@acorex-platform/framework-server 0.0.18 → 0.0.21

package/file-storage/http/src/lib/file-storage-http.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"file-storage-http.module.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/file-storage/http/src/lib/file-storage-http.module.ts"],"names":[],"mappings":";;;;AAAA,2CAAwC;AACxC,uEAAkE;AAClE,+EAAyE;AAEzE,4CAA4C;AAOrC,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;CAAG,CAAA;AAAxB,sDAAqB;gCAArB,qBAAqB;IALjC,IAAA,eAAM,EAAC;QACN,WAAW,EAAE,CAAC,+CAAqB,CAAC;QACpC,SAAS,EAAE,CAAC,sDAAwB,CAAC;QACrC,OAAO,EAAE,CAAC,sDAAwB,CAAC;KACpC,CAAC;GACW,qBAAqB,CAAG;AAErC,YAAY"}
+{"version":3,"file":"file-storage-http.module.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/file-storage/http/src/lib/file-storage-http.module.ts"],"names":[],"mappings":";;;;AAAA,2CAAwC;AACxC,uEAAkE;AAClE,+EAAyE;AACzE,mEAAsF;AAEtF,4CAA4C;AAOrC,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;CAAG,CAAA;AAAxB,sDAAqB;gCAArB,qBAAqB;IALjC,IAAA,eAAM,EAAC;QACN,WAAW,EAAE,CAAC,+CAAqB,CAAC;QACpC,SAAS,EAAE,CAAC,sDAAwB,EAAE,GAAG,6CAAqB,EAAE,GAAG,4CAAoB,CAAC;QACxF,OAAO,EAAE,CAAC,sDAAwB,CAAC;KACpC,CAAC;GACW,qBAAqB,CAAG;AAErC,YAAY"}

package/file-storage/http/src/lib/file-storage.controller.d.ts

@@ -1,4 +1,4 @@
-import type { Response } from 'express';
+import type { Request, Response } from 'express';
 import { FileStorageFacadeService } from './file-storage-facade.service';
 declare class FileStorageUpdateBodyDto {
     metadata?: Record<string, unknown>;
@@ -20,7 +20,7 @@ export declare class FileStorageController {
     remove(fileId: string): Promise<void>;
     commit(fileId: string): Promise<void>;
     markForDeletion(fileId: string): Promise<void>;
-    download(fileId: string, res: Response): Promise<void>;
+    download(fileId: string, req: Request, res: Response): Promise<void>;
 }
 export {};
 //# sourceMappingURL=file-storage.controller.d.ts.map

package/file-storage/http/src/lib/file-storage.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-storage.controller.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/file-storage/http/src/lib/file-storage.controller.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAExC,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAIzE,cAAM,wBAAwB;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,cAAM,eAAe;IACnB,GAAG,EAAG,MAAM,EAAE,CAAC;CAChB;AAMD,qBAIa,qBAAqB;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,wBAAwB;IAUvD,IAAI,CACQ,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG,SAAS,EACtC,KAAK,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,MAAM,EACR,SAAS,CAAC,EAAE,MAAM,EACrB,MAAM,CAAC,EAAE,MAAM,EACb,QAAQ,CAAC,EAAE,MAAM;IAwB/B,MAAM,CAAkB,MAAM,EAAE,MAAM,EAAU,IAAI,EAAE,wBAAwB;IAY9E,IAAI,CACQ,KAAK,CAAC,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,EACb,cAAc,CAAC,EAAE,MAAM,EACzB,YAAY,CAAC,EAAE,MAAM;IAgBxC,OAAO,CAAkB,MAAM,EAAE,MAAM;IAMvC,QAAQ,CAAS,IAAI,EAAE,eAAe;IAMtC,MAAM,CAAkB,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMtD,MAAM,CAAkB,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMtD,eAAe,CAAkB,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM/D,QAAQ,CAAkB,MAAM,EAAE,MAAM,EAAS,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;CAQrF"}
+{"version":3,"file":"file-storage.controller.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/file-storage/http/src/lib/file-storage.controller.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEjD,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAOzE,cAAM,wBAAwB;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,cAAM,eAAe;IACnB,GAAG,EAAG,MAAM,EAAE,CAAC;CAChB;AAMD,qBAIa,qBAAqB;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,wBAAwB;IAUvD,IAAI,CACQ,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG,SAAS,EACtC,KAAK,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,MAAM,EACR,SAAS,CAAC,EAAE,MAAM,EACrB,MAAM,CAAC,EAAE,MAAM,EACb,QAAQ,CAAC,EAAE,MAAM;IAwB/B,MAAM,CAAkB,MAAM,EAAE,MAAM,EAAU,IAAI,EAAE,wBAAwB;IAY9E,IAAI,CACQ,KAAK,CAAC,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,EACb,cAAc,CAAC,EAAE,MAAM,EACzB,YAAY,CAAC,EAAE,MAAM;IAgBxC,OAAO,CAAkB,MAAM,EAAE,MAAM;IAMvC,QAAQ,CAAS,IAAI,EAAE,eAAe;IAMtC,MAAM,CAAkB,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMtD,MAAM,CAAkB,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMtD,eAAe,CAAkB,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM/D,QAAQ,CACK,MAAM,EAAE,MAAM,EACxB,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACnB,OAAO,CAAC,IAAI,CAAC;CAyBjB"}

package/file-storage/http/src/lib/file-storage.controller.js

@@ -8,6 +8,8 @@ const platform_express_1 = require("@nestjs/platform-express");
 const swagger_1 = require("@nestjs/swagger");
 const multer_1 = require("multer");
 const file_storage_facade_service_1 = require("./file-storage-facade.service");
+/** Browser may keep authenticated downloads; binary bytes are stable per file id. */
+const DOWNLOAD_CACHE_CONTROL = 'private, max-age=86400, immutable';
 //#region ---- Request DTOs ----
 class FileStorageUpdateBodyDto {
 }
@@ -74,12 +76,26 @@ let FileStorageController = class FileStorageController {
     async markForDeletion(fileId) {
         await this.facade.markForDeletion(fileId);
     }
-    async download(fileId, res) {
-        const { buffer, mimeType, name } = await this.facade.readBinary(fileId);
-        res.setHeader('Content-Type', mimeType);
-        if (name) {
-            res.setHeader('Content-Disposition', `inline; filename="${encodeURIComponent(name)}"`);
+    async download(fileId, req, res) {
+        const validators = await this.facade.getDownloadValidators(fileId);
+        res.setHeader('Content-Type', validators.mimeType);
+        res.setHeader('Cache-Control', DOWNLOAD_CACHE_CONTROL);
+        res.setHeader('ETag', validators.etag);
+        res.setHeader('Last-Modified', new Date(validators.uploadedAt).toUTCString());
+        if (validators.name) {
+            res.setHeader('Content-Disposition', `inline; filename="${encodeURIComponent(validators.name)}"`);
         }
+        const ifNoneMatch = req.headers['if-none-match'];
+        if (ifNoneMatch && etagMatches(ifNoneMatch, validators.etag)) {
+            res.status(304).end();
+            return;
+        }
+        const ifModifiedSince = req.headers['if-modified-since'];
+        if (ifModifiedSince && !isModifiedSince(validators.uploadedAt, ifModifiedSince)) {
+            res.status(304).end();
+            return;
+        }
+        const buffer = await this.facade.readBinaryBuffer(fileId);
         res.send(buffer);
     }
 };
@@ -172,9 +188,10 @@ tslib_1.__decorate([
     (0, common_1.Get)('download/:fileId'),
     (0, swagger_1.ApiOperation)({ summary: 'Download file binary' }),
     tslib_1.__param(0, (0, common_1.Param)('fileId')),
-    tslib_1.__param(1, (0, common_1.Res)()),
+    tslib_1.__param(1, (0, common_1.Req)()),
+    tslib_1.__param(2, (0, common_1.Res)()),
     tslib_1.__metadata("design:type", Function),
-    tslib_1.__metadata("design:paramtypes", [String, Object]),
+    tslib_1.__metadata("design:paramtypes", [String, Object, Object]),
     tslib_1.__metadata("design:returntype", Promise)
 ], FileStorageController.prototype, "download", null);
 exports.FileStorageController = FileStorageController = tslib_1.__decorate([
@@ -184,5 +201,23 @@ exports.FileStorageController = FileStorageController = tslib_1.__decorate([
     (0, common_1.Controller)('v1/file-storage'),
     tslib_1.__metadata("design:paramtypes", [file_storage_facade_service_1.FileStorageFacadeService])
 ], FileStorageController);
+function etagMatches(ifNoneMatch, etag) {
+    if (ifNoneMatch.trim() === '*') {
+        return true;
+    }
+    return ifNoneMatch
+        .split(',')
+        .map((part) => part.trim())
+        .some((part) => part === etag || part === `W/${etag}`);
+}
+function isModifiedSince(uploadedAt, ifModifiedSince) {
+    const modified = Date.parse(uploadedAt);
+    const since = Date.parse(ifModifiedSince);
+    if (Number.isNaN(modified) || Number.isNaN(since)) {
+        return true;
+    }
+    // HTTP dates have 1s resolution; treat equal as not modified.
+    return Math.floor(modified / 1000) > Math.floor(since / 1000);
+}
 //#endregion
 //# sourceMappingURL=file-storage.controller.js.map

