@acorex-platform/framework-server 0.0.37 → 0.0.46

package/security/src/lib/auth/token.service.js

@@ -202,10 +202,14 @@ let TokenService = TokenService_1 = class TokenService {
         return secret;
     }
     accessTokenTtl() {
-        return process.env['JWT_ACCESS_EXPIRES_IN']?.trim() || '30m';
+        return (process.env['JWT_ACCESS_EXPIRES_IN']?.trim() ||
+            process.env['JWT_ACCESS_TOKEN_EXPIRATION']?.trim() ||
+            '30m');
     }
     refreshTokenTtl() {
-        return process.env['JWT_REFRESH_EXPIRES_IN']?.trim() || '7d';
+        return (process.env['JWT_REFRESH_EXPIRES_IN']?.trim() ||
+            process.env['JWT_REFRESH_TOKEN_EXPIRATION']?.trim() ||
+            '7d');
     }
     parseTtlToMs(ttl) {
         const match = /^(\d+)([smhd])$/i.exec(ttl.trim());

package/security/src/lib/auth/token.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"token.service.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/token.service.ts"],"names":[],"mappings":";;;;;AAAA,2CAAoD;AACpD,0DAAoC;AACpC,mCAMgB;AAChB,kEAAgE;AAChE,kEAAsE;AACtE,+CAA+D;AAyBxD,IAAM,YAAY,oBAAlB,MAAM,YAAY;IAAlB;QACY,WAAM,GAAG,IAAI,eAAM,CAAC,cAAY,CAAC,IAAI,CAAC,CAAC;QAEhD,mBAAc,GAOX,IAAI,CAAC;IAyPlB,CAAC;IAvPS,iBAAiB;QACvB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,cAAc,CAAC;QAC7B,CAAC;QAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC;QACjE,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC;QAE/D,IAAI,aAAqB,CAAC;QAC1B,IAAI,YAAoB,CAAC;QAEzB,IAAI,iBAAiB,IAAI,gBAAgB,EAAE,CAAC;YAC1C,aAAa,GAAG,iBAAiB,CAAC;YAClC,YAAY,GAAG,gBAAgB,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,yCAAyC;YACzC,oEAAoE;YACpE,MAAM,SAAS,GAAG,IAAA,4BAAmB,EAAC,KAAK,EAAE;gBAC3C,aAAa,EAAE,IAAI;gBACnB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;gBAClD,kBAAkB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE;aACrD,CAAC,CAAC;YACH,aAAa,GAAG,SAAS,CAAC,UAAU,CAAC;YACrC,YAAY,GAAG,SAAS,CAAC,SAAS,CAAC;QACrC,CAAC;QAED,MAAM,eAAe,GAAG,IAAA,wBAAe,EAAC,YAAY,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAA4B,CAAC;QAEvF,MAAM,GAAG,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAE1E,IAAI,CAAC,cAAc,GAAG;YACpB,aAAa;YACb,YAAY;YACZ,SAAS;YACT,GAAG;SACJ,CAAC;QAEF,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACH,OAAO;QACL,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACpD,OAAO;YACL,IAAI,EAAE;gBACJ;oBACE,GAAG,SAAS;oBACZ,GAAG,EAAE,KAAK;oBACV,GAAG,EAAE,OAAO;oBACZ,GAAG;iBACJ;aACF;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,cAAc;QACZ,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACxD,MAAM,UAAU,GAAG,IAAA,yBAAgB,EAAC,aAAa,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAG1E,CAAC;QACF,OAAO;YACL,IAAI,EAAE;gBACJ;oBACE,GAAG,UAAU;oBACb,GAAG,EAAE,KAAK;oBACV,GAAG,EAAE,OAAO;oBACZ,GAAG;iBACJ;aACF;SACF,CAAC;IACJ,CAAC;IAED,kBAAkB,CAAC,IAAiB,EAAE,UAA6B,EAAE;QACnE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAA,mBAAU,GAAE,CAAC;QACpD,MAAM,aAAa,GAAuB;YACxC,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,IAAI,EAAE,QAAQ;YACd,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,IAAA,mBAAU,GAAE;YACjB,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,4CAA8B;YAC/D,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;QAEF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC;QAE1C,MAAM,cAAc,GAAwB;YAC1C,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,IAAA,mBAAU,GAAE;YACjB,GAAG,EAAE,SAAS;YACd,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;SACtD,CAAC;QAEF,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE;YAC5D,SAAS,EAAE,IAAI,CAAC,cAAc,EAAkC;SACjE,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE;YAC9D,SAAS,EAAE,IAAI,CAAC,eAAe,EAAkC;SAClE,CAAC,CAAC;QAEH,OAAO;YACL,WAAW;YACX,YAAY;YACZ,SAAS,EAAE,IAAI,CAAC,cAAc,EAAE;YAChC,SAAS;YACT,OAAO;YACP,IAAI;YACJ,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC9E,WAAW,EACT,OAAO,CAAC,WAAW;gBACnB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SACjE,CAAC;IACJ,CAAC;IAED,iBAAiB,CAAC,KAAa,EAAE,gBAAyB;QACxD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAAuB,CAAC;YAC1E,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC1C,CAAC;YAED,IAAI,gBAAgB,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;gBACxB,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;oBACjD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,kBAAkB,CAAC,KAAa;QAC9B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAAwB,CAAC;YAC3E,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC/D,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,KAAa;QAC7B,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAA0C,CAAC;QAC3E,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,mBAAmB;QACjB,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,2BAA2B;QACzB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,YAAY,CACV,IAAiB,EACjB,QAAgB,EAChB,SAA+D,EAAE;QAEjE,IAAA,4CAAwB,EACtB,MAAiC,EACjC,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,EACtC,UAAU,CACX,CAAC;QAEF,MAAM,MAAM,GAAG,IAAA,sCAAkB,GAAE,CAAC;QAEpC,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAExD,OAAO,GAAG,CAAC,IAAI,CACb;YACE,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE,EACD,aAAa,EACb;YACE,SAAS,EAAE,OAAO;YAClB,KAAK,EAAE,GAAG;YACV,SAAS,EAAE,IAAI,CAAC,cAAc,EAAkC;YAChE,MAAM;YACN,QAAQ;SACT,CACF,CAAC;IACJ,CAAC;IAED,oBAAoB;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,SAAS;QACP,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC;QACjD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YACjE,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;YAC9E,OAAO,iCAAiC,CAAC;QAC3C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,cAAc;QACZ,OAAO,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC;IAC/D,CAAC;IAED,eAAe;QACb,OAAO,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;IAC/D,CAAC;IAEO,YAAY,CAAC,GAAW;QAC9B,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAC5B,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,WAAW,GAA2B,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC;QAChG,OAAO,KAAK,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,CAAC;IAClD,CAAC;CACF,CAAA;AAnQY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;GACA,YAAY,CAmQxB;AAED,YAAY"}
+{"version":3,"file":"token.service.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/auth/token.service.ts"],"names":[],"mappings":";;;;;AAAA,2CAAoD;AACpD,0DAAoC;AACpC,mCAMgB;AAChB,kEAAgE;AAChE,kEAAsE;AACtE,+CAA+D;AAyBxD,IAAM,YAAY,oBAAlB,MAAM,YAAY;IAAlB;QACY,WAAM,GAAG,IAAI,eAAM,CAAC,cAAY,CAAC,IAAI,CAAC,CAAC;QAEhD,mBAAc,GAOX,IAAI,CAAC;IAiQlB,CAAC;IA/PS,iBAAiB;QACvB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,cAAc,CAAC;QAC7B,CAAC;QAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC;QACjE,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC;QAE/D,IAAI,aAAqB,CAAC;QAC1B,IAAI,YAAoB,CAAC;QAEzB,IAAI,iBAAiB,IAAI,gBAAgB,EAAE,CAAC;YAC1C,aAAa,GAAG,iBAAiB,CAAC;YAClC,YAAY,GAAG,gBAAgB,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,yCAAyC;YACzC,oEAAoE;YACpE,MAAM,SAAS,GAAG,IAAA,4BAAmB,EAAC,KAAK,EAAE;gBAC3C,aAAa,EAAE,IAAI;gBACnB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;gBAClD,kBAAkB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE;aACrD,CAAC,CAAC;YACH,aAAa,GAAG,SAAS,CAAC,UAAU,CAAC;YACrC,YAAY,GAAG,SAAS,CAAC,SAAS,CAAC;QACrC,CAAC;QAED,MAAM,eAAe,GAAG,IAAA,wBAAe,EAAC,YAAY,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAA4B,CAAC;QAEvF,MAAM,GAAG,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAE1E,IAAI,CAAC,cAAc,GAAG;YACpB,aAAa;YACb,YAAY;YACZ,SAAS;YACT,GAAG;SACJ,CAAC;QAEF,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACH,OAAO;QACL,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACpD,OAAO;YACL,IAAI,EAAE;gBACJ;oBACE,GAAG,SAAS;oBACZ,GAAG,EAAE,KAAK;oBACV,GAAG,EAAE,OAAO;oBACZ,GAAG;iBACJ;aACF;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,cAAc;QACZ,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACxD,MAAM,UAAU,GAAG,IAAA,yBAAgB,EAAC,aAAa,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAG1E,CAAC;QACF,OAAO;YACL,IAAI,EAAE;gBACJ;oBACE,GAAG,UAAU;oBACb,GAAG,EAAE,KAAK;oBACV,GAAG,EAAE,OAAO;oBACZ,GAAG;iBACJ;aACF;SACF,CAAC;IACJ,CAAC;IAED,kBAAkB,CAAC,IAAiB,EAAE,UAA6B,EAAE;QACnE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAA,mBAAU,GAAE,CAAC;QACpD,MAAM,aAAa,GAAuB;YACxC,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,IAAI,EAAE,QAAQ;YACd,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,IAAA,mBAAU,GAAE;YACjB,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,4CAA8B;YAC/D,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;QAEF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC;QAE1C,MAAM,cAAc,GAAwB;YAC1C,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,IAAA,mBAAU,GAAE;YACjB,GAAG,EAAE,SAAS;YACd,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;SACtD,CAAC;QAEF,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE;YAC5D,SAAS,EAAE,IAAI,CAAC,cAAc,EAAkC;SACjE,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE;YAC9D,SAAS,EAAE,IAAI,CAAC,eAAe,EAAkC;SAClE,CAAC,CAAC;QAEH,OAAO;YACL,WAAW;YACX,YAAY;YACZ,SAAS,EAAE,IAAI,CAAC,cAAc,EAAE;YAChC,SAAS;YACT,OAAO;YACP,IAAI;YACJ,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC9E,WAAW,EACT,OAAO,CAAC,WAAW;gBACnB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SACjE,CAAC;IACJ,CAAC;IAED,iBAAiB,CAAC,KAAa,EAAE,gBAAyB;QACxD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAAuB,CAAC;YAC1E,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC1C,CAAC;YAED,IAAI,gBAAgB,EAAE,IAAI,EAAE,EAAE,CAAC;gBAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;gBACxB,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;oBACjD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,kBAAkB,CAAC,KAAa;QAC9B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAAwB,CAAC;YAC3E,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC/D,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,KAAa;QAC7B,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAA0C,CAAC;QAC3E,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,mBAAmB;QACjB,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,2BAA2B;QACzB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,YAAY,CACV,IAAiB,EACjB,QAAgB,EAChB,SAA+D,EAAE;QAEjE,IAAA,4CAAwB,EACtB,MAAiC,EACjC,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,EACtC,UAAU,CACX,CAAC;QAEF,MAAM,MAAM,GAAG,IAAA,sCAAkB,GAAE,CAAC;QAEpC,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAExD,OAAO,GAAG,CAAC,IAAI,CACb;YACE,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE,EACD,aAAa,EACb;YACE,SAAS,EAAE,OAAO;YAClB,KAAK,EAAE,GAAG;YACV,SAAS,EAAE,IAAI,CAAC,cAAc,EAAkC;YAChE,MAAM;YACN,QAAQ;SACT,CACF,CAAC;IACJ,CAAC;IAED,oBAAoB;QAClB,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,SAAS;QACP,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC;QACjD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YACjE,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;YAC9E,OAAO,iCAAiC,CAAC;QAC3C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,cAAc;QACZ,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE;YAC5C,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,EAAE,IAAI,EAAE;YAClD,KAAK,CACN,CAAC;IACJ,CAAC;IAED,eAAe;QACb,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,IAAI,EAAE;YAC7C,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAAE,IAAI,EAAE;YACnD,IAAI,CACL,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,GAAW;QAC9B,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAC5B,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,WAAW,GAA2B,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC;QAChG,OAAO,KAAK,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,CAAC;IAClD,CAAC;CACF,CAAA;AA3QY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,mBAAU,GAAE;GACA,YAAY,CA2QxB;AAED,YAAY"}

