OSS-first docs

These docs teach the open system first: contracts, generated surfaces, runtimes, governance, and incremental adoption. Studio shows up as the operating layer on top, not as the source of truth.

AI index

identity.rbac.role.create

Create a new role with permissions.

  • Type: operation (command)
  • Version: 1.0.0
  • Stability: stable
  • Owners: @platform.identity-rbac
  • Tags: identity, rbac, role, create
  • File: packages/libs/identity-rbac/src/contracts/rbac.ts
    • field.key.label
    identity.rbac.role.create
    field.version.label
    1.0.0
    field.type.label
    operation (command)
    field.title.label
    identity.rbac.role.create
    field.description.label

    Create a new role with permissions.

  • Type: operation (command)
  • Version: 1.0.0
  • Stability: stable
  • Owners: @platform.identity-rbac
  • Tags: identity, rbac, role, create
  • File: packages/libs/identity-rbac/src/contracts/rbac.ts
    • field.tags.label
    identity,rbac,role,create
    field.owners.label
    @platform.identity-rbac
    field.stability.label
    stable

    Create a new role with permissions.

    Goal

    Allow admins to define custom roles.

    Context

    Role management in admin settings.

    Source Definition

    import { defineCommand, defineQuery } from '@lssm-tech/lib.contracts-spec';
import { ScalarTypeEnum, SchemaModel } from '@lssm-tech/lib.schema';
import { SuccessResultModel } from './user';

export const CreateRoleContract = defineCommand({
	meta: {
		key: 'identity.rbac.role.create',
		version: '1.0.0',
		stability: 'stable',
		owners: ['@platform.identity-rbac'],
		tags: ['identity', 'rbac', 'role', 'create'],
		description: 'Create a new role with permissions.',
		goal: 'Allow admins to define custom roles.',
		context: 'Role management in admin settings.',
	},
	io: {
		input: CreateRoleInputModel,
		output: RoleModel,
		errors: {
			ROLE_EXISTS: {
				description: 'A role with this name already exists',
				http: 409,
				gqlCode: 'ROLE_EXISTS',
				when: 'Role name is taken',
			},
		},
	},
	policy: {
		auth: 'admin',
	},
	sideEffects: {
		audit: ['role.created'],
	},
});