@acorex-platform/module-security-management-server 0.0.15 → 2.0.0-next.42

package/server/src/lib/queries/get-permission-holders-history.query.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runGetPermissionHoldersHistoryQuery = runGetPermissionHoldersHistoryQuery;
+const tslib_1 = require("tslib");
+const security_query_helpers_1 = require("./security-query.helpers");
+//#region ----- Permission holders history query -----
+function runGetPermissionHoldersHistoryQuery(history_1, input_1) {
+    return tslib_1.__awaiter(this, arguments, void 0, function* (history, input, scope = {}) {
+        const filters = (0, security_query_helpers_1.extractSecurityHistoryFilters)(input.filter, scope);
+        const range = (0, security_query_helpers_1.requireHistoryRange)(filters);
+        if (!range || !filters.permission) {
+            return { items: [], total: 0 };
+        }
+        const rows = yield history.getPermissionHoldersInRange({
+            permission: filters.permission,
+            tenantId: range.tenantId,
+            applicationId: range.applicationId,
+            from: range.from,
+            to: range.to,
+        });
+        return (0, security_query_helpers_1.paginateRows)(rows, input);
+    });
+}
+//#endregion
+//# sourceMappingURL=get-permission-holders-history.query.js.map

package/server/src/lib/queries/get-permission-holders-history.query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-permission-holders-history.query.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/src/lib/queries/get-permission-holders-history.query.ts"],"names":[],"mappings":";;AAWA,kFAoBC;;AA7BD,qEAKkC;AAElC,sDAAsD;AAEtD,SAAsB,mCAAmC;iEACvD,OAAsC,EACtC,KAAuB,EACvB,QAA2C,EAAE;QAE7C,MAAM,OAAO,GAAG,IAAA,sDAA6B,EAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,IAAA,4CAAmB,EAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YAClC,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACjC,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,2BAA2B,CAAC;YACrD,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,EAAE,EAAE,KAAK,CAAC,EAAE;SACb,CAAC,CAAC;QAEH,OAAO,IAAA,qCAAY,EAAC,IAA4C,EAAE,KAAK,CAAC,CAAC;IAC3E,CAAC;CAAA;AAED,YAAY"}

package/server/src/lib/queries/get-role-holders-history.query.d.ts

@@ -0,0 +1,4 @@
+import type { ReportQueryInput, ReportQueryResult } from '@acorex-platform/framework-server/report';
+import type { EffectiveAccessHistoryService } from '../effective-access-history/effective-access-history.service';
+import { type SecurityHistoryFilterScopeOptions } from './security-query.helpers';
+export declare function runGetRoleHoldersHistoryQuery(history: EffectiveAccessHistoryService, input: ReportQueryInput, scope?: SecurityHistoryFilterScopeOptions): Promise<ReportQueryResult>;

package/server/src/lib/queries/get-role-holders-history.query.definition.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Build-time only. Do not import from Nest modules.
+ * Source: get-role-holders-history.query.ts
+ */
+export declare const getRoleHoldersHistoryQueryDefinition: import("@acorex-platform/framework-shared/runtime").AXPAlignedQueryMetadataDefinition;

package/server/src/lib/queries/get-role-holders-history.query.definition.js

@@ -0,0 +1,38 @@
+"use strict";
+/**
+ * Build-time only. Do not import from Nest modules.
+ * Source: get-role-holders-history.query.ts
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getRoleHoldersHistoryQueryDefinition = void 0;
+const runtime_1 = require("@acorex-platform/framework-shared/runtime");
+const module_security_management_contracts_1 = require("@acorex-platform/module-security-management-client/contracts");
+exports.getRoleHoldersHistoryQueryDefinition = (0, runtime_1.defineQuery)({
+    key: module_security_management_contracts_1.RootConfig.queries.reports.getRoleHoldersHistory,
+    title: 'Role holders',
+    description: 'Users who held a role that overlaps the selected date range, reconstructed from UserRole Change History.',
+    executionMode: 'backend',
+    kind: 'collection',
+    filter: [
+        { name: 'roleId', title: 'Role', source: 'custom', interface: { name: 'lookup-editor' } },
+        { name: 'dateRange', title: 'Date range', source: 'custom', interface: { name: 'date-time-editor' } },
+        { name: 'tenantId', title: 'Tenant', source: 'custom', interface: { name: 'lookup-editor' } },
+        { name: 'applicationId', title: 'Application', source: 'custom', interface: { name: 'lookup-editor' } },
+    ],
+    sort: [
+        { name: 'username', title: 'Username', field: 'username' },
+        { name: 'displayName', title: 'Display name', field: 'displayName' },
+        { name: 'roleTitle', title: 'Role title', field: 'roleTitle' },
+        { name: 'validFrom', title: 'Valid from', field: 'validFrom' },
+        { name: 'validTo', title: 'Valid to', field: 'validTo' },
+    ],
+    columns: [
+        { name: 'username', title: 'Username', interface: { name: 'text-editor' } },
+        { name: 'displayName', title: 'Display name', interface: { name: 'text-editor' } },
+        { name: 'roleTitle', title: 'Role title', interface: { name: 'text-editor' } },
+        { name: 'validFrom', title: 'Valid from', interface: { name: 'date-time-editor' } },
+        { name: 'validTo', title: 'Valid to', interface: { name: 'date-time-editor' } },
+    ],
+    categories: [runtime_1.AXP_CATALOG_DEFINITION_CATEGORY_REPORT],
+});
+//# sourceMappingURL=get-role-holders-history.query.definition.js.map

