captify 0.1.18 → 0.1.19

package/dist/db/schemas/policies.schema.js

@@ -0,0 +1,149 @@
+import { TABLES, TABLE_INDEXES } from "../../shared/shared.constants";
+/**
+ * Key builders for Policies table.
+ */
+export const policyKeys = {
+    /** Build partition key: TENANT#{tenantId} */
+    pk: (tenantId) => `TENANT#${tenantId}`,
+    /** Build sort key: POLICY#{ptype}#{policyId} */
+    sk: (ptype, policyId) => `POLICY#${ptype}#${policyId}`,
+    /** Build GSI1 partition key: TENANT#{tenantId}#RESOURCE#{resource} */
+    gsi1Pk: (tenantId, resource) => `TENANT#${tenantId}#RESOURCE#${resource}`,
+    /** Build GSI1 sort key: STATUS#{status}#{createdAt} */
+    gsi1Sk: (status, createdAt) => `STATUS#${status}#${createdAt}`,
+    /** Build GSI2 partition key: TENANT#{tenantId}#SUBJECT#{subjectType}#{subject} */
+    gsi2Pk: (tenantId, subjectType, subject) => `TENANT#${tenantId}#SUBJECT#${subjectType}#${subject}`,
+    /** Build GSI2 sort key: RESOURCE#{resource} (actions stored as array in document) */
+    gsi2Sk: (resource) => `RESOURCE#${resource}`,
+};
+/**
+ * CreateTableCommandInput for Policies table.
+ */
+export const policiesTableInput = {
+    TableName: TABLES.policies,
+    AttributeDefinitions: [
+        { AttributeName: "PK", AttributeType: "S" },
+        { AttributeName: "SK", AttributeType: "S" },
+        { AttributeName: "GSI1_PK", AttributeType: "S" },
+        { AttributeName: "GSI1_SK", AttributeType: "S" },
+        { AttributeName: "GSI2_PK", AttributeType: "S" },
+        { AttributeName: "GSI2_SK", AttributeType: "S" },
+    ],
+    KeySchema: [
+        { AttributeName: "PK", KeyType: "HASH" },
+        { AttributeName: "SK", KeyType: "RANGE" },
+    ],
+    GlobalSecondaryIndexes: [
+        {
+            IndexName: TABLE_INDEXES.policies.ByResource,
+            KeySchema: [
+                { AttributeName: "GSI1_PK", KeyType: "HASH" },
+                { AttributeName: "GSI1_SK", KeyType: "RANGE" },
+            ],
+            Projection: { ProjectionType: "ALL" },
+            ProvisionedThroughput: { ReadCapacityUnits: 5, WriteCapacityUnits: 5 },
+        },
+        {
+            IndexName: TABLE_INDEXES.policies.BySubject,
+            KeySchema: [
+                { AttributeName: "GSI2_PK", KeyType: "HASH" },
+                { AttributeName: "GSI2_SK", KeyType: "RANGE" },
+            ],
+            Projection: { ProjectionType: "ALL" },
+            ProvisionedThroughput: { ReadCapacityUnits: 5, WriteCapacityUnits: 5 },
+        },
+    ],
+    ProvisionedThroughput: { ReadCapacityUnits: 5, WriteCapacityUnits: 5 },
+};
+// ============================================================================
+// Schema Registry Entry
+// ============================================================================
+import { defineSchemaEntry, } from "../../ontology/schemas/ontology-registry.types";
+/**
+ * Schema entry for the ontology registry.
+ */
+export const schemaEntry = defineSchemaEntry({
+    tableInput: policiesTableInput,
+    displayName: "Policies",
+    description: "Casbin permission policies for access control",
+    entityType: "Policy",
+    entityAttributes: [
+        { name: "id", type: "String", required: true, description: "Policy identifier" },
+        { name: "tenantId", type: "String", required: true, description: "Tenant identifier" },
+        { name: "ptype", type: "String", required: true, description: "Policy type (p, g, etc.)" },
+        { name: "subject", type: "String", required: true, description: "Subject (user or role)" },
+        {
+            name: "subjectType",
+            type: "String",
+            required: true,
+            description: "Subject type (user, group, role)",
+        },
+        { name: "resource", type: "String", required: true, description: "Resource being accessed" },
+        { name: "actions", type: "Array", required: true, description: "Allowed actions" },
+        { name: "effect", type: "String", required: true, description: "Effect (allow/deny)" },
+        { name: "status", type: "String", required: true, description: "Policy status" },
+        { name: "createdAt", type: "Number", required: true, description: "Creation timestamp" },
+        { name: "updatedAt", type: "Number", required: true, description: "Last update timestamp" },
+        { name: "createdById", type: "String", required: true, description: "Creator user ID" },
+        { name: "modifiedById", type: "String", description: "Last modifier user ID" },
+    ],
+    relationships: [
+        {
+            targetTable: TABLES.roles,
+            sourceAttribute: "subject",
+            targetAttribute: "id",
+            label: "Applies To Role",
+            confidence: "medium",
+            description: "Policy subject references a role (when subjectType='role')",
+        },
+        {
+            targetTable: TABLES.agents,
+            sourceAttribute: "resource",
+            targetAttribute: "id",
+            label: "Controls Access To",
+            confidence: "low",
+            description: "Policy controls access to AI Agents (when resource='agents')",
+        },
+        {
+            targetTable: TABLES.feedbacks,
+            sourceAttribute: "resource",
+            targetAttribute: "id",
+            label: "Controls Access To",
+            confidence: "low",
+            description: "Policy controls access to Feedbacks (when resource='feedbacks')",
+        },
+        {
+            targetTable: TABLES.chatSessions,
+            sourceAttribute: "resource",
+            targetAttribute: "id",
+            label: "Controls Access To",
+            confidence: "low",
+            description: "Policy controls access to Chat (when resource='chat-sessions')",
+        },
+        {
+            targetTable: TABLES.providers,
+            sourceAttribute: "resource",
+            targetAttribute: "id",
+            label: "Controls Access To",
+            confidence: "low",
+            description: "Policy controls access to LLM Providers (when resource='llm-providers')",
+        },
+        {
+            targetTable: TABLES.bookmarks,
+            sourceAttribute: "resource",
+            targetAttribute: "id",
+            label: "Controls Access To",
+            confidence: "low",
+            description: "Policy controls access to Bookmarks (when resource='bookmarks')",
+        },
+        {
+            targetTable: TABLES.documents,
+            sourceAttribute: "resource",
+            targetAttribute: "id",
+            label: "Controls Access To",
+            confidence: "low",
+            description: "Policy controls access to Documents (when resource='documents')",
+        },
+    ],
+});
+//# sourceMappingURL=policies.schema.js.map

