npm - openxiangda-contracts - Versions diffs - 2.0.0-alpha.80 → 2.0.0-alpha.81 - Mend

openxiangda-contracts 2.0.0-alpha.80 → 2.0.0-alpha.81

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (9) hide show

package/dist/schemas.d.ts CHANGED Viewed

@@ -1526,7 +1526,7 @@ export declare const nativeRoleMembershipPageSchema: {
             readonly items: {
                 readonly type: "object";
                 readonly additionalProperties: false;
-                readonly required: readonly ["id", "environmentId", "userId", "roleCode", "roleSource", "sourceCode", "scopeGrants", "status", "revision", "validFrom", "validTo"];
+                readonly required: readonly ["id", "environmentId", "userId", "roleCode", "roleSource", "sourceCode", "maintainable", "immutableReason", "scopeGrants", "status", "revision", "validFrom", "validTo"];
                 readonly properties: {
                     readonly id: {
                         readonly type: "string";
@@ -1564,6 +1564,12 @@ export declare const nativeRoleMembershipPageSchema: {
                         readonly maxLength: 255;
                         readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
                     };
+                    readonly maintainable: {
+                        readonly type: "boolean";
+                    };
+                    readonly immutableReason: {
+                        readonly enum: readonly ["authenticated_user_role", "authorization_projection", null];
+                    };
                     readonly scopeGrants: {
                         readonly type: "array";
                         readonly maxItems: 100;
@@ -1659,14 +1665,14 @@ export declare const nativeRoleMembershipPageSchema: {
         };
     };
 };
-export declare const nativeSuperAdminGrantPageSchema: {
-    readonly $id: "openxiangda.native-super-admin-grant-page/v2";
+export declare const nativeRoleManagementGrantPageSchema: {
+    readonly $id: "openxiangda.native-role-management-grant-page/v2";
     readonly type: "object";
     readonly additionalProperties: false;
     readonly required: readonly ["schemaVersion", "items", "total", "limit", "offset"];
     readonly properties: {
         readonly schemaVersion: {
-            readonly const: "openxiangda.native-super-admin-grant-page/v2";
+            readonly const: "openxiangda.native-role-management-grant-page/v2";
         };
         readonly items: {
             readonly type: "array";
@@ -1674,29 +1680,44 @@ export declare const nativeSuperAdminGrantPageSchema: {
             readonly items: {
                 readonly type: "object";
                 readonly additionalProperties: false;
-                readonly required: readonly ["id", "tenantId", "appCode", "userId", "status", "revision"];
+                readonly required: readonly ["id", "environmentId", "subjectRoleCode", "manageAllRoles", "managedRoleCodes", "actions", "status", "revision", "reason", "createdBy", "updatedBy", "createdAt", "updatedAt"];
                 readonly properties: {
                     readonly id: {
                         readonly type: "string";
                         readonly minLength: 1;
                     };
-                    readonly tenantId: {
+                    readonly environmentId: {
                         readonly type: "string";
                         readonly minLength: 1;
                     };
-                    readonly appCode: {
+                    readonly subjectRoleCode: {
                         readonly type: "string";
                         readonly minLength: 1;
+                        readonly maxLength: 255;
+                        readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
                     };
-                    readonly userId: {
-                        readonly type: "string";
-                        readonly minLength: 1;
+                    readonly manageAllRoles: {
+                        readonly type: "boolean";
                     };
-                    readonly userName: {
-                        readonly type: readonly ["string", "null"];
+                    readonly managedRoleCodes: {
+                        readonly type: "array";
+                        readonly maxItems: 1000;
+                        readonly uniqueItems: true;
+                        readonly items: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                            readonly maxLength: 255;
+                            readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
+                        };
                     };
-                    readonly userAvatar: {
-                        readonly type: readonly ["string", "null"];
+                    readonly actions: {
+                        readonly type: "array";
+                        readonly minItems: 1;
+                        readonly maxItems: 5;
+                        readonly uniqueItems: true;
+                        readonly items: {
+                            readonly enum: readonly ["membership.read", "membership.assign", "membership.update", "membership.revoke", "management.delegate"];
+                        };
                     };
                     readonly status: {
                         readonly enum: readonly ["active", "revoked"];
@@ -1705,6 +1726,19 @@ export declare const nativeSuperAdminGrantPageSchema: {
                         readonly type: "integer";
                         readonly minimum: 1;
                     };
+                    readonly reason: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 1000;
+                    };
+                    readonly createdBy: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly updatedBy: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
                     readonly createdAt: {
                         readonly anyOf: readonly [{
                             readonly type: "string";
@@ -1739,129 +1773,502 @@ export declare const nativeSuperAdminGrantPageSchema: {
         };
     };
 };
-export declare const nativeRelationshipGrantPageSchema: {
-    readonly $id: "openxiangda.native-relationship-grant-page/v2";
+export declare const nativeAuthorizationMutationReceiptSchema: {
+    readonly $id: "openxiangda.native-authorization-mutation-receipt/v2";
     readonly type: "object";
     readonly additionalProperties: false;
-    readonly required: readonly ["schemaVersion", "items", "total", "limit", "offset"];
+    readonly required: readonly ["schemaVersion", "operationId", "operationKind", "requestDigest", "actorUserId", "reason", "result", "replayed", "createdAt"];