package/server/src/lib/queries/get-role-holders-history.query.definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-role-holders-history.query.definition.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/src/lib/queries/get-role-holders-history.query.definition.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,uEAAgH;AAChH,gHAAmF;AAEtE,QAAA,oCAAoC,GAAG,IAAA,qBAAW,EAAC;IAC9D,GAAG,EAAE,iDAAU,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB;IACrD,KAAK,EAAE,cAAc;IACrB,WAAW,EACT,0GAA0G;IAC5G,aAAa,EAAE,SAAS;IACxB,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE;QACN,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE;QACzF,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE;QACrG,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE;QAC7F,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE;KACxG;IACD,IAAI,EAAE;QACJ,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE;QAC1D,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE;QACpE,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE;QAC9D,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE;QAC9D,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE;KACzD;IACD,OAAO,EAAE;QACP,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE;QAC3E,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE;QAClF,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE;QAC9E,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE;QACnF,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE;KAChF;IACD,UAAU,EAAE,CAAC,gDAAsC,CAAC;CACrD,CAAC,CAAC"}

package/server/src/lib/queries/get-role-holders-history.query.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runGetRoleHoldersHistoryQuery = runGetRoleHoldersHistoryQuery;
+const tslib_1 = require("tslib");
+const security_query_helpers_1 = require("./security-query.helpers");
+//#region ----- Role holders history query -----
+function runGetRoleHoldersHistoryQuery(history_1, input_1) {
+    return tslib_1.__awaiter(this, arguments, void 0, function* (history, input, scope = {}) {
+        const filters = (0, security_query_helpers_1.extractSecurityHistoryFilters)(input.filter, scope);
+        const range = (0, security_query_helpers_1.requireHistoryRange)(filters);
+        if (!range || !filters.roleId) {
+            return { items: [], total: 0 };
+        }
+        const rows = yield history.getRoleHoldersInRange({
+            roleId: filters.roleId,
+            tenantId: range.tenantId,
+            applicationId: range.applicationId,
+            from: range.from,
+            to: range.to,
+        });
+        return (0, security_query_helpers_1.paginateRows)(rows, input);
+    });
+}
+//#endregion
+//# sourceMappingURL=get-role-holders-history.query.js.map

package/server/src/lib/queries/get-role-holders-history.query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-role-holders-history.query.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/src/lib/queries/get-role-holders-history.query.ts"],"names":[],"mappings":";;AAWA,sEAoBC;;AA7BD,qEAKkC;AAElC,gDAAgD;AAEhD,SAAsB,6BAA6B;iEACjD,OAAsC,EACtC,KAAuB,EACvB,QAA2C,EAAE;QAE7C,MAAM,OAAO,GAAG,IAAA,sDAA6B,EAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,IAAA,4CAAmB,EAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACjC,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC;YAC/C,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,EAAE,EAAE,KAAK,CAAC,EAAE;SACb,CAAC,CAAC;QAEH,OAAO,IAAA,qCAAY,EAAC,IAA4C,EAAE,KAAK,CAAC,CAAC;IAC3E,CAAC;CAAA;AAED,YAAY"}

package/server/src/lib/queries/get-user-effective-permissions-history.query.d.ts

@@ -0,0 +1,4 @@
+import type { ReportQueryInput, ReportQueryResult } from '@acorex-platform/framework-server/report';
+import type { EffectiveAccessHistoryService } from '../effective-access-history/effective-access-history.service';
+import { type SecurityHistoryFilterScopeOptions } from './security-query.helpers';
+export declare function runGetUserEffectivePermissionsHistoryQuery(history: EffectiveAccessHistoryService, input: ReportQueryInput, scope?: SecurityHistoryFilterScopeOptions): Promise<ReportQueryResult>;

package/server/src/lib/queries/get-user-effective-permissions-history.query.definition.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Build-time only. Do not import from Nest modules.
+ * Source: get-user-effective-permissions-history.query.ts
+ */
+export declare const getUserEffectivePermissionsHistoryQueryDefinition: import("@acorex-platform/framework-shared/runtime").AXPAlignedQueryMetadataDefinition;

package/server/src/lib/queries/get-user-effective-permissions-history.query.definition.js