package/dist/db/schemas/policies.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.schema.js","sourceRoot":"","sources":["../../../lib/db/schemas/policies.schema.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAsDtE;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,6CAA6C;IAC7C,EAAE,EAAE,CAAC,QAAgB,EAAY,EAAE,CAAC,UAAU,QAAQ,EAAc;IAEpE,gDAAgD;IAChD,EAAE,EAAE,CAAC,KAAa,EAAE,QAAgB,EAAY,EAAE,CAAC,UAAU,KAAK,IAAI,QAAQ,EAAc;IAE5F,sEAAsE;IACtE,MAAM,EAAE,CAAC,QAAgB,EAAE,QAAgB,EAAgB,EAAE,CAC3D,UAAU,QAAQ,aAAa,QAAQ,EAAkB;IAE3D,uDAAuD;IACvD,MAAM,EAAE,CAAC,MAAc,EAAE,SAAiB,EAAgB,EAAE,CAC1D,UAAU,MAAM,IAAI,SAAS,EAAkB;IAEjD,kFAAkF;IAClF,MAAM,EAAE,CAAC,QAAgB,EAAE,WAAmB,EAAE,OAAe,EAAgB,EAAE,CAC/E,UAAU,QAAQ,YAAY,WAAW,IAAI,OAAO,EAAkB;IAExE,qFAAqF;IACrF,MAAM,EAAE,CAAC,QAAgB,EAAgB,EAAE,CAAC,YAAY,QAAQ,EAAkB;CACnF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA4B;IACzD,SAAS,EAAE,MAAM,CAAC,QAAQ;IAC1B,oBAAoB,EAAE;QACpB,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE;QAC3C,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE;QAC3C,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,EAAE;QAChD,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,EAAE;QAChD,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,EAAE;QAChD,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,EAAE;KACjD;IACD,SAAS,EAAE;QACT,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE;QACxC,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE;KAC1C;IACD,sBAAsB,EAAE;QACtB;YACE,SAAS,EAAE,aAAa,CAAC,QAAQ,CAAC,UAAU;YAC5C,SAAS,EAAE;gBACT,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE;gBAC7C,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE;aAC/C;YACD,UAAU,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE;YACrC,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE;SACvE;QACD;YACE,SAAS,EAAE,aAAa,CAAC,QAAQ,CAAC,SAAS;YAC3C,SAAS,EAAE;gBACT,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE;gBAC7C,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE;aAC/C;YACD,UAAU,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE;YACrC,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE;SACvE;KACF;IACD,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE;CACvE,CAAC;AAEF,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,OAAO,EACL,iBAAiB,GAElB,MAAM,gDAAgD,CAAC;AAExD;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAsB,iBAAiB,CAAC;IAC9D,UAAU,EAAE,kBAAkB;IAC9B,WAAW,EAAE,UAAU;IACvB,WAAW,EAAE,+CAA+C;IAC5D,UAAU,EAAE,QAAQ;IACpB,gBAAgB,EAAE;QAChB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,mBAAmB,EAAE;QAChF,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,mBAAmB,EAAE;QACtF,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,0BAA0B,EAAE;QAC1F,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,wBAAwB,EAAE;QAC1F;YACE,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,kCAAkC;SAChD;QACD,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,yBAAyB,EAAE;QAC5F,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,iBAAiB,EAAE;QAClF,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,qBAAqB,EAAE;QACtF,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE;QAChF,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,oBAAoB,EAAE;QACxF,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,uBAAuB,EAAE;QAC3F,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,iBAAiB,EAAE;QACvF,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;KAC/E;IACD,aAAa,EAAE;QACb;YACE,WAAW,EAAE,MAAM,CAAC,KAAK;YACzB,eAAe,EAAE,SAAS;YAC1B,eAAe,EAAE,IAAI;YACrB,KAAK,EAAE,iBAAiB;YACxB,UAAU,EAAE,QAAQ;YACpB,WAAW,EAAE,4DAA4D;SAC1E;QACD;YACE,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,eAAe,EAAE,UAAU;YAC3B,eAAe,EAAE,IAAI;YACrB,KAAK,EAAE,oBAAoB;YAC3B,UAAU,EAAE,KAAK;YACjB,WAAW,EAAE,8DAA8D;SAC5E;QACD;YACE,WAAW,EAAE,MAAM,CAAC,SAAS;YAC7B,eAAe,EAAE,UAAU;YAC3B,eAAe,EAAE,IAAI;YACrB,KAAK,EAAE,oBAAoB;YAC3B,UAAU,EAAE,KAAK;YACjB,WAAW,EAAE,iEAAiE;SAC/E;QACD;YACE,WAAW,EAAE,MAAM,CAAC,YAAY;YAChC,eAAe,EAAE,UAAU;YAC3B,eAAe,EAAE,IAAI;YACrB,KAAK,EAAE,oBAAoB;YAC3B,UAAU,EAAE,KAAK;YACjB,WAAW,EAAE,gEAAgE;SAC9E;QACD;YACE,WAAW,EAAE,MAAM,CAAC,SAAS;YAC7B,eAAe,EAAE,UAAU;YAC3B,eAAe,EAAE,IAAI;YACrB,KAAK,EAAE,oBAAoB;YAC3B,UAAU,EAAE,KAAK;YACjB,WAAW,EAAE,yEAAyE;SACvF;QACD;YACE,WAAW,EAAE,MAAM,CAAC,SAAS;YAC7B,eAAe,EAAE,UAAU;YAC3B,eAAe,EAAE,IAAI;YACrB,KAAK,EAAE,oBAAoB;YAC3B,UAAU,EAAE,KAAK;YACjB,WAAW,EAAE,iEAAiE;SAC/E;QACD;YACE,WAAW,EAAE,MAAM,CAAC,SAAS;YAC7B,eAAe,EAAE,UAAU;YAC3B,eAAe,EAAE,IAAI;YACrB,KAAK,EAAE,oBAAoB;YAC3B,UAAU,EAAE,KAAK;YACjB,WAAW,EAAE,iEAAiE;SAC/E;KACF;CACF,CAAC,CAAC"}