package/security/src/lib/entity-storage/entity-access-policy.loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity-access-policy.loader.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/entity-storage/entity-access-policy.loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AAWxF;;;GAGG;AACH,qBACa,wBAAyB,YAAW,YAAY;IAG/C,OAAO,CAAC,QAAQ,CAAC,aAAa;IAF1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6C;gBAEvC,aAAa,EAAE,8BAA8B;IAEpE,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ7B,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;CA0B9B"}
+{"version":3,"file":"entity-access-policy.loader.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/entity-storage/entity-access-policy.loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AAYxF;;;GAGG;AACH,qBACa,wBAAyB,YAAW,YAAY;IAG/C,OAAO,CAAC,QAAQ,CAAC,aAAa;IAF1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6C;gBAEvC,aAAa,EAAE,8BAA8B;IAEpE,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAW7B,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;CA0B9B"}

package/security/src/lib/entity-storage/entity-access-policy.loader.js

@@ -17,6 +17,9 @@ let EntityAccessPolicyLoader = EntityAccessPolicyLoader_1 = class EntityAccessPo
         this.logger = new common_1.Logger(EntityAccessPolicyLoader_1.name);
     }
     async onModuleInit() {
+        if ((0, abstract_1.isCliSeedProcess)()) {
+            return;
+        }
         await this.reload();
         // Schemas often register after Nest OnModuleInit — retry like PlatformScopeBootstrap.
         setTimeout(() => {

package/security/src/lib/entity-storage/entity-access-policy.loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"entity-access-policy.loader.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/entity-storage/entity-access-policy.loader.ts"],"names":[],"mappings":";;;;;AAAA,2CAAkE;AAClE,iEAAwF;AACxF,6EAMwD;AAExD,qDAAqD;AAErD;;;GAGG;AAEI,IAAM,wBAAwB,gCAA9B,MAAM,wBAAwB;IAGnC,YAA6B,aAA6C;QAA7C,kBAAa,GAAb,aAAa,CAAgC;QAFzD,WAAM,GAAG,IAAI,eAAM,CAAC,0BAAwB,CAAC,IAAI,CAAC,CAAC;IAES,CAAC;IAE9E,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,sFAAsF;QACtF,UAAU,CAAC,GAAG,EAAE;YACd,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACrB,CAAC,EAAE,IAAI,CAAC,CAAC;IACX,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,sCAA2B,EAAE;gBACzE,IAAI,EAAE,CAAC;gBACP,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE;oBACN,CAAC,8BAAmB,CAAC,EAAE,IAAI;oBAC3B,CAAC,mCAAwB,CAAC,EAAE,IAAI;iBACjC;aACF,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAkC,CAAC;YACrE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;gBACxF,OAAO;YACT,CAAC;YACD,IAAA,qCAA0B,EAAC,KAAK,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,MAAM,yBAAyB,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,mFAAmF;YACnF,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,8CACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAA;AAvCY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;6CAIiC,qCAA8B;GAH/D,wBAAwB,CAuCpC;AAED,YAAY"}
+{"version":3,"file":"entity-access-policy.loader.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/entity-storage/entity-access-policy.loader.ts"],"names":[],"mappings":";;;;;AAAA,2CAAkE;AAClE,iEAAwF;AACxF,6EAOwD;AAExD,qDAAqD;AAErD;;;GAGG;AAEI,IAAM,wBAAwB,gCAA9B,MAAM,wBAAwB;IAGnC,YAA6B,aAA6C;QAA7C,kBAAa,GAAb,aAAa,CAAgC;QAFzD,WAAM,GAAG,IAAI,eAAM,CAAC,0BAAwB,CAAC,IAAI,CAAC,CAAC;IAES,CAAC;IAE9E,KAAK,CAAC,YAAY;QAChB,IAAI,IAAA,2BAAgB,GAAE,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,sFAAsF;QACtF,UAAU,CAAC,GAAG,EAAE;YACd,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACrB,CAAC,EAAE,IAAI,CAAC,CAAC;IACX,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,sCAA2B,EAAE;gBACzE,IAAI,EAAE,CAAC;gBACP,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE;oBACN,CAAC,8BAAmB,CAAC,EAAE,IAAI;oBAC3B,CAAC,mCAAwB,CAAC,EAAE,IAAI;iBACjC;aACF,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAkC,CAAC;YACrE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;gBACxF,OAAO;YACT,CAAC;YACD,IAAA,qCAA0B,EAAC,KAAK,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,KAAK,CAAC,MAAM,yBAAyB,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,mFAAmF;YACnF,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,8CACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAA;AA1CY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;6CAIiC,qCAA8B;GAH/D,wBAAwB,CA0CpC;AAED,YAAY"}

package/security/src/lib/entity-storage/visibility-filter.middleware.d.ts

@@ -19,8 +19,7 @@ export declare class VisibilityFilterMiddleware implements EntityStorageMiddlewa
     private resolveSession;
     private loadExisting;
     /**
-     * identity-read: users with active TenantUser for session tenant AND
-     * active TenantUserAppAccess for session application (when configured).
+     * identity-read membership ids — shared leaf util (also used by relation join planner).
      * Always includes the signed-in user via expression self-check on getOne;
      * list filter uses membership ids only (self still appears if they have membership).
      */

package/security/src/lib/entity-storage/visibility-filter.middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"visibility-filter.middleware.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/entity-storage/visibility-filter.middleware.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,uBAAuB,EAGxB,MAAM,wCAAwC,CAAC;AA8BhD;;;;;;;;;;GAUG;AACH,qBACa,0BAA2B,YAAW,uBAAuB;IACxE,QAAQ,CAAC,MAAM;aAC0D,WAAW,EAAE;;MAEpF;IAEI,OAAO,CAAC,GAAG,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IA6KlF,OAAO,CAAC,cAAc;YAKR,YAAY;IAc1B;;;;;OAKG;YACW,gCAAgC;YAmFhC,wBAAwB;YAoCxB,iBAAiB;CAgBhC"}
+{"version":3,"file":"visibility-filter.middleware.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/entity-storage/visibility-filter.middleware.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,uBAAuB,EAGxB,MAAM,wCAAwC,CAAC;AA+BhD;;;;;;;;;;GAUG;AACH,qBACa,0BAA2B,YAAW,uBAAuB;IACxE,QAAQ,CAAC,MAAM;aAC0D,WAAW,EAAE;;MAEpF;IAEI,OAAO,CAAC,GAAG,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IA6KlF,OAAO,CAAC,cAAc;YAKR,YAAY;IAc1B;;;;OAIG;YACW,gCAAgC;YAYhC,wBAAwB;YAoCxB,iBAAiB;CAgBhC"}

package/security/src/lib/entity-storage/visibility-filter.middleware.js

@@ -192,85 +192,12 @@ let VisibilityFilterMiddleware = class VisibilityFilterMiddleware {
         }
     }
     /**
-     * identity-read: users with active TenantUser for session tenant AND
-     * active TenantUserAppAccess for session application (when configured).
+     * identity-read membership ids — shared leaf util (also used by relation join planner).
      * Always includes the signed-in user via expression self-check on getOne;
      * list filter uses membership ids only (self still appears if they have membership).
      */
     async resolveIdentityMembershipUserIds(ctx, tenantId, applicationId) {
-        const runtime = (0, abstract_1.getIsolationRuntimeConfig)();
-        const membershipEntity = runtime.tenantUserEntityName;
-        if (!membershipEntity) {
-            return [];
-        }
-        try {
-            const result = await ctx.backend.query(membershipEntity, {
-                skip: 0,
-                take: 10_000,
-                filter: {
-                    logic: 'and',
-                    filters: [
-                        { field: 'tenantId', operator: { type: 'equal' }, value: tenantId },
-                        {
-                            logic: 'or',
-                            filters: [
-                                { field: 'statusId', operator: { type: 'equal' }, value: 'active' },
-                                { field: 'statusId', operator: { type: 'isNull' } },
-                                { field: 'statusId', operator: { type: 'isEmpty' } },
-                            ],
-                        },
-                    ],
-                },
-                params: {
-                    [abstract_1.SCOPE_FILTER_BYPASS]: true,
-                    [abstract_1.VISIBILITY_FILTER_BYPASS]: true,
-                },
-            });
-            const tenantUsers = (result?.items ?? []);
-            let userIds = tenantUsers
-                .map((row) => row['userId'])
-                .filter((id) => typeof id === 'string' && !!id);
-            const appAccessEntity = runtime.tenantUserAppAccessEntityName;
-            if (applicationId && appAccessEntity && userIds.length) {
-                const tenantUserIds = tenantUsers
-                    .map((row) => row['id'])
-                    .filter((id) => typeof id === 'string' && !!id);
-                const appAccess = await ctx.backend.query(appAccessEntity, {
-                    skip: 0,
-                    take: 10_000,
-                    filter: {
-                        logic: 'and',
-                        filters: [
-                            { field: 'tenantUserId', operator: { type: 'in' }, value: tenantUserIds },
-                            { field: 'applicationId', operator: { type: 'equal' }, value: applicationId },
-                            {
-                                logic: 'or',
-                                filters: [
-                                    { field: 'statusId', operator: { type: 'equal' }, value: 'active' },
-                                    { field: 'statusId', operator: { type: 'isNull' } },
-                                    { field: 'statusId', operator: { type: 'isEmpty' } },
-                                ],
-                            },
-                        ],
-                    },
-                    params: {
-                        [abstract_1.SCOPE_FILTER_BYPASS]: true,
-                        [abstract_1.VISIBILITY_FILTER_BYPASS]: true,
-                    },
-                });
-                const allowedTenantUserIds = new Set((appAccess?.items ?? [])
-                    .map((row) => row['tenantUserId'])
-                    .filter((id) => typeof id === 'string' && !!id));
-                userIds = tenantUsers
-                    .filter((row) => allowedTenantUserIds.has(String(row['id'] ?? '')))
-                    .map((row) => row['userId'])
-                    .filter((id) => typeof id === 'string' && !!id);
-            }
-            return [...new Set(userIds)];
-        }
-        catch {
-            return [];
-        }
+        return (0, abstract_1.resolveIdentityMembershipUserIds)((entityName, request) => ctx.backend.query(entityName, request), tenantId, applicationId);
     }
     async resolveSharedResourceIds(ctx, tenantId, resourceType) {
         const resourceShareEntityName = (0, abstract_1.getIsolationRuntimeConfig)().resourceShareEntityName;