@@ -0,0 +1,35 @@
+"use strict";
+/**
+ * Build-time only. Do not import from Nest modules.
+ * Source: get-user-effective-permissions-history.query.ts
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getUserEffectivePermissionsHistoryQueryDefinition = void 0;
+const runtime_1 = require("@acorex-platform/framework-shared/runtime");
+const module_security_management_contracts_1 = require("@acorex-platform/module-security-management-client/contracts");
+exports.getUserEffectivePermissionsHistoryQueryDefinition = (0, runtime_1.defineQuery)({
+    key: module_security_management_contracts_1.RootConfig.queries.reports.getUserEffectivePermissionsHistory,
+    title: 'User effective permissions',
+    description: 'Permissions a user held that overlap the selected date range, reconstructed from grant history.',
+    executionMode: 'backend',
+    kind: 'collection',
+    filter: [
+        { name: 'userId', title: 'User', source: 'custom', interface: { name: 'lookup-editor' } },
+        { name: 'permissionSearch', title: 'Permission search', source: 'custom', interface: { name: 'text-editor' } },
+        { name: 'dateRange', title: 'Date range', source: 'custom', interface: { name: 'date-time-editor' } },
+        { name: 'tenantId', title: 'Tenant', source: 'custom', interface: { name: 'lookup-editor' } },
+        { name: 'applicationId', title: 'Application', source: 'custom', interface: { name: 'lookup-editor' } },
+    ],
+    sort: [
+        { name: 'permission', title: 'Permission', field: 'permission' },
+        { name: 'validFrom', title: 'Valid from', field: 'validFrom' },
+        { name: 'validTo', title: 'Valid to', field: 'validTo' },
+    ],
+    columns: [
+        { name: 'permission', title: 'Permission', interface: { name: 'text-editor' } },
+        { name: 'validFrom', title: 'Valid from', interface: { name: 'date-time-editor' } },
+        { name: 'validTo', title: 'Valid to', interface: { name: 'date-time-editor' } },
+    ],
+    categories: [runtime_1.AXP_CATALOG_DEFINITION_CATEGORY_REPORT],
+});
+//# sourceMappingURL=get-user-effective-permissions-history.query.definition.js.map

package/server/src/lib/queries/get-user-effective-permissions-history.query.definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-user-effective-permissions-history.query.definition.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/src/lib/queries/get-user-effective-permissions-history.query.definition.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,uEAAgH;AAChH,gHAAmF;AAEtE,QAAA,iDAAiD,GAAG,IAAA,qBAAW,EAAC;IAC3E,GAAG,EAAE,iDAAU,CAAC,OAAO,CAAC,OAAO,CAAC,kCAAkC;IAClE,KAAK,EAAE,4BAA4B;IACnC,WAAW,EACT,iGAAiG;IACnG,aAAa,EAAE,SAAS;IACxB,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE;QACN,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE;QACzF,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE;QAC9G,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE;QACrG,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE;QAC7F,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE;KACxG;IACD,IAAI,EAAE;QACJ,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE;QAChE,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE;QAC9D,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE;KACzD;IACD,OAAO,EAAE;QACP,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE;QAC/E,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE;QACnF,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE;KAChF;IACD,UAAU,EAAE,CAAC,gDAAsC,CAAC;CACrD,CAAC,CAAC"}

package/server/src/lib/queries/get-user-effective-permissions-history.query.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runGetUserEffectivePermissionsHistoryQuery = runGetUserEffectivePermissionsHistoryQuery;
+const tslib_1 = require("tslib");
+const security_query_helpers_1 = require("./security-query.helpers");
+//#region ----- User effective permissions history query -----
+function runGetUserEffectivePermissionsHistoryQuery(history_1, input_1) {
+    return tslib_1.__awaiter(this, arguments, void 0, function* (history, input, scope = {}) {
+        const filters = (0, security_query_helpers_1.extractSecurityHistoryFilters)(input.filter, scope);
+        const range = (0, security_query_helpers_1.requireHistoryRange)(filters);
+        if (!range || !filters.userId) {
+            return { items: [], total: 0 };
+        }
+        const rows = yield history.getUserEffectivePermissionsInRange({
+            userId: filters.userId,
+            tenantId: range.tenantId,
+            applicationId: range.applicationId,
+            from: range.from,
+            to: range.to,
+            permissionSearch: filters.permissionSearch,
+        });
+        return (0, security_query_helpers_1.paginateRows)(rows, input);
+    });
+}
+//#endregion
+//# sourceMappingURL=get-user-effective-permissions-history.query.js.map

package/server/src/lib/queries/get-user-effective-permissions-history.query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-user-effective-permissions-history.query.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/src/lib/queries/get-user-effective-permissions-history.query.ts"],"names":[],"mappings":";;AAWA,gGAqBC;;AA9BD,qEAKkC;AAElC,8DAA8D;AAE9D,SAAsB,0CAA0C;iEAC9D,OAAsC,EACtC,KAAuB,EACvB,QAA2C,EAAE;QAE7C,MAAM,OAAO,GAAG,IAAA,sDAA6B,EAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,IAAA,4CAAmB,EAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACjC,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,kCAAkC,CAAC;YAC5D,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;SAC3C,CAAC,CAAC;QAEH,OAAO,IAAA,qCAAY,EAAC,IAA4C,EAAE,KAAK,CAAC,CAAC;IAC3E,CAAC;CAAA;AAED,YAAY"}

package/server/src/lib/queries/get-user-effective-roles-history.query.d.ts

@@ -0,0 +1,4 @@
+import type { ReportQueryInput, ReportQueryResult } from '@acorex-platform/framework-server/report';
+import type { EffectiveAccessHistoryService } from '../effective-access-history/effective-access-history.service';
+import { type SecurityHistoryFilterScopeOptions } from './security-query.helpers';
+export declare function runGetUserEffectiveRolesHistoryQuery(history: EffectiveAccessHistoryService, input: ReportQueryInput, scope?: SecurityHistoryFilterScopeOptions): Promise<ReportQueryResult>;

package/server/src/lib/queries/get-user-effective-roles-history.query.definition.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Build-time only. Do not import from Nest modules.
+ * Source: get-user-effective-roles-history.query.ts
+ */
+export declare const getUserEffectiveRolesHistoryQueryDefinition: import("@acorex-platform/framework-shared/runtime").AXPAlignedQueryMetadataDefinition;

package/server/src/lib/queries/get-user-effective-roles-history.query.definition.js

