system:
  on: ['manual', 'interval', 'timestamp']

system:sink:
  on: ['request']
  props:
    - name: 'response'
      type: '*types.SinkResponse'
    - name: 'request'
      type: '*types.SinkRequest'
      immutable: true
  constraints:
    - name: request.host
    - name: request.remote-address
    - name: request.method
    - name: request.path
    - name: request.username
    - name: request.password
    - name: request.content-type
    - name: request.get.*
    - name: request.post.*
    - name: request.header.*

system:mail:
  on: ['manual', 'receive', 'send']
  props:
    - name: 'message'
      type: '*types.MailMessage'
  constraints:
    - name: message.header.subject
    - name: message.header.from
    - name: message.header.to
    - name: message.header.reply-to
    - name: message.header.cc
    - name: message.header.bcc

system:auth:
  ba: ['login', 'signup']
  props:
    - name: 'user'
      type: '*types.User'
    - name: 'provider'
      type: '*types.AuthProvider'
  constraints:
    - name: user.handle
    - name: user.email

system:auth-client:
  on: ['manual']
  ba: ['create', 'update', 'delete']
  props:
    - name: 'authClient'
      type: '*types.AuthClient'
    - name: 'oldAuthClient'
      type: '*types.AuthClient'
      immutable: true
  constraints:
    - name: auth-client.handle


system:user:
  on: ['manual']
  ba: ['create', 'update', 'delete', 'suspend']
  props:
    - name: 'user'
      type: '*types.User'
    - name: 'oldUser'
      type: '*types.User'
      immutable: true
  constraints:
    - name: user.handle
    - name: user.email

system:role:
  on: ['manual']
  ba: ['create', 'update', 'delete']
  props:
    - name: 'role'
      type: '*types.Role'
    - name: 'oldRole'
      type: '*types.Role'
      immutable: true
  constraints:
    - name: role.handle
    - name: role.name

system:role:member:
  ba: ['add', 'remove']
  props:
    - name: 'user'
      type: '*types.User'
    - name: 'role'
      type: '*types.Role'
  constraints:
    - name: role.handle
    - name: role.name
    - name: user.handle
    - name: user.email


system:user-group:
  on: ['manual']
  ba: ['create', 'update', 'delete', 'memberAdd', 'memberRemove']
  props:
    - name: 'userGroup'
      type: '*types.UserGroup'
    - name: 'oldUserGroup'
      type: '*types.UserGroup'
      immutable: true
  constraints:
    - name: userGroup.handle
    - name: userGroup.name

system:application:
  on: ['manual']
  ba: ['create', 'update', 'delete']
  props:
    - name: 'application'
      type: '*types.Application'
    - name: 'oldApplication'
      type: '*types.Application'
      immutable: true
  constraints:
    - name: application.name


system:queue:
  on: ['message']
  props:
    - name: 'payload'
      type: '*types.QueueMessage'
  constraints:
    - name: payload.queue

system:data-privacy-request:
  on: ['manual']
  ba: ['create', 'update', 'delete']
  props:
    - name: 'dataPrivacyRequest'
      type: '*types.DataPrivacyRequest'
    - name: 'oldDataPrivacyRequest'
      type: '*types.DataPrivacyRequest'
      immutable: true
  constraints:
    - name: role.name

system:reminder:
  on: ['manual']
  ba: ['create','update','delete','dismiss','snooze']
  props:
    - name: 'reminder'
      type: '*types.Reminder'
    - name: 'oldReminder'
      type: '*types.Reminder'
      immutable: true
  constraints:
    - name: reminder.resource
    - name: reminder.assigned-to