package/security/src/lib/entity-storage/visibility-filter.middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"visibility-filter.middleware.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/entity-storage/visibility-filter.middleware.ts"],"names":[],"mappings":";;;;AAAA,2CAA4C;AAE5C,yCAAgC;AAChC,iEAMgD;AAChD,6EAgBwD;AACxD,oFAA2E;AAS3E,MAAM,UAAU,GAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACvD,MAAM,eAAe,GAAkB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AAE9D;;;;;;;;;;GAUG;AAEI,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IAAhC;QACI,WAAM,GAAG;YAChB,GAAG,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAkB;YACpF,KAAK,EAAE,CAAC;SACT,CAAC;IA+UJ,CAAC;IA7UC,KAAK,CAAC,OAAO,CAAC,GAAyB,EAAE,IAAyB;QAChE,IACE,CAAC,GAAG,CAAC,OAAO;YACZ,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK;YAC1C,GAAG,CAAC,EAAE,KAAK,QAAQ;YACnB,GAAG,CAAC,EAAE,KAAK,QAAQ;YACnB,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAC5B,CAAC;YACD,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,8EAA8E;QAC9E,qEAAqE;QACrE,IAAI,IAAA,gCAAqB,EAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAA,gCAAqB,EAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,EAAE,CAAC;YACb,IAAI,GAAG,CAAC,UAAU,KAAK,sCAA2B,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC3G,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC;QACnC,gFAAgF;QAChF,2EAA2E;QAC3E,MAAM,gBAAgB,GACpB,IAAA,2BAAgB,EAAC,MAAM,EAAE,mCAAwB,CAAC;YAClD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,mCAAwB,CAAC,KAAK,IAAI,CAAC;QACpD,MAAM,WAAW,GACf,IAAA,2BAAgB,EAAC,MAAM,EAAE,8BAAmB,CAAC;YAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,8BAAmB,CAAC,KAAK,IAAI,CAAC;QAE/C,IAAI,gBAAgB,IAAI,WAAW,EAAE,CAAC;YACpC,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACtC,MAAM,eAAe,GAAG,OAAO,EAAE,QAAQ,CAAC;QAC1C,MAAM,oBAAoB,GAAG,OAAO,EAAE,aAAa,CAAC;QACpD,MAAM,MAAM,GAAG,IAAA,oCAAyB,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAEzD,IAAI,iBAAuC,CAAC;QAC5C,IAAI,iBAAuC,CAAC;QAE5C,IAAI,CAAC,WAAW,IAAI,eAAe,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;gBACpC,iBAAiB,GAAG,MAAM,IAAI,CAAC,gCAAgC,CAC7D,GAAG,EACH,eAAe,EACf,oBAAoB,CACrB,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBAC3C,iBAAiB,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;YAChG,CAAC;QACH,CAAC;QAED,IAAI,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YACpD,MAAM,YAAY,GAAG,IAAA,yCAA8B,EAAC;gBAClD,QAAQ,EAAE,eAAe;gBACzB,aAAa,EAAE,oBAAoB;gBACnC,MAAM,EAAE,OAAO,EAAE,MAAM;gBACvB,gBAAgB;gBAChB,WAAW;gBACX,MAAM;gBACN,iBAAiB;gBACjB,iBAAiB;aAClB,CAAC,CAAC;YAEH,IAAI,YAAY,EAAE,CAAC;gBACjB,GAAG,CAAC,OAAO,GAAG;oBACZ,GAAG,GAAG,CAAC,OAAO;oBACd,MAAM,EAAE,IAAA,+BAAoB,EAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC;iBAC/D,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,IAAI,EAAE,CAAC;YACb,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAoD,CAAC;YACxE,IACE,CAAC,IAAA,+BAAoB,EAAC;gBACpB,MAAM;gBACN,MAAM;gBACN,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE;oBACP,QAAQ,EAAE,eAAe;oBACzB,aAAa,EAAE,oBAAoB;oBACnC,MAAM,EAAE,OAAO,EAAE,MAAM;iBACxB;gBACD,iBAAiB;gBACjB,iBAAiB;aAClB,CAAC,EACF,CAAC;gBACD,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC;YACpB,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YACxB,IAAI,CAAC,WAAW,IAAI,IAAA,8BAAmB,EAAC,MAAM,CAAC,EAAE,CAAC;gBAChD,qEAAqE;gBACrE,IAAI,CAAC,eAAe,IAAI,CAAC,IAAA,kCAAuB,EAAC,eAAe,CAAC,EAAE,CAAC;oBAClE,MAAM,IAAI,2BAAoB,CAAC,oDAAoD,EAAE;wBACnF,IAAI,EAAE,gBAAgB;wBACtB,MAAM,EAAE,GAAG;qBACZ,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,MAAM,IAAI,EAAE,CAAC;YACb,IAAI,GAAG,CAAC,UAAU,KAAK,sCAA2B,EAAE,CAAC;gBACnD,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;gBAC9C,IACE,CAAC,IAAA,+BAAoB,EAAC;oBACpB,MAAM,EAAE,QAAQ;oBAChB,MAAM;oBACN,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE;wBACP,QAAQ,EAAE,eAAe;wBACzB,aAAa,EAAE,oBAAoB;wBACnC,MAAM,EAAE,OAAO,EAAE,MAAM;qBACxB;oBACD,iBAAiB;oBACjB,iBAAiB;iBAClB,CAAC,EACF,CAAC;oBACD,MAAM,IAAI,2BAAoB,CAAC,sDAAsD,EAAE;wBACrF,IAAI,EAAE,qBAAqB;wBAC3B,MAAM,EAAE,GAAG;qBACZ,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,SAAS,GAAG,IAAA,eAAG,EAAC,QAAQ,EAAE,WAAW,CAAwC,CAAC;gBACpF,MAAM,cAAc,GAAG,IAAA,kCAAuB,EAAC,eAAe,CAAC,CAAC;gBAChE,MAAM,uBAAuB,GAAG,IAAA,8BAAmB,EAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC;gBAC/E,MAAM,gBAAgB,GAAG,SAAS,EAAE,CAAC,aAAa,CAAC,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC;gBAChF,IAAI,gBAAgB,IAAI,uBAAuB,EAAE,CAAC;oBAChD,MAAM,IAAI,2BAAoB,CAAC,iDAAiD,EAAE;wBAChF,IAAI,EAAE,gBAAgB;wBACtB,MAAM,EAAE,GAAG;qBACZ,CAAC,CAAC;gBACL,CAAC;gBAED,mDAAmD;gBACnD,IAAI,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC7C,MAAM,IAAI,GAAG,EAAE,GAAI,GAAG,CAAC,IAAgC,EAAE,CAAC;oBAC1D,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC;oBACzB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;gBAClB,CAAC;YACH,CAAC;YACD,MAAM,IAAI,EAAE,CAAC;YACb,IAAI,GAAG,CAAC,UAAU,KAAK,sCAA2B,EAAE,CAAC;gBACnD,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,IAAI,EAAE,CAAC;IACf,CAAC;IAEO,cAAc;QACpB,MAAM,GAAG,GAAG,IAAA,8BAAuB,GAAoC,CAAC;QACxE,OAAO,GAAG,EAAE,CAAC,+CAAmB,CAAC,IAAI,IAAI,CAAC;IAC5C,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,GAAyB;QAClD,IAAI,GAAG,CAAC,QAAQ,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,GAAG,CAAC,QAAmC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,CAAmC,CAAC;QAC9F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,gCAAgC,CAC5C,GAAyB,EACzB,QAAgB,EAChB,aAAiC;QAEjC,MAAM,OAAO,GAAG,IAAA,oCAAyB,GAAE,CAAC;QAC5C,MAAM,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,CAAC;QACtD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE;gBACvD,IAAI,EAAE,CAAC;gBACP,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE;oBACN,KAAK,EAAE,KAAK;oBACZ,OAAO,EAAE;wBACP,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;wBACnE;4BACE,KAAK,EAAE,IAAI;4BACX,OAAO,EAAE;gCACP,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;gCACnE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;gCACnD,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;6BACrD;yBACF;qBACF;iBACF;gBACD,MAAM,EAAE;oBACN,CAAC,8BAAmB,CAAC,EAAE,IAAI;oBAC3B,CAAC,mCAAwB,CAAC,EAAE,IAAI;iBACjC;aACF,CAAC,CAAC;YACH,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAA8B,CAAC;YACvE,IAAI,OAAO,GAAG,WAAW;iBACtB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;iBAC3B,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;YAEhE,MAAM,eAAe,GAAG,OAAO,CAAC,6BAA6B,CAAC;YAC9D,IAAI,aAAa,IAAI,eAAe,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACvD,MAAM,aAAa,GAAG,WAAW;qBAC9B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;qBACvB,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;gBAChE,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE;oBACzD,IAAI,EAAE,CAAC;oBACP,IAAI,EAAE,MAAM;oBACZ,MAAM,EAAE;wBACN,KAAK,EAAE,KAAK;wBACZ,OAAO,EAAE;4BACP,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;4BACzE,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;4BAC7E;gCACE,KAAK,EAAE,IAAI;gCACX,OAAO,EAAE;oCACP,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;oCACnE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;oCACnD,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;iCACrD;6BACF;yBACF;qBACF;oBACD,MAAM,EAAE;wBACN,CAAC,8BAAmB,CAAC,EAAE,IAAI;wBAC3B,CAAC,mCAAwB,CAAC,EAAE,IAAI;qBACjC;iBACF,CAAC,CAAC;gBACH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CACjC,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAA+B;qBACpD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;qBACjC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,CAChE,CAAC;gBACF,OAAO,GAAG,WAAW;qBAClB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;qBAClE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;qBAC3B,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;YAClE,CAAC;YAED,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,wBAAwB,CACpC,GAAyB,EACzB,QAAgB,EAChB,YAAoB;QAEpB,MAAM,uBAAuB,GAAG,IAAA,oCAAyB,GAAE,CAAC,uBAAuB,CAAC;QACpF,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAC7B,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE;gBAC9D,IAAI,EAAE,CAAC;gBACP,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE;oBACN,KAAK,EAAE,KAAK;oBACZ,OAAO,EAAE;wBACP,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE;wBAChF,EAAE,KAAK,EAAE,8BAA8B,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;wBACvF,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;qBAC5E;iBACF;gBACD,MAAM,EAAE;oBACN,CAAC,8BAAmB,CAAC,EAAE,IAAI;oBAC3B,CAAC,mCAAwB,CAAC,EAAE,IAAI;iBACjC;aACF,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAA8B,CAAC;YACjE,MAAM,GAAG,GAAG,KAAK;iBACd,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAA,eAAG,EAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;iBACzC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;YAChE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,GAAyB;QACvD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,sCAA2B,EAAE;gBAClE,IAAI,EAAE,CAAC;gBACP,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE;oBACN,CAAC,8BAAmB,CAAC,EAAE,IAAI;oBAC3B,CAAC,mCAAwB,CAAC,EAAE,IAAI;iBACjC;aACF,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAkC,CAAC;YACrE,IAAA,qCAA0B,EAAC,KAAK,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;QACxD,CAAC;IACH,CAAC;CACF,CAAA;AAnVY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,mBAAU,GAAE;GACA,0BAA0B,CAmVtC;AAED,YAAY"}