package/file-storage/http/src/lib/file-storage.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"file-storage.controller.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/file-storage/http/src/lib/file-storage.controller.ts"],"names":[],"mappings":";;;;AACA,yEAA0E;AAC1E,2CAcwB;AACxB,+DAA2D;AAC3D,6CAAoF;AAEpF,mCAAuC;AACvC,+EAAyE;AAEzE,gCAAgC;AAEhC,MAAM,wBAAwB;CAK7B;AAED,MAAM,eAAe;CAEpB;AAED,YAAY;AAEZ,yCAAyC;AAMlC,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC,YAA6B,MAAgC;QAAhC,WAAM,GAAN,MAAM,CAA0B;IAAG,CAAC;IAU3D,AAAN,KAAK,CAAC,IAAI,CACQ,IAAqC,EACtC,KAAa,EACX,OAAe,EACd,QAAgB,EACpB,IAAa,EACb,IAAa,EACR,SAAkB,EACrB,MAAe,EACb,QAAiB;QAEnC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAClB,MAAM,IAAI,4BAAmB,CAAC,kBAAkB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,cAAc,GAAG,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;QAChG,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACtB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK;YACL,OAAO;YACP,QAAQ;YACR,IAAI;YACJ,IAAI;YACJ,SAAS,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS;YACrE,MAAM,EAAE,MAA0C;YAClD,QAAQ,EAAE,cAAc;SACzB,CAAC,CAAC;IACL,CAAC;IAIK,AAAN,KAAK,CAAC,MAAM,CAAkB,MAAc,EAAU,IAA8B;QAClF,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACxB,MAAM;YACN,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;IACL,CAAC;IAIK,AAAN,KAAK,CAAC,IAAI,CACQ,KAAc,EACZ,OAAgB,EACf,QAAiB,EACjB,QAAiB,EACjB,QAAiB,EAChB,SAAkB,EACb,cAAuB,EACzB,YAAqB;QAE5C,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACtB,KAAK;YACL,OAAO;YACP,QAAQ;YACR,QAAQ;YACR,QAAQ,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS;YAClE,SAAS,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS;YACrE,cAAc;YACd,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IAIK,AAAN,KAAK,CAAC,OAAO,CAAkB,MAAc;QAC3C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAIK,AAAN,KAAK,CAAC,QAAQ,CAAS,IAAqB;QAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAIK,AAAN,KAAK,CAAC,MAAM,CAAkB,MAAc;QAC1C,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAIK,AAAN,KAAK,CAAC,MAAM,CAAkB,MAAc;QAC1C,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAIK,AAAN,KAAK,CAAC,eAAe,CAAkB,MAAc;QACnD,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAIK,AAAN,KAAK,CAAC,QAAQ,CAAkB,MAAc,EAAS,GAAa;QAClE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACxE,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QACxC,IAAI,IAAI,EAAE,CAAC;YACT,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,qBAAqB,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzF,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC;CACF,CAAA;AAtHY,sDAAqB;AAW1B;IARL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IACxC,IAAA,qBAAW,EAAC,qBAAqB,CAAC;IAClC,IAAA,wBAAe,EACd,IAAA,kCAAe,EAAC,MAAM,EAAE;QACtB,OAAO,EAAE,IAAA,sBAAa,GAAE;KACzB,CAAC,CACH;IAEE,mBAAA,IAAA,qBAAY,GAAE,CAAA;IACd,mBAAA,IAAA,aAAI,EAAC,OAAO,CAAC,CAAA;IACb,mBAAA,IAAA,aAAI,EAAC,SAAS,CAAC,CAAA;IACf,mBAAA,IAAA,aAAI,EAAC,UAAU,CAAC,CAAA;IAChB,mBAAA,IAAA,aAAI,EAAC,MAAM,CAAC,CAAA;IACZ,mBAAA,IAAA,aAAI,EAAC,MAAM,CAAC,CAAA;IACZ,mBAAA,IAAA,aAAI,EAAC,WAAW,CAAC,CAAA;IACjB,mBAAA,IAAA,aAAI,EAAC,QAAQ,CAAC,CAAA;IACd,mBAAA,IAAA,aAAI,EAAC,UAAU,CAAC,CAAA;;;;iDAoBlB;AAIK;IAFL,IAAA,YAAG,EAAC,gBAAgB,CAAC;IACrB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IACpC,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IAAkB,mBAAA,IAAA,aAAI,GAAE,CAAA;;qDAAO,wBAAwB;;mDAQnF;AAIK;IAFL,IAAA,YAAG,EAAC,MAAM,CAAC;IACX,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAE/C,mBAAA,IAAA,cAAK,EAAC,OAAO,CAAC,CAAA;IACd,mBAAA,IAAA,cAAK,EAAC,SAAS,CAAC,CAAA;IAChB,mBAAA,IAAA,cAAK,EAAC,UAAU,CAAC,CAAA;IACjB,mBAAA,IAAA,cAAK,EAAC,UAAU,CAAC,CAAA;IACjB,mBAAA,IAAA,cAAK,EAAC,UAAU,CAAC,CAAA;IACjB,mBAAA,IAAA,cAAK,EAAC,WAAW,CAAC,CAAA;IAClB,mBAAA,IAAA,cAAK,EAAC,gBAAgB,CAAC,CAAA;IACvB,mBAAA,IAAA,cAAK,EAAC,cAAc,CAAC,CAAA;;;;iDAYvB;AAIK;IAFL,IAAA,YAAG,EAAC,cAAc,CAAC;IACnB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IAC5B,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;;;;oDAE7B;AAIK;IAFL,IAAA,aAAI,EAAC,WAAW,CAAC;IACjB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IACpC,mBAAA,IAAA,aAAI,GAAE,CAAA;;6CAAO,eAAe;;qDAE3C;AAIK;IAFL,IAAA,eAAM,EAAC,gBAAgB,CAAC;IACxB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IAC7B,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;;;;mDAE5B;AAIK;IAFL,IAAA,aAAI,EAAC,gBAAgB,CAAC;IACtB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IAC7B,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;;;;mDAE5B;AAIK;IAFL,IAAA,aAAI,EAAC,2BAA2B,CAAC;IACjC,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;IAC/B,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;;;;4DAErC;AAIK;IAFL,IAAA,YAAG,EAAC,kBAAkB,CAAC;IACvB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAClC,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IAAkB,mBAAA,IAAA,YAAG,GAAE,CAAA;;;;qDAOrD;gCArHU,qBAAqB;IAJjC,IAAA,iBAAO,EAAC,cAAc,CAAC;IACvB,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,uBAAY,CAAC;IACvB,IAAA,mBAAU,EAAC,iBAAiB,CAAC;6CAES,sDAAwB;GADlD,qBAAqB,CAsHjC;AAED,YAAY"}
+{"version":3,"file":"file-storage.controller.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/file-storage/http/src/lib/file-storage.controller.ts"],"names":[],"mappings":";;;;AACA,yEAA0E;AAC1E,2CAewB;AACxB,+DAA2D;AAC3D,6CAAoF;AAEpF,mCAAuC;AACvC,+EAAyE;AAEzE,qFAAqF;AACrF,MAAM,sBAAsB,GAAG,mCAAmC,CAAC;AAEnE,gCAAgC;AAEhC,MAAM,wBAAwB;CAK7B;AAED,MAAM,eAAe;CAEpB;AAED,YAAY;AAEZ,yCAAyC;AAMlC,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC,YAA6B,MAAgC;QAAhC,WAAM,GAAN,MAAM,CAA0B;IAAG,CAAC;IAU3D,AAAN,KAAK,CAAC,IAAI,CACQ,IAAqC,EACtC,KAAa,EACX,OAAe,EACd,QAAgB,EACpB,IAAa,EACb,IAAa,EACR,SAAkB,EACrB,MAAe,EACb,QAAiB;QAEnC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAClB,MAAM,IAAI,4BAAmB,CAAC,kBAAkB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,cAAc,GAAG,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;QAChG,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACtB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,KAAK;YACL,OAAO;YACP,QAAQ;YACR,IAAI;YACJ,IAAI;YACJ,SAAS,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS;YACrE,MAAM,EAAE,MAA0C;YAClD,QAAQ,EAAE,cAAc;SACzB,CAAC,CAAC;IACL,CAAC;IAIK,AAAN,KAAK,CAAC,MAAM,CAAkB,MAAc,EAAU,IAA8B;QAClF,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACxB,MAAM;YACN,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;IACL,CAAC;IAIK,AAAN,KAAK,CAAC,IAAI,CACQ,KAAc,EACZ,OAAgB,EACf,QAAiB,EACjB,QAAiB,EACjB,QAAiB,EAChB,SAAkB,EACb,cAAuB,EACzB,YAAqB;QAE5C,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACtB,KAAK;YACL,OAAO;YACP,QAAQ;YACR,QAAQ;YACR,QAAQ,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS;YAClE,SAAS,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS;YACrE,cAAc;YACd,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IAIK,AAAN,KAAK,CAAC,OAAO,CAAkB,MAAc;QAC3C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAIK,AAAN,KAAK,CAAC,QAAQ,CAAS,IAAqB;QAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAIK,AAAN,KAAK,CAAC,MAAM,CAAkB,MAAc;QAC1C,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAIK,AAAN,KAAK,CAAC,MAAM,CAAkB,MAAc;QAC1C,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAIK,AAAN,KAAK,CAAC,eAAe,CAAkB,MAAc;QACnD,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAIK,AAAN,KAAK,CAAC,QAAQ,CACK,MAAc,EACxB,GAAY,EACZ,GAAa;QAEpB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACnE,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;QACnD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAC;QACvD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QACvC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9E,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YACpB,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE,qBAAqB,kBAAkB,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpG,CAAC;QAED,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACjD,IAAI,WAAW,IAAI,WAAW,CAAC,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,MAAM,eAAe,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACzD,IAAI,eAAe,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,UAAU,EAAE,eAAe,CAAC,EAAE,CAAC;YAChF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC1D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC;CACF,CAAA;AA3IY,sDAAqB;AAW1B;IARL,IAAA,aAAI,EAAC,MAAM,CAAC;IACZ,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IACxC,IAAA,qBAAW,EAAC,qBAAqB,CAAC;IAClC,IAAA,wBAAe,EACd,IAAA,kCAAe,EAAC,MAAM,EAAE;QACtB,OAAO,EAAE,IAAA,sBAAa,GAAE;KACzB,CAAC,CACH;IAEE,mBAAA,IAAA,qBAAY,GAAE,CAAA;IACd,mBAAA,IAAA,aAAI,EAAC,OAAO,CAAC,CAAA;IACb,mBAAA,IAAA,aAAI,EAAC,SAAS,CAAC,CAAA;IACf,mBAAA,IAAA,aAAI,EAAC,UAAU,CAAC,CAAA;IAChB,mBAAA,IAAA,aAAI,EAAC,MAAM,CAAC,CAAA;IACZ,mBAAA,IAAA,aAAI,EAAC,MAAM,CAAC,CAAA;IACZ,mBAAA,IAAA,aAAI,EAAC,WAAW,CAAC,CAAA;IACjB,mBAAA,IAAA,aAAI,EAAC,QAAQ,CAAC,CAAA;IACd,mBAAA,IAAA,aAAI,EAAC,UAAU,CAAC,CAAA;;;;iDAoBlB;AAIK;IAFL,IAAA,YAAG,EAAC,gBAAgB,CAAC;IACrB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IACpC,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IAAkB,mBAAA,IAAA,aAAI,GAAE,CAAA;;qDAAO,wBAAwB;;mDAQnF;AAIK;IAFL,IAAA,YAAG,EAAC,MAAM,CAAC;IACX,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAE/C,mBAAA,IAAA,cAAK,EAAC,OAAO,CAAC,CAAA;IACd,mBAAA,IAAA,cAAK,EAAC,SAAS,CAAC,CAAA;IAChB,mBAAA,IAAA,cAAK,EAAC,UAAU,CAAC,CAAA;IACjB,mBAAA,IAAA,cAAK,EAAC,UAAU,CAAC,CAAA;IACjB,mBAAA,IAAA,cAAK,EAAC,UAAU,CAAC,CAAA;IACjB,mBAAA,IAAA,cAAK,EAAC,WAAW,CAAC,CAAA;IAClB,mBAAA,IAAA,cAAK,EAAC,gBAAgB,CAAC,CAAA;IACvB,mBAAA,IAAA,cAAK,EAAC,cAAc,CAAC,CAAA;;;;iDAYvB;AAIK;IAFL,IAAA,YAAG,EAAC,cAAc,CAAC;IACnB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IAC5B,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;;;;oDAE7B;AAIK;IAFL,IAAA,aAAI,EAAC,WAAW,CAAC;IACjB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IACpC,mBAAA,IAAA,aAAI,GAAE,CAAA;;6CAAO,eAAe;;qDAE3C;AAIK;IAFL,IAAA,eAAM,EAAC,gBAAgB,CAAC;IACxB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IAC7B,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;;;;mDAE5B;AAIK;IAFL,IAAA,aAAI,EAAC,gBAAgB,CAAC;IACtB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IAC7B,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;;;;mDAE5B;AAIK;IAFL,IAAA,aAAI,EAAC,2BAA2B,CAAC;IACjC,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;IAC/B,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;;;;4DAErC;AAIK;IAFL,IAAA,YAAG,EAAC,kBAAkB,CAAC;IACvB,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAE/C,mBAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,mBAAA,IAAA,YAAG,GAAE,CAAA;IACL,mBAAA,IAAA,YAAG,GAAE,CAAA;;;;qDAyBP;gCA1IU,qBAAqB;IAJjC,IAAA,iBAAO,EAAC,cAAc,CAAC;IACvB,IAAA,uBAAa,GAAE;IACf,IAAA,kBAAS,EAAC,uBAAY,CAAC;IACvB,IAAA,mBAAU,EAAC,iBAAiB,CAAC;6CAES,sDAAwB;GADlD,qBAAqB,CA2IjC;AAED,SAAS,WAAW,CAAC,WAAmB,EAAE,IAAY;IACpD,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,WAAW;SACf,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,eAAe,CAAC,UAAkB,EAAE,eAAuB;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,8DAA8D;IAC9D,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,YAAY"}