     readonly properties: {
         readonly schemaVersion: {
-            readonly const: "openxiangda.native-relationship-grant-page/v2";
+            readonly const: "openxiangda.native-authorization-mutation-receipt/v2";
         };
-        readonly items: {
+        readonly operationId: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly operationKind: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly requestDigest: {
+            readonly type: "string";
+            readonly pattern: "^[0-9a-f]{64}$";
+        };
+        readonly actorUserId: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly reason: {
+            readonly type: readonly ["string", "null"];
+            readonly maxLength: 1000;
+        };
+        readonly result: {
+            readonly type: "object";
+        };
+        readonly replayed: {
+            readonly type: "boolean";
+        };
+        readonly createdAt: {
+            readonly type: "string";
+            readonly format: "date-time";
+        };
+    };
+};
+export declare const nativeAuthorizationManagementCatalogSchema: {
+    readonly $id: "openxiangda.native-authorization-catalog/v2";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["schemaVersion", "environment", "roles", "roleManagement", "scopeDimensions"];
+    readonly properties: {
+        readonly schemaVersion: {
+            readonly const: "openxiangda.native-authorization-catalog/v2";
+        };
+        readonly environment: {
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["id", "key", "activeAppVersionId", "headRevision", "dataLogicalRevisionId", "authzRevisionId", "authzVersion", "scopeDataVersion"];
+            readonly properties: {
+                readonly id: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly key: {
+                    readonly enum: readonly ["preproduction", "production"];
+                };
+                readonly activeAppVersionId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly headRevision: {
+                    readonly type: "integer";
+                    readonly minimum: 1;
+                };
+                readonly dataLogicalRevisionId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly authzRevisionId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly authzVersion: {
+                    readonly type: "integer";
+                    readonly minimum: 1;
+                };
+                readonly scopeDataVersion: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+            };
+        };
+        readonly roles: {
             readonly type: "array";
-            readonly maxItems: 100;
+            readonly maxItems: 2000;
             readonly items: {
                 readonly type: "object";
                 readonly additionalProperties: false;
-                readonly required: readonly ["id", "environmentId", "relationCode", "subjectType", "subjectKey", "resourceCode", "resourceId", "operations", "sourceCode", "status", "revision", "validFrom", "validTo"];
+                readonly required: readonly ["code", "name", "description", "capabilityCodes", "source"];
                 readonly properties: {
-                    readonly id: {
-                        readonly type: "string";
-                        readonly minLength: 1;
-                    };
-                    readonly environmentId: {
-                        readonly type: "string";
-                        readonly minLength: 1;
-                    };
-                    readonly relationCode: {
+                    readonly code: {
                         readonly type: "string";
                         readonly minLength: 1;
                         readonly maxLength: 255;
                         readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
                     };
-                    readonly subjectType: {
-                        readonly enum: readonly ["user", "role_membership"];
-                    };
-                    readonly subjectKey: {
-                        readonly type: "string";
-                        readonly minLength: 1;
-                    };
-                    readonly resourceCode: {
+                    readonly name: {
                         readonly type: "string";
                         readonly minLength: 1;
-                        readonly maxLength: 255;
-                        readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
                     };
-                    readonly resourceId: {
-                        readonly type: "string";
-                        readonly minLength: 1;
+                    readonly description: {
+                        readonly type: readonly ["string", "null"];
                     };
-                    readonly operations: {
+                    readonly capabilityCodes: {
                         readonly type: "array";
-                        readonly minItems: 1;
-                        readonly maxItems: 100;
+                        readonly maxItems: 2000;
                         readonly uniqueItems: true;
                         readonly items: {
                             readonly type: "string";
                             readonly minLength: 1;
                         };
                     };
-                    readonly sourceCode: {
+                    readonly source: {
+                        readonly enum: readonly ["package", "manual"];
+                    };
+                };
+            };
+        };
+        readonly roleManagement: {
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["unrestricted", "wildcardActions", "roles"];
+            readonly properties: {
+                readonly unrestricted: {
+                    readonly type: "boolean";
+                };
+                readonly wildcardActions: {
+                    readonly type: "array";
+                    readonly maxItems: 5;
+                    readonly uniqueItems: true;
+                    readonly items: {
+                        readonly enum: readonly ["membership.read", "membership.assign", "membership.update", "membership.revoke", "management.delegate"];
+                    };
+                };
+                readonly roles: {
+                    readonly type: "array";
+                    readonly maxItems: 2000;
+                    readonly items: {
+                        readonly type: "object";
+                        readonly additionalProperties: false;
+                        readonly required: readonly ["roleCode", "actions"];
+                        readonly properties: {