+{"version":3,"file":"visibility-filter.middleware.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/entity-storage/visibility-filter.middleware.ts"],"names":[],"mappings":";;;;AAAA,2CAA4C;AAE5C,yCAAgC;AAChC,iEAMgD;AAChD,6EAiBwD;AACxD,oFAA2E;AAS3E,MAAM,UAAU,GAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACvD,MAAM,eAAe,GAAkB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AAE9D;;;;;;;;;;GAUG;AAEI,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IAAhC;QACI,WAAM,GAAG;YAChB,GAAG,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAkB;YACpF,KAAK,EAAE,CAAC;SACT,CAAC;IAuQJ,CAAC;IArQC,KAAK,CAAC,OAAO,CAAC,GAAyB,EAAE,IAAyB;QAChE,IACE,CAAC,GAAG,CAAC,OAAO;YACZ,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK;YAC1C,GAAG,CAAC,EAAE,KAAK,QAAQ;YACnB,GAAG,CAAC,EAAE,KAAK,QAAQ;YACnB,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAC5B,CAAC;YACD,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,8EAA8E;QAC9E,qEAAqE;QACrE,IAAI,IAAA,gCAAqB,EAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAA,gCAAqB,EAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,EAAE,CAAC;YACb,IAAI,GAAG,CAAC,UAAU,KAAK,sCAA2B,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC3G,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC;QACnC,gFAAgF;QAChF,2EAA2E;QAC3E,MAAM,gBAAgB,GACpB,IAAA,2BAAgB,EAAC,MAAM,EAAE,mCAAwB,CAAC;YAClD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,mCAAwB,CAAC,KAAK,IAAI,CAAC;QACpD,MAAM,WAAW,GACf,IAAA,2BAAgB,EAAC,MAAM,EAAE,8BAAmB,CAAC;YAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,8BAAmB,CAAC,KAAK,IAAI,CAAC;QAE/C,IAAI,gBAAgB,IAAI,WAAW,EAAE,CAAC;YACpC,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACtC,MAAM,eAAe,GAAG,OAAO,EAAE,QAAQ,CAAC;QAC1C,MAAM,oBAAoB,GAAG,OAAO,EAAE,aAAa,CAAC;QACpD,MAAM,MAAM,GAAG,IAAA,oCAAyB,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAEzD,IAAI,iBAAuC,CAAC;QAC5C,IAAI,iBAAuC,CAAC;QAE5C,IAAI,CAAC,WAAW,IAAI,eAAe,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;gBACpC,iBAAiB,GAAG,MAAM,IAAI,CAAC,gCAAgC,CAC7D,GAAG,EACH,eAAe,EACf,oBAAoB,CACrB,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBAC3C,iBAAiB,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;YAChG,CAAC;QACH,CAAC;QAED,IAAI,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YACpD,MAAM,YAAY,GAAG,IAAA,yCAA8B,EAAC;gBAClD,QAAQ,EAAE,eAAe;gBACzB,aAAa,EAAE,oBAAoB;gBACnC,MAAM,EAAE,OAAO,EAAE,MAAM;gBACvB,gBAAgB;gBAChB,WAAW;gBACX,MAAM;gBACN,iBAAiB;gBACjB,iBAAiB;aAClB,CAAC,CAAC;YAEH,IAAI,YAAY,EAAE,CAAC;gBACjB,GAAG,CAAC,OAAO,GAAG;oBACZ,GAAG,GAAG,CAAC,OAAO;oBACd,MAAM,EAAE,IAAA,+BAAoB,EAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC;iBAC/D,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,IAAI,EAAE,CAAC;YACb,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAoD,CAAC;YACxE,IACE,CAAC,IAAA,+BAAoB,EAAC;gBACpB,MAAM;gBACN,MAAM;gBACN,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE;oBACP,QAAQ,EAAE,eAAe;oBACzB,aAAa,EAAE,oBAAoB;oBACnC,MAAM,EAAE,OAAO,EAAE,MAAM;iBACxB;gBACD,iBAAiB;gBACjB,iBAAiB;aAClB,CAAC,EACF,CAAC;gBACD,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC;YACpB,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YACxB,IAAI,CAAC,WAAW,IAAI,IAAA,8BAAmB,EAAC,MAAM,CAAC,EAAE,CAAC;gBAChD,qEAAqE;gBACrE,IAAI,CAAC,eAAe,IAAI,CAAC,IAAA,kCAAuB,EAAC,eAAe,CAAC,EAAE,CAAC;oBAClE,MAAM,IAAI,2BAAoB,CAAC,oDAAoD,EAAE;wBACnF,IAAI,EAAE,gBAAgB;wBACtB,MAAM,EAAE,GAAG;qBACZ,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,MAAM,IAAI,EAAE,CAAC;YACb,IAAI,GAAG,CAAC,UAAU,KAAK,sCAA2B,EAAE,CAAC;gBACnD,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;gBAC9C,IACE,CAAC,IAAA,+BAAoB,EAAC;oBACpB,MAAM,EAAE,QAAQ;oBAChB,MAAM;oBACN,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE;wBACP,QAAQ,EAAE,eAAe;wBACzB,aAAa,EAAE,oBAAoB;wBACnC,MAAM,EAAE,OAAO,EAAE,MAAM;qBACxB;oBACD,iBAAiB;oBACjB,iBAAiB;iBAClB,CAAC,EACF,CAAC;oBACD,MAAM,IAAI,2BAAoB,CAAC,sDAAsD,EAAE;wBACrF,IAAI,EAAE,qBAAqB;wBAC3B,MAAM,EAAE,GAAG;qBACZ,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,SAAS,GAAG,IAAA,eAAG,EAAC,QAAQ,EAAE,WAAW,CAAwC,CAAC;gBACpF,MAAM,cAAc,GAAG,IAAA,kCAAuB,EAAC,eAAe,CAAC,CAAC;gBAChE,MAAM,uBAAuB,GAAG,IAAA,8BAAmB,EAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC;gBAC/E,MAAM,gBAAgB,GAAG,SAAS,EAAE,CAAC,aAAa,CAAC,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC;gBAChF,IAAI,gBAAgB,IAAI,uBAAuB,EAAE,CAAC;oBAChD,MAAM,IAAI,2BAAoB,CAAC,iDAAiD,EAAE;wBAChF,IAAI,EAAE,gBAAgB;wBACtB,MAAM,EAAE,GAAG;qBACZ,CAAC,CAAC;gBACL,CAAC;gBAED,mDAAmD;gBACnD,IAAI,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC7C,MAAM,IAAI,GAAG,EAAE,GAAI,GAAG,CAAC,IAAgC,EAAE,CAAC;oBAC1D,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC;oBACzB,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;gBAClB,CAAC;YACH,CAAC;YACD,MAAM,IAAI,EAAE,CAAC;YACb,IAAI,GAAG,CAAC,UAAU,KAAK,sCAA2B,EAAE,CAAC;gBACnD,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,IAAI,EAAE,CAAC;IACf,CAAC;IAEO,cAAc;QACpB,MAAM,GAAG,GAAG,IAAA,8BAAuB,GAAoC,CAAC;QACxE,OAAO,GAAG,EAAE,CAAC,+CAAmB,CAAC,IAAI,IAAI,CAAC;IAC5C,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,GAAyB;QAClD,IAAI,GAAG,CAAC,QAAQ,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,GAAG,CAAC,QAAmC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,CAAmC,CAAC;QAC9F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,gCAAgC,CAC5C,GAAyB,EACzB,QAAgB,EAChB,aAAiC;QAEjC,OAAO,IAAA,2CAAgC,EACrC,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,EAC/D,QAAQ,EACR,aAAa,CACd,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,wBAAwB,CACpC,GAAyB,EACzB,QAAgB,EAChB,YAAoB;QAEpB,MAAM,uBAAuB,GAAG,IAAA,oCAAyB,GAAE,CAAC,uBAAuB,CAAC;QACpF,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAC7B,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE;gBAC9D,IAAI,EAAE,CAAC;gBACP,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE;oBACN,KAAK,EAAE,KAAK;oBACZ,OAAO,EAAE;wBACP,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE;wBAChF,EAAE,KAAK,EAAE,8BAA8B,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;wBACvF,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;qBAC5E;iBACF;gBACD,MAAM,EAAE;oBACN,CAAC,8BAAmB,CAAC,EAAE,IAAI;oBAC3B,CAAC,mCAAwB,CAAC,EAAE,IAAI;iBACjC;aACF,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAA8B,CAAC;YACjE,MAAM,GAAG,GAAG,KAAK;iBACd,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAA,eAAG,EAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;iBACzC,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;YAChE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,GAAyB;QACvD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,sCAA2B,EAAE;gBAClE,IAAI,EAAE,CAAC;gBACP,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE;oBACN,CAAC,8BAAmB,CAAC,EAAE,IAAI;oBAC3B,CAAC,mCAAwB,CAAC,EAAE,IAAI;iBACjC;aACF,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAkC,CAAC;YACrE,IAAA,qCAA0B,EAAC,KAAK,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;QACxD,CAAC;IACH,CAAC;CACF,CAAA;AA3QY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,mBAAU,GAAE;GACA,0BAA0B,CA2QtC;AAED,YAAY"}

