@acorex-platform/module-security-management-server 0.0.15 → 2.0.0-next.42

package/server/src/lib/reports/password-change-history.service.d.ts

@@ -0,0 +1,14 @@
+import { EntityStorageMiddlewareService } from '@acorex-platform/framework-server/core';
+/**
+ * Returns the user's last `passwordChangedAt` when it falls in the selected range.
+ * Full multi-change history is not stored yet — only the latest stamp on the user row.
+ */
+export declare class PasswordChangeHistoryService {
+    private readonly storage;
+    constructor(storage: EntityStorageMiddlewareService);
+    rows(input: {
+        userId: string;
+        from: Date;
+        to: Date;
+    }): Promise<Record<string, unknown>[]>;
+}

package/server/src/lib/reports/password-change-history.service.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PasswordChangeHistoryService = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const core_1 = require("@acorex-platform/framework-server/core");
+//#region ----- Types -----
+const USER_ENTITY = 'SecurityManagement.User';
+//#endregion
+//#region ----- Password change history -----
+/**
+ * Returns the user's last `passwordChangedAt` when it falls in the selected range.
+ * Full multi-change history is not stored yet — only the latest stamp on the user row.
+ */
+let PasswordChangeHistoryService = class PasswordChangeHistoryService {
+    constructor(storage) {
+        this.storage = storage;
+    }
+    rows(input) {
+        return tslib_1.__awaiter(this, void 0, void 0, function* () {
+            var _a, _b;
+            const page = yield this.storage.queryAsEngine(USER_ENTITY, {
+                skip: 0,
+                take: 1,
+                filter: {
+                    logic: 'and',
+                    filters: [{ field: 'id', operator: { type: 'equal' }, value: input.userId }],
+                },
+            });
+            const row = ((_b = (_a = page.items) === null || _a === void 0 ? void 0 : _a[0]) !== null && _b !== void 0 ? _b : null);
+            if (!row) {
+                return [];
+            }
+            const changedAt = toDate(row['passwordChangedAt']);
+            if (!changedAt) {
+                return [];
+            }
+            const ms = changedAt.getTime();
+            if (ms < input.from.getTime() || ms > input.to.getTime()) {
+                return [];
+            }
+            const username = typeof row['username'] === 'string' ? row['username'] : input.userId;
+            const displayName = (typeof row['displayName'] === 'string' && row['displayName'].trim()) || username;
+            return [
+                {
+                    userId: input.userId,
+                    username,
+                    displayName,
+                    passwordChangedAt: changedAt.toISOString(),
+                    eventType: 'password-changed',
+                },
+            ];
+        });
+    }
+};
+exports.PasswordChangeHistoryService = PasswordChangeHistoryService;
+exports.PasswordChangeHistoryService = PasswordChangeHistoryService = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [core_1.EntityStorageMiddlewareService])
+], PasswordChangeHistoryService);
+//#endregion
+//#region ----- Helpers -----
+function toDate(value) {
+    if (value instanceof Date && !Number.isNaN(value.getTime())) {
+        return value;
+    }
+    if (typeof value === 'string' && value.trim()) {
+        const parsed = new Date(value);
+        return Number.isNaN(parsed.getTime()) ? null : parsed;
+    }
+    return null;
+}
+//#endregion
+//# sourceMappingURL=password-change-history.service.js.map

package/server/src/lib/reports/password-change-history.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-change-history.service.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/src/lib/reports/password-change-history.service.ts"],"names":[],"mappings":";;;;AAAA,2CAA4C;AAC5C,iEAAwF;AAExF,2BAA2B;AAE3B,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAE9C,YAAY;AAEZ,6CAA6C;AAE7C;;;GAGG;AAEI,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IACvC,YAA6B,OAAuC;QAAvC,YAAO,GAAP,OAAO,CAAgC;IAAG,CAAC;IAElE,IAAI,CAAC,KAIV;;;YACC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,EAAE;gBACzD,IAAI,EAAE,CAAC;gBACP,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE;oBACN,KAAK,EAAE,KAAK;oBACZ,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;iBAC7E;aACF,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,MAAA,MAAA,IAAI,CAAC,KAAK,0CAAG,CAAC,CAAC,mCAAI,IAAI,CAAmC,CAAC;YACxE,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC;YACnD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;gBACzD,OAAO,EAAE,CAAC;YACZ,CAAC;YAED,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;YACtF,MAAM,WAAW,GACf,CAAC,OAAO,GAAG,CAAC,aAAa,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC;YAEpF,OAAO;gBACL;oBACE,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,QAAQ;oBACR,WAAW;oBACX,iBAAiB,EAAE,SAAS,CAAC,WAAW,EAAE;oBAC1C,SAAS,EAAE,kBAAkB;iBAC9B;aACF,CAAC;QACJ,CAAC;KAAA;CACF,CAAA;AA5CY,oEAA4B;uCAA5B,4BAA4B;IADxC,IAAA,mBAAU,GAAE;6CAE2B,qCAA8B;GADzD,4BAA4B,CA4CxC;AAED,YAAY;AAEZ,6BAA6B;AAE7B,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IACxD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,YAAY"}