+                            readonly roleCode: {
+                                readonly type: "string";
+                                readonly minLength: 1;
+                                readonly maxLength: 255;
+                                readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
+                            };
+                            readonly actions: {
+                                readonly type: "array";
+                                readonly maxItems: 5;
+                                readonly uniqueItems: true;
+                                readonly items: {
+                                    readonly enum: readonly ["membership.read", "membership.assign", "membership.update", "membership.revoke", "management.delegate"];
+                                };
+                            };
+                        };
+                    };
+                };
+            };
+        };
+        readonly scopeDimensions: {
+            readonly type: "array";
+            readonly maxItems: 100;
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["code", "name", "resourceCode", "valueType", "hierarchyMode", "valueSource", "applicability"];
+                readonly properties: {
+                    readonly code: {
                         readonly type: "string";
                         readonly minLength: 1;
                         readonly maxLength: 255;
                         readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
                     };
-                    readonly status: {
-                        readonly enum: readonly ["active", "revoked", "expired"];
-                    };
-                    readonly revision: {
-                        readonly type: "integer";
-                        readonly minimum: 1;
+                    readonly name: {
+                        readonly type: "string";
+                        readonly minLength: 1;
                     };
-                    readonly validFrom: {
+                    readonly resourceCode: {
                         readonly anyOf: readonly [{
                             readonly type: "string";
-                            readonly format: "date-time";
+                            readonly minLength: 1;
+                            readonly maxLength: 255;
+                            readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
                         }, {
                             readonly type: "null";
                         }];
                     };
-                    readonly validTo: {
-                        readonly anyOf: readonly [{
-                            readonly type: "string";
-                            readonly format: "date-time";
-                        }, {
-                            readonly type: "null";
-                        }];
+                    readonly valueType: {
+                        readonly type: readonly ["string", "null"];
                     };
-                    readonly createdAt: {
-                        readonly anyOf: readonly [{
-                            readonly type: "string";
-                            readonly format: "date-time";
-                        }, {
-                            readonly type: "null";
-                        }];
+                    readonly hierarchyMode: {
+                        readonly type: readonly ["string", "null"];
                     };
-                    readonly updatedAt: {
+                    readonly valueSource: {
                         readonly anyOf: readonly [{
-                            readonly type: "string";
-                            readonly format: "date-time";
+                            readonly type: "object";
                         }, {
                             readonly type: "null";
                         }];
                     };
-                };
-            };
-        };
-        readonly total: {
-            readonly type: "integer";
-            readonly minimum: 0;
-        };
-        readonly limit: {
-            readonly type: "integer";
-            readonly minimum: 1;
-            readonly maximum: 100;
-        };
-        readonly offset: {
-            readonly type: "integer";
-            readonly minimum: 0;
-        };
-    };
-};
-export declare const nativeAuthorizationProjectionHealthSchema: {
-    readonly $id: "openxiangda.native-authorization-projection-health/v2";
+                    readonly applicability: {
+                        readonly type: "object";
+                        readonly additionalProperties: false;
+                        readonly required: readonly ["dimensionCode", "allRoles", "roleCodes", "unrestrictedRoleCodes", "rules"];
+                        readonly properties: {
+                            readonly dimensionCode: {
+                                readonly type: "string";
+                                readonly minLength: 1;
+                                readonly maxLength: 255;
+                                readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
+                            };
+                            readonly allRoles: {
+                                readonly type: "boolean";
+                            };
+                            readonly roleCodes: {
+                                readonly type: "array";
+                                readonly maxItems: 2000;
+                                readonly uniqueItems: true;
+                                readonly items: {
+                                    readonly type: "string";
+                                    readonly minLength: 1;
+                                    readonly maxLength: 255;
+                                    readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
+                                };
+                            };
+                            readonly unrestrictedRoleCodes: {
+                                readonly type: "array";
+                                readonly maxItems: 2000;
+                                readonly uniqueItems: true;
+                                readonly items: {
+                                    readonly type: "string";
+                                    readonly minLength: 1;
+                                    readonly maxLength: 255;
+                                    readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
+                                };
+                            };
+                            readonly rules: {