package/security/src/lib/oauth/oidc-provider-engine.service.js

@@ -123,9 +123,9 @@ let OidcProviderEngineService = OidcProviderEngineService_1 = class OidcProvider
                 email: ['email'],
             },
             features: {
-                // Built-in OP login/consent UI for standard clients (Keycloak, etc.).
-                // First-party SPA continues to use federation broker + Pure BFF cookies.
-                devInteractions: { enabled: process.env['NODE_ENV'] !== 'production' },
+                // Platform owns login/consent (federation broker + Pure BFF); never use
+                // oidc-provider's built-in quick-start UI — including local/dev.
+                devInteractions: { enabled: false },
                 revocation: { enabled: true },
                 introspection: { enabled: false },
                 rpInitiatedLogout: { enabled: true },

package/security/src/lib/oauth/oidc-provider-engine.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"oidc-provider-engine.service.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/oauth/oidc-provider-engine.service.ts"],"names":[],"mappings":";;;;;AAAA,2CAAkE;AAGlE,0EAAyC;AACzC,2FAAqF;AACrF,qDAAqE;AACrE,yDAAqD;AACrD,mFAA6E;AAC7E,2DAAyD;AACzD,yEAAmE;AAcnE,MAAM,QAAQ,GAAG,uBAAkD,CAAC;AAEpE,SAAS,2BAA2B;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC;IAC5E,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAGM,IAAM,yBAAyB,iCAA/B,MAAM,yBAAyB;IAMpC,YACmB,OAAmC,EACnC,WAAwC,EACxC,MAAoB;QAFpB,YAAO,GAAP,OAAO,CAA4B;QACnC,gBAAW,GAAX,WAAW,CAA6B;QACxC,WAAM,GAAN,MAAM,CAAc;QARtB,WAAM,GAAG,IAAI,eAAM,CAAC,2BAAyB,CAAC,IAAI,CAAC,CAAC;QAC7D,aAAQ,GAAgC,IAAI,CAAC;QAC7C,oBAAe,GAAgC,IAAI,CAAC;QACpD,WAAM,GAAG,EAAE,CAAC;IAMjB,CAAC;IAEJ,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,2BAA2B,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;YACpF,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sCAAsC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC;IAC/D,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,GAAY,EAAE,GAAa;QACvC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,GAAG,CAAC;QAC/C,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,IAAI,WAAW,CAAC;QAC1E,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC;QAC5B,GAAG,CAAC,GAAG,GAAG,QAAQ,CAAC;QAEnB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,eAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAe,EAAE,EAAE;gBAClD,GAAG,CAAC,GAAG,GAAG,WAAW,CAAC;gBACtB,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,KAAK,CAAC,CAAC;oBACd,OAAO;gBACT,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,IAAI,CAAC,MAAM,GAAG,IAAA,sCAAkB,GAAE,CAAC;QACnC,sFAAsF;QACtF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QAErC,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAClE,MAAM,KAAK,GAA4B;gBACrC,SAAS,EAAE,MAAM,CAAC,QAAQ;gBAC1B,0BAA0B,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB;gBAC/E,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAChE,yBAAyB,EAAE,IAAI,CAAC,OAAO,CAAC,6BAA6B,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACtF,WAAW,EAAE,CAAC,GAAG,MAAM,CAAC,iBAAiB,CAAC;gBAC1C,cAAc,EAAE,CAAC,MAAM,CAAC;gBACxB,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;aACtC,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;gBACxD,KAAK,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;YACtD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,8BAA8B,CAAC;QAEtI,oFAAoF;QACpF,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;QAE/C,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE;YACzC,OAAO,EAAE,gDAAqB;YAC9B,OAAO,EAAE,iBAAiB;YAC1B,IAAI;YACJ,OAAO,EAAE;gBACP,IAAI,EAAE,CAAC,SAAS,CAAC;aAClB;YACD,sFAAsF;YACtF,MAAM,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,CAAC;YACxD,MAAM,EAAE;gBACN,aAAa,EAAE,oBAAoB;gBACnC,KAAK,EAAE,gBAAgB;gBACvB,QAAQ,EAAE,mBAAmB;gBAC7B,UAAU,EAAE,qBAAqB;gBACjC,WAAW,EAAE,qBAAqB;gBAClC,IAAI,EAAE,wBAAwB;aAC/B;YACD,MAAM,EAAE;gBACN,MAAM,EAAE,CAAC,KAAK,CAAC;gBACf,OAAO,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;gBAC5B,KAAK,EAAE,CAAC,OAAO,CAAC;aACjB;YACD,QAAQ,EAAE;gBACR,sEAAsE;gBACtE,yEAAyE;gBACzE,eAAe,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,YAAY,EAAE;gBACtE,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;gBAC7B,aAAa,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;gBACjC,iBAAiB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;gBACpC,kBAAkB,EAAE;oBAClB,OAAO,EAAE,IAAI;oBACb,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,gBAAgB;oBAC7C,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;oBACpC,qBAAqB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;wBAClC,KAAK,EAAE,qCAAqC;wBAC5C,QAAQ,EAAE,4CAA8B;wBACxC,iBAAiB,EAAE,KAAK;qBACzB,CAAC;iBACH;aACF;YACD,IAAI,EAAE;gBACJ,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI;aACrB;YACD,WAAW,EAAE,KAAK,EAAE,IAAa,EAAE,EAAU,EAAE,EAAE;gBAC/C,MAAM,aAAa,GAAG,4EAA4E,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;gBACnH,IAAI,IAAI,GAAG,IAAwE,CAAC;gBACpF,IAAI,aAAa,EAAE,CAAC;oBAClB,IAAI,CAAC;wBACH,IAAI,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;oBAC5C,CAAC;oBAAC,MAAM,CAAC;wBACP,IAAI,GAAG,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,IAAI,GAAG,MAAM,WAAW,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAClD,CAAC;gBACD,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,OAAO,SAAS,CAAC;gBACnB,CAAC;gBAED,MAAM,KAAK,GAAG,OAAQ,IAA4B,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,IAA2B,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBAEvH,OAAO;oBACL,2EAA2E;oBAC3E,SAAS,EAAE,EAAE;oBACb,KAAK,CAAC,MAAM;wBACV,OAAO;4BACL,GAAG,EAAE,IAAK,CAAC,EAAE;4BACb,KAAK;4BACL,IAAI,EAAE,IAAK,CAAC,WAAW,IAAI,IAAK,CAAC,QAAQ,IAAI,IAAK,CAAC,EAAE;4BACrD,OAAO,EAAE,IAAK,CAAC,MAAM,IAAI,SAAS;yBACnC,CAAC;oBACJ,CAAC;iBACF,CAAC;YACJ,CAAC;YACD,gBAAgB,EAAE,KAAK,EAAE,IAAa,EAAE,KAAwB,EAAE,EAAE;gBAClE,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;oBACjC,OAAO,SAAS,CAAC;gBACnB,CAAC;gBAED,OAAO;oBACL,GAAG,EAAE,QAAQ;iBACd,CAAC;YACJ,CAAC;YACD,WAAW,EAAE,KAAK,EAAE,GAAuD,EAAE,GAA4B,EAAE,KAAY,EAAE,EAAE;gBACzH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,KAAK,EAAE,IAAI,IAAI,OAAO,KAAK,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC9G,IAAI,KAAK,EAAE,KAAK,EAAE,CAAC;oBACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACjC,CAAC;gBACD,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC;gBAClB,GAAG,CAAC,IAAI,GAAG,mCAAmC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,MAAM,CAAC,KAAK,EAAE,KAAK,IAAI,KAAK,CAAC,sBAAsB,CAAC;gBACrI,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;YACnB,CAAC;SACF,CAAC,CAAC;QAEH,QAAQ,CAAC,KAAK,GAAG,IAAI,CAAC;QAEtB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAC7C,CAAC;CACF,CAAA;AAnMY,8DAAyB;oCAAzB,yBAAyB;IADrC,IAAA,mBAAU,GAAE;6CAQiB,0DAA0B;QACtB,4DAA2B;QAChC,4BAAY;GAT5B,yBAAyB,CAmMrC;AAED,YAAY"}
+{"version":3,"file":"oidc-provider-engine.service.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/security/src/lib/oauth/oidc-provider-engine.service.ts"],"names":[],"mappings":";;;;;AAAA,2CAAkE;AAGlE,0EAAyC;AACzC,2FAAqF;AACrF,qDAAqE;AACrE,yDAAqD;AACrD,mFAA6E;AAC7E,2DAAyD;AACzD,yEAAmE;AAcnE,MAAM,QAAQ,GAAG,uBAAkD,CAAC;AAEpE,SAAS,2BAA2B;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC;IAC5E,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAGM,IAAM,yBAAyB,iCAA/B,MAAM,yBAAyB;IAMpC,YACmB,OAAmC,EACnC,WAAwC,EACxC,MAAoB;QAFpB,YAAO,GAAP,OAAO,CAA4B;QACnC,gBAAW,GAAX,WAAW,CAA6B;QACxC,WAAM,GAAN,MAAM,CAAc;QARtB,WAAM,GAAG,IAAI,eAAM,CAAC,2BAAyB,CAAC,IAAI,CAAC,CAAC;QAC7D,aAAQ,GAAgC,IAAI,CAAC;QAC7C,oBAAe,GAAgC,IAAI,CAAC;QACpD,WAAM,GAAG,EAAE,CAAC;IAMjB,CAAC;IAEJ,KAAK,CAAC,YAAY;QAChB,IAAI,CAAC,2BAA2B,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;YACpF,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,sCAAsC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC;IAC/D,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,GAAY,EAAE,GAAa;QACvC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,GAAG,CAAC;QAC/C,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,IAAI,WAAW,CAAC;QAC1E,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC;QAC5B,GAAG,CAAC,GAAG,GAAG,QAAQ,CAAC;QAEnB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,eAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAe,EAAE,EAAE;gBAClD,GAAG,CAAC,GAAG,GAAG,WAAW,CAAC;gBACtB,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,KAAK,CAAC,CAAC;oBACd,OAAO;gBACT,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,IAAI,CAAC,MAAM,GAAG,IAAA,sCAAkB,GAAE,CAAC;QACnC,sFAAsF;QACtF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QAErC,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAClE,MAAM,KAAK,GAA4B;gBACrC,SAAS,EAAE,MAAM,CAAC,QAAQ;gBAC1B,0BAA0B,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB;gBAC/E,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAChE,yBAAyB,EAAE,IAAI,CAAC,OAAO,CAAC,6BAA6B,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACtF,WAAW,EAAE,CAAC,GAAG,MAAM,CAAC,iBAAiB,CAAC;gBAC1C,cAAc,EAAE,CAAC,MAAM,CAAC;gBACxB,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;aACtC,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;gBACxD,KAAK,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;YACtD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,8BAA8B,CAAC;QAEtI,oFAAoF;QACpF,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;QAE/C,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE;YACzC,OAAO,EAAE,gDAAqB;YAC9B,OAAO,EAAE,iBAAiB;YAC1B,IAAI;YACJ,OAAO,EAAE;gBACP,IAAI,EAAE,CAAC,SAAS,CAAC;aAClB;YACD,sFAAsF;YACtF,MAAM,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,CAAC;YACxD,MAAM,EAAE;gBACN,aAAa,EAAE,oBAAoB;gBACnC,KAAK,EAAE,gBAAgB;gBACvB,QAAQ,EAAE,mBAAmB;gBAC7B,UAAU,EAAE,qBAAqB;gBACjC,WAAW,EAAE,qBAAqB;gBAClC,IAAI,EAAE,wBAAwB;aAC/B;YACD,MAAM,EAAE;gBACN,MAAM,EAAE,CAAC,KAAK,CAAC;gBACf,OAAO,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;gBAC5B,KAAK,EAAE,CAAC,OAAO,CAAC;aACjB;YACD,QAAQ,EAAE;gBACR,wEAAwE;gBACxE,iEAAiE;gBACjE,eAAe,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;gBACnC,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;gBAC7B,aAAa,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;gBACjC,iBAAiB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;gBACpC,kBAAkB,EAAE;oBAClB,OAAO,EAAE,IAAI;oBACb,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,gBAAgB;oBAC7C,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;oBACpC,qBAAqB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;wBAClC,KAAK,EAAE,qCAAqC;wBAC5C,QAAQ,EAAE,4CAA8B;wBACxC,iBAAiB,EAAE,KAAK;qBACzB,CAAC;iBACH;aACF;YACD,IAAI,EAAE;gBACJ,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI;aACrB;YACD,WAAW,EAAE,KAAK,EAAE,IAAa,EAAE,EAAU,EAAE,EAAE;gBAC/C,MAAM,aAAa,GAAG,4EAA4E,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;gBACnH,IAAI,IAAI,GAAG,IAAwE,CAAC;gBACpF,IAAI,aAAa,EAAE,CAAC;oBAClB,IAAI,CAAC;wBACH,IAAI,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;oBAC5C,CAAC;oBAAC,MAAM,CAAC;wBACP,IAAI,GAAG,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,IAAI,GAAG,MAAM,WAAW,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAClD,CAAC;gBACD,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,OAAO,SAAS,CAAC;gBACnB,CAAC;gBAED,MAAM,KAAK,GAAG,OAAQ,IAA4B,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,IAA2B,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBAEvH,OAAO;oBACL,2EAA2E;oBAC3E,SAAS,EAAE,EAAE;oBACb,KAAK,CAAC,MAAM;wBACV,OAAO;4BACL,GAAG,EAAE,IAAK,CAAC,EAAE;4BACb,KAAK;4BACL,IAAI,EAAE,IAAK,CAAC,WAAW,IAAI,IAAK,CAAC,QAAQ,IAAI,IAAK,CAAC,EAAE;4BACrD,OAAO,EAAE,IAAK,CAAC,MAAM,IAAI,SAAS;yBACnC,CAAC;oBACJ,CAAC;iBACF,CAAC;YACJ,CAAC;YACD,gBAAgB,EAAE,KAAK,EAAE,IAAa,EAAE,KAAwB,EAAE,EAAE;gBAClE,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;oBACjC,OAAO,SAAS,CAAC;gBACnB,CAAC;gBAED,OAAO;oBACL,GAAG,EAAE,QAAQ;iBACd,CAAC;YACJ,CAAC;YACD,WAAW,EAAE,KAAK,EAAE,GAAuD,EAAE,GAA4B,EAAE,KAAY,EAAE,EAAE;gBACzH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,KAAK,EAAE,IAAI,IAAI,OAAO,KAAK,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC9G,IAAI,KAAK,EAAE,KAAK,EAAE,CAAC;oBACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACjC,CAAC;gBACD,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC;gBAClB,GAAG,CAAC,IAAI,GAAG,mCAAmC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,MAAM,CAAC,KAAK,EAAE,KAAK,IAAI,KAAK,CAAC,sBAAsB,CAAC;gBACrI,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;YACnB,CAAC;SACF,CAAC,CAAC;QAEH,QAAQ,CAAC,KAAK,GAAG,IAAI,CAAC;QAEtB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAC7C,CAAC;CACF,CAAA;AAnMY,8DAAyB;oCAAzB,yBAAyB;IADrC,IAAA,mBAAU,GAAE;6CAQiB,0DAA0B;QACtB,4DAA2B;QAChC,4BAAY;GAT5B,yBAAyB,CAmMrC;AAED,YAAY"}

package/security/src/lib/security.module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"security.module.d.ts","sourceRoot":"","sources":["../../../../../../../libs/framework/server/security/src/lib/security.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,kBAAkB,EAAU,UAAU,EAAgC,MAAM,gBAAgB,CAAC;AAmC9G;;;GAGG;AACH,qBA6Ea,cAAe,YAAW,UAAU;IAC/C,SAAS,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI;CAY9C"}
+{"version":3,"file":"security.module.d.ts","sourceRoot":"","sources":["../../../../../../../libs/framework/server/security/src/lib/security.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,kBAAkB,EAAU,UAAU,EAAgC,MAAM,gBAAgB,CAAC;AAmC9G;;;GAGG;AACH,qBA8Ea,cAAe,YAAW,UAAU;IAC/C,SAAS,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI;CAY9C"}

