manifest.ts

// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.

/**
 * Canonical plugin-security manifest source.
 *
 * Both `objectstack.config.ts` (compile-time) and `security-plugin.ts`
 * (runtime `manifest.register`) import from this file so the two
 * registration paths cannot drift (D7).
 */

import {
  SysPermissionSet,
  SysRole,
  SysUserPermissionSet,
  SysRolePermissionSet,
  defaultPermissionSets,
} from '@objectstack/platform-objects/security';

export const SECURITY_PLUGIN_ID = 'com.objectstack.plugin-security';
export const SECURITY_PLUGIN_VERSION = '1.0.0';

/** Security objects owned by plugin-security. */
export const securityObjects = [
  SysRole,
  SysPermissionSet,
  SysUserPermissionSet,
  SysRolePermissionSet,
];

/** Default platform permission sets (admin / member / viewer). */
export const securityDefaultPermissionSets = defaultPermissionSets;

/** Manifest header shared by compile-time config and runtime registration. */
export const securityPluginManifestHeader = {
  id: SECURITY_PLUGIN_ID,
  namespace: 'sys',
  version: SECURITY_PLUGIN_VERSION,
  type: 'plugin' as const,
  scope: 'system' as const,
  defaultDatasource: 'cloud',
  name: 'Security Plugin',
  description: 'RBAC roles and permission sets for ObjectStack (Role, PermissionSet)',
};