+                                readonly type: "array";
+                                readonly maxItems: 200;
+                                readonly items: {
+                                    readonly type: "object";
+                                    readonly additionalProperties: false;
+                                    readonly required: readonly ["policyCode", "allRoles", "roleCodes", "unrestrictedRoleCodes"];
+                                    readonly properties: {
+                                        readonly policyCode: {
+                                            readonly type: "string";
+                                            readonly minLength: 1;
+                                            readonly maxLength: 255;
+                                            readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
+                                        };
+                                        readonly allRoles: {
+                                            readonly type: "boolean";
+                                        };
+                                        readonly roleCodes: {
+                                            readonly type: "array";
+                                            readonly maxItems: 2000;
+                                            readonly uniqueItems: true;
+                                            readonly items: {
+                                                readonly type: "string";
+                                                readonly minLength: 1;
+                                                readonly maxLength: 255;
+                                                readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
+                                            };
+                                        };
+                                        readonly unrestrictedRoleCodes: {
+                                            readonly type: "array";
+                                            readonly maxItems: 2000;
+                                            readonly uniqueItems: true;
+                                            readonly items: {
+                                                readonly type: "string";
+                                                readonly minLength: 1;
+                                                readonly maxLength: 255;
+                                                readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
+                                            };
+                                        };
+                                    };
+                                };
+                            };
+                        };
+                    };
+                };
+            };
+        };
+    };
+};
+export declare const nativeSuperAdminGrantPageSchema: {
+    readonly $id: "openxiangda.native-super-admin-grant-page/v2";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["schemaVersion", "items", "total", "limit", "offset"];
+    readonly properties: {
+        readonly schemaVersion: {
+            readonly const: "openxiangda.native-super-admin-grant-page/v2";
+        };
+        readonly items: {
+            readonly type: "array";
+            readonly maxItems: 100;
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["id", "tenantId", "appCode", "userId", "status", "revision"];
+                readonly properties: {
+                    readonly id: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly tenantId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly appCode: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly userId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly userName: {
+                        readonly type: readonly ["string", "null"];
+                    };
+                    readonly userAvatar: {
+                        readonly type: readonly ["string", "null"];
+                    };
+                    readonly status: {
+                        readonly enum: readonly ["active", "revoked"];
+                    };
+                    readonly revision: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly createdAt: {
+                        readonly anyOf: readonly [{
+                            readonly type: "string";
+                            readonly format: "date-time";
+                        }, {
+                            readonly type: "null";
+                        }];
+                    };
+                    readonly updatedAt: {
+                        readonly anyOf: readonly [{
+                            readonly type: "string";
+                            readonly format: "date-time";
+                        }, {
+                            readonly type: "null";
+                        }];
+                    };
+                };
+            };
+        };
+        readonly total: {
+            readonly type: "integer";
+            readonly minimum: 0;
+        };
+        readonly limit: {
+            readonly type: "integer";
+            readonly minimum: 1;
+            readonly maximum: 100;
+        };
+        readonly offset: {
+            readonly type: "integer";
+            readonly minimum: 0;
+        };
+    };
+};
+export declare const nativeRelationshipGrantPageSchema: {
+    readonly $id: "openxiangda.native-relationship-grant-page/v2";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["schemaVersion", "items", "total", "limit", "offset"];
+    readonly properties: {
+        readonly schemaVersion: {
+            readonly const: "openxiangda.native-relationship-grant-page/v2";
+        };
+        readonly items: {
+            readonly type: "array";
+            readonly maxItems: 100;
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["id", "environmentId", "relationCode", "subjectType", "subjectKey", "resourceCode", "resourceId", "operations", "sourceCode", "status", "revision", "validFrom", "validTo"];
+                readonly properties: {
+                    readonly id: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly environmentId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly relationCode: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 255;
+                        readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
+                    };
+                    readonly subjectType: {
+                        readonly enum: readonly ["user", "role_membership"];
+                    };
+                    readonly subjectKey: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly resourceCode: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 255;