package/security/src/lib/security.module.js

@@ -110,6 +110,7 @@ exports.SecurityModule = SecurityModule = tslib_1.__decorate([
             token_resolver_service_1.TokenResolverService,
             device_session_service_1.DeviceSessionService,
             auth_cookie_service_1.AuthCookieService,
+            auth_local_credentials_service_1.AuthLocalCredentialsService,
             saml_sp_service_1.SamlSpService,
             machine_token_service_1.MachineTokenService,
             backend_session_service_1.BackendSessionService,

package/security/src/lib/security.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"security.module.js","sourceRoot":"","sources":["../../../../../../../libs/framework/server/security/src/lib/security.module.ts"],"names":[],"mappings":";;;;AAAA,2CAA8G;AAC9G,+CAAkD;AAClD,iEAAwG;AACxG,oEAA+D;AAC/D,0FAAoF;AACpF,sDAAkD;AAClD,0EAAqE;AACrE,wEAAmE;AACnE,wEAAmE;AACnE,0EAAqE;AACrE,wDAAoD;AACpD,0DAAqD;AACrD,qEAAiE;AACjE,mEAA+D;AAC/D,2EAAsE;AACtE,+DAA0D;AAC1D,+DAA0D;AAC1D,yFAAmF;AACnF,uFAAiF;AACjF,6FAA+E;AAC/E,qFAAsE;AACtE,sEAAiE;AACjE,iEAA4D;AAC5D,8FAAwF;AACxF,0FAAqF;AACrF,0GAAoG;AACpG,gGAA2F;AAC3F,+EAA0E;AAC1E,+FAAyF;AACzF,+EAA0E;AAC1E,qFAAgF;AAChF,wEAA2F;AAE3F,4CAA4C;AAE5C;;;GAGG;AA8EI,IAAM,cAAc,GAApB,MAAM,cAAc;IACzB,SAAS,CAAC,QAA4B;QACpC,QAAQ;aACL,KAAK,CAAC,yCAAkB,CAAC;aACzB,SAAS,CACR,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,sBAAa,CAAC,IAAI,EAAE,EACrD,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,sBAAa,CAAC,IAAI,EAAE,CAC3D,CAAC;QAEJ,QAAQ;aACL,KAAK,CAAC,8DAA4B,CAAC;aACnC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,sBAAa,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9D,CAAC;CACF,CAAA;AAbY,wCAAc;yBAAd,cAAc;IA7E1B,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,CAAC,0BAAmB,EAAE,yBAAc,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3E,WAAW,EAAE,CAAC,sCAAiB,CAAC;QAChC,SAAS,EAAE;YACT,0BAAW;YACX,6CAAoB;YACpB,iCAAc;YACd,iCAAc;YACd,0DAA0B;YAC1B,wDAAyB;YACzB,sDAAoB;YACpB,+BAAa;YACb,4DAA2B;YAC3B,2CAAmB;YACnB,4BAAY;YACZ,6CAAoB;YACpB,uCAAiB;YACjB,6CAAoB;YACpB,8BAAa;YACb,2CAAmB;YACnB,+CAAqB;YACrB,+CAAqB;YACrB,6BAAY;YACZ,8DAA4B;YAC5B,yCAAkB;YAClB,yDAA0B;YAC1B,mDAAuB;YACvB,kEAA8B;YAC9B,sDAAwB;YACxB,qDAAwB;YACxB;gBACE,OAAO,EAAE,6CAAe;gBACxB,WAAW,EAAE,sDAAoB;aAClC;YACD;gBACE,OAAO,EAAE,8BAA8B;gBACvC,QAAQ,EACN,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,MAAM;oBAC7E,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,YAAY;aAClE;YACD,GAAG,6CAAqB;YACxB,GAAG,4CAAoB;YACvB;gBACE,OAAO,EAAE,gCAAyB;gBAClC,WAAW,EAAE,yDAA0B;gBACvC,KAAK,EAAE,IAAI;aACA;YACb;gBACE,OAAO,EAAE,gCAAyB;gBAClC,WAAW,EAAE,mDAAuB;gBACpC,KAAK,EAAE,IAAI;aACA;SACd;QACD,OAAO,EAAE;YACP,0BAAW;YACX,4BAAY;YACZ,6CAAoB;YACpB,6CAAoB;YACpB,uCAAiB;YACjB,+BAAa;YACb,2CAAmB;YACnB,+CAAqB;YACrB,+CAAqB;YACrB,6BAAY;YACZ,yDAA0B;YAC1B,mDAAuB;YACvB,sDAAwB;YACxB,qDAAwB;YACxB,iCAAc;YACd,iCAAc;YACd,0DAA0B;YAC1B,wDAAyB;YACzB,sDAAoB;YACpB,gCAAyB;SAC1B;KACF,CAAC;GACW,cAAc,CAa1B;AAED,YAAY"}
+{"version":3,"file":"security.module.js","sourceRoot":"","sources":["../../../../../../../libs/framework/server/security/src/lib/security.module.ts"],"names":[],"mappings":";;;;AAAA,2CAA8G;AAC9G,+CAAkD;AAClD,iEAAwG;AACxG,oEAA+D;AAC/D,0FAAoF;AACpF,sDAAkD;AAClD,0EAAqE;AACrE,wEAAmE;AACnE,wEAAmE;AACnE,0EAAqE;AACrE,wDAAoD;AACpD,0DAAqD;AACrD,qEAAiE;AACjE,mEAA+D;AAC/D,2EAAsE;AACtE,+DAA0D;AAC1D,+DAA0D;AAC1D,yFAAmF;AACnF,uFAAiF;AACjF,6FAA+E;AAC/E,qFAAsE;AACtE,sEAAiE;AACjE,iEAA4D;AAC5D,8FAAwF;AACxF,0FAAqF;AACrF,0GAAoG;AACpG,gGAA2F;AAC3F,+EAA0E;AAC1E,+FAAyF;AACzF,+EAA0E;AAC1E,qFAAgF;AAChF,wEAA2F;AAE3F,4CAA4C;AAE5C;;;GAGG;AA+EI,IAAM,cAAc,GAApB,MAAM,cAAc;IACzB,SAAS,CAAC,QAA4B;QACpC,QAAQ;aACL,KAAK,CAAC,yCAAkB,CAAC;aACzB,SAAS,CACR,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,sBAAa,CAAC,IAAI,EAAE,EACrD,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,sBAAa,CAAC,IAAI,EAAE,CAC3D,CAAC;QAEJ,QAAQ;aACL,KAAK,CAAC,8DAA4B,CAAC;aACnC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,sBAAa,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9D,CAAC;CACF,CAAA;AAbY,wCAAc;yBAAd,cAAc;IA9E1B,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,CAAC,0BAAmB,EAAE,yBAAc,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3E,WAAW,EAAE,CAAC,sCAAiB,CAAC;QAChC,SAAS,EAAE;YACT,0BAAW;YACX,6CAAoB;YACpB,iCAAc;YACd,iCAAc;YACd,0DAA0B;YAC1B,wDAAyB;YACzB,sDAAoB;YACpB,+BAAa;YACb,4DAA2B;YAC3B,2CAAmB;YACnB,4BAAY;YACZ,6CAAoB;YACpB,uCAAiB;YACjB,6CAAoB;YACpB,8BAAa;YACb,2CAAmB;YACnB,+CAAqB;YACrB,+CAAqB;YACrB,6BAAY;YACZ,8DAA4B;YAC5B,yCAAkB;YAClB,yDAA0B;YAC1B,mDAAuB;YACvB,kEAA8B;YAC9B,sDAAwB;YACxB,qDAAwB;YACxB;gBACE,OAAO,EAAE,6CAAe;gBACxB,WAAW,EAAE,sDAAoB;aAClC;YACD;gBACE,OAAO,EAAE,8BAA8B;gBACvC,QAAQ,EACN,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,MAAM;oBAC7E,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,YAAY;aAClE;YACD,GAAG,6CAAqB;YACxB,GAAG,4CAAoB;YACvB;gBACE,OAAO,EAAE,gCAAyB;gBAClC,WAAW,EAAE,yDAA0B;gBACvC,KAAK,EAAE,IAAI;aACA;YACb;gBACE,OAAO,EAAE,gCAAyB;gBAClC,WAAW,EAAE,mDAAuB;gBACpC,KAAK,EAAE,IAAI;aACA;SACd;QACD,OAAO,EAAE;YACP,0BAAW;YACX,4BAAY;YACZ,6CAAoB;YACpB,6CAAoB;YACpB,uCAAiB;YACjB,4DAA2B;YAC3B,+BAAa;YACb,2CAAmB;YACnB,+CAAqB;YACrB,+CAAqB;YACrB,6BAAY;YACZ,yDAA0B;YAC1B,mDAAuB;YACvB,sDAAwB;YACxB,qDAAwB;YACxB,iCAAc;YACd,iCAAc;YACd,0DAA0B;YAC1B,wDAAyB;YACzB,sDAAoB;YACpB,gCAAyB;SAC1B;KACF,CAAC;GACW,cAAc,CAa1B;AAED,YAAY"}

package/workflow/src/index.d.ts

@@ -1,4 +1,6 @@
 export * from './lib/workflow.module';
+export { WorkflowJobDispatcherService } from './lib/jobs/workflow-job-dispatcher.service';
+export { isDuplicateWorkflowJobError, workflowDispatchOutcomeForKeptJob, workflowStartJobAction, workflowStartJobId, type WorkflowDispatchOutcome, type WorkflowStartJobAction, type WorkflowStartJobState, } from './lib/jobs/workflow-start-idempotency';
 export * from './lib/runtime/workflow-engine.service';
 export * from './lib/runtime/workflow-runtime.types';
 export * from './lib/runtime/workflow-instance.types';

package/workflow/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../libs/framework/server/workflow/src/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,uCAAuC,CAAC;AACtD,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AACtD,cAAc,yCAAyC,CAAC;AACxD,cAAc,sCAAsC,CAAC;AACrD,cAAc,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../libs/framework/server/workflow/src/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,OAAO,EAAE,4BAA4B,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,EACL,2BAA2B,EAC3B,iCAAiC,EACjC,sBAAsB,EACtB,kBAAkB,EAClB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,GAC3B,MAAM,uCAAuC,CAAC;AAC/C,cAAc,uCAAuC,CAAC;AACtD,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AACtD,cAAc,yCAAyC,CAAC;AACxD,cAAc,sCAAsC,CAAC;AACrD,cAAc,kBAAkB,CAAC"}

package/workflow/src/index.js

@@ -1,7 +1,15 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.workflowStartJobId = exports.workflowStartJobAction = exports.workflowDispatchOutcomeForKeptJob = exports.isDuplicateWorkflowJobError = exports.WorkflowJobDispatcherService = void 0;
 const tslib_1 = require("tslib");
 tslib_1.__exportStar(require("./lib/workflow.module"), exports);
+var workflow_job_dispatcher_service_1 = require("./lib/jobs/workflow-job-dispatcher.service");
+Object.defineProperty(exports, "WorkflowJobDispatcherService", { enumerable: true, get: function () { return workflow_job_dispatcher_service_1.WorkflowJobDispatcherService; } });
+var workflow_start_idempotency_1 = require("./lib/jobs/workflow-start-idempotency");
+Object.defineProperty(exports, "isDuplicateWorkflowJobError", { enumerable: true, get: function () { return workflow_start_idempotency_1.isDuplicateWorkflowJobError; } });
+Object.defineProperty(exports, "workflowDispatchOutcomeForKeptJob", { enumerable: true, get: function () { return workflow_start_idempotency_1.workflowDispatchOutcomeForKeptJob; } });
+Object.defineProperty(exports, "workflowStartJobAction", { enumerable: true, get: function () { return workflow_start_idempotency_1.workflowStartJobAction; } });
+Object.defineProperty(exports, "workflowStartJobId", { enumerable: true, get: function () { return workflow_start_idempotency_1.workflowStartJobId; } });
 tslib_1.__exportStar(require("./lib/runtime/workflow-engine.service"), exports);
 tslib_1.__exportStar(require("./lib/runtime/workflow-runtime.types"), exports);
 tslib_1.__exportStar(require("./lib/runtime/workflow-instance.types"), exports);