package/dist/db/schemas/role-assignments.schema.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Role Assignments Table Schema
+ *
+ * Single source of truth for the role assignments table:
+ * - Document types (Keys + Entity)
+ * - Table schema (for DynamoDB service type safety)
+ * - Key builders
+ * - Infrastructure (CreateTableCommandInput)
+ */
+import type { CreateTableCommandInput } from "@aws-sdk/client-dynamodb";
+import type { RoleAssignmentRecord } from "../../permissions/permissions.interfaces";
+import type { TableSchema } from "../../shared/services/dynamodb";
+import type { PartitionKey, SortKey } from "../../shared/shared.schemas";
+import { TABLES } from "../../shared/shared.constants";
+export type RoleAssignmentPK = PartitionKey<"RoleAssignment">;
+export type RoleAssignmentSK = SortKey<"RoleAssignment">;
+export type RoleAssignmentGsi1PK = PartitionKey<"RoleAssignment:ByRole">;
+export type RoleAssignmentGsi1SK = SortKey<"RoleAssignment:ByRole">;
+export type RoleAssignmentGsi2PK = PartitionKey<"RoleAssignment:ByGroup">;
+export type RoleAssignmentGsi2SK = SortKey<"RoleAssignment:ByGroup">;
+/**
+ * DynamoDB key attributes for Role Assignments table.
+ */
+export interface RoleAssignmentKeys {
+    /** Partition key: TENANT#{tenantId} */
+    PK: RoleAssignmentPK;
+    /** Sort key: ASSIGN#{domain}#{roleId}#{groupId} */
+    SK: RoleAssignmentSK;
+    /** GSI1 partition key (ByRole): TENANT#{tenantId}#ROLE#{roleId} */
+    GSI1_PK: RoleAssignmentGsi1PK;
+    /** GSI1 sort key (ByRole): GROUP#{groupId} */
+    GSI1_SK: RoleAssignmentGsi1SK;
+    /** GSI2 partition key (ByGroup): TENANT#{tenantId}#GROUP#{groupId} */
+    GSI2_PK: RoleAssignmentGsi2PK;
+    /** GSI2 sort key (ByGroup): ROLE#{roleId} */
+    GSI2_SK: RoleAssignmentGsi2SK;
+}
+/**
+ * The complete document stored in DynamoDB for a Role Assignment.
+ */
+export type RoleAssignmentDocument = RoleAssignmentKeys & RoleAssignmentRecord;
+/**
+ * Compile-time DynamoDB schema for the Role Assignments table.
+ */
+export interface RoleAssignmentsTableSchema extends TableSchema<RoleAssignmentDocument> {
+    tableName: (typeof TABLES)["roleAssignments"];
+    primaryKey: {
+        partition: "PK";
+        sort: "SK";
+    };
+    indexes: {
+        ByRole: {
+            partition: "GSI1_PK";
+            sort: "GSI1_SK";
+        };
+        ByGroup: {
+            partition: "GSI2_PK";
+            sort: "GSI2_SK";
+        };
+    };
+}
+/**
+ * Key builders for Role Assignments table.
+ */
+export declare const roleAssignmentKeys: {
+    /** Build partition key: TENANT#{tenantId} */
+    pk: (tenantId: string) => RoleAssignmentPK;
+    /** Build sort key: ASSIGN#{domain}#{roleId}#{groupId} */
+    sk: (domain: string, roleId: string, groupId: string) => RoleAssignmentSK;
+    /** Build GSI1 partition key: TENANT#{tenantId}#ROLE#{roleId} */
+    gsi1Pk: (tenantId: string, roleId: string) => RoleAssignmentGsi1PK;
+    /** Build GSI1 sort key: GROUP#{groupId} */
+    gsi1Sk: (groupId: string) => RoleAssignmentGsi1SK;
+    /** Build GSI2 partition key: TENANT#{tenantId}#GROUP#{groupId} */
+    gsi2Pk: (tenantId: string, groupId: string) => RoleAssignmentGsi2PK;
+    /** Build GSI2 sort key: ROLE#{roleId} */
+    gsi2Sk: (roleId: string) => RoleAssignmentGsi2SK;
+};
+/**
+ * CreateTableCommandInput for Role Assignments table.
+ */
+export declare const roleAssignmentsTableInput: CreateTableCommandInput;
+import { type SchemaEntryConfig } from "../../ontology/schemas/ontology-registry.types";
+/**
+ * Schema entry for the ontology registry.
+ */
+export declare const schemaEntry: SchemaEntryConfig;
+//# sourceMappingURL=role-assignments.schema.d.ts.map