package/identifier/src/lib/identifier-rule.registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identifier-rule.registry.d.ts","sourceRoot":"","sources":["../../../../../../../libs/framework/server/identifier/src/lib/identifier-rule.registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AACxF,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,wCAAwC,CAAC;AAKhD;;GAEG;AACH,qBACa,6BAA8B,YAAW,YAAY;IAGpD,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAwC;gBAEjC,OAAO,EAAE,8BAA8B;IAE9D,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7B,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAK5D,WAAW,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAKjD,QAAQ,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI;YAIzB,gBAAgB;IAmB9B,OAAO,CAAC,eAAe;CA6BxB"}
+{"version":3,"file":"identifier-rule.registry.d.ts","sourceRoot":"","sources":["../../../../../../../libs/framework/server/identifier/src/lib/identifier-rule.registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AAExF,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,wCAAwC,CAAC;AAKhD;;GAEG;AACH,qBACa,6BAA8B,YAAW,YAAY;IAGpD,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAwC;gBAEjC,OAAO,EAAE,8BAA8B;IAE9D,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7B,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAK5D,WAAW,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAKjD,QAAQ,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI;YAIzB,gBAAgB;IAwB9B,OAAO,CAAC,eAAe;CA6BxB"}

package/identifier/src/lib/identifier-rule.registry.js

@@ -4,6 +4,7 @@ exports.BackendIdentifierRuleRegistry = void 0;
 const tslib_1 = require("tslib");
 const common_1 = require("@nestjs/common");
 const core_1 = require("@acorex-platform/framework-server/core");
+const abstract_1 = require("@acorex-platform/framework-server/jql/abstract");
 const core_2 = require("@acorex-platform/framework-shared/core");
 const lodash_es_1 = require("lodash-es");
 //#region ---- Rule registry ----
@@ -32,11 +33,13 @@ let BackendIdentifierRuleRegistry = class BackendIdentifierRuleRegistry {
     async reloadFromEntity() {
         this.rules.clear();
         try {
-            const response = await this.storage.query(core_2.IDENTIFIER_RULE_ENTITY, {
+            // Registry is a process-wide cache; load all enabled rules without session
+            // appBound filters (peek/generate still run under the caller's session scope).
+            const response = await this.storage.query(core_2.IDENTIFIER_RULE_ENTITY, (0, abstract_1.bypassScopeFilter)({
                 skip: 0,
                 take: 1000,
                 params: {},
-            });
+            }));
             for (const item of response.items ?? []) {
                 const rule = this.mapEntityToRule(item);
                 if (rule) {