package/server/src/lib/reports/permission-display-catalog.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Builds a case-insensitive search haystack for a permission key from:
+ * key, humanized capability, i18n key paths, and resolved title/description
+ * strings from demo `common.json` (en-US + fa-IR) when available on disk.
+ */
+export declare function buildPermissionSearchHaystack(permissionKey: string): string;
+export declare function permissionMatchesContainsSearch(permissionKey: string, search: string | undefined): boolean;

package/server/src/lib/reports/permission-display-catalog.js

@@ -0,0 +1,101 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildPermissionSearchHaystack = buildPermissionSearchHaystack;
+exports.permissionMatchesContainsSearch = permissionMatchesContainsSearch;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const module_common_contracts_1 = require("@acorex-platform/module-common-client/contracts");
+//#endregion
+//#region ----- Permission display catalog (search haystack) -----
+const SEARCH_LOCALES = ['en-US', 'fa-IR'];
+let commonByLocale = null;
+/**
+ * Builds a case-insensitive search haystack for a permission key from:
+ * key, humanized capability, i18n key paths, and resolved title/description
+ * strings from demo `common.json` (en-US + fa-IR) when available on disk.
+ */
+function buildPermissionSearchHaystack(permissionKey) {
+    const parts = new Set([permissionKey, (0, module_common_contracts_1.humanizePermissionCapability)(permissionKey)]);
+    const i18n = (0, module_common_contracts_1.resolvePermissionI18nKeys)(permissionKey);
+    if (i18n) {
+        parts.add(i18n.titleKey);
+        parts.add(i18n.descriptionKey);
+        for (const locale of SEARCH_LOCALES) {
+            const title = lookupCommonPath(locale, i18n.titleKey);
+            const description = lookupCommonPath(locale, i18n.descriptionKey);
+            if (title) {
+                parts.add(title);
+            }
+            if (description) {
+                parts.add(description);
+            }
+        }
+    }
+    return [...parts].join('\n').toLowerCase();
+}
+function permissionMatchesContainsSearch(permissionKey, search) {
+    const query = search === null || search === void 0 ? void 0 : search.trim().toLowerCase();
+    if (!query) {
+        return true;
+    }
+    const haystack = buildPermissionSearchHaystack(permissionKey);
+    if (haystack.includes(query)) {
+        return true;
+    }
+    // Multi-word queries: require every token (e.g. "Access Administration").
+    return query.split(/\s+/).filter(Boolean).every((token) => haystack.includes(token));
+}
+//#endregion
+//#region ----- Internals -----
+function lookupCommonPath(locale, i18nKey) {
+    const path = i18nKey.startsWith('@common:') ? i18nKey.slice('@common:'.length) : null;
+    if (!path) {
+        return undefined;
+    }
+    const root = loadCommonLocale(locale);
+    if (!root) {
+        return undefined;
+    }
+    let current = root;
+    for (const segment of path.split('.')) {
+        if (!current || typeof current !== 'object' || Array.isArray(current)) {
+            return undefined;
+        }
+        current = current[segment];
+    }
+    return typeof current === 'string' && current.trim() ? current.trim() : undefined;
+}
+function loadCommonLocale(locale) {
+    var _a;
+    if (!commonByLocale) {
+        commonByLocale = new Map();
+    }
+    if (commonByLocale.has(locale)) {
+        return (_a = commonByLocale.get(locale)) !== null && _a !== void 0 ? _a : null;
+    }
+    for (const candidate of commonJsonCandidates(locale)) {
+        if (!(0, node_fs_1.existsSync)(candidate)) {
+            continue;
+        }
+        try {
+            const parsed = JSON.parse((0, node_fs_1.readFileSync)(candidate, 'utf8'));
+            commonByLocale.set(locale, parsed);
+            return parsed;
+        }
+        catch (_b) {
+            // try next candidate
+        }
+    }
+    commonByLocale.set(locale, {});
+    return null;
+}
+function commonJsonCandidates(locale) {
+    const cwd = process.cwd();
+    return [
+        (0, node_path_1.join)(cwd, 'libs/modules/common/client/i18n', locale, 'common.json'),
+        (0, node_path_1.join)(cwd, 'dist/apps/demo/browser/assets/i18n', locale, 'common.json'),
+        (0, node_path_1.join)(cwd, 'dist/apps/demo/assets/i18n', locale, 'common.json'),
+    ];
+}
+//#endregion
+//# sourceMappingURL=permission-display-catalog.js.map