@@ -0,0 +1,36 @@
+"use strict";
+/**
+ * Build-time only. Do not import from Nest modules.
+ * Source: get-user-effective-roles-history.query.ts
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getUserEffectiveRolesHistoryQueryDefinition = void 0;
+const runtime_1 = require("@acorex-platform/framework-shared/runtime");
+const module_security_management_contracts_1 = require("@acorex-platform/module-security-management-client/contracts");
+exports.getUserEffectiveRolesHistoryQueryDefinition = (0, runtime_1.defineQuery)({
+    key: module_security_management_contracts_1.RootConfig.queries.reports.getUserEffectiveRolesHistory,
+    title: 'User effective roles',
+    description: 'Roles a user held that overlap the selected date range, reconstructed from UserRole Change History.',
+    executionMode: 'backend',
+    kind: 'collection',
+    filter: [
+        { name: 'userId', title: 'User', source: 'custom', interface: { name: 'lookup-editor' } },
+        { name: 'dateRange', title: 'Date range', source: 'custom', interface: { name: 'date-time-editor' } },
+        { name: 'tenantId', title: 'Tenant', source: 'custom', interface: { name: 'lookup-editor' } },
+        { name: 'applicationId', title: 'Application', source: 'custom', interface: { name: 'lookup-editor' } },
+    ],
+    sort: [
+        { name: 'roleName', title: 'Role name', field: 'roleName' },
+        { name: 'roleTitle', title: 'Role title', field: 'roleTitle' },
+        { name: 'validFrom', title: 'Valid from', field: 'validFrom' },
+        { name: 'validTo', title: 'Valid to', field: 'validTo' },
+    ],
+    columns: [
+        { name: 'roleName', title: 'Role name', interface: { name: 'text-editor' } },
+        { name: 'roleTitle', title: 'Role title', interface: { name: 'text-editor' } },
+        { name: 'validFrom', title: 'Valid from', interface: { name: 'date-time-editor' } },
+        { name: 'validTo', title: 'Valid to', interface: { name: 'date-time-editor' } },
+    ],
+    categories: [runtime_1.AXP_CATALOG_DEFINITION_CATEGORY_REPORT],
+});
+//# sourceMappingURL=get-user-effective-roles-history.query.definition.js.map

package/server/src/lib/queries/get-user-effective-roles-history.query.definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-user-effective-roles-history.query.definition.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/src/lib/queries/get-user-effective-roles-history.query.definition.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,uEAAgH;AAChH,gHAAmF;AAEtE,QAAA,2CAA2C,GAAG,IAAA,qBAAW,EAAC;IACrE,GAAG,EAAE,iDAAU,CAAC,OAAO,CAAC,OAAO,CAAC,4BAA4B;IAC5D,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EACT,qGAAqG;IACvG,aAAa,EAAE,SAAS;IACxB,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE;QACN,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE;QACzF,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE;QACrG,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE;QAC7F,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE;KACxG;IACD,IAAI,EAAE;QACJ,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE;QAC3D,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE;QAC9D,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE;QAC9D,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE;KACzD;IACD,OAAO,EAAE;QACP,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE;QAC5E,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE;QAC9E,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE;QACnF,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE;KAChF;IACD,UAAU,EAAE,CAAC,gDAAsC,CAAC;CACrD,CAAC,CAAC"}

package/server/src/lib/queries/get-user-effective-roles-history.query.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runGetUserEffectiveRolesHistoryQuery = runGetUserEffectiveRolesHistoryQuery;
+const tslib_1 = require("tslib");
+const security_query_helpers_1 = require("./security-query.helpers");
+//#region ----- User effective roles history query -----
+function runGetUserEffectiveRolesHistoryQuery(history_1, input_1) {
+    return tslib_1.__awaiter(this, arguments, void 0, function* (history, input, scope = {}) {
+        const filters = (0, security_query_helpers_1.extractSecurityHistoryFilters)(input.filter, scope);
+        const range = (0, security_query_helpers_1.requireHistoryRange)(filters);
+        if (!range || !filters.userId) {
+            return { items: [], total: 0 };
+        }
+        const rows = yield history.getUserEffectiveRolesInRange({
+            userId: filters.userId,
+            tenantId: range.tenantId,
+            applicationId: range.applicationId,
+            from: range.from,
+            to: range.to,
+        });
+        return (0, security_query_helpers_1.paginateRows)(rows, input);
+    });
+}
+//#endregion
+//# sourceMappingURL=get-user-effective-roles-history.query.js.map