package/identifier/src/lib/identifier-rule.registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"identifier-rule.registry.js","sourceRoot":"","sources":["../../../../../../../libs/framework/server/identifier/src/lib/identifier-rule.registry.ts"],"names":[],"mappings":";;;;AAAA,2CAA0D;AAC1D,iEAAwF;AACxF,iEAGgD;AAChD,yCAAgC;AAEhC,iCAAiC;AAEjC;;GAEG;AAEI,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;IAGxC,YAA6B,OAAuC;QAAvC,YAAO,GAAP,OAAO,CAAgC;QAFnD,UAAK,GAAG,IAAI,GAAG,EAA6B,CAAC;IAES,CAAC;IAExE,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,WAAW;QACf,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC;IAED,QAAQ,CAAC,IAAuB;QAC9B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC5B,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,6BAAsB,EAAE;gBAChE,IAAI,EAAE,CAAC;gBACP,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,EAAE;aACX,CAAC,CAAC;YACH,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;gBACxC,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,IAAI,EAAE,CAAC;oBACT,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;QAC/D,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,MAAe;QACrC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,IAAA,eAAG,EAAC,MAAM,EAAE,MAAM,CAAC,IAAI,IAAA,eAAG,EAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,IAAA,eAAG,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACvC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,WAAW,GAAG,IAAA,eAAG,EAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC/C,MAAM,aAAa,GAAG,IAAA,eAAG,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC7C,MAAM,aAAa,GAAG,IAAA,eAAG,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAChD,MAAM,UAAU,GACd,OAAO,aAAa,KAAK,SAAS;YAChC,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,aAAa,KAAK,KAAK,CAAC;QAE9B,OAAO;YACL,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,MAAM,CAAC,IAAA,eAAG,EAAC,MAAM,EAAE,OAAO,CAAC,IAAI,OAAO,CAAC;YAC9C,MAAM,EAAE,MAAM,CAAC,IAAA,eAAG,EAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC3C,OAAO;YACP,UAAU;YACV,WAAW,EACT,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ;gBAC5C,CAAC,CAAE,WAAgD;gBACnD,CAAC,CAAC,EAAE;SACT,CAAC;IACJ,CAAC;CACF,CAAA;AAvEY,sEAA6B;wCAA7B,6BAA6B;IADzC,IAAA,mBAAU,GAAE;6CAI2B,qCAA8B;GAHzD,6BAA6B,CAuEzC;AAED,YAAY"}
+{"version":3,"file":"identifier-rule.registry.js","sourceRoot":"","sources":["../../../../../../../libs/framework/server/identifier/src/lib/identifier-rule.registry.ts"],"names":[],"mappings":";;;;AAAA,2CAA0D;AAC1D,iEAAwF;AACxF,6EAAmF;AACnF,iEAGgD;AAChD,yCAAgC;AAEhC,iCAAiC;AAEjC;;GAEG;AAEI,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;IAGxC,YAA6B,OAAuC;QAAvC,YAAO,GAAP,OAAO,CAAgC;QAFnD,UAAK,GAAG,IAAI,GAAG,EAA6B,CAAC;IAES,CAAC;IAExE,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,WAAW;QACf,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC;IAED,QAAQ,CAAC,IAAuB;QAC9B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC5B,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,2EAA2E;YAC3E,+EAA+E;YAC/E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CACvC,6BAAsB,EACtB,IAAA,4BAAiB,EAAC;gBAChB,IAAI,EAAE,CAAC;gBACP,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,EAAE;aACX,CAAC,CACH,CAAC;YACF,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;gBACxC,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,IAAI,EAAE,CAAC;oBACT,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;QAC/D,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,MAAe;QACrC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,IAAA,eAAG,EAAC,MAAM,EAAE,MAAM,CAAC,IAAI,IAAA,eAAG,EAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,IAAA,eAAG,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACvC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,WAAW,GAAG,IAAA,eAAG,EAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC/C,MAAM,aAAa,GAAG,IAAA,eAAG,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC7C,MAAM,aAAa,GAAG,IAAA,eAAG,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAChD,MAAM,UAAU,GACd,OAAO,aAAa,KAAK,SAAS;YAChC,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,aAAa,KAAK,KAAK,CAAC;QAE9B,OAAO;YACL,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,MAAM,CAAC,IAAA,eAAG,EAAC,MAAM,EAAE,OAAO,CAAC,IAAI,OAAO,CAAC;YAC9C,MAAM,EAAE,MAAM,CAAC,IAAA,eAAG,EAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC3C,OAAO;YACP,UAAU;YACV,WAAW,EACT,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ;gBAC5C,CAAC,CAAE,WAAgD;gBACnD,CAAC,CAAC,EAAE;SACT,CAAC;IACJ,CAAC;CACF,CAAA;AA5EY,sEAA6B;wCAA7B,6BAA6B;IADzC,IAAA,mBAAU,GAAE;6CAI2B,qCAA8B;GAHzD,6BAA6B,CA4EzC;AAED,YAAY"}

package/jql/abstract/src/index.d.ts

@@ -28,11 +28,16 @@ export * from './lib/entity-store/entity-store-request.util';
 export * from './lib/entity-store/entity-fulltext-search.util';
 export * from './lib/entity-store/entity-fulltext-search-paths.util';
 export * from './lib/entity-store/entity-quick-search-pagination.util';
+export * from './lib/entity-store/entity-isolation-policy';
+export * from './lib/entity-store/entity-access-policy.types';
+export * from './lib/entity-store/entity-access-expression.builtins';
+export * from './lib/entity-store/entity-access-expression.engine';
+export * from './lib/entity-store/entity-access-policy.cache';
 export * from './lib/entity-store/entity-visibility-filter.util';
 export * from './lib/entity-store/entity-policy-bypass.util';
-export * from './lib/entity-store/entity-policy-bypass.util';
 export * from './lib/entity-store/category-hierarchy-filter.util';
 export * from './lib/entity-store/entity-store-aggregate.util';
 export * from './lib/entity-store/json-store-record-id.util';
 export * from './lib/entity-store/entity-store.service';
+export * from './lib/entity-store/entity-relation-join.planner';
 //# sourceMappingURL=index.d.ts.map

package/jql/abstract/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../libs/framework/server/jql/abstract/src/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mCAAmC,CAAC;AAClD,cAAc,oCAAoC,CAAC;AACnD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mDAAmD,CAAC;AAClE,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,uCAAuC,CAAC;AACtD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,mDAAmD,CAAC;AAClE,cAAc,kDAAkD,CAAC;AACjE,cAAc,8CAA8C,CAAC;AAC7D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,wCAAwC,CAAC;AACvD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,uDAAuD,CAAC;AACtE,cAAc,+CAA+C,CAAC;AAC9D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,sDAAsD,CAAC;AACrE,cAAc,wDAAwD,CAAC;AACvE,cAAc,kDAAkD,CAAC;AACjE,cAAc,8CAA8C,CAAC;AAC7D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,mDAAmD,CAAC;AAClE,cAAc,gDAAgD,CAAC;AAC/D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,yCAAyC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../../libs/framework/server/jql/abstract/src/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,wBAAwB,CAAC;AACvC,cAAc,kBAAkB,CAAC;AACjC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,mCAAmC,CAAC;AAClD,cAAc,oCAAoC,CAAC;AACnD,cAAc,8CAA8C,CAAC;AAC7D,cAAc,2CAA2C,CAAC;AAC1D,cAAc,mDAAmD,CAAC;AAClE,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,uCAAuC,CAAC;AACtD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,mDAAmD,CAAC;AAClE,cAAc,kDAAkD,CAAC;AACjE,cAAc,8CAA8C,CAAC;AAC7D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,wCAAwC,CAAC;AACvD,cAAc,6CAA6C,CAAC;AAC5D,cAAc,uDAAuD,CAAC;AACtE,cAAc,+CAA+C,CAAC;AAC9D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,gDAAgD,CAAC;AAC/D,cAAc,sDAAsD,CAAC;AACrE,cAAc,wDAAwD,CAAC;AACvE,cAAc,4CAA4C,CAAC;AAC3D,cAAc,+CAA+C,CAAC;AAC9D,cAAc,sDAAsD,CAAC;AACrE,cAAc,oDAAoD,CAAC;AACnE,cAAc,+CAA+C,CAAC;AAC9D,cAAc,kDAAkD,CAAC;AACjE,cAAc,8CAA8C,CAAC;AAC7D,cAAc,mDAAmD,CAAC;AAClE,cAAc,gDAAgD,CAAC;AAC/D,cAAc,8CAA8C,CAAC;AAC7D,cAAc,yCAAyC,CAAC;AACxD,cAAc,iDAAiD,CAAC"}