package/dist/db/schemas/role-assignments.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-assignments.schema.d.ts","sourceRoot":"","sources":["../../../lib/db/schemas/role-assignments.schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0CAA0C,CAAC;AACrF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,MAAM,EAAiB,MAAM,+BAA+B,CAAC;AAGtE,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;AAC9D,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AACzD,MAAM,MAAM,oBAAoB,GAAG,YAAY,CAAC,uBAAuB,CAAC,CAAC;AACzE,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;AACpE,MAAM,MAAM,oBAAoB,GAAG,YAAY,CAAC,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAErE;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,uCAAuC;IACvC,EAAE,EAAE,gBAAgB,CAAC;IACrB,mDAAmD;IACnD,EAAE,EAAE,gBAAgB,CAAC;IACrB,mEAAmE;IACnE,OAAO,EAAE,oBAAoB,CAAC;IAC9B,8CAA8C;IAC9C,OAAO,EAAE,oBAAoB,CAAC;IAC9B,sEAAsE;IACtE,OAAO,EAAE,oBAAoB,CAAC;IAC9B,6CAA6C;IAC7C,OAAO,EAAE,oBAAoB,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,MAAM,sBAAsB,GAAG,kBAAkB,GAAG,oBAAoB,CAAC;AAE/E;;GAEG;AACH,MAAM,WAAW,0BAA2B,SAAQ,WAAW,CAAC,sBAAsB,CAAC;IACrF,SAAS,EAAE,CAAC,OAAO,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC9C,UAAU,EAAE;QACV,SAAS,EAAE,IAAI,CAAC;QAChB,IAAI,EAAE,IAAI,CAAC;KACZ,CAAC;IACF,OAAO,EAAE;QACP,MAAM,EAAE;YACN,SAAS,EAAE,SAAS,CAAC;YACrB,IAAI,EAAE,SAAS,CAAC;SACjB,CAAC;QACF,OAAO,EAAE;YACP,SAAS,EAAE,SAAS,CAAC;YACrB,IAAI,EAAE,SAAS,CAAC;SACjB,CAAC;KACH,CAAC;CACH;AAED;;GAEG;AACH,eAAO,MAAM,kBAAkB;IAC7B,6CAA6C;mBAC9B,MAAM,KAAG,gBAAgB;IAExC,yDAAyD;iBAC5C,MAAM,UAAU,MAAM,WAAW,MAAM,KAAG,gBAAgB;IAGvE,gEAAgE;uBAC7C,MAAM,UAAU,MAAM,KAAG,oBAAoB;IAGhE,2CAA2C;sBACzB,MAAM,KAAG,oBAAoB;IAE/C,kEAAkE;uBAC/C,MAAM,WAAW,MAAM,KAAG,oBAAoB;IAGjE,yCAAyC;qBACxB,MAAM,KAAG,oBAAoB;CAC/C,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,yBAAyB,EAAE,uBAmCvC,CAAC;AAMF,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,gDAAgD,CAAC;AAExD;;GAEG;AACH,eAAO,MAAM,WAAW,EAAE,iBA0BxB,CAAC"}

package/dist/db/schemas/role-assignments.schema.js

@@ -0,0 +1,92 @@
+import { TABLES, TABLE_INDEXES } from "../../shared/shared.constants";
+/**
+ * Key builders for Role Assignments table.
+ */
+export const roleAssignmentKeys = {
+    /** Build partition key: TENANT#{tenantId} */
+    pk: (tenantId) => `TENANT#${tenantId}`,
+    /** Build sort key: ASSIGN#{domain}#{roleId}#{groupId} */
+    sk: (domain, roleId, groupId) => `ASSIGN#${domain}#${roleId}#${groupId}`,
+    /** Build GSI1 partition key: TENANT#{tenantId}#ROLE#{roleId} */
+    gsi1Pk: (tenantId, roleId) => `TENANT#${tenantId}#ROLE#${roleId}`,
+    /** Build GSI1 sort key: GROUP#{groupId} */
+    gsi1Sk: (groupId) => `GROUP#${groupId}`,
+    /** Build GSI2 partition key: TENANT#{tenantId}#GROUP#{groupId} */
+    gsi2Pk: (tenantId, groupId) => `TENANT#${tenantId}#GROUP#${groupId}`,
+    /** Build GSI2 sort key: ROLE#{roleId} */
+    gsi2Sk: (roleId) => `ROLE#${roleId}`,
+};
+/**
+ * CreateTableCommandInput for Role Assignments table.
+ */
+export const roleAssignmentsTableInput = {
+    TableName: TABLES.roleAssignments,
+    AttributeDefinitions: [
+        { AttributeName: "PK", AttributeType: "S" },
+        { AttributeName: "SK", AttributeType: "S" },
+        { AttributeName: "GSI1_PK", AttributeType: "S" },
+        { AttributeName: "GSI1_SK", AttributeType: "S" },
+        { AttributeName: "GSI2_PK", AttributeType: "S" },
+        { AttributeName: "GSI2_SK", AttributeType: "S" },
+    ],
+    KeySchema: [
+        { AttributeName: "PK", KeyType: "HASH" },
+        { AttributeName: "SK", KeyType: "RANGE" },
+    ],
+    GlobalSecondaryIndexes: [
+        {
+            IndexName: TABLE_INDEXES.roleAssignments.ByRole,
+            KeySchema: [
+                { AttributeName: "GSI1_PK", KeyType: "HASH" },
+                { AttributeName: "GSI1_SK", KeyType: "RANGE" },
+            ],
+            Projection: { ProjectionType: "ALL" },
+            ProvisionedThroughput: { ReadCapacityUnits: 5, WriteCapacityUnits: 5 },
+        },
+        {
+            IndexName: TABLE_INDEXES.roleAssignments.ByGroup,
+            KeySchema: [
+                { AttributeName: "GSI2_PK", KeyType: "HASH" },
+                { AttributeName: "GSI2_SK", KeyType: "RANGE" },
+            ],
+            Projection: { ProjectionType: "ALL" },
+            ProvisionedThroughput: { ReadCapacityUnits: 5, WriteCapacityUnits: 5 },
+        },
+    ],
+    ProvisionedThroughput: { ReadCapacityUnits: 5, WriteCapacityUnits: 5 },
+};
+// ============================================================================
+// Schema Registry Entry
+// ============================================================================
+import { defineSchemaEntry, } from "../../ontology/schemas/ontology-registry.types";
+/**
+ * Schema entry for the ontology registry.
+ */
+export const schemaEntry = defineSchemaEntry({
+    tableInput: roleAssignmentsTableInput,
+    displayName: "Role Assignments",
+    description: "Assignments of roles to groups within domains",
+    entityType: "RoleAssignment",
+    entityAttributes: [
+        { name: "id", type: "String", required: true, description: "Assignment identifier" },
+        { name: "tenantId", type: "String", required: true, description: "Tenant identifier" },
+        { name: "roleId", type: "String", required: true, description: "Role being assigned" },
+        { name: "groupId", type: "String", required: true, description: "Group receiving the role" },
+        { name: "domain", type: "String", required: true, description: "Domain scope" },
+        { name: "createdAt", type: "Number", required: true, description: "Creation timestamp" },
+        { name: "updatedAt", type: "Number", required: true, description: "Last update timestamp" },
+        { name: "createdById", type: "String", required: true, description: "Creator user ID" },
+        { name: "modifiedById", type: "String", description: "Last modifier user ID" },
+    ],
+    relationships: [
+        {
+            targetTable: TABLES.roles,
+            sourceAttribute: "roleId",
+            targetAttribute: "id",
+            label: "Assigns Role",
+            confidence: "high",
+            description: "Role being assigned to a group",
+        },
+    ],
+});
+//# sourceMappingURL=role-assignments.schema.js.map

