptSubtree";
+            deptSet: "deptSet";
+        }>;
+        deptIds: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+    }, z.core.$strip>>, false>;
+}, string>, {
+    roles: import("@yss123/cage-kernel").Aggregate<"Role", {
+        code: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+        name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+        capabilities: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodObject<{
+            capability: z.ZodString;
+            params: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        }, z.core.$strip>>, false>;
+        scopes: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodObject<{
+            aggregate: z.ZodString;
+            combinator: z.ZodEnum<{
+                all: "all";
+                self: "self";
+                dept: "dept";
+                deptSubtree: "deptSubtree";
+                deptSet: "deptSet";
+            }>;
+            deptIds: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+        }, z.core.$strip>>, false>;
+    }, string>;
+}, z.ZodObject<{
+    code: z.ZodString;
+    name: z.ZodString;
+}, z.core.$strip>>;
+export declare const renameRole: import("@yss123/cage-kernel").Command<import("@yss123/cage-kernel").Aggregate<"Role", {
+    code: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    capabilities: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodObject<{
+        capability: z.ZodString;
+        params: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    }, z.core.$strip>>, false>;
+    scopes: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodObject<{
+        aggregate: z.ZodString;
+        combinator: z.ZodEnum<{
+            all: "all";
+            self: "self";
+            dept: "dept";
+            deptSubtree: "deptSubtree";
+            deptSet: "deptSet";
+        }>;
+        deptIds: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+    }, z.core.$strip>>, false>;
+}, string>, {}, z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+}, z.core.$strip>>;
+export declare const grantCapability: import("@yss123/cage-kernel").Command<import("@yss123/cage-kernel").Aggregate<"Role", {
+    code: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    capabilities: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodObject<{
+        capability: z.ZodString;
+        params: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    }, z.core.$strip>>, false>;
+    scopes: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodObject<{
+        aggregate: z.ZodString;
+        combinator: z.ZodEnum<{
+            all: "all";
+            self: "self";
+            dept: "dept";
+            deptSubtree: "deptSubtree";
+            deptSet: "deptSet";
+        }>;
+        deptIds: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+    }, z.core.$strip>>, false>;
+}, string>, {}, z.ZodObject<{
+    id: z.ZodString;
+    capability: z.ZodString;
+    params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>>;
+export declare const revokeCapability: import("@yss123/cage-kernel").Command<import("@yss123/cage-kernel").Aggregate<"Role", {
+    code: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    capabilities: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodObject<{
+        capability: z.ZodString;
+        params: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    }, z.core.$strip>>, false>;
+    scopes: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodObject<{
+        aggregate: z.ZodString;
+        combinator: z.ZodEnum<{
+            all: "all";
+            self: "self";
+            dept: "dept";
+            deptSubtree: "deptSubtree";
+            deptSet: "deptSet";
+        }>;
+        deptIds: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+    }, z.core.$strip>>, false>;
+}, string>, {}, z.ZodObject<{
+    id: z.ZodString;
+    capability: z.ZodString;
+}, z.core.$strip>>;
+export declare const setScope: import("@yss123/cage-kernel").Command<import("@yss123/cage-kernel").Aggregate<"Role", {
+    code: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    capabilities: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodObject<{
+        capability: z.ZodString;
+        params: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    }, z.core.$strip>>, false>;
+    scopes: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodObject<{
+        aggregate: z.ZodString;
+        combinator: z.ZodEnum<{
+            all: "all";
+            self: "self";
+            dept: "dept";
+            deptSubtree: "deptSubtree";
+            deptSet: "deptSet";
+        }>;
+        deptIds: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+    }, z.core.$strip>>, false>;
+}, string>, {}, z.ZodObject<{
+    id: z.ZodString;
+    aggregate: z.ZodString;
+    combinator: z.ZodNullable<z.ZodEnum<{
+        all: "all";
+        self: "self";
+        dept: "dept";
+        deptSubtree: "deptSubtree";
+        deptSet: "deptSet";
+    }>>;
+    deptIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>>;
+export declare const archiveRole: import("@yss123/cage-kernel").Command<import("@yss123/cage-kernel").Aggregate<"Role", {
+    code: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    name: import("@yss123/cage-kernel").Field<z.ZodString, false>;
+    capabilities: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodObject<{
+        capability: z.ZodString;
+        params: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+    }, z.core.$strip>>, false>;
+    scopes: import("@yss123/cage-kernel").Field<z.ZodArray<z.ZodObject<{
+        aggregate: z.ZodString;
+        combinator: z.ZodEnum<{
+            all: "all";
+            self: "self";
+            dept: "dept";
+            deptSubtree: "deptSubtree";
+            deptSet: "deptSet";
+        }>;
+        deptIds: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+    }, z.core.$strip>>, false>;
+}, string>, {}, z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>>;