package/jql/abstract/src/index.js

@@ -31,11 +31,16 @@ tslib_1.__exportStar(require("./lib/entity-store/entity-store-request.util"), ex
 tslib_1.__exportStar(require("./lib/entity-store/entity-fulltext-search.util"), exports);
 tslib_1.__exportStar(require("./lib/entity-store/entity-fulltext-search-paths.util"), exports);
 tslib_1.__exportStar(require("./lib/entity-store/entity-quick-search-pagination.util"), exports);
+tslib_1.__exportStar(require("./lib/entity-store/entity-isolation-policy"), exports);
+tslib_1.__exportStar(require("./lib/entity-store/entity-access-policy.types"), exports);
+tslib_1.__exportStar(require("./lib/entity-store/entity-access-expression.builtins"), exports);
+tslib_1.__exportStar(require("./lib/entity-store/entity-access-expression.engine"), exports);
+tslib_1.__exportStar(require("./lib/entity-store/entity-access-policy.cache"), exports);
 tslib_1.__exportStar(require("./lib/entity-store/entity-visibility-filter.util"), exports);
 tslib_1.__exportStar(require("./lib/entity-store/entity-policy-bypass.util"), exports);
-tslib_1.__exportStar(require("./lib/entity-store/entity-policy-bypass.util"), exports);
 tslib_1.__exportStar(require("./lib/entity-store/category-hierarchy-filter.util"), exports);
 tslib_1.__exportStar(require("./lib/entity-store/entity-store-aggregate.util"), exports);
 tslib_1.__exportStar(require("./lib/entity-store/json-store-record-id.util"), exports);
 tslib_1.__exportStar(require("./lib/entity-store/entity-store.service"), exports);
+tslib_1.__exportStar(require("./lib/entity-store/entity-relation-join.planner"), exports);
 //# sourceMappingURL=index.js.map

package/jql/abstract/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../libs/framework/server/jql/abstract/src/index.ts"],"names":[],"mappings":";;;AAAA,0DAAgC;AAChC,iEAAuC;AACvC,2DAAiC;AACjC,qEAA2C;AAC3C,gEAAsC;AACtC,oEAA0C;AAC1C,4EAAkD;AAClD,6EAAmD;AACnD,uFAA6D;AAC7D,oFAA0D;AAC1D,4FAAkE;AAClE,kEAAwC;AACxC,gEAAsC;AACtC,yEAA+C;AAC/C,wEAA8C;AAC9C,gFAAsD;AACtD,wFAA8D;AAC9D,4FAAkE;AAClE,2FAAiE;AACjE,uFAA6D;AAC7D,yFAA+D;AAC/D,iFAAuD;AACvD,sFAA4D;AAC5D,gGAAsE;AACtE,wFAA8D;AAC9D,yFAA+D;AAC/D,uFAA6D;AAC7D,yFAA+D;AAC/D,+FAAqE;AACrE,iGAAuE;AACvE,2FAAiE;AACjE,uFAA6D;AAC7D,uFAA6D;AAC7D,4FAAkE;AAClE,yFAA+D;AAC/D,uFAA6D;AAC7D,kFAAwD"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../libs/framework/server/jql/abstract/src/index.ts"],"names":[],"mappings":";;;AAAA,0DAAgC;AAChC,iEAAuC;AACvC,2DAAiC;AACjC,qEAA2C;AAC3C,gEAAsC;AACtC,oEAA0C;AAC1C,4EAAkD;AAClD,6EAAmD;AACnD,uFAA6D;AAC7D,oFAA0D;AAC1D,4FAAkE;AAClE,kEAAwC;AACxC,gEAAsC;AACtC,yEAA+C;AAC/C,wEAA8C;AAC9C,gFAAsD;AACtD,wFAA8D;AAC9D,4FAAkE;AAClE,2FAAiE;AACjE,uFAA6D;AAC7D,yFAA+D;AAC/D,iFAAuD;AACvD,sFAA4D;AAC5D,gGAAsE;AACtE,wFAA8D;AAC9D,yFAA+D;AAC/D,uFAA6D;AAC7D,yFAA+D;AAC/D,+FAAqE;AACrE,iGAAuE;AACvE,qFAA2D;AAC3D,wFAA8D;AAC9D,+FAAqE;AACrE,6FAAmE;AACnE,wFAA8D;AAC9D,2FAAiE;AACjE,uFAA6D;AAC7D,4FAAkE;AAClE,yFAA+D;AAC/D,uFAA6D;AAC7D,kFAAwD;AACxD,0FAAgE"}

package/jql/abstract/src/lib/datasource/storage-binding-definition.cache.d.ts

@@ -11,6 +11,10 @@ export declare const BUILTIN_MODULE_STORAGE: Record<string, AXPStorageBinding>;
  * Built-in entity storage overrides.
  * Domain.Module / Aggregate / Entity are intentionally omitted until implemented.
  * PlatformManagement catalog entities live in `definition` (`acorex_definition`).
+ *
+ * Do not set `physicalName` to the logical entity name here: on Mongo the
+ * collection name is already `Module.Entity`, and on Postgres it would override
+ * the snake_case table name and break inserts (`relation "Module.Entity" does not exist`).
  */
 export declare function builtinEntityStorage(): Record<string, AXPStorageBinding>;
 /** @deprecated Prefer {@link builtinEntityStorage} for env-aware index names. */

package/jql/abstract/src/lib/datasource/storage-binding-definition.cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage-binding-definition.cache.d.ts","sourceRoot":"","sources":["../../../../../../../../../libs/framework/server/jql/abstract/src/lib/datasource/storage-binding-definition.cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACvB,MAAM,0CAA0C,CAAC;AAElD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAI1E;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAGpE,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CA6BxE;AAED,iFAAiF;AACjF,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAA0B,CAAC;AAEhG,qBACa,6BAA8B,YAAW,8BAA8B;IAItE,OAAO,CAAC,QAAQ,CAAC,WAAW;IAHxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA0C;IACnE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0C;gBAErC,WAAW,EAAE,yBAAyB;IAMnE,SAAS,CAAC,UAAU,EAAE,mBAAmB,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IASrE,SAAS,CAAC,UAAU,EAAE,mBAAmB,GAAG,IAAI;IAQhD,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI;IAmBnE,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI;IAInE,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,cAAc;CAGtD"}
+{"version":3,"file":"storage-binding-definition.cache.d.ts","sourceRoot":"","sources":["../../../../../../../../../libs/framework/server/jql/abstract/src/lib/datasource/storage-binding-definition.cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACvB,MAAM,0CAA0C,CAAC;AAElD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAI1E;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAGpE,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CA4BxE;AAED,iFAAiF;AACjF,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAA0B,CAAC;AAEhG,qBACa,6BAA8B,YAAW,8BAA8B;IAItE,OAAO,CAAC,QAAQ,CAAC,WAAW;IAHxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA0C;IACnE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0C;gBAErC,WAAW,EAAE,yBAAyB;IAMnE,SAAS,CAAC,UAAU,EAAE,mBAAmB,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IASrE,SAAS,CAAC,UAAU,EAAE,mBAAmB,GAAG,IAAI;IAQhD,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI;IAmBnE,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI;IAInE,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,cAAc;CAGtD"}

package/jql/abstract/src/lib/datasource/storage-binding-definition.cache.js

@@ -19,26 +19,34 @@ exports.BUILTIN_MODULE_STORAGE = {
  * Built-in entity storage overrides.
  * Domain.Module / Aggregate / Entity are intentionally omitted until implemented.
  * PlatformManagement catalog entities live in `definition` (`acorex_definition`).
+ *
+ * Do not set `physicalName` to the logical entity name here: on Mongo the
+ * collection name is already `Module.Entity`, and on Postgres it would override
+ * the snake_case table name and break inserts (`relation "Module.Entity" does not exist`).
  */
 function builtinEntityStorage() {
     const insightIndex = process.env['SYSTEM_INSIGHT_ELASTICSEARCH_INDEX']?.trim() ||
         process.env['DATASOURCE_INSIGHT_INDEX']?.trim() ||
         'acorex-logs-*';
-    const definitionCatalog = (entityName) => ({
-        dataSource: 'definition',
-        physicalName: entityName,
-    });
+    const insightTracesIndex = process.env['SYSTEM_INSIGHT_TRACES_INDEX']?.trim() ||
+        process.env['DATASOURCE_INSIGHT_TRACES_INDEX']?.trim() ||
+        insightIndex.replace(/logs/g, 'traces');
+    const definitionCatalog = { dataSource: 'definition' };
     return {
         'SystemInsight.LogEntry': { dataSource: 'insight', physicalName: insightIndex },
+        'SystemInsight.TraceEntry': { dataSource: 'insight', physicalName: insightTracesIndex },
         'SystemInsight.AlertRule': { dataSource: 'storage' },
         'SystemInsight.SavedView': { dataSource: 'storage' },
         'SystemInsight.RetentionPolicy': { dataSource: 'storage' },
         'SystemInsight.ObservabilityDataSource': { dataSource: 'storage' },
         'FileStorage.File': { dataSource: 'files' },
-        'PlatformManagement.Widget': definitionCatalog('PlatformManagement.Widget'),
-        'PlatformManagement.PluginDefinition': definitionCatalog('PlatformManagement.PluginDefinition'),
-        'PlatformManagement.CommandDefinition': definitionCatalog('PlatformManagement.CommandDefinition'),
-        'PlatformManagement.QueryDefinition': definitionCatalog('PlatformManagement.QueryDefinition'),
+        'Common.VersionStream': { dataSource: 'history' },
+        'Common.VersionEntry': { dataSource: 'history' },
+        'PlatformManagement.Widget': definitionCatalog,
+        'PlatformManagement.PluginDefinition': definitionCatalog,
+        'PlatformManagement.CommandDefinition': definitionCatalog,
+        'PlatformManagement.QueryDefinition': definitionCatalog,
+        'PlatformManagement.EntityDefinition': definitionCatalog,
     };
 }
 /** @deprecated Prefer {@link builtinEntityStorage} for env-aware index names. */