package/server/src/lib/queries/get-user-effective-roles-history.query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-user-effective-roles-history.query.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/src/lib/queries/get-user-effective-roles-history.query.ts"],"names":[],"mappings":";;AAWA,oFAoBC;;AA7BD,qEAKkC;AAElC,wDAAwD;AAExD,SAAsB,oCAAoC;iEACxD,OAAsC,EACtC,KAAuB,EACvB,QAA2C,EAAE;QAE7C,MAAM,OAAO,GAAG,IAAA,sDAA6B,EAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,IAAA,4CAAmB,EAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACjC,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,4BAA4B,CAAC;YACtD,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,EAAE,EAAE,KAAK,CAAC,EAAE;SACb,CAAC,CAAC;QAEH,OAAO,IAAA,qCAAY,EAAC,IAA4C,EAAE,KAAK,CAAC,CAAC;IAC3E,CAAC;CAAA;AAED,YAAY"}

package/server/src/lib/queries/get-user-password-change-history.query.d.ts

@@ -0,0 +1,4 @@
+import type { ReportQueryInput, ReportQueryResult } from '@acorex-platform/framework-server/report';
+import type { PasswordChangeHistoryService } from '../reports/password-change-history.service';
+import { type SecurityHistoryFilterScopeOptions } from './security-query.helpers';
+export declare function runGetUserPasswordChangeHistoryQuery(history: PasswordChangeHistoryService, input: ReportQueryInput, scope?: SecurityHistoryFilterScopeOptions): Promise<ReportQueryResult>;

package/server/src/lib/queries/get-user-password-change-history.query.definition.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Build-time only. Do not import from Nest modules.
+ * Source: get-user-password-change-history.query.ts
+ */
+export declare const getUserPasswordChangeHistoryQueryDefinition: import("@acorex-platform/framework-shared/runtime").AXPAlignedQueryMetadataDefinition;

package/server/src/lib/queries/get-user-password-change-history.query.definition.js

@@ -0,0 +1,33 @@
+"use strict";
+/**
+ * Build-time only. Do not import from Nest modules.
+ * Source: get-user-password-change-history.query.ts
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getUserPasswordChangeHistoryQueryDefinition = void 0;
+const runtime_1 = require("@acorex-platform/framework-shared/runtime");
+const module_security_management_contracts_1 = require("@acorex-platform/module-security-management-client/contracts");
+exports.getUserPasswordChangeHistoryQueryDefinition = (0, runtime_1.defineQuery)({
+    key: module_security_management_contracts_1.RootConfig.queries.reports.getUserPasswordChangeHistory,
+    title: 'User password change history',
+    description: 'Password change timestamp for a user in a date range (last recorded change on the user profile).',
+    executionMode: 'backend',
+    kind: 'collection',
+    filter: [
+        { name: 'userId', title: 'User', source: 'custom', interface: { name: 'lookup-editor' } },
+        { name: 'dateRange', title: 'Date range', source: 'custom', interface: { name: 'date-time-editor' } },
+        { name: 'tenantId', title: 'Tenant', source: 'custom', interface: { name: 'lookup-editor' } },
+        { name: 'applicationId', title: 'Application', source: 'custom', interface: { name: 'lookup-editor' } },
+    ],
+    sort: [
+        { name: 'passwordChangedAt', title: 'Password changed at', field: 'passwordChangedAt' },
+        { name: 'username', title: 'Username', field: 'username' },
+    ],
+    columns: [
+        { name: 'username', title: 'Username', interface: { name: 'text-editor' } },
+        { name: 'displayName', title: 'Display name', interface: { name: 'text-editor' } },
+        { name: 'passwordChangedAt', title: 'Password changed at', interface: { name: 'date-time-editor' } },
+    ],
+    categories: [runtime_1.AXP_CATALOG_DEFINITION_CATEGORY_REPORT],
+});
+//# sourceMappingURL=get-user-password-change-history.query.definition.js.map

package/server/src/lib/queries/get-user-password-change-history.query.definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-user-password-change-history.query.definition.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/src/lib/queries/get-user-password-change-history.query.definition.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,uEAAgH;AAChH,gHAAmF;AAEtE,QAAA,2CAA2C,GAAG,IAAA,qBAAW,EAAC;IACrE,GAAG,EAAE,iDAAU,CAAC,OAAO,CAAC,OAAO,CAAC,4BAA4B;IAC5D,KAAK,EAAE,8BAA8B;IACrC,WAAW,EACT,kGAAkG;IACpG,aAAa,EAAE,SAAS;IACxB,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE;QACN,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE;QACzF,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE;QACrG,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE;QAC7F,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE;KACxG;IACD,IAAI,EAAE;QACJ,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,mBAAmB,EAAE;QACvF,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE;KAC3D;IACD,OAAO,EAAE;QACP,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE;QAC3E,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE;QAClF,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,qBAAqB,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE;KACrG;IACD,UAAU,EAAE,CAAC,gDAAsC,CAAC;CACrD,CAAC,CAAC"}

package/server/src/lib/queries/get-user-password-change-history.query.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runGetUserPasswordChangeHistoryQuery = runGetUserPasswordChangeHistoryQuery;
+const tslib_1 = require("tslib");
+const security_query_helpers_1 = require("./security-query.helpers");
+//#region ----- User password change history query -----
+function runGetUserPasswordChangeHistoryQuery(history_1, input_1) {
+    return tslib_1.__awaiter(this, arguments, void 0, function* (history, input, scope = {}) {
+        const filters = (0, security_query_helpers_1.extractSecurityHistoryFilters)(input.filter, scope);
+        const range = (0, security_query_helpers_1.requireHistoryRange)(filters);
+        if (!range || !filters.userId) {
+            return { items: [], total: 0 };
+        }
+        const rows = yield history.rows({
+            userId: filters.userId,
+            from: range.from,
+            to: range.to,
+        });
+        return (0, security_query_helpers_1.paginateRows)(rows, input);
+    });
+}
+//#endregion
+//# sourceMappingURL=get-user-password-change-history.query.js.map