package/dist/db/schemas/role-assignments.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-assignments.schema.js","sourceRoot":"","sources":["../../../lib/db/schemas/role-assignments.schema.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAsDtE;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,6CAA6C;IAC7C,EAAE,EAAE,CAAC,QAAgB,EAAoB,EAAE,CAAC,UAAU,QAAQ,EAAsB;IAEpF,yDAAyD;IACzD,EAAE,EAAE,CAAC,MAAc,EAAE,MAAc,EAAE,OAAe,EAAoB,EAAE,CACxE,UAAU,MAAM,IAAI,MAAM,IAAI,OAAO,EAAsB;IAE7D,gEAAgE;IAChE,MAAM,EAAE,CAAC,QAAgB,EAAE,MAAc,EAAwB,EAAE,CACjE,UAAU,QAAQ,SAAS,MAAM,EAA0B;IAE7D,2CAA2C;IAC3C,MAAM,EAAE,CAAC,OAAe,EAAwB,EAAE,CAAC,SAAS,OAAO,EAA0B;IAE7F,kEAAkE;IAClE,MAAM,EAAE,CAAC,QAAgB,EAAE,OAAe,EAAwB,EAAE,CAClE,UAAU,QAAQ,UAAU,OAAO,EAA0B;IAE/D,yCAAyC;IACzC,MAAM,EAAE,CAAC,MAAc,EAAwB,EAAE,CAAC,QAAQ,MAAM,EAA0B;CAC3F,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAA4B;IAChE,SAAS,EAAE,MAAM,CAAC,eAAe;IACjC,oBAAoB,EAAE;QACpB,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE;QAC3C,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE;QAC3C,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,EAAE;QAChD,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,EAAE;QAChD,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,EAAE;QAChD,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,EAAE;KACjD;IACD,SAAS,EAAE;QACT,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE;QACxC,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE;KAC1C;IACD,sBAAsB,EAAE;QACtB;YACE,SAAS,EAAE,aAAa,CAAC,eAAe,CAAC,MAAM;YAC/C,SAAS,EAAE;gBACT,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE;gBAC7C,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE;aAC/C;YACD,UAAU,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE;YACrC,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE;SACvE;QACD;YACE,SAAS,EAAE,aAAa,CAAC,eAAe,CAAC,OAAO;YAChD,SAAS,EAAE;gBACT,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE;gBAC7C,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE;aAC/C;YACD,UAAU,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE;YACrC,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE;SACvE;KACF;IACD,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE;CACvE,CAAC;AAEF,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,OAAO,EACL,iBAAiB,GAElB,MAAM,gDAAgD,CAAC;AAExD;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAsB,iBAAiB,CAAC;IAC9D,UAAU,EAAE,yBAAyB;IACrC,WAAW,EAAE,kBAAkB;IAC/B,WAAW,EAAE,+CAA+C;IAC5D,UAAU,EAAE,gBAAgB;IAC5B,gBAAgB,EAAE;QAChB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,uBAAuB,EAAE;QACpF,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,mBAAmB,EAAE;QACtF,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,qBAAqB,EAAE;QACtF,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,0BAA0B,EAAE;QAC5F,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE;QAC/E,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,oBAAoB,EAAE;QACxF,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,uBAAuB,EAAE;QAC3F,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,iBAAiB,EAAE;QACvF,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;KAC/E;IACD,aAAa,EAAE;QACb;YACE,WAAW,EAAE,MAAM,CAAC,KAAK;YACzB,eAAe,EAAE,QAAQ;YACzB,eAAe,EAAE,IAAI;YACrB,KAAK,EAAE,cAAc;YACrB,UAAU,EAAE,MAAM;YAClB,WAAW,EAAE,gCAAgC;SAC9C;KACF;CACF,CAAC,CAAC"}

