feat(datasets): add system and demo datasets

.gitleaks.toml

@@ -3,6 +3,14 @@ title = "project gitleaks config"
 [extend]
 useDefault = true # Uses the standard built-in gitleaks config as a base.
 
+[[allowlists]]
+description = "Demo leave operation identifiers"
+targetRules = ["generic-api-key"]
+condition = "AND"
+paths = ['''^src/datasets/demo/hr/(hr-request|leave-ledger-entry)\.dataset\.ts$''']
+regexTarget = "secret"
+regexes = ['''^(?:(?:reserve|consume)/)?leave/(?:nimbus/E[0-9]{3}|orbit/[XF][0-9]{3})$''']
+
 
 
 # Global allowlist — applies to ALL rules, except those

README.md

@@ -68,22 +68,16 @@ Registry publication is performed by the scripts in this repository, not during
 <details>
 <summary><strong>Database seed datasets</strong></summary>
 
-Seed datasets are compiled and shipped with this package, grouped by service:
+Datasets are grouped under `src/datasets/system` (bootstrap data) and
+`src/datasets/demo` (demonstration data), each with catalogs for all five services.
 
 ```ts
-import { dataset, bootstrap } from "@monadiam/shared/datasets/access-control";
+import { dataset, bootstrap } from "@monadiam/shared/datasets/system/access-control";
 
 dataset.Roles.redis;
 bootstrap.ADMIN_PERMISSION_CODES;
 ```
 
-Individual modules keep their original names and named exports, for example
-`@monadiam/shared/datasets/identity/interface-client.dataset`.
-
-Database connections, migrations, seed execution order, and Redis Lua scripts
-remain in the consuming services. Import datasets through their subpaths; the
-package root exports only common definitions and does not load seed data.
-
 </details>
 
 ----

package.json

@@ -3,7 +3,7 @@
   "description": "Shared Kafka/gRPC contracts and common enums between MonadIAM services",
   "author": "Daniil Egorov (https://github.com/Lambdius)",
   "license": "UNLICENSED",
-  "version": "3.0.3",
+  "version": "3.1.0",
   "types": "dist/index.d.ts",
   "main": "dist/index.js",
   "exports": {
@@ -13,25 +13,10 @@
       "default": "./dist/index.js"
     },
     "./grpc/*": "./src/grpc/*",
-    "./datasets/identity": {
-      "types": "./dist/datasets/identity/index.d.ts",
-      "require": "./dist/datasets/identity/index.js",
-      "default": "./dist/datasets/identity/index.js"
-    },
-    "./datasets/identity/*": {
-      "types": "./dist/datasets/identity/*.d.ts",
-      "require": "./dist/datasets/identity/*.js",
-      "default": "./dist/datasets/identity/*.js"
-    },
-    "./datasets/access-control": {
-      "types": "./dist/datasets/access-control/index.d.ts",
-      "require": "./dist/datasets/access-control/index.js",
-      "default": "./dist/datasets/access-control/index.js"
-    },
-    "./datasets/access-control/*": {
-      "types": "./dist/datasets/access-control/*.d.ts",
-      "require": "./dist/datasets/access-control/*.js",
-      "default": "./dist/datasets/access-control/*.js"
+    "./datasets/*": {
+      "types": "./dist/datasets/*/index.d.ts",
+      "require": "./dist/datasets/*/index.js",
+      "default": "./dist/datasets/*/index.js"
     }
   },
   "engines": {