1/**
2 * Identity RBAC Feature Module Specification
3 *
4 * Defines the feature module for identity management and role-based access control.
5 */
6import { defineFeature } from '@lssm-tech/lib.contracts-spec';
7
8/**
9 * Identity & RBAC feature module that bundles user management,
10 * organization tenancy, and role-based access control.
11 */
12export const IdentityRbacFeature = defineFeature({
13	meta: {
14		key: 'identity-rbac',
15		version: '1.0.0',
16		title: 'Identity & RBAC',
17		description:
18			'User identity, organization management, and role-based access control',
19		domain: 'platform',
20		owners: ['@platform.identity-rbac'],
21		tags: ['identity', 'rbac', 'users', 'organizations', 'permissions'],
22		stability: 'stable',
23	},
24
25	// All contract operations included in this feature
26	operations: [
27		// User operations
28		{ key: 'identity.user.create', version: '1.0.0' },
29		{ key: 'identity.user.update', version: '1.0.0' },
30		{ key: 'identity.user.delete', version: '1.0.0' },
31		{ key: 'identity.user.me', version: '1.0.0' },
32		{ key: 'identity.user.list', version: '1.0.0' },
33
34		// Organization operations
35		{ key: 'identity.org.create', version: '1.0.0' },
36		{ key: 'identity.org.update', version: '1.0.0' },
37		{ key: 'identity.org.get', version: '1.0.0' },
38		{ key: 'identity.org.list', version: '1.0.0' },
39		{ key: 'identity.org.invite', version: '1.0.0' },
40		{ key: 'identity.org.invite.accept', version: '1.0.0' },
41		{ key: 'identity.org.member.remove', version: '1.0.0' },
42		{ key: 'identity.org.members.list', version: '1.0.0' },
43
44		// RBAC operations
45		{ key: 'identity.rbac.role.create', version: '1.0.0' },
46		{ key: 'identity.rbac.role.update', version: '1.0.0' },
47		{ key: 'identity.rbac.role.delete', version: '1.0.0' },
48		{ key: 'identity.rbac.role.list', version: '1.0.0' },
49		{ key: 'identity.rbac.assign', version: '1.0.0' },
50		{ key: 'identity.rbac.revoke', version: '1.0.0' },
51		{ key: 'identity.rbac.check', version: '1.0.0' },
52		{ key: 'identity.rbac.permissions', version: '1.0.0' },
53	],
54
55	// Events emitted by this feature
56	events: [
57		// User events
58		{ key: 'user.created', version: '1.0.0' },
59		{ key: 'user.updated', version: '1.0.0' },
60		{ key: 'user.deleted', version: '1.0.0' },
61		{ key: 'user.email_verified', version: '1.0.0' },
62
63		// Organization events
64		{ key: 'org.created', version: '1.0.0' },
65		{ key: 'org.updated', version: '1.0.0' },
66		{ key: 'org.deleted', version: '1.0.0' },
67		{ key: 'org.member.added', version: '1.0.0' },
68		{ key: 'org.member.removed', version: '1.0.0' },
69		{ key: 'org.member.role_changed', version: '1.0.0' },
70
71		// Invitation events
72		{ key: 'org.invite.sent', version: '1.0.0' },
73		{ key: 'org.invite.accepted', version: '1.0.0' },
74		{ key: 'org.invite.declined', version: '1.0.0' },
75
76		// Role events
77		{ key: 'role.assigned', version: '1.0.0' },
78		{ key: 'role.revoked', version: '1.0.0' },
79	],
80
81	// No presentations for this library feature
82	presentations: [],
83	opToPresentation: [],
84	presentationsTargets: [],
85
86	// Capability definitions
87	capabilities: {
88		provides: [
89			{ key: 'identity', version: '1.0.0' },
90			{ key: 'rbac', version: '1.0.0' },
91		],
92		requires: [],
93	},
94});
95