package/dist/db/schemas/roles.schema.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Roles Table Schema
+ *
+ * Single source of truth for the roles table:
+ * - Document types (Keys + Entity)
+ * - Table schema (for DynamoDB service type safety)
+ * - Key builders
+ * - Infrastructure (CreateTableCommandInput)
+ */
+import type { CreateTableCommandInput } from "@aws-sdk/client-dynamodb";
+import type { RoleRecord } from "../../permissions/permissions.interfaces";
+import type { TableSchema } from "../../shared/services/dynamodb";
+import type { PartitionKey, SortKey } from "../../shared/shared.schemas";
+import { TABLES } from "../../shared/shared.constants";
+export type RolePK = PartitionKey<"Role">;
+export type RoleSK = SortKey<"Role">;
+export type RoleGsi1PK = PartitionKey<"Role:ByRoleName">;
+export type RoleGsi1SK = SortKey<"Role:ByRoleName">;
+/**
+ * DynamoDB key attributes for Roles table.
+ */
+export interface RoleKeys {
+    /** Partition key: TENANT#{tenantId} */
+    PK: RolePK;
+    /** Sort key: ROLE#{roleId} */
+    SK: RoleSK;
+    /** GSI1 partition key (ByRoleName): TENANT#{tenantId} */
+    GSI1_PK: RoleGsi1PK;
+    /** GSI1 sort key (ByRoleName): ROLENAME#{roleName} */
+    GSI1_SK: RoleGsi1SK;
+}
+/**
+ * The complete document stored in DynamoDB for a Role.
+ */
+export type RoleDocument = RoleKeys & RoleRecord;
+/**
+ * Compile-time DynamoDB schema for the Roles table.
+ */
+export interface RolesTableSchema extends TableSchema<RoleDocument> {
+    tableName: (typeof TABLES)["roles"];
+    primaryKey: {
+        partition: "PK";
+        sort: "SK";
+    };
+    indexes: {
+        ByRoleName: {
+            partition: "GSI1_PK";
+            sort: "GSI1_SK";
+        };
+    };
+}
+/**
+ * Key builders for Roles table.
+ */
+export declare const roleKeys: {
+    /** Build partition key: TENANT#{tenantId} */
+    pk: (tenantId: string) => RolePK;
+    /** Build sort key: ROLE#{roleId} */
+    sk: (roleId: string) => RoleSK;
+    /** Build GSI1 partition key: TENANT#{tenantId} */
+    gsi1Pk: (tenantId: string) => RoleGsi1PK;
+    /** Build GSI1 sort key: ROLENAME#{roleName} */
+    gsi1Sk: (roleName: string) => RoleGsi1SK;
+};
+/**
+ * CreateTableCommandInput for Roles table.
+ */
+export declare const rolesTableInput: CreateTableCommandInput;
+import { type SchemaEntryConfig } from "../../ontology/schemas/ontology-registry.types";
+/**
+ * Schema entry for the ontology registry.
+ */
+export declare const schemaEntry: SchemaEntryConfig;
+//# sourceMappingURL=roles.schema.d.ts.map

package/dist/db/schemas/roles.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.schema.d.ts","sourceRoot":"","sources":["../../../lib/db/schemas/roles.schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0CAA0C,CAAC;AAC3E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,MAAM,EAAiB,MAAM,+BAA+B,CAAC;AAGtE,MAAM,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;AAC1C,MAAM,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AACrC,MAAM,MAAM,UAAU,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;AACzD,MAAM,MAAM,UAAU,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAEpD;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,8BAA8B;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,yDAAyD;IACzD,OAAO,EAAE,UAAU,CAAC;IACpB,sDAAsD;IACtD,OAAO,EAAE,UAAU,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEjD;;GAEG;AACH,MAAM,WAAW,gBAAiB,SAAQ,WAAW,CAAC,YAAY,CAAC;IACjE,SAAS,EAAE,CAAC,OAAO,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC;IACpC,UAAU,EAAE;QACV,SAAS,EAAE,IAAI,CAAC;QAChB,IAAI,EAAE,IAAI,CAAC;KACZ,CAAC;IACF,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,SAAS,CAAC;YACrB,IAAI,EAAE,SAAS,CAAC;SACjB,CAAC;KACH,CAAC;CACH;AAED;;GAEG;AACH,eAAO,MAAM,QAAQ;IACnB,6CAA6C;mBAC9B,MAAM,KAAG,MAAM;IAE9B,oCAAoC;iBACvB,MAAM,KAAG,MAAM;IAE5B,kDAAkD;uBAC/B,MAAM,KAAG,UAAU;IAEtC,+CAA+C;uBAC5B,MAAM,KAAG,UAAU;CACvC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,eAAe,EAAE,uBAwB7B,CAAC;AAMF,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,gDAAgD,CAAC;AAExD;;GAEG;AACH,eAAO,MAAM,WAAW,EAAE,iBAiBxB,CAAC"}