package/server/src/lib/reports/permission-display-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-display-catalog.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/src/lib/reports/permission-display-catalog.ts"],"names":[],"mappings":";;AAwBA,sEAkBC;AAED,0EAgBC;AA5DD,qCAAmD;AACnD,yCAAiC;AACjC,sFAGkD;AAMlD,YAAY;AAEZ,kEAAkE;AAElE,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,OAAO,CAAU,CAAC;AAEnD,IAAI,cAAc,GAAmC,IAAI,CAAC;AAE1D;;;;GAIG;AACH,SAAgB,6BAA6B,CAAC,aAAqB;IACjE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,CAAC,aAAa,EAAE,IAAA,sDAA4B,EAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,IAAA,mDAAyB,EAAC,aAAa,CAAC,CAAC;IACtD,IAAI,IAAI,EAAE,CAAC;QACT,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC/B,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtD,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YAClE,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC;YACD,IAAI,WAAW,EAAE,CAAC;gBAChB,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;AAC7C,CAAC;AAED,SAAgB,+BAA+B,CAC7C,aAAqB,EACrB,MAA0B;IAE1B,MAAM,KAAK,GAAG,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,6BAA6B,CAAC,aAAa,CAAC,CAAC;IAC9D,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0EAA0E;IAC1E,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,YAAY;AAEZ,+BAA+B;AAE/B,SAAS,gBAAgB,CAAC,MAAc,EAAE,OAAe;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,OAAO,GAAY,IAAI,CAAC;IAC5B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACtE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,GAAI,OAAsB,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACpF,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;;IACtC,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,cAAc,GAAG,IAAI,GAAG,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,OAAO,MAAA,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,mCAAI,IAAI,CAAC;IAC5C,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,IAAA,oBAAU,EAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,SAAS,EAAE,MAAM,CAAC,CAAe,CAAC;YACzE,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACnC,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,WAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;IACH,CAAC;IAED,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAc;IAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,OAAO;QACL,IAAA,gBAAI,EAAC,GAAG,EAAE,iCAAiC,EAAE,MAAM,EAAE,aAAa,CAAC;QACnE,IAAA,gBAAI,EAAC,GAAG,EAAE,oCAAoC,EAAE,MAAM,EAAE,aAAa,CAAC;QACtE,IAAA,gBAAI,EAAC,GAAG,EAAE,4BAA4B,EAAE,MAAM,EAAE,aAAa,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,YAAY"}

package/server/src/lib/reports/security-report-definition.provider.d.ts

@@ -0,0 +1,5 @@
+import { BackendReportDefinitionProvider, type BackendReportCategory, type BackendReportDefinition } from '@acorex-platform/framework-server/report';
+export declare class SecurityReportDefinitionProvider implements BackendReportDefinitionProvider {
+    getCategories(): BackendReportCategory[];
+    getDefinitions(): BackendReportDefinition[];
+}

package/server/src/lib/reports/security-report-definition.provider.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecurityReportDefinitionProvider = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const report_1 = require("@acorex-platform/framework-server/report");
+const security_report_definitions_1 = require("./security-report.definitions");
+//#region ----- Security report definition provider -----
+let SecurityReportDefinitionProvider = class SecurityReportDefinitionProvider {
+    getCategories() {
+        return security_report_definitions_1.SECURITY_REPORT_CATEGORIES;
+    }
+    getDefinitions() {
+        return security_report_definitions_1.SECURITY_REPORT_DEFINITIONS;
+    }
+};
+exports.SecurityReportDefinitionProvider = SecurityReportDefinitionProvider;
+exports.SecurityReportDefinitionProvider = SecurityReportDefinitionProvider = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    (0, report_1.ReportDefinitionProvider)()
+], SecurityReportDefinitionProvider);
+//#endregion
+//# sourceMappingURL=security-report-definition.provider.js.map

package/server/src/lib/reports/security-report-definition.provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-report-definition.provider.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/src/lib/reports/security-report-definition.provider.ts"],"names":[],"mappings":";;;;AAAA,2CAA4C;AAC5C,qEAKkD;AAClD,+EAGuC;AAEvC,yDAAyD;AAIlD,IAAM,gCAAgC,GAAtC,MAAM,gCAAgC;IAC3C,aAAa;QACX,OAAO,wDAA0B,CAAC;IACpC,CAAC;IAED,cAAc;QACZ,OAAO,yDAA2B,CAAC;IACrC,CAAC;CACF,CAAA;AARY,4EAAgC;2CAAhC,gCAAgC;IAF5C,IAAA,mBAAU,GAAE;IACZ,IAAA,iCAAwB,GAAE;GACd,gCAAgC,CAQ5C;AAED,YAAY"}