+                        readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
+                    };
+                    readonly resourceId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly operations: {
+                        readonly type: "array";
+                        readonly minItems: 1;
+                        readonly maxItems: 100;
+                        readonly uniqueItems: true;
+                        readonly items: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                    };
+                    readonly sourceCode: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 255;
+                        readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
+                    };
+                    readonly status: {
+                        readonly enum: readonly ["active", "revoked", "expired"];
+                    };
+                    readonly revision: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly validFrom: {
+                        readonly anyOf: readonly [{
+                            readonly type: "string";
+                            readonly format: "date-time";
+                        }, {
+                            readonly type: "null";
+                        }];
+                    };
+                    readonly validTo: {
+                        readonly anyOf: readonly [{
+                            readonly type: "string";
+                            readonly format: "date-time";
+                        }, {
+                            readonly type: "null";
+                        }];
+                    };
+                    readonly createdAt: {
+                        readonly anyOf: readonly [{
+                            readonly type: "string";
+                            readonly format: "date-time";
+                        }, {
+                            readonly type: "null";
+                        }];
+                    };
+                    readonly updatedAt: {
+                        readonly anyOf: readonly [{
+                            readonly type: "string";
+                            readonly format: "date-time";
+                        }, {
+                            readonly type: "null";
+                        }];
+                    };
+                };
+            };
+        };
+        readonly total: {
+            readonly type: "integer";
+            readonly minimum: 0;
+        };
+        readonly limit: {
+            readonly type: "integer";
+            readonly minimum: 1;
+            readonly maximum: 100;
+        };
+        readonly offset: {
+            readonly type: "integer";
+            readonly minimum: 0;
+        };
+    };
+};
+export declare const nativeAuthorizationProjectionHealthSchema: {
+    readonly $id: "openxiangda.native-authorization-projection-health/v2";
     readonly type: "object";
     readonly additionalProperties: false;
     readonly required: readonly ["schemaVersion", "ready", "environmentId", "authzRevisionId", "activeAuthzRevisionId", "sourceCount", "sources"];
@@ -17353,48 +17760,300 @@ export declare const contractSchemas: {
                     };
                 };
             };
-            readonly principal: {
-                readonly anyOf: readonly [{
+            readonly principal: {
+                readonly anyOf: readonly [{
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["type", "userId", "roleCodes", "capabilityCodes", "isAppSuperAdmin", "identityScope"];
+                    readonly properties: {
+                        readonly type: {
+                            readonly enum: readonly ["user_union", "developer"];
+                        };
+                        readonly userId: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                        readonly roleCodes: {
+                            readonly type: "array";
+                            readonly maxItems: 128;
+                            readonly uniqueItems: true;
+                            readonly items: {
+                                readonly type: "string";
+                                readonly minLength: 1;
+                            };
+                        };
+                        readonly capabilityCodes: {
+                            readonly type: "array";
+                            readonly maxItems: 2048;
+                            readonly uniqueItems: true;
+                            readonly items: {
+                                readonly type: "string";
+                                readonly minLength: 1;
+                            };
+                        };
+                        readonly isAppSuperAdmin: {
+                            readonly type: "boolean";
+                        };
+                        readonly identityScope: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                    };
+                }, {
+                    readonly type: "null";
+                }];
+            };
+        };
+    };
+    readonly nativeAuthorizationManagementCatalog: {
+        readonly $id: "openxiangda.native-authorization-catalog/v2";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["schemaVersion", "environment", "roles", "roleManagement", "scopeDimensions"];
+        readonly properties: {
+            readonly schemaVersion: {
+                readonly const: "openxiangda.native-authorization-catalog/v2";
+            };
+            readonly environment: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["id", "key", "activeAppVersionId", "headRevision", "dataLogicalRevisionId", "authzRevisionId", "authzVersion", "scopeDataVersion"];
+                readonly properties: {
+                    readonly id: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly key: {
+                        readonly enum: readonly ["preproduction", "production"];
+                    };
+                    readonly activeAppVersionId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly headRevision: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly dataLogicalRevisionId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly authzRevisionId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly authzVersion: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly scopeDataVersion: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                };
+            };
+            readonly roles: {
+                readonly type: "array";
+                readonly maxItems: 2000;