package/dist/db/schemas/roles.schema.js

@@ -0,0 +1,68 @@
+import { TABLES, TABLE_INDEXES } from "../../shared/shared.constants";
+/**
+ * Key builders for Roles table.
+ */
+export const roleKeys = {
+    /** Build partition key: TENANT#{tenantId} */
+    pk: (tenantId) => `TENANT#${tenantId}`,
+    /** Build sort key: ROLE#{roleId} */
+    sk: (roleId) => `ROLE#${roleId}`,
+    /** Build GSI1 partition key: TENANT#{tenantId} */
+    gsi1Pk: (tenantId) => `TENANT#${tenantId}`,
+    /** Build GSI1 sort key: ROLENAME#{roleName} */
+    gsi1Sk: (roleName) => `ROLENAME#${roleName}`,
+};
+/**
+ * CreateTableCommandInput for Roles table.
+ */
+export const rolesTableInput = {
+    TableName: TABLES.roles,
+    AttributeDefinitions: [
+        { AttributeName: "PK", AttributeType: "S" },
+        { AttributeName: "SK", AttributeType: "S" },
+        { AttributeName: "GSI1_PK", AttributeType: "S" },
+        { AttributeName: "GSI1_SK", AttributeType: "S" },
+    ],
+    KeySchema: [
+        { AttributeName: "PK", KeyType: "HASH" },
+        { AttributeName: "SK", KeyType: "RANGE" },
+    ],
+    GlobalSecondaryIndexes: [
+        {
+            IndexName: TABLE_INDEXES.roles.ByRoleName,
+            KeySchema: [
+                { AttributeName: "GSI1_PK", KeyType: "HASH" },
+                { AttributeName: "GSI1_SK", KeyType: "RANGE" },
+            ],
+            Projection: { ProjectionType: "ALL" },
+            ProvisionedThroughput: { ReadCapacityUnits: 5, WriteCapacityUnits: 5 },
+        },
+    ],
+    ProvisionedThroughput: { ReadCapacityUnits: 5, WriteCapacityUnits: 5 },
+};
+// ============================================================================
+// Schema Registry Entry
+// ============================================================================
+import { defineSchemaEntry, } from "../../ontology/schemas/ontology-registry.types";
+/**
+ * Schema entry for the ontology registry.
+ */
+export const schemaEntry = defineSchemaEntry({
+    tableInput: rolesTableInput,
+    displayName: "Roles",
+    description: "Permission roles for access control",
+    entityType: "Role",
+    entityAttributes: [
+        { name: "id", type: "String", required: true, description: "Role identifier" },
+        { name: "tenantId", type: "String", required: true, description: "Tenant identifier" },
+        { name: "name", type: "String", required: true, description: "Role name" },
+        { name: "description", type: "String", description: "Role description" },
+        { name: "domain", type: "String", required: true, description: "Domain scope" },
+        { name: "isBuiltIn", type: "Boolean", required: true, description: "Whether role is built-in" },
+        { name: "createdAt", type: "Number", required: true, description: "Creation timestamp" },
+        { name: "updatedAt", type: "Number", required: true, description: "Last update timestamp" },
+        { name: "createdById", type: "String", required: true, description: "Creator user ID" },
+        { name: "modifiedById", type: "String", description: "Last modifier user ID" },
+    ],
+});
+//# sourceMappingURL=roles.schema.js.map

package/dist/db/schemas/roles.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.schema.js","sourceRoot":"","sources":["../../../lib/db/schemas/roles.schema.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AA4CtE;;GAEG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,6CAA6C;IAC7C,EAAE,EAAE,CAAC,QAAgB,EAAU,EAAE,CAAC,UAAU,QAAQ,EAAY;IAEhE,oCAAoC;IACpC,EAAE,EAAE,CAAC,MAAc,EAAU,EAAE,CAAC,QAAQ,MAAM,EAAY;IAE1D,kDAAkD;IAClD,MAAM,EAAE,CAAC,QAAgB,EAAc,EAAE,CAAC,UAAU,QAAQ,EAAgB;IAE5E,+CAA+C;IAC/C,MAAM,EAAE,CAAC,QAAgB,EAAc,EAAE,CAAC,YAAY,QAAQ,EAAgB;CAC/E,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAA4B;IACtD,SAAS,EAAE,MAAM,CAAC,KAAK;IACvB,oBAAoB,EAAE;QACpB,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE;QAC3C,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE;QAC3C,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,EAAE;QAChD,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,EAAE;KACjD;IACD,SAAS,EAAE;QACT,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE;QACxC,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE;KAC1C;IACD,sBAAsB,EAAE;QACtB;YACE,SAAS,EAAE,aAAa,CAAC,KAAK,CAAC,UAAU;YACzC,SAAS,EAAE;gBACT,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE;gBAC7C,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE;aAC/C;YACD,UAAU,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE;YACrC,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE;SACvE;KACF;IACD,qBAAqB,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE;CACvE,CAAC;AAEF,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,OAAO,EACL,iBAAiB,GAElB,MAAM,gDAAgD,CAAC;AAExD;;GAEG;AACH,MAAM,CAAC,MAAM,WAAW,GAAsB,iBAAiB,CAAC;IAC9D,UAAU,EAAE,eAAe;IAC3B,WAAW,EAAE,OAAO;IACpB,WAAW,EAAE,qCAAqC;IAClD,UAAU,EAAE,MAAM;IAClB,gBAAgB,EAAE;QAChB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,iBAAiB,EAAE;QAC9E,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,mBAAmB,EAAE;QACtF,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE;QAC1E,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;QACxE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE;QAC/E,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,0BAA0B,EAAE;QAC/F,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,oBAAoB,EAAE;QACxF,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,uBAAuB,EAAE;QAC3F,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,iBAAiB,EAAE;QACvF,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;KAC/E;CACF,CAAC,CAAC"}

package/dist/feedback/api/feedback.client.d.ts

@@ -3,8 +3,8 @@ import type { FeedbackUpdate, NewFeedback } from "../feedback.interfaces";
 import type { ApiRouteResponse } from "../../shared/shared.interfaces";
 export type FeedbackListResponse = ApiRouteResponse<typeof feedbackHandlers.list>;
 export type FeedbackResponse = ApiRouteResponse<typeof feedbackHandlers.get>;
-export type CreateFeedbackRequest = Omit<NewFeedback, "tenantId" | "createdBy" | "createdByName" | "createdByEmail">;
-export type UpdateFeedbackRequest = FeedbackUpdate;
+export type CreateFeedbackRequest = Omit<NewFeedback, "tenantId" | "createdById" | "modifiedById" | "createdByName" | "createdByEmail">;
+export type UpdateFeedbackRequest = Omit<FeedbackUpdate, "modifiedById">;
 export type GenerateFeedbackRequest = {
     description: string;
 };