package/workflow/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../libs/framework/server/workflow/src/index.ts"],"names":[],"mappings":";;;AAAA,gEAAsC;AACtC,gFAAsD;AACtD,+EAAqD;AACrD,gFAAsD;AACtD,kFAAwD;AACxD,+EAAqD;AACrD,2DAAiC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../libs/framework/server/workflow/src/index.ts"],"names":[],"mappings":";;;;AAAA,gEAAsC;AACtC,8FAA0F;AAAjF,+IAAA,4BAA4B,OAAA;AACrC,oFAQ+C;AAP7C,yIAAA,2BAA2B,OAAA;AAC3B,+IAAA,iCAAiC,OAAA;AACjC,oIAAA,sBAAsB,OAAA;AACtB,gIAAA,kBAAkB,OAAA;AAKpB,gFAAsD;AACtD,+EAAqD;AACrD,gFAAsD;AACtD,kFAAwD;AACxD,+EAAqD;AACrD,2DAAiC"}

package/workflow/src/lib/activities/workflow-request-session.adapter.d.ts

@@ -1,13 +1,16 @@
 import type { WorkflowActivitySessionReader } from './workflow-activity-execution.types';
 /** Must match {@link CURRENT_SESSION_KEY} in platform security. */
 declare const REQUEST_SESSION_KEY = "acxRequestSession";
+type RequestSession = {
+    userId?: string;
+    tenantId?: string;
+    applicationId?: string;
+};
 type RequestWithSession = {
-    [REQUEST_SESSION_KEY]?: {
-        userId?: string;
-    };
+    [REQUEST_SESSION_KEY]?: RequestSession;
 };
 /**
- * Reads the authenticated user id for workflow activities.
+ * Reads the authenticated session for workflow activities.
  * Prefers the entity-storage ALS request (runtime + HTTP middleware) so Nest
  * request-scope alone is not required when {@link REQUEST} is unavailable.
  */
@@ -15,6 +18,9 @@ export declare class WorkflowRequestSessionAdapter implements WorkflowActivitySe
     private readonly request?;
     constructor(request?: RequestWithSession | undefined);
     get userId(): string | undefined;
+    get tenantId(): string | undefined;
+    get applicationId(): string | undefined;
+    private get session();
 }
 export {};
 //# sourceMappingURL=workflow-request-session.adapter.d.ts.map

package/workflow/src/lib/activities/workflow-request-session.adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-request-session.adapter.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/workflow/src/lib/activities/workflow-request-session.adapter.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,qCAAqC,CAAC;AAIzF,mEAAmE;AACnE,QAAA,MAAM,mBAAmB,sBAAsB,CAAC;AAEhD,KAAK,kBAAkB,GAAG;IACxB,CAAC,mBAAmB,CAAC,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7C,CAAC;AAEF;;;;GAIG;AACH,qBACa,6BAA8B,YAAW,6BAA6B;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAR,OAAO,CAAC,EAAE,kBAAkB,YAAA;IAEtF,IAAI,MAAM,IAAI,MAAM,GAAG,SAAS,CAM/B;CACF"}
+{"version":3,"file":"workflow-request-session.adapter.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/workflow/src/lib/activities/workflow-request-session.adapter.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,qCAAqC,CAAC;AAIzF,mEAAmE;AACnE,QAAA,MAAM,mBAAmB,sBAAsB,CAAC;AAEhD,KAAK,cAAc,GAAG;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,KAAK,kBAAkB,GAAG;IACxB,CAAC,mBAAmB,CAAC,CAAC,EAAE,cAAc,CAAC;CACxC,CAAC;AAEF;;;;GAIG;AACH,qBACa,6BAA8B,YAAW,6BAA6B;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAR,OAAO,CAAC,EAAE,kBAAkB,YAAA;IAEtF,IAAI,MAAM,IAAI,MAAM,GAAG,SAAS,CAE/B;IAED,IAAI,QAAQ,IAAI,MAAM,GAAG,SAAS,CAEjC;IAED,IAAI,aAAa,IAAI,MAAM,GAAG,SAAS,CAEtC;IAED,OAAO,KAAK,OAAO,GAGlB;CACF"}

package/workflow/src/lib/activities/workflow-request-session.adapter.js

@@ -9,7 +9,7 @@ const core_2 = require("@nestjs/core");
 /** Must match {@link CURRENT_SESSION_KEY} in platform security. */
 const REQUEST_SESSION_KEY = 'acxRequestSession';
 /**
- * Reads the authenticated user id for workflow activities.
+ * Reads the authenticated session for workflow activities.
  * Prefers the entity-storage ALS request (runtime + HTTP middleware) so Nest
  * request-scope alone is not required when {@link REQUEST} is unavailable.
  */
@@ -18,10 +18,17 @@ let WorkflowRequestSessionAdapter = class WorkflowRequestSessionAdapter {
         this.request = request;
     }
     get userId() {
+        return this.session?.userId;
+    }
+    get tenantId() {
+        return this.session?.tenantId;
+    }
+    get applicationId() {
+        return this.session?.applicationId;
+    }
+    get session() {
         const active = (0, core_1.getEntityStorageRequest)();
-        const session = active?.[REQUEST_SESSION_KEY] ??
-            this.request?.[REQUEST_SESSION_KEY];
-        return session?.userId;
+        return active?.[REQUEST_SESSION_KEY] ?? this.request?.[REQUEST_SESSION_KEY];
     }
 };
 exports.WorkflowRequestSessionAdapter = WorkflowRequestSessionAdapter;

package/workflow/src/lib/activities/workflow-request-session.adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-request-session.adapter.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/workflow/src/lib/activities/workflow-request-session.adapter.ts"],"names":[],"mappings":";;;;AAAA,iEAAiF;AACjF,2CAA8D;AAC9D,uCAAuC;AAGvC,2CAA2C;AAE3C,mEAAmE;AACnE,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAMhD;;;;GAIG;AAEI,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;IACxC,YAA0D,OAA4B;QAA5B,YAAO,GAAP,OAAO,CAAqB;IAAG,CAAC;IAE1F,IAAI,MAAM;QACR,MAAM,MAAM,GAAG,IAAA,8BAAuB,GAAoC,CAAC;QAC3E,MAAM,OAAO,GACX,MAAM,EAAE,CAAC,mBAAmB,CAAC;YAC7B,IAAI,CAAC,OAAO,EAAE,CAAC,mBAAmB,CAAC,CAAC;QACtC,OAAO,OAAO,EAAE,MAAM,CAAC;IACzB,CAAC;CACF,CAAA;AAVY,sEAA6B;wCAA7B,6BAA6B;IADzC,IAAA,mBAAU,GAAE;IAEE,mBAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,mBAAA,IAAA,eAAM,EAAC,cAAO,CAAC,CAAA;;GAD7B,6BAA6B,CAUzC;AAED,YAAY"}
+{"version":3,"file":"workflow-request-session.adapter.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/workflow/src/lib/activities/workflow-request-session.adapter.ts"],"names":[],"mappings":";;;;AAAA,iEAAiF;AACjF,2CAA8D;AAC9D,uCAAuC;AAGvC,2CAA2C;AAE3C,mEAAmE;AACnE,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAYhD;;;;GAIG;AAEI,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;IACxC,YAA0D,OAA4B;QAA5B,YAAO,GAAP,OAAO,CAAqB;IAAG,CAAC;IAE1F,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;IAC9B,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC;IAChC,CAAC;IAED,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC;IACrC,CAAC;IAED,IAAY,OAAO;QACjB,MAAM,MAAM,GAAG,IAAA,8BAAuB,GAAoC,CAAC;QAC3E,OAAO,MAAM,EAAE,CAAC,mBAAmB,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,mBAAmB,CAAC,CAAC;IAC9E,CAAC;CACF,CAAA;AAnBY,sEAA6B;wCAA7B,6BAA6B;IADzC,IAAA,mBAAU,GAAE;IAEE,mBAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,mBAAA,IAAA,eAAM,EAAC,cAAO,CAAC,CAAA;;GAD7B,6BAA6B,CAmBzC;AAED,YAAY"}

package/workflow/src/lib/jobs/workflow-job-dispatcher.service.d.ts

@@ -5,6 +5,7 @@ import { EntityStorageMiddlewareService } from '@acorex-platform/framework-serve
 import type { AXPStartWorkflowRequest } from '../runtime/workflow-runtime.types';
 import type { SyncEntityRecordWorkflowInfoParams } from '../runtime/entity-workflow-info.sync';
 import type { WorkflowStartJobPayload } from './workflow-start-job.types';
+import { type WorkflowDispatchOutcome } from './workflow-start-idempotency';
 /**
  * Enqueues workflow starts on BullMQ when a queue is available; otherwise runs inline.
  */
@@ -15,7 +16,15 @@ export declare class WorkflowJobDispatcherService {
     private readonly queue;
     private readonly logger;
     constructor(engine: BackendWorkflowEngineService, entityStorage: EntityStorageMiddlewareService, store: WorkflowExecutionStoreService, queue: Queue<WorkflowStartJobPayload> | null);
-    dispatchStart(request: AXPStartWorkflowRequest, syncEntity?: SyncEntityRecordWorkflowInfoParams): Promise<void>;
+    dispatchStart(request: AXPStartWorkflowRequest, syncEntity?: SyncEntityRecordWorkflowInfoParams, options?: {
+        jobId?: string;
+        replaceTerminal?: boolean;
+    }): Promise<WorkflowDispatchOutcome>;
+    private readonly inlineStarts;
+    private jobOptions;
+    private enqueueOnce;
+    private readJobState;
+    private runInlineOnce;
     runStart(payload: WorkflowStartJobPayload): Promise<void>;
 }
 //# sourceMappingURL=workflow-job-dispatcher.service.d.ts.map

package/workflow/src/lib/jobs/workflow-job-dispatcher.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-job-dispatcher.service.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/workflow/src/lib/jobs/workflow-job-dispatcher.service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,EAAE,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AAC5F,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AAExF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AACjF,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAE/F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAI1E;;GAEG;AACH,qBACa,4BAA4B;IAIrC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACkC,OAAO,CAAC,QAAQ,CAAC,KAAK;IANhF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiD;gBAGrD,MAAM,EAAE,4BAA4B,EACpC,aAAa,EAAE,8BAA8B,EAC7C,KAAK,EAAE,6BAA6B,EACoB,KAAK,EAAE,KAAK,CAAC,uBAAuB,CAAC,GAAG,IAAI;IAGjH,aAAa,CACjB,OAAO,EAAE,uBAAuB,EAChC,UAAU,CAAC,EAAE,kCAAkC,GAC9C,OAAO,CAAC,IAAI,CAAC;IAeV,QAAQ,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;CAWhE"}
+{"version":3,"file":"workflow-job-dispatcher.service.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/workflow/src/lib/jobs/workflow-job-dispatcher.service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,EAAE,6BAA6B,EAAE,MAAM,6CAA6C,CAAC;AAC5F,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AAExF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AACjF,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAE/F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EAIL,KAAK,uBAAuB,EAE7B,MAAM,8BAA8B,CAAC;AAItC;;GAEG;AACH,qBACa,4BAA4B;IAIrC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACkC,OAAO,CAAC,QAAQ,CAAC,KAAK;IANhF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiD;gBAGrD,MAAM,EAAE,4BAA4B,EACpC,aAAa,EAAE,8BAA8B,EAC7C,KAAK,EAAE,6BAA6B,EACoB,KAAK,EAAE,KAAK,CAAC,uBAAuB,CAAC,GAAG,IAAI;IAGjH,aAAa,CACjB,OAAO,EAAE,uBAAuB,EAChC,UAAU,CAAC,EAAE,kCAAkC,EAC/C,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GACtD,OAAO,CAAC,uBAAuB,CAAC;IAenC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoC;IAEjE,OAAO,CAAC,UAAU;YAUJ,WAAW;YAyBX,YAAY;YAoBZ,aAAa;IAiBrB,QAAQ,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;CAWhE"}