package/server/src/lib/queries/get-user-password-change-history.query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-user-password-change-history.query.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/src/lib/queries/get-user-password-change-history.query.ts"],"names":[],"mappings":";;AAWA,oFAkBC;;AA3BD,qEAKkC;AAElC,wDAAwD;AAExD,SAAsB,oCAAoC;iEACxD,OAAqC,EACrC,KAAuB,EACvB,QAA2C,EAAE;QAE7C,MAAM,OAAO,GAAG,IAAA,sDAA6B,EAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,IAAA,4CAAmB,EAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACjC,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,EAAE,EAAE,KAAK,CAAC,EAAE;SACb,CAAC,CAAC;QAEH,OAAO,IAAA,qCAAY,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;CAAA;AAED,YAAY"}

package/server/src/lib/queries/security-query.helpers.d.ts

@@ -0,0 +1,47 @@
+import { type ReportQueryInput } from '@acorex-platform/framework-server/report';
+export type ReportFilterLeaf = {
+    field?: string;
+    value?: unknown;
+    operator?: {
+        type?: string;
+    };
+};
+export interface SecurityHistoryReportFilters {
+    userId?: string;
+    roleId?: string;
+    permission?: string;
+    /** Contains-search over permission title / description / key (permissions history). */
+    permissionSearch?: string;
+    tenantId?: string;
+    applicationId?: string;
+    from?: Date;
+    to?: Date;
+}
+export interface SecurityHistoryFilterScopeOptions {
+    /**
+     * When false, tenantId is always forced to the session tenant
+     * (matches Tenant parameter visibility via MaintainTenants).
+     */
+    canSelectTenant?: boolean;
+    sessionTenantId?: string;
+    /** Current session application — always used for scope scoring today. */
+    sessionApplicationId?: string;
+}
+export declare function extractSecurityHistoryFilters(parameters: unknown, scope?: SecurityHistoryFilterScopeOptions): SecurityHistoryReportFilters;
+/**
+ * Aligns execute-time tenant/app scope with the current session.
+ *
+ * - Tenant: forced to session unless `canSelectTenant` (MaintainTenants).
+ * - Application: always the session application for now (no override permission yet).
+ */
+export declare function applySessionTenantScope(filters: SecurityHistoryReportFilters, scope?: SecurityHistoryFilterScopeOptions): SecurityHistoryReportFilters;
+export declare function requireHistoryRange(filters: SecurityHistoryReportFilters): {
+    tenantId: string;
+    from: Date;
+    to: Date;
+    applicationId?: string;
+} | null;
+export declare function paginateRows(rows: Record<string, unknown>[], input: ReportQueryInput): {
+    items: Record<string, unknown>[];
+    total: number;
+};