+                readonly items: {
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["code", "name", "description", "capabilityCodes", "source"];
+                    readonly properties: {
+                        readonly code: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                            readonly maxLength: 255;
+                            readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
+                        };
+                        readonly name: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                        readonly description: {
+                            readonly type: readonly ["string", "null"];
+                        };
+                        readonly capabilityCodes: {
+                            readonly type: "array";
+                            readonly maxItems: 2000;
+                            readonly uniqueItems: true;
+                            readonly items: {
+                                readonly type: "string";
+                                readonly minLength: 1;
+                            };
+                        };
+                        readonly source: {
+                            readonly enum: readonly ["package", "manual"];
+                        };
+                    };
+                };
+            };
+            readonly roleManagement: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["unrestricted", "wildcardActions", "roles"];
+                readonly properties: {
+                    readonly unrestricted: {
+                        readonly type: "boolean";
+                    };
+                    readonly wildcardActions: {
+                        readonly type: "array";
+                        readonly maxItems: 5;
+                        readonly uniqueItems: true;
+                        readonly items: {
+                            readonly enum: readonly ["membership.read", "membership.assign", "membership.update", "membership.revoke", "management.delegate"];
+                        };
+                    };
+                    readonly roles: {
+                        readonly type: "array";
+                        readonly maxItems: 2000;
+                        readonly items: {
+                            readonly type: "object";
+                            readonly additionalProperties: false;
+                            readonly required: readonly ["roleCode", "actions"];
+                            readonly properties: {
+                                readonly roleCode: {
+                                    readonly type: "string";
+                                    readonly minLength: 1;
+                                    readonly maxLength: 255;
+                                    readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
+                                };
+                                readonly actions: {
+                                    readonly type: "array";
+                                    readonly maxItems: 5;
+                                    readonly uniqueItems: true;
+                                    readonly items: {
+                                        readonly enum: readonly ["membership.read", "membership.assign", "membership.update", "membership.revoke", "management.delegate"];
+                                    };
+                                };
+                            };
+                        };
+                    };
+                };
+            };
+            readonly scopeDimensions: {
+                readonly type: "array";
+                readonly maxItems: 100;
+                readonly items: {
                     readonly type: "object";
                     readonly additionalProperties: false;
-                    readonly required: readonly ["type", "userId", "roleCodes", "capabilityCodes", "isAppSuperAdmin", "identityScope"];
+                    readonly required: readonly ["code", "name", "resourceCode", "valueType", "hierarchyMode", "valueSource", "applicability"];
                     readonly properties: {
-                        readonly type: {
-                            readonly enum: readonly ["user_union", "developer"];
+                        readonly code: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                            readonly maxLength: 255;
+                            readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
                         };
-                        readonly userId: {
+                        readonly name: {
                             readonly type: "string";
                             readonly minLength: 1;
                         };
-                        readonly roleCodes: {
-                            readonly type: "array";
-                            readonly maxItems: 128;
-                            readonly uniqueItems: true;
-                            readonly items: {
+                        readonly resourceCode: {
+                            readonly anyOf: readonly [{
                                 readonly type: "string";
                                 readonly minLength: 1;
-                            };
+                                readonly maxLength: 255;
+                                readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
+                            }, {
+                                readonly type: "null";
+                            }];
                         };
-                        readonly capabilityCodes: {
-                            readonly type: "array";
-                            readonly maxItems: 2048;
-                            readonly uniqueItems: true;
-                            readonly items: {
-                                readonly type: "string";
-                                readonly minLength: 1;
-                            };
+                        readonly valueType: {
+                            readonly type: readonly ["string", "null"];
                         };
-                        readonly isAppSuperAdmin: {
-                            readonly type: "boolean";
+                        readonly hierarchyMode: {
+                            readonly type: readonly ["string", "null"];
                         };
-                        readonly identityScope: {
-                            readonly type: "string";
-                            readonly minLength: 1;
+                        readonly valueSource: {
+                            readonly anyOf: readonly [{
+                                readonly type: "object";