package/workflow/src/lib/jobs/workflow-job-dispatcher.service.js

@@ -10,6 +10,7 @@ const workflow_execution_store_service_1 = require("../runtime/workflow-executio
 const core_1 = require("@acorex-platform/framework-server/core");
 const entity_workflow_info_sync_1 = require("../runtime/entity-workflow-info.sync");
 const workflow_jobs_constants_1 = require("./workflow-jobs.constants");
+const workflow_start_idempotency_1 = require("./workflow-start-idempotency");
 //#region ---- Workflow job dispatcher ----
 /**
  * Enqueues workflow starts on BullMQ when a queue is available; otherwise runs inline.
@@ -21,19 +22,83 @@ let WorkflowJobDispatcherService = WorkflowJobDispatcherService_1 = class Workfl
         this.store = store;
         this.queue = queue;
         this.logger = new common_1.Logger(WorkflowJobDispatcherService_1.name);
+        this.inlineStarts = new Map();
     }
-    async dispatchStart(request, syncEntity) {
+    async dispatchStart(request, syncEntity, options) {
+        const payload = { request, syncEntity };
+        if (this.queue && options?.jobId) {
+            return this.enqueueOnce(options.jobId, payload, options.replaceTerminal === true);
+        }
         if (this.queue) {
-            await this.queue.add(workflow_jobs_constants_1.WORKFLOW_JOB_START, { request, syncEntity }, {
-                removeOnComplete: 1000,
-                removeOnFail: 5000,
-                attempts: 3,
-                backoff: { type: 'exponential', delay: 1000 },
-            });
-            return;
+            await this.queue.add(workflow_jobs_constants_1.WORKFLOW_JOB_START, payload, this.jobOptions());
+            return 'enqueued';
         }
         this.logger.debug('Workflow queue unavailable — starting workflow inline');
-        await this.runStart({ request, syncEntity });
+        await this.runInlineOnce(options?.jobId, payload);
+        return 'started';
+    }
+    jobOptions(jobId) {
+        return {
+            jobId,
+            removeOnComplete: 1000,
+            removeOnFail: 5000,
+            attempts: 3,
+            backoff: { type: 'exponential', delay: 1000 },
+        };
+    }
+    async enqueueOnce(jobId, payload, replaceTerminal) {
+        const existing = await this.queue?.getJob(jobId);
+        const state = await this.readJobState(existing);
+        const action = (0, workflow_start_idempotency_1.workflowStartJobAction)(state, replaceTerminal);
+        if (action === 'keep') {
+            return (0, workflow_start_idempotency_1.workflowDispatchOutcomeForKeptJob)(state);
+        }
+        if (action === 'replace-failed' && existing) {
+            await existing.remove();
+        }
+        try {
+            await this.queue?.add(workflow_jobs_constants_1.WORKFLOW_JOB_START, payload, this.jobOptions(jobId));
+        }
+        catch (error) {
+            if ((0, workflow_start_idempotency_1.isDuplicateWorkflowJobError)(error)) {
+                return 'pending';
+            }
+            throw error;
+        }
+        return 'enqueued';
+    }
+    async readJobState(job) {
+        if (!job) {
+            return 'missing';
+        }
+        const state = await job.getState();
+        if (state === 'waiting' ||
+            state === 'active' ||
+            state === 'delayed' ||
+            state === 'paused' ||
+            state === 'prioritized' ||
+            state === 'waiting-children' ||
+            state === 'failed' ||
+            state === 'completed') {
+            return state;
+        }
+        return 'unknown';
+    }
+    async runInlineOnce(jobId, payload) {
+        if (!jobId) {
+            await this.runStart(payload);
+            return;
+        }
+        const current = this.inlineStarts.get(jobId);
+        if (current) {
+            await current;
+            return;
+        }
+        const run = this.runStart(payload).finally(() => {
+            this.inlineStarts.delete(jobId);
+        });
+        this.inlineStarts.set(jobId, run);
+        await run;
     }
     async runStart(payload) {
         const result = await this.engine.start(payload.request);

package/workflow/src/lib/jobs/workflow-job-dispatcher.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-job-dispatcher.service.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/workflow/src/lib/jobs/workflow-job-dispatcher.service.ts"],"names":[],"mappings":";;;;;AAAA,2CAAsE;AACtE,2CAA+C;AAE/C,gFAAkF;AAClF,kGAA4F;AAC5F,iEAAwF;AACxF,oFAAoF;AAGpF,uEAAoF;AAGpF,2CAA2C;AAE3C;;GAEG;AAEI,IAAM,4BAA4B,oCAAlC,MAAM,4BAA4B;IAGvC,YACmB,MAAoC,EACpC,aAA6C,EAC7C,KAAoC,EACG,KAA6D;QAHpG,WAAM,GAAN,MAAM,CAA8B;QACpC,kBAAa,GAAb,aAAa,CAAgC;QAC7C,UAAK,GAAL,KAAK,CAA+B;QACoB,UAAK,GAAL,KAAK,CAAuC;QANtG,WAAM,GAAG,IAAI,eAAM,CAAC,8BAA4B,CAAC,IAAI,CAAC,CAAC;IAOrE,CAAC;IAEJ,KAAK,CAAC,aAAa,CACjB,OAAgC,EAChC,UAA+C;QAE/C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,4CAAkB,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE;gBAChE,gBAAgB,EAAE,IAAI;gBACtB,YAAY,EAAE,IAAI;gBAClB,QAAQ,EAAE,CAAC;gBACX,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE;aAC9C,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgC;QAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,EAAE,UAAU,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,MAAM,IAAA,wDAA4B,EAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,EAAE;YACjE,GAAG,OAAO,CAAC,UAAU;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAvCY,oEAA4B;uCAA5B,4BAA4B;IADxC,IAAA,mBAAU,GAAE;IAQR,mBAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,mBAAA,IAAA,eAAM,EAAC,IAAA,sBAAa,EAAC,6CAAmB,CAAC,CAAC,CAAA;6CAH9B,sDAA4B;QACrB,qCAA8B;QACtC,gEAA6B;GAN5C,4BAA4B,CAuCxC;AAED,YAAY"}
+{"version":3,"file":"workflow-job-dispatcher.service.js","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/workflow/src/lib/jobs/workflow-job-dispatcher.service.ts"],"names":[],"mappings":";;;;;AAAA,2CAAsE;AACtE,2CAA+C;AAE/C,gFAAkF;AAClF,kGAA4F;AAC5F,iEAAwF;AACxF,oFAAoF;AAGpF,uEAAoF;AAEpF,6EAMsC;AAEtC,2CAA2C;AAE3C;;GAEG;AAEI,IAAM,4BAA4B,oCAAlC,MAAM,4BAA4B;IAGvC,YACmB,MAAoC,EACpC,aAA6C,EAC7C,KAAoC,EACG,KAA6D;QAHpG,WAAM,GAAN,MAAM,CAA8B;QACpC,kBAAa,GAAb,aAAa,CAAgC;QAC7C,UAAK,GAAL,KAAK,CAA+B;QACoB,UAAK,GAAL,KAAK,CAAuC;QANtG,WAAM,GAAG,IAAI,eAAM,CAAC,8BAA4B,CAAC,IAAI,CAAC,CAAC;QA4BvD,iBAAY,GAAG,IAAI,GAAG,EAAyB,CAAC;IArB9D,CAAC;IAEJ,KAAK,CAAC,aAAa,CACjB,OAAgC,EAChC,UAA+C,EAC/C,OAAuD;QAEvD,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,KAAK,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,4CAAkB,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YACrE,OAAO,UAAU,CAAC;QACpB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO,SAAS,CAAC;IACnB,CAAC;IAIO,UAAU,CAAC,KAAc;QAC/B,OAAO;YACL,KAAK;YACL,gBAAgB,EAAE,IAAI;YACtB,YAAY,EAAE,IAAI;YAClB,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,IAAI,EAAE,aAAsB,EAAE,KAAK,EAAE,IAAI,EAAE;SACvD,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,KAAa,EACb,OAAgC,EAChC,eAAwB;QAExB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,IAAA,mDAAsB,EAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAC9D,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,IAAA,8DAAiC,EAAC,KAAK,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,MAAM,KAAK,gBAAgB,IAAI,QAAQ,EAAE,CAAC;YAC5C,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,4CAAkB,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAA,wDAA2B,EAAC,KAAK,CAAC,EAAE,CAAC;gBACvC,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,GAAoD;QAC7E,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC;QACnC,IACE,KAAK,KAAK,SAAS;YACnB,KAAK,KAAK,QAAQ;YAClB,KAAK,KAAK,SAAS;YACnB,KAAK,KAAK,QAAQ;YAClB,KAAK,KAAK,aAAa;YACvB,KAAK,KAAK,kBAAkB;YAC5B,KAAK,KAAK,QAAQ;YAClB,KAAK,KAAK,WAAW,EACrB,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,KAAyB,EAAE,OAAgC;QACrF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,CAAC;YACd,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YAC9C,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAClC,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAgC;QAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,EAAE,UAAU,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,MAAM,IAAA,wDAA4B,EAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,EAAE;YACjE,GAAG,OAAO,CAAC,UAAU;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAlHY,oEAA4B;uCAA5B,4BAA4B;IADxC,IAAA,mBAAU,GAAE;IAQR,mBAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,mBAAA,IAAA,eAAM,EAAC,IAAA,sBAAa,EAAC,6CAAmB,CAAC,CAAC,CAAA;6CAH9B,sDAA4B;QACrB,qCAA8B;QACtC,gEAA6B;GAN5C,4BAA4B,CAkHxC;AAED,YAAY"}

package/workflow/src/lib/jobs/workflow-maintenance.scheduler.d.ts

@@ -1,9 +1,9 @@
 import { OnApplicationBootstrap } from '@nestjs/common';
-import { BackendWorkflowEngineService } from '../runtime/workflow-engine.service';
+import { ModuleRef } from '@nestjs/core';
 export declare class WorkflowMaintenanceScheduler implements OnApplicationBootstrap {
-    private readonly engine;
+    private readonly moduleRef;
     private readonly logger;
-    constructor(engine: BackendWorkflowEngineService);
+    constructor(moduleRef: ModuleRef);
     onApplicationBootstrap(): Promise<void>;
     handleStaleSuspensionCron(): Promise<void>;
     private runStaleCleanup;

package/workflow/src/lib/jobs/workflow-maintenance.scheduler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-maintenance.scheduler.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/workflow/src/lib/jobs/workflow-maintenance.scheduler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAE5E,OAAO,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAIlF,qBACa,4BAA6B,YAAW,sBAAsB;IAG7D,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiD;gBAE3C,MAAM,EAAE,4BAA4B;IAE3D,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC;IAKvC,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC;YAIlC,eAAe;CAQ9B"}
+{"version":3,"file":"workflow-maintenance.scheduler.d.ts","sourceRoot":"","sources":["../../../../../../../../libs/framework/server/workflow/src/lib/jobs/workflow-maintenance.scheduler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAMzC,qBACa,4BAA6B,YAAW,sBAAsB;IAG7D,OAAO,CAAC,QAAQ,CAAC,SAAS;IAFtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiD;gBAE3C,SAAS,EAAE,SAAS;IAE3C,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC;IAKvC,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC;YAIlC,eAAe;CAS9B"}