package/server/src/lib/queries/security-query.helpers.js

@@ -0,0 +1,184 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extractSecurityHistoryFilters = extractSecurityHistoryFilters;
+exports.applySessionTenantScope = applySessionTenantScope;
+exports.requireHistoryRange = requireHistoryRange;
+exports.paginateRows = paginateRows;
+const tslib_1 = require("tslib");
+const core_1 = require("@acorex-platform/framework-server/core");
+const report_1 = require("@acorex-platform/framework-server/report");
+const security_1 = require("@acorex-platform/framework-server/security");
+//#endregion
+//#region ----- Filter extraction -----
+function extractSecurityHistoryFilters(parameters, scope = {}) {
+    const result = {};
+    const paramsAny = parameters;
+    const filters = Array.isArray(paramsAny === null || paramsAny === void 0 ? void 0 : paramsAny.filters)
+        ? paramsAny.filters
+        : Array.isArray(parameters)
+            ? parameters
+            : [];
+    for (const raw of filters) {
+        const filter = raw;
+        if (!(filter === null || filter === void 0 ? void 0 : filter.field) || filter.value === undefined || filter.value === null) {
+            continue;
+        }
+        switch (filter.field) {
+            case 'userId':
+                result.userId = firstString(filter.value);
+                break;
+            case 'roleId':
+                result.roleId = firstString(filter.value);
+                break;
+            case 'permission':
+                result.permission = firstString(filter.value);
+                break;
+            case 'permissionSearch':
+                result.permissionSearch = firstString(filter.value);
+                break;
+            case 'tenantId':
+                result.tenantId = firstString(filter.value);
+                break;
+            case 'applicationId':
+                result.applicationId = firstString(filter.value) || undefined;
+                break;
+            case 'dateRange': {
+                const range = normalizeDateRange(filter.value);
+                if (range) {
+                    result.from = range.from;
+                    result.to = range.to;
+                }
+                break;
+            }
+            default:
+                break;
+        }
+    }
+    return applySessionTenantScope(result, scope);
+}
+/**
+ * Aligns execute-time tenant/app scope with the current session.
+ *
+ * - Tenant: forced to session unless `canSelectTenant` (MaintainTenants).
+ * - Application: always the session application for now (no override permission yet).
+ */
+function applySessionTenantScope(filters, scope = {}) {
+    var _a, _b, _c, _d, _e;
+    const tenantId = (_b = ((_a = scope.sessionTenantId) !== null && _a !== void 0 ? _a : resolveSessionTenantId())) === null || _b === void 0 ? void 0 : _b.trim();
+    const applicationId = (_d = ((_c = scope.sessionApplicationId) !== null && _c !== void 0 ? _c : resolveSessionApplicationId())) === null || _d === void 0 ? void 0 : _d.trim();
+    let next = Object.assign({}, filters);
+    if (tenantId) {
+        next = scope.canSelectTenant
+            ? Object.assign(Object.assign({}, next), { tenantId: ((_e = next.tenantId) === null || _e === void 0 ? void 0 : _e.trim()) || tenantId }) : Object.assign(Object.assign({}, next), { tenantId });
+    }
+    // Always bind to the current application workspace (ignore client filter).
+    if (applicationId) {
+        next = Object.assign(Object.assign({}, next), { applicationId });
+    }
+    else {
+        const { applicationId: _ignored } = next, rest = tslib_1.__rest(next, ["applicationId"]);
+        next = rest;
+    }
+    return next;
+}
+function requireHistoryRange(filters) {
+    if (!filters.tenantId || !filters.from || !filters.to) {
+        return null;
+    }
+    return {
+        tenantId: filters.tenantId,
+        from: filters.from,
+        to: filters.to,
+        applicationId: filters.applicationId,
+    };
+}
+function paginateRows(rows, input) {
+    const sorted = sortRows(rows, input.sort);
+    const skip = (0, report_1.resolveReportQuerySkip)(input.skip);
+    const take = (0, report_1.resolveReportQueryTake)(input.take);
+    return { items: sorted.slice(skip, skip + take), total: sorted.length };
+}
+//#endregion
+//#region ----- Internals -----
+function resolveSessionTenantId() {
+    var _a;
+    const request = (0, core_1.getEntityStorageRequest)();
+    const tenantId = (_a = request === null || request === void 0 ? void 0 : request[security_1.CURRENT_SESSION_KEY]) === null || _a === void 0 ? void 0 : _a.tenantId;
+    return typeof tenantId === 'string' && tenantId.trim() ? tenantId.trim() : undefined;
+}
+function resolveSessionApplicationId() {
+    var _a;
+    const request = (0, core_1.getEntityStorageRequest)();
+    const applicationId = (_a = request === null || request === void 0 ? void 0 : request[security_1.CURRENT_SESSION_KEY]) === null || _a === void 0 ? void 0 : _a.applicationId;
+    return typeof applicationId === 'string' && applicationId.trim()
+        ? applicationId.trim()
+        : undefined;
+}
+function firstString(value) {
+    if (typeof value === 'string' && value.trim()) {
+        return value.trim();
+    }
+    if (Array.isArray(value) && value.length > 0 && typeof value[0] === 'string') {
+        return value[0].trim() || undefined;
+    }
+    return undefined;
+}
+function normalizeDateRange(value) {
+    var _a, _b;
+    if (!value || typeof value !== 'object') {
+        return null;
+    }
+    const raw = value;
+    const fromRaw = (_a = raw['from']) !== null && _a !== void 0 ? _a : raw['start'];
+    const toRaw = (_b = raw['to']) !== null && _b !== void 0 ? _b : raw['end'];
+    if (typeof fromRaw !== 'string' || typeof toRaw !== 'string') {
+        return null;
+    }
+    const from = new Date(fromRaw);
+    const to = new Date(toRaw);
+    if (Number.isNaN(from.getTime()) || Number.isNaN(to.getTime())) {
+        return null;
+    }
+    // Date-only UI values: include the full end day for overlap semantics.
+    if (!hasExplicitTime(toRaw)) {
+        to.setHours(23, 59, 59, 999);
+    }
+    if (from.getTime() > to.getTime()) {
+        return null;
+    }
+    return { from, to };
+}
+function hasExplicitTime(isoLike) {
+    return /T\d{2}:\d{2}/.test(isoLike) || /\d{2}:\d{2}:\d{2}/.test(isoLike);
+}
+function sortRows(rows, sort) {
+    if (!(sort === null || sort === void 0 ? void 0 : sort.length)) {
+        return rows;
+    }
+    return [...rows].sort((a, b) => {
+        for (const sortField of sort) {
+            const field = sortField.field;
+            const aValue = a[field];
+            const bValue = b[field];
+            const dir = sortField.dir === 'asc' ? 1 : -1;
+            if (aValue == null && bValue == null) {
+                continue;
+            }
+            if (aValue == null) {
+                return dir;
+            }
+            if (bValue == null) {
+                return -dir;
+            }
+            if (aValue < bValue) {
+                return -dir;
+            }
+            if (aValue > bValue) {
+                return dir;
+            }
+        }
+        return 0;
+    });
+}
+//#endregion
+//# sourceMappingURL=security-query.helpers.js.map