package/dist/feedback/api/feedback.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"feedback.client.d.ts","sourceRoot":"","sources":["../../../lib/feedback/api/feedback.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AAEtF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAIvE,MAAM,MAAM,oBAAoB,GAAG,gBAAgB,CAAC,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;AAClF,MAAM,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;AAG7E,MAAM,MAAM,qBAAqB,GAAG,IAAI,CACtC,WAAW,EACX,UAAU,GAAG,WAAW,GAAG,eAAe,GAAG,gBAAgB,CAC9D,CAAC;AACF,MAAM,MAAM,qBAAqB,GAAG,cAAc,CAAC;AACnD,MAAM,MAAM,uBAAuB,GAAG;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,YAAY;;;qBAGN,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;iBAE3B,MAAM;CACpB,CAAC;AAEF;;GAEG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAEpE;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAEjF;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAM3F;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,gBAAgB,CAAC,CAM3B;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAItE;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAa/F"}
+{"version":3,"file":"feedback.client.d.ts","sourceRoot":"","sources":["../../../lib/feedback/api/feedback.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AAEtF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAIvE,MAAM,MAAM,oBAAoB,GAAG,gBAAgB,CAAC,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;AAClF,MAAM,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;AAG7E,MAAM,MAAM,qBAAqB,GAAG,IAAI,CACtC,WAAW,EACX,UAAU,GAAG,aAAa,GAAG,cAAc,GAAG,eAAe,GAAG,gBAAgB,CACjF,CAAC;AACF,MAAM,MAAM,qBAAqB,GAAG,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;AACzE,MAAM,MAAM,uBAAuB,GAAG;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,YAAY;;;qBAGN,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;iBAE3B,MAAM;CACpB,CAAC;AAEF;;GAEG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAEpE;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAEjF;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAM3F;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,gBAAgB,CAAC,CAM3B;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAItE;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAa/F"}

package/dist/feedback/api/feedback.client.js

@@ -1,5 +1,5 @@
 import { FEEDBACK_ENDPOINT as BASE_URL } from "../feedback.constants";
-import { fetchJson, fetchVoid } from "../../shared/utilities/fetch";
+import { fetchJson, fetchVoid, fetchWithSafeUrl } from "../../shared/utilities/fetch";
 /**
  * Query key factory for TanStack Query
  * Follows the factory pattern for consistent cache key management
@@ -56,7 +56,7 @@ export async function deleteFeedback(feedbackId) {
  * Note: This returns a fetch Response for streaming. Use with AI SDK's useObject hook.
  */
 export async function streamFeedbackGeneration(data) {
-    const response = await fetch(`${BASE_URL}/generate/stream`, {
+    const response = await fetchWithSafeUrl(`${BASE_URL}/generate/stream`, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
         body: JSON.stringify(data),

package/dist/feedback/api/feedback.client.js.map

@@ -1 +1 @@
-{"version":3,"file":"feedback.client.js","sourceRoot":"","sources":["../../../lib/feedback/api/feedback.client.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,IAAI,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAElF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAcpE;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,GAAG,EAAE,CAAC,UAAU,CAAU;IAC1B,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAU;IACnD,IAAI,EAAE,CAAC,OAAiC,EAAE,EAAE,CAAC,CAAC,GAAG,YAAY,CAAC,KAAK,EAAE,EAAE,OAAO,CAAU;IACxF,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAU;IACvD,MAAM,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,CAAC,GAAG,YAAY,CAAC,OAAO,EAAE,EAAE,EAAE,CAAU;CACjE,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,OAAO,SAAS,CAAuB,QAAQ,CAAC,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAkB;IACpD,OAAO,SAAS,CAAmB,GAAG,QAAQ,IAAI,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;AACtF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAA2B;IAC9D,OAAO,SAAS,CAAmB,QAAQ,EAAE;QAC3C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAkB,EAClB,IAA2B;IAE3B,OAAO,SAAS,CAAmB,GAAG,QAAQ,IAAI,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAAE;QAClF,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,UAAkB;IACrD,OAAO,SAAS,CAAC,GAAG,QAAQ,IAAI,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAAE;QAChE,MAAM,EAAE,QAAQ;KACjB,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAA6B;IAC1E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,kBAAkB,EAAE;QAC1D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"feedback.client.js","sourceRoot":"","sources":["../../../lib/feedback/api/feedback.client.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,IAAI,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAElF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AActF;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,GAAG,EAAE,CAAC,UAAU,CAAU;IAC1B,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAU;IACnD,IAAI,EAAE,CAAC,OAAiC,EAAE,EAAE,CAAC,CAAC,GAAG,YAAY,CAAC,KAAK,EAAE,EAAE,OAAO,CAAU;IACxF,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAU;IACvD,MAAM,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,CAAC,GAAG,YAAY,CAAC,OAAO,EAAE,EAAE,EAAE,CAAU;CACjE,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,OAAO,SAAS,CAAuB,QAAQ,CAAC,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAkB;IACpD,OAAO,SAAS,CAAmB,GAAG,QAAQ,IAAI,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;AACtF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAA2B;IAC9D,OAAO,SAAS,CAAmB,QAAQ,EAAE;QAC3C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAkB,EAClB,IAA2B;IAE3B,OAAO,SAAS,CAAmB,GAAG,QAAQ,IAAI,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAAE;QAClF,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,UAAkB;IACrD,OAAO,SAAS,CAAC,GAAG,QAAQ,IAAI,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAAE;QAChE,MAAM,EAAE,QAAQ;KACjB,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAA6B;IAC1E,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,GAAG,QAAQ,kBAAkB,EAAE;QACrE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}