package/jql/abstract/src/lib/datasource/storage-binding-definition.cache.js.map

@@ -1 +1 @@
-{"version":3,"file":"storage-binding-definition.cache.js","sourceRoot":"","sources":["../../../../../../../../../libs/framework/server/jql/abstract/src/lib/datasource/storage-binding-definition.cache.ts"],"names":[],"mappings":";;;AA2BA,oDA6BC;;AAxDD,qEAKkD;AAClD,2CAA4C;AAG5C,+EAA0E;AAE1E,4CAA4C;AAE5C;;;GAGG;AACU,QAAA,sBAAsB,GAAsC;IACvE,aAAa,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;IACxC,WAAW,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE;CACrC,CAAC;AAEF;;;;GAIG;AACH,SAAgB,oBAAoB;IAClC,MAAM,YAAY,GAChB,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,EAAE,IAAI,EAAE;QACzD,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,EAAE,IAAI,EAAE;QAC/C,eAAe,CAAC;IAElB,MAAM,iBAAiB,GAAG,CAAC,UAAkB,EAAqB,EAAE,CAAC,CAAC;QACpE,UAAU,EAAE,YAAY;QACxB,YAAY,EAAE,UAAU;KACzB,CAAC,CAAC;IAEH,OAAO;QACL,wBAAwB,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE;QAC/E,yBAAyB,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;QACpD,yBAAyB,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;QACpD,+BAA+B,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;QAC1D,uCAAuC,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;QAClE,kBAAkB,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE;QAC3C,2BAA2B,EAAE,iBAAiB,CAAC,2BAA2B,CAAC;QAC3E,qCAAqC,EAAE,iBAAiB,CACtD,qCAAqC,CACtC;QACD,sCAAsC,EAAE,iBAAiB,CACvD,sCAAsC,CACvC;QACD,oCAAoC,EAAE,iBAAiB,CACrD,oCAAoC,CACrC;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AACpE,QAAA,sBAAsB,GAAsC,oBAAoB,EAAE,CAAC;AAGzF,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;IAIxC,YAA6B,WAAsC;QAAtC,gBAAW,GAAX,WAAW,CAA2B;QAHlD,aAAQ,GAAG,IAAI,GAAG,EAA+B,CAAC;QAClD,YAAO,GAAG,IAAI,GAAG,EAA+B,CAAC;QAGhE,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,8BAAsB,CAAC,EAAE,CAAC;YACrE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,SAAS,CAAC,UAA+B,EAAE,UAAmB;QAC5D,MAAM,IAAI,GAAG,UAAU,IAAI,UAAU,CAAC,IAAI,CAAC;QAC3C,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE;YACtB,GAAG,UAAU;YACb,OAAO,EAAE,UAAU,CAAC,OAAO,IAAI,OAAO;SACvC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,UAA+B;QACvC,MAAM,OAAO,GAAG,8BAAsB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE;YAChC,GAAG,UAAU;YACb,OAAO,EAAE,UAAU,CAAC,OAAO,IAAI,OAAO;SACvC,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,UAAkB;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,UAAU;YACjB,MAAM,EAAE,EAAE;YACV,IAAI,EAAE,sBAAa,CAAC,MAAM;YAC1B,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAChC,OAAO,EAAE,OAAO;SACjB,CAAC;IACJ,CAAC;IAED,mBAAmB,CAAC,UAAkB;QACpC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;IAC9C,CAAC;IAED,iBAAiB,CAAC,UAAkB;QAClC,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC;CACF,CAAA;AArDY,sEAA6B;wCAA7B,6BAA6B;IADzC,IAAA,mBAAU,GAAE;6CAK+B,uDAAyB;GAJxD,6BAA6B,CAqDzC;AAED,YAAY"}
+{"version":3,"file":"storage-binding-definition.cache.js","sourceRoot":"","sources":["../../../../../../../../../libs/framework/server/jql/abstract/src/lib/datasource/storage-binding-definition.cache.ts"],"names":[],"mappings":";;;AA+BA,oDA4BC;;AA3DD,qEAKkD;AAClD,2CAA4C;AAG5C,+EAA0E;AAE1E,4CAA4C;AAE5C;;;GAGG;AACU,QAAA,sBAAsB,GAAsC;IACvE,aAAa,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;IACxC,WAAW,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE;CACrC,CAAC;AAEF;;;;;;;;GAQG;AACH,SAAgB,oBAAoB;IAClC,MAAM,YAAY,GAChB,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,EAAE,IAAI,EAAE;QACzD,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,EAAE,IAAI,EAAE;QAC/C,eAAe,CAAC;IAClB,MAAM,kBAAkB,GACtB,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,EAAE,IAAI,EAAE;QAClD,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,EAAE,IAAI,EAAE;QACtD,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAE1C,MAAM,iBAAiB,GAAsB,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;IAE1E,OAAO;QACL,wBAAwB,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE;QAC/E,0BAA0B,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,kBAAkB,EAAE;QACvF,yBAAyB,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;QACpD,yBAAyB,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;QACpD,+BAA+B,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;QAC1D,uCAAuC,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;QAClE,kBAAkB,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE;QAC3C,sBAAsB,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;QACjD,qBAAqB,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;QAChD,2BAA2B,EAAE,iBAAiB;QAC9C,qCAAqC,EAAE,iBAAiB;QACxD,sCAAsC,EAAE,iBAAiB;QACzD,oCAAoC,EAAE,iBAAiB;QACvD,qCAAqC,EAAE,iBAAiB;KACzD,CAAC;AACJ,CAAC;AAED,iFAAiF;AACpE,QAAA,sBAAsB,GAAsC,oBAAoB,EAAE,CAAC;AAGzF,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;IAIxC,YAA6B,WAAsC;QAAtC,gBAAW,GAAX,WAAW,CAA2B;QAHlD,aAAQ,GAAG,IAAI,GAAG,EAA+B,CAAC;QAClD,YAAO,GAAG,IAAI,GAAG,EAA+B,CAAC;QAGhE,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,8BAAsB,CAAC,EAAE,CAAC;YACrE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,SAAS,CAAC,UAA+B,EAAE,UAAmB;QAC5D,MAAM,IAAI,GAAG,UAAU,IAAI,UAAU,CAAC,IAAI,CAAC;QAC3C,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE;YACtB,GAAG,UAAU;YACb,OAAO,EAAE,UAAU,CAAC,OAAO,IAAI,OAAO;SACvC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,UAA+B;QACvC,MAAM,OAAO,GAAG,8BAAsB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE;YAChC,GAAG,UAAU;YACb,OAAO,EAAE,UAAU,CAAC,OAAO,IAAI,OAAO;SACvC,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,UAAkB;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,UAAU;YACjB,MAAM,EAAE,EAAE;YACV,IAAI,EAAE,sBAAa,CAAC,MAAM;YAC1B,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAChC,OAAO,EAAE,OAAO;SACjB,CAAC;IACJ,CAAC;IAED,mBAAmB,CAAC,UAAkB;QACpC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;IAC9C,CAAC;IAED,iBAAiB,CAAC,UAAkB;QAClC,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC;CACF,CAAA;AArDY,sEAA6B;wCAA7B,6BAA6B;IADzC,IAAA,mBAAU,GAAE;6CAK+B,uDAAyB;GAJxD,6BAA6B,CAqDzC;AAED,YAAY"}