package/server/src/lib/queries/security-query.helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-query.helpers.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/src/lib/queries/security-query.helpers.ts"],"names":[],"mappings":";;AA8CA,sEAmDC;AAQD,0DA0BC;AAED,kDAeC;AAED,oCAQC;;AA9JD,iEAAiF;AACjF,qEAIkD;AAClD,yEAGoD;AAiCpD,YAAY;AAEZ,uCAAuC;AAEvC,SAAgB,6BAA6B,CAC3C,UAAmB,EACnB,QAA2C,EAAE;IAE7C,MAAM,MAAM,GAAiC,EAAE,CAAC;IAChD,MAAM,SAAS,GAAG,UAAiD,CAAC;IACpE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,OAAO,CAAC;QAC/C,CAAC,CAAC,SAAS,CAAC,OAAO;QACnB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YACzB,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,EAAE,CAAC;IAET,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,GAAuB,CAAC;QACvC,IAAI,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,KAAK,CAAA,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1E,SAAS;QACX,CAAC;QAED,QAAQ,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,KAAK,QAAQ;gBACX,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1C,MAAM;YACR,KAAK,QAAQ;gBACX,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1C,MAAM;YACR,KAAK,YAAY;gBACf,MAAM,CAAC,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC9C,MAAM;YACR,KAAK,kBAAkB;gBACrB,MAAM,CAAC,gBAAgB,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACpD,MAAM;YACR,KAAK,UAAU;gBACb,MAAM,CAAC,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5C,MAAM;YACR,KAAK,eAAe;gBAClB,MAAM,CAAC,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;gBAC9D,MAAM;YACR,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC/C,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;oBACzB,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;gBACvB,CAAC;gBACD,MAAM;YACR,CAAC;YACD;gBACE,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,SAAgB,uBAAuB,CACrC,OAAqC,EACrC,QAA2C,EAAE;;IAE7C,MAAM,QAAQ,GAAG,MAAA,CAAC,MAAA,KAAK,CAAC,eAAe,mCAAI,sBAAsB,EAAE,CAAC,0CAAE,IAAI,EAAE,CAAC;IAC7E,MAAM,aAAa,GAAG,MAAA,CACpB,MAAA,KAAK,CAAC,oBAAoB,mCAAI,2BAA2B,EAAE,CAC5D,0CAAE,IAAI,EAAE,CAAC;IAEV,IAAI,IAAI,qBAAsC,OAAO,CAAE,CAAC;IAExD,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,GAAG,KAAK,CAAC,eAAe;YAC1B,CAAC,iCAAM,IAAI,KAAE,QAAQ,EAAE,CAAA,MAAA,IAAI,CAAC,QAAQ,0CAAE,IAAI,EAAE,KAAI,QAAQ,IACxD,CAAC,iCAAM,IAAI,KAAE,QAAQ,GAAE,CAAC;IAC5B,CAAC;IAED,2EAA2E;IAC3E,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,mCAAQ,IAAI,KAAE,aAAa,GAAE,CAAC;IACpC,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,aAAa,EAAE,QAAQ,KAAc,IAAI,EAAb,IAAI,kBAAK,IAAI,EAA3C,iBAAoC,CAAO,CAAC;QAClD,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,mBAAmB,CAAC,OAAqC;IAMvE,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,aAAa,EAAE,OAAO,CAAC,aAAa;KACrC,CAAC;AACJ,CAAC;AAED,SAAgB,YAAY,CAC1B,IAA+B,EAC/B,KAAuB;IAEvB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAA,+BAAsB,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,IAAA,+BAAsB,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AAC1E,CAAC;AAED,YAAY;AAEZ,+BAA+B;AAE/B,SAAS,sBAAsB;;IAC7B,MAAM,OAAO,GAAG,IAAA,8BAAuB,GAE1B,CAAC;IACd,MAAM,QAAQ,GAAG,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAG,8BAAmB,CAAC,0CAAE,QAAQ,CAAC;IAC1D,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACvF,CAAC;AAED,SAAS,2BAA2B;;IAClC,MAAM,OAAO,GAAG,IAAA,8BAAuB,GAE1B,CAAC;IACd,MAAM,aAAa,GAAG,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAG,8BAAmB,CAAC,0CAAE,aAAa,CAAC;IACpE,OAAO,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,IAAI,EAAE;QAC9D,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE;QACtB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC7E,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IACtC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;;IACxC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,OAAO,GAAG,MAAA,GAAG,CAAC,MAAM,CAAC,mCAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAA,GAAG,CAAC,IAAI,CAAC,mCAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uEAAuE;IACvE,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,QAAQ,CACf,IAA+B,EAC/B,IAA8B;IAE9B,IAAI,CAAC,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,CAAA,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC7B,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;YAC9B,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;YACxB,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;YACxB,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;gBACrC,SAAS;YACX,CAAC;YACD,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;gBACnB,OAAO,GAAG,CAAC;YACb,CAAC;YACD,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;gBACnB,OAAO,CAAC,GAAG,CAAC;YACd,CAAC;YACD,IAAI,MAAM,GAAG,MAAM,EAAE,CAAC;gBACpB,OAAO,CAAC,GAAG,CAAC;YACd,CAAC;YACD,IAAI,MAAM,GAAG,MAAM,EAAE,CAAC;gBACpB,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;AACL,CAAC;AAED,YAAY"}