+                            }, {
+                                readonly type: "null";
+                            }];
+                        };
+                        readonly applicability: {
+                            readonly type: "object";
+                            readonly additionalProperties: false;
+                            readonly required: readonly ["dimensionCode", "allRoles", "roleCodes", "unrestrictedRoleCodes", "rules"];
+                            readonly properties: {
+                                readonly dimensionCode: {
+                                    readonly type: "string";
+                                    readonly minLength: 1;
+                                    readonly maxLength: 255;
+                                    readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
+                                };
+                                readonly allRoles: {
+                                    readonly type: "boolean";
+                                };
+                                readonly roleCodes: {
+                                    readonly type: "array";
+                                    readonly maxItems: 2000;
+                                    readonly uniqueItems: true;
+                                    readonly items: {
+                                        readonly type: "string";
+                                        readonly minLength: 1;
+                                        readonly maxLength: 255;
+                                        readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
+                                    };
+                                };
+                                readonly unrestrictedRoleCodes: {
+                                    readonly type: "array";
+                                    readonly maxItems: 2000;
+                                    readonly uniqueItems: true;
+                                    readonly items: {
+                                        readonly type: "string";
+                                        readonly minLength: 1;
+                                        readonly maxLength: 255;
+                                        readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
+                                    };
+                                };
+                                readonly rules: {
+                                    readonly type: "array";
+                                    readonly maxItems: 200;
+                                    readonly items: {
+                                        readonly type: "object";
+                                        readonly additionalProperties: false;
+                                        readonly required: readonly ["policyCode", "allRoles", "roleCodes", "unrestrictedRoleCodes"];
+                                        readonly properties: {
+                                            readonly policyCode: {
+                                                readonly type: "string";
+                                                readonly minLength: 1;
+                                                readonly maxLength: 255;
+                                                readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
+                                            };
+                                            readonly allRoles: {
+                                                readonly type: "boolean";
+                                            };
+                                            readonly roleCodes: {
+                                                readonly type: "array";
+                                                readonly maxItems: 2000;
+                                                readonly uniqueItems: true;
+                                                readonly items: {
+                                                    readonly type: "string";
+                                                    readonly minLength: 1;
+                                                    readonly maxLength: 255;
+                                                    readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
+                                                };
+                                            };
+                                            readonly unrestrictedRoleCodes: {
+                                                readonly type: "array";
+                                                readonly maxItems: 2000;
+                                                readonly uniqueItems: true;
+                                                readonly items: {
+                                                    readonly type: "string";
+                                                    readonly minLength: 1;
+                                                    readonly maxLength: 255;
+                                                    readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
+                                                };
+                                            };
+                                        };
+                                    };
+                                };
+                            };
                         };
                     };
-                }, {
-                    readonly type: "null";
-                }];
+                };
             };
         };
     };
@@ -17413,7 +18072,7 @@ export declare const contractSchemas: {
                 readonly items: {
                     readonly type: "object";
                     readonly additionalProperties: false;
-                    readonly required: readonly ["id", "environmentId", "userId", "roleCode", "roleSource", "sourceCode", "scopeGrants", "status", "revision", "validFrom", "validTo"];
+                    readonly required: readonly ["id", "environmentId", "userId", "roleCode", "roleSource", "sourceCode", "maintainable", "immutableReason", "scopeGrants", "status", "revision", "validFrom", "validTo"];
                     readonly properties: {
                         readonly id: {
                             readonly type: "string";
@@ -17451,6 +18110,12 @@ export declare const contractSchemas: {
                             readonly maxLength: 255;
                             readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
                         };
+                        readonly maintainable: {
+                            readonly type: "boolean";