package/jql/abstract/src/lib/entity-store/entity-access-expression.builtins.d.ts

@@ -0,0 +1,67 @@
+import type { AXPCreateScopeStamp } from './entity-access-policy.types';
+/**
+ * Named predefined expressions. Policy `read` / `write` may store a builtin
+ * name or an inline expression string.
+ */
+export declare const AXP_ACCESS_BUILTIN_EXPRESSIONS: {
+    readonly 'tenant-owner': "session.tenantId == row.tenantId";
+    readonly 'app-owner': "session.tenantId == row.tenantId && session.applicationId == row.applicationId";
+    readonly 'platform-global-read': "true";
+    readonly 'platform-only-read': "session.isPlatform";
+    readonly 'platform-only-write': "session.isPlatform";
+    readonly 'platform-omniscient-read': "session.isPlatform || session.tenantId == row.tenantId";
+    /**
+     * Platform sees all; tenants see own tenant+application rows
+     * (SystemInsight SavedView / DashboardWidgetConfig).
+     */
+    readonly 'app-omniscient-read': "session.isPlatform || (session.tenantId == row.tenantId && session.applicationId == row.applicationId)";
+    /**
+     * Identity (User): self OR active tenant+app membership (resolved into
+     * membershipUserIds before evaluation / filter build).
+     */
+    readonly 'identity-read': "session.userId == row.id || user.hasAppMembership()";
+    /**
+     * Identity profile write (User): platform, self, or the user's home tenant.
+     * Pair with a field-allowlist middleware — do not treat as full identity admin.
+     */
+    readonly 'identity-profile-write': "session.isPlatform || session.userId == row.id || session.tenantId == row.homeTenantId";
+    readonly unscoped: "true";
+    /**
+     * Platform-global rows (no tenantId) plus tenant/app-scoped customizations.
+     * Replaces the former catalog kind filter.
+     */
+    readonly 'catalog-read': "session.isPlatform || !row.tenantId || session.tenantId == row.tenantId";
+    readonly 'catalog-write': "session.isPlatform || (row.tenantId && session.tenantId == row.tenantId)";
+    /**
+     * Platform-global rows (no tenantId) plus application-scoped overlays plus
+     * tenant-wide rows (tenantId set, no applicationId) for the current tenant.
+     * Not cross-tenant omniscient — e.g. Developer (platform tenant-wide) stays
+     * invisible to product tenants.
+     */
+    readonly 'app-catalog-read': "!row.tenantId || (session.tenantId == row.tenantId && session.applicationId == row.applicationId) || (row.tenantId && session.tenantId == row.tenantId && !row.applicationId)";
+    readonly 'app-catalog-write': "session.isPlatform || (row.tenantId && session.tenantId == row.tenantId && row.applicationId && session.applicationId == row.applicationId)";
+    /**
+     * Tenant data with optional ResourceShare grants (Project).
+     */
+    readonly 'tenant-or-share-read': "session.tenantId == row.tenantId || user.hasShare(row.id)";
+    /**
+     * ResourceShare grant rows: owner or shared-with session tenant.
+     */
+    readonly 'grant-read': "session.tenantId == row.shareInfo.ownerTenantId || session.tenantId == row.shareInfo.sharedWithTenantId";
+    readonly 'grant-write': "session.tenantId == row.shareInfo.ownerTenantId || session.tenantId == row.shareInfo.sharedWithTenantId";
+    /**
+     * Membership rows (TenantUser / TenantUserAppAccess): top-level tenantId;
+     * platform sessions see all.
+     */
+    readonly 'membership-read': "session.isPlatform || session.tenantId == row.tenantId";
+    readonly 'membership-write': "session.isPlatform || session.tenantId == row.tenantId";
+};
+export type AXPAccessBuiltinName = keyof typeof AXP_ACCESS_BUILTIN_EXPRESSIONS;
+export declare function isAccessBuiltinName(value: string): value is AXPAccessBuiltinName;
+export declare function resolveAccessExpression(builtinOrExpression: string): string;
+/** Create-stamp convention derived from the write (or read) policy token. */
+export declare function createScopeStampForPolicy(options: {
+    write: string;
+    read: string;
+}): AXPCreateScopeStamp;
+//# sourceMappingURL=entity-access-expression.builtins.d.ts.map

package/jql/abstract/src/lib/entity-store/entity-access-expression.builtins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-access-expression.builtins.d.ts","sourceRoot":"","sources":["../../../../../../../../../libs/framework/server/jql/abstract/src/lib/entity-store/entity-access-expression.builtins.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAExE;;;GAGG;AACH,eAAO,MAAM,8BAA8B;;;;;;;IASzC;;;OAGG;;IAGH;;;OAGG;;IAGH;;;OAGG;;;IAIH;;;OAGG;;;IAKH;;;;;OAKG;;;IAKH;;OAEG;;IAGH;;OAEG;;;IAKH;;;OAGG;;;CAKK,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAAG,MAAM,OAAO,8BAA8B,CAAC;AAE/E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,oBAAoB,CAEhF;AAED,wBAAgB,uBAAuB,CAAC,mBAAmB,EAAE,MAAM,GAAG,MAAM,CAK3E;AAED,6EAA6E;AAC7E,wBAAgB,yBAAyB,CAAC,OAAO,EAAE;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,mBAAmB,CAuEtB"}

package/jql/abstract/src/lib/entity-store/entity-access-expression.builtins.js

@@ -0,0 +1,129 @@
+"use strict";
+//#region ---- Builtin access expressions ----
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AXP_ACCESS_BUILTIN_EXPRESSIONS = void 0;
+exports.isAccessBuiltinName = isAccessBuiltinName;
+exports.resolveAccessExpression = resolveAccessExpression;
+exports.createScopeStampForPolicy = createScopeStampForPolicy;
+/**
+ * Named predefined expressions. Policy `read` / `write` may store a builtin
+ * name or an inline expression string.
+ */
+exports.AXP_ACCESS_BUILTIN_EXPRESSIONS = {
+    'tenant-owner': 'session.tenantId == row.tenantId',
+    'app-owner': 'session.tenantId == row.tenantId && session.applicationId == row.applicationId',
+    'platform-global-read': 'true',
+    'platform-only-read': 'session.isPlatform',
+    'platform-only-write': 'session.isPlatform',
+    'platform-omniscient-read': 'session.isPlatform || session.tenantId == row.tenantId',
+    /**
+     * Platform sees all; tenants see own tenant+application rows
+     * (SystemInsight SavedView / DashboardWidgetConfig).
+     */
+    'app-omniscient-read': 'session.isPlatform || (session.tenantId == row.tenantId && session.applicationId == row.applicationId)',
+    /**
+     * Identity (User): self OR active tenant+app membership (resolved into
+     * membershipUserIds before evaluation / filter build).
+     */
+    'identity-read': 'session.userId == row.id || user.hasAppMembership()',
+    /**
+     * Identity profile write (User): platform, self, or the user's home tenant.
+     * Pair with a field-allowlist middleware — do not treat as full identity admin.
+     */
+    'identity-profile-write': 'session.isPlatform || session.userId == row.id || session.tenantId == row.homeTenantId',
+    unscoped: 'true',
+    /**
+     * Platform-global rows (no tenantId) plus tenant/app-scoped customizations.
+     * Replaces the former catalog kind filter.
+     */
+    'catalog-read': 'session.isPlatform || !row.tenantId || session.tenantId == row.tenantId',
+    'catalog-write': 'session.isPlatform || (row.tenantId && session.tenantId == row.tenantId)',
+    /**
+     * Platform-global rows (no tenantId) plus application-scoped overlays plus
+     * tenant-wide rows (tenantId set, no applicationId) for the current tenant.
+     * Not cross-tenant omniscient — e.g. Developer (platform tenant-wide) stays
+     * invisible to product tenants.
+     */
+    'app-catalog-read': '!row.tenantId || (session.tenantId == row.tenantId && session.applicationId == row.applicationId) || (row.tenantId && session.tenantId == row.tenantId && !row.applicationId)',
+    'app-catalog-write': 'session.isPlatform || (row.tenantId && session.tenantId == row.tenantId && row.applicationId && session.applicationId == row.applicationId)',
+    /**
+     * Tenant data with optional ResourceShare grants (Project).
+     */
+    'tenant-or-share-read': 'session.tenantId == row.tenantId || user.hasShare(row.id)',
+    /**
+     * ResourceShare grant rows: owner or shared-with session tenant.
+     */
+    'grant-read': 'session.tenantId == row.shareInfo.ownerTenantId || session.tenantId == row.shareInfo.sharedWithTenantId',
+    'grant-write': 'session.tenantId == row.shareInfo.ownerTenantId || session.tenantId == row.shareInfo.sharedWithTenantId',
+    /**
+     * Membership rows (TenantUser / TenantUserAppAccess): top-level tenantId;
+     * platform sessions see all.
+     */
+    'membership-read': 'session.isPlatform || session.tenantId == row.tenantId',
+    'membership-write': 'session.isPlatform || session.tenantId == row.tenantId',
+};
+function isAccessBuiltinName(value) {
+    return Object.prototype.hasOwnProperty.call(exports.AXP_ACCESS_BUILTIN_EXPRESSIONS, value);
+}
+function resolveAccessExpression(builtinOrExpression) {
+    if (isAccessBuiltinName(builtinOrExpression)) {
+        return exports.AXP_ACCESS_BUILTIN_EXPRESSIONS[builtinOrExpression];
+    }
+    return builtinOrExpression;
+}
+/** Create-stamp convention derived from the write (or read) policy token. */
+function createScopeStampForPolicy(options) {
+    const write = options.write;
+    const read = options.read;
+    if (write === 'unscoped' ||
+        read === 'unscoped' ||
+        write === 'identity-read' ||
+        read === 'identity-read' ||
+        write === 'identity-profile-write' ||
+        write === 'grant-write' ||
+        read === 'grant-read' ||
+        write === 'membership-write' ||
+        read === 'membership-read') {
+        return 'none';
+    }
+    if (write === 'app-owner' ||
+        read === 'app-owner') {
+        return 'app';
+    }
+    // Platform-only maintainers (self-policy, platform-global defs) stamp empty scope.
+    if (write === 'platform-only-write' ||
+        write === 'platform-only-read' ||
+        read === 'platform-only-read') {
+        if (read === 'platform-global-read' ||
+            read === 'platform-only-read' ||
+            read === 'catalog-read' ||
+            read === 'app-catalog-read' ||
+            write === 'catalog-write' ||
+            write === 'app-catalog-write') {
+            return 'empty';
+        }
+    }
+    if (write === 'app-catalog-write' || read === 'app-catalog-read') {
+        // Tenant sessions creating app overlays stamp app; platform creates empty
+        // platform-global rows (handled in buildCreateScopeInfo).
+        return 'app';
+    }
+    if (write === 'catalog-write' ||
+        read === 'catalog-read' ||
+        read === 'platform-global-read') {
+        // Tenant sessions creating catalog customizations stamp tenant; platform
+        // creates empty platform-global rows (handled in buildCreateScopeInfo).
+        return 'tenant';
+    }
+    if (write === 'tenant-owner' ||
+        read === 'tenant-owner' ||
+        read === 'platform-omniscient-read' ||
+        write === 'tenant-or-share-read' ||
+        read === 'tenant-or-share-read') {
+        return 'tenant';
+    }
+    // Default fail-closed convention matches default policy (tenant-owner).
+    return 'tenant';
+}
+//#endregion
+//# sourceMappingURL=entity-access-expression.builtins.js.map