+                        };
+                        readonly immutableReason: {
+                            readonly enum: readonly ["authenticated_user_role", "authorization_projection", null];
+                        };
                         readonly scopeGrants: {
                             readonly type: "array";
                             readonly maxItems: 100;
@@ -17546,6 +18211,155 @@ export declare const contractSchemas: {
             };
         };
     };
+    readonly nativeRoleManagementGrantPage: {
+        readonly $id: "openxiangda.native-role-management-grant-page/v2";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["schemaVersion", "items", "total", "limit", "offset"];
+        readonly properties: {
+            readonly schemaVersion: {
+                readonly const: "openxiangda.native-role-management-grant-page/v2";
+            };
+            readonly items: {
+                readonly type: "array";
+                readonly maxItems: 100;
+                readonly items: {
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["id", "environmentId", "subjectRoleCode", "manageAllRoles", "managedRoleCodes", "actions", "status", "revision", "reason", "createdBy", "updatedBy", "createdAt", "updatedAt"];
+                    readonly properties: {
+                        readonly id: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                        readonly environmentId: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                        readonly subjectRoleCode: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                            readonly maxLength: 255;
+                            readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
+                        };
+                        readonly manageAllRoles: {
+                            readonly type: "boolean";
+                        };
+                        readonly managedRoleCodes: {
+                            readonly type: "array";
+                            readonly maxItems: 1000;
+                            readonly uniqueItems: true;
+                            readonly items: {
+                                readonly type: "string";
+                                readonly minLength: 1;
+                                readonly maxLength: 255;
+                                readonly pattern: "^[a-z][a-z0-9]*(?:[-_.][a-z0-9]+)*$";
+                            };
+                        };
+                        readonly actions: {
+                            readonly type: "array";
+                            readonly minItems: 1;
+                            readonly maxItems: 5;
+                            readonly uniqueItems: true;
+                            readonly items: {
+                                readonly enum: readonly ["membership.read", "membership.assign", "membership.update", "membership.revoke", "management.delegate"];
+                            };
+                        };
+                        readonly status: {
+                            readonly enum: readonly ["active", "revoked"];
+                        };
+                        readonly revision: {
+                            readonly type: "integer";
+                            readonly minimum: 1;
+                        };
+                        readonly reason: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                            readonly maxLength: 1000;
+                        };
+                        readonly createdBy: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                        readonly updatedBy: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                        readonly createdAt: {
+                            readonly anyOf: readonly [{
+                                readonly type: "string";
+                                readonly format: "date-time";
+                            }, {
+                                readonly type: "null";
+                            }];
+                        };
+                        readonly updatedAt: {
+                            readonly anyOf: readonly [{
+                                readonly type: "string";
+                                readonly format: "date-time";
+                            }, {
+                                readonly type: "null";
+                            }];
+                        };
+                    };
+                };
+            };
+            readonly total: {
+                readonly type: "integer";
+                readonly minimum: 0;
+            };
+            readonly limit: {
+                readonly type: "integer";
+                readonly minimum: 1;
+                readonly maximum: 100;
+            };
+            readonly offset: {
+                readonly type: "integer";
+                readonly minimum: 0;
+            };
+        };
+    };
+    readonly nativeAuthorizationMutationReceipt: {
+        readonly $id: "openxiangda.native-authorization-mutation-receipt/v2";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["schemaVersion", "operationId", "operationKind", "requestDigest", "actorUserId", "reason", "result", "replayed", "createdAt"];
+        readonly properties: {
+            readonly schemaVersion: {
+                readonly const: "openxiangda.native-authorization-mutation-receipt/v2";
+            };
+            readonly operationId: {
+                readonly type: "string";
+                readonly minLength: 1;
+            };
+            readonly operationKind: {
+                readonly type: "string";
+                readonly minLength: 1;
+            };
+            readonly requestDigest: {
+                readonly type: "string";
+                readonly pattern: "^[0-9a-f]{64}$";
+            };
+            readonly actorUserId: {
+                readonly type: "string";
+                readonly minLength: 1;
+            };
+            readonly reason: {
+                readonly type: readonly ["string", "null"];
+                readonly maxLength: 1000;
+            };
+            readonly result: {
+                readonly type: "object";
+            };
+            readonly replayed: {
+                readonly type: "boolean";
+            };
+            readonly createdAt: {
+                readonly type: "string";
+                readonly format: "date-time";
+            };
+        };
+    };
     readonly nativeSuperAdminGrantPage: {
         readonly $id: "openxiangda.native-super-admin-grant-page/v2";
         readonly type: "object";