package/jql/abstract/src/lib/entity-store/entity-access-expression.builtins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-access-expression.builtins.js","sourceRoot":"","sources":["../../../../../../../../../libs/framework/server/jql/abstract/src/lib/entity-store/entity-access-expression.builtins.ts"],"names":[],"mappings":";AAAA,8CAA8C;;;AA8E9C,kDAEC;AAED,0DAKC;AAGD,8DA0EC;AAhKD;;;GAGG;AACU,QAAA,8BAA8B,GAAG;IAC5C,cAAc,EAAE,kCAAkC;IAClD,WAAW,EACT,gFAAgF;IAClF,sBAAsB,EAAE,MAAM;IAC9B,oBAAoB,EAAE,oBAAoB;IAC1C,qBAAqB,EAAE,oBAAoB;IAC3C,0BAA0B,EACxB,wDAAwD;IAC1D;;;OAGG;IACH,qBAAqB,EACnB,wGAAwG;IAC1G;;;OAGG;IACH,eAAe,EACb,qDAAqD;IACvD;;;OAGG;IACH,wBAAwB,EACtB,wFAAwF;IAC1F,QAAQ,EAAE,MAAM;IAChB;;;OAGG;IACH,cAAc,EACZ,yEAAyE;IAC3E,eAAe,EACb,0EAA0E;IAC5E;;;;;OAKG;IACH,kBAAkB,EAChB,+KAA+K;IACjL,mBAAmB,EACjB,6IAA6I;IAC/I;;OAEG;IACH,sBAAsB,EACpB,2DAA2D;IAC7D;;OAEG;IACH,YAAY,EACV,yGAAyG;IAC3G,aAAa,EACX,yGAAyG;IAC3G;;;OAGG;IACH,iBAAiB,EACf,wDAAwD;IAC1D,kBAAkB,EAChB,wDAAwD;CAClD,CAAC;AAIX,SAAgB,mBAAmB,CAAC,KAAa;IAC/C,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,sCAA8B,EAAE,KAAK,CAAC,CAAC;AACrF,CAAC;AAED,SAAgB,uBAAuB,CAAC,mBAA2B;IACjE,IAAI,mBAAmB,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC7C,OAAO,sCAA8B,CAAC,mBAAmB,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED,6EAA6E;AAC7E,SAAgB,yBAAyB,CAAC,OAGzC;IACC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAE1B,IACE,KAAK,KAAK,UAAU;QACpB,IAAI,KAAK,UAAU;QACnB,KAAK,KAAK,eAAe;QACzB,IAAI,KAAK,eAAe;QACxB,KAAK,KAAK,wBAAwB;QAClC,KAAK,KAAK,aAAa;QACvB,IAAI,KAAK,YAAY;QACrB,KAAK,KAAK,kBAAkB;QAC5B,IAAI,KAAK,iBAAiB,EAC1B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IACE,KAAK,KAAK,WAAW;QACrB,IAAI,KAAK,WAAW,EACpB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mFAAmF;IACnF,IACE,KAAK,KAAK,qBAAqB;QAC/B,KAAK,KAAK,oBAAoB;QAC9B,IAAI,KAAK,oBAAoB,EAC7B,CAAC;QACD,IACE,IAAI,KAAK,sBAAsB;YAC/B,IAAI,KAAK,oBAAoB;YAC7B,IAAI,KAAK,cAAc;YACvB,IAAI,KAAK,kBAAkB;YAC3B,KAAK,KAAK,eAAe;YACzB,KAAK,KAAK,mBAAmB,EAC7B,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAED,IAAI,KAAK,KAAK,mBAAmB,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACjE,0EAA0E;QAC1E,0DAA0D;QAC1D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IACE,KAAK,KAAK,eAAe;QACzB,IAAI,KAAK,cAAc;QACvB,IAAI,KAAK,sBAAsB,EAC/B,CAAC;QACD,yEAAyE;QACzE,wEAAwE;QACxE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IACE,KAAK,KAAK,cAAc;QACxB,IAAI,KAAK,cAAc;QACvB,IAAI,KAAK,0BAA0B;QACnC,KAAK,KAAK,sBAAsB;QAChC,IAAI,KAAK,sBAAsB,EAC/B,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,wEAAwE;IACxE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,YAAY"}

package/jql/abstract/src/lib/entity-store/entity-access-expression.engine.d.ts

@@ -0,0 +1,25 @@
+import type { AXPAccessEvalContext, AXPAccessRowView, AXPAccessSession } from './entity-access-policy.types';
+/**
+ * Builds the flattened row view used by expressions.
+ * Prefer scopeInfo attributes; fall back to top-level domain fields (membership, SystemInsight).
+ */
+export declare function buildAccessRowView(record: Record<string, unknown> | null | undefined): AXPAccessRowView;
+export declare function buildAccessSession(options: {
+    userId?: string;
+    tenantId?: string;
+    applicationId?: string;
+}): AXPAccessSession;
+/**
+ * Safe, limited expression evaluator for access policies.
+ * Supports: true/false, session/row paths, ==, !=, &&, ||, !, (),
+ * and helpers user.hasAppMembership() / user.inBu(x) / user.hasShare(x).
+ * Denies on parse/eval errors.
+ */
+export declare function evaluateAccessExpression(builtinOrExpression: string, ctx: AXPAccessEvalContext): boolean;
+export declare function buildDefaultAccessEvalContext(options: {
+    session: AXPAccessSession;
+    row: AXPAccessRowView;
+    membershipUserIds?: string[];
+    sharedResourceIds?: string[];
+}): AXPAccessEvalContext;
+//# sourceMappingURL=entity-access-expression.engine.d.ts.map

package/jql/abstract/src/lib/entity-store/entity-access-expression.engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-access-expression.engine.d.ts","sourceRoot":"","sources":["../../../../../../../../../libs/framework/server/jql/abstract/src/lib/entity-store/entity-access-expression.engine.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EACjB,MAAM,8BAA8B,CAAC;AAGtC;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,GACjD,gBAAgB,CAoBlB;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,gBAAgB,CAOnB;AAwBD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,mBAAmB,EAAE,MAAM,EAC3B,GAAG,EAAE,oBAAoB,GACxB,OAAO,CAsBT;AAyMD,wBAAgB,6BAA6B,CAAC,OAAO,EAAE;IACrD,OAAO,EAAE,gBAAgB,CAAC;IAC1B,GAAG,EAAE,gBAAgB,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B,GAAG,oBAAoB,CAgBvB"}