package/server/src/lib/reports/security-report-parameter-groups.d.ts

@@ -0,0 +1,343 @@
+export declare const USER_EFFECTIVE_ACCESS_PARAMETER_GROUP: {
+    name: string;
+    title: string;
+    description: string;
+    parameters: ({
+        path: string;
+        title: string;
+        description: string;
+        widget: {
+            type: string;
+            options: {
+                format: string;
+                showTime: boolean;
+                defaultValue: string;
+                entity?: undefined;
+                multiple?: undefined;
+                textField?: undefined;
+                valueField?: undefined;
+                look?: undefined;
+                columns?: undefined;
+                hasClearButton?: undefined;
+            };
+        };
+        visible?: undefined;
+    } | {
+        path: string;
+        title: string;
+        description: string;
+        widget: {
+            type: string;
+            options: {
+                entity: string;
+                multiple: boolean;
+                textField: string;
+                valueField: string;
+                look: string;
+                columns: string[];
+                hasClearButton: boolean;
+            };
+        };
+    })[];
+};
+/** User effective permissions history: shared scope filters + permission contains search. */
+export declare const USER_EFFECTIVE_PERMISSIONS_PARAMETER_GROUP: {
+    name: string;
+    title: string;
+    description: string;
+    parameters: ({
+        path: string;
+        title: string;
+        description: string;
+        widget: {
+            type: string;
+            options: {
+                format: string;
+                showTime: boolean;
+                defaultValue: string;
+                entity?: undefined;
+                multiple?: undefined;
+                textField?: undefined;
+                valueField?: undefined;
+                look?: undefined;
+                columns?: undefined;
+                hasClearButton?: undefined;
+            };
+        };
+        visible?: undefined;
+    } | {
+        path: string;
+        title: string;
+        description: string;
+        widget: {
+            type: string;
+            options: {
+                entity: string;
+                multiple: boolean;
+                textField: string;
+                valueField: string;
+                look: string;
+                columns: string[];
+                hasClearButton: boolean;
+            };
+        };
+    } | {
+        path: string;
+        title: string;
+        description: string;
+        widget: {
+            type: string;
+            options: {
+                operations: {
+                    name: string;
+                    title: string;
+                    hasValue: boolean;
+                }[];
+                placeholder: string;
+            };
+        };
+    })[];
+};
+export declare const ROLE_HOLDERS_PARAMETER_GROUP: {
+    name: string;
+    title: string;
+    description: string;
+    parameters: ({
+        path: string;
+        title: string;
+        description: string;
+        widget: {
+            type: string;
+            options: {
+                format: string;
+                showTime: boolean;
+                defaultValue: string;
+                entity?: undefined;
+                multiple?: undefined;
+                textField?: undefined;
+                valueField?: undefined;
+                look?: undefined;
+                columns?: undefined;
+                hasClearButton?: undefined;
+            };
+        };
+        visible?: undefined;
+    } | {
+        path: string;
+        title: string;
+        description: string;
+        visible: string;
+        widget: {
+            type: string;
+            options: {
+                entity: string;
+                multiple: boolean;
+                textField: string;
+                valueField: string;
+                look: string;
+                columns: string[];
+                hasClearButton: boolean;
+                format?: undefined;
+                showTime?: undefined;
+                defaultValue?: undefined;
+            };
+        };
+    } | {
+        path: string;
+        title: string;
+        description: string;
+        visible: boolean;
+        widget: {
+            type: string;
+            options: {
+                entity: string;
+                multiple: boolean;
+                textField: string;
+                valueField: string;
+                look: string;
+                columns: string[];
+                hasClearButton: boolean;
+                format?: undefined;
+                showTime?: undefined;
+                defaultValue?: undefined;
+            };
+        };
+    } | {
+        path: string;
+        title: string;
+        description: string;
+        widget: {
+            type: string;
+            options: {
+                entity: string;
+                multiple: boolean;
+                textField: string;
+                valueField: string;
+                look: string;
+                columns: string[];
+            };
+        };
+    })[];
+};
+export declare const PERMISSION_HOLDERS_PARAMETER_GROUP: {
+    name: string;
+    title: string;
+    description: string;
+    parameters: ({
+        path: string;
+        title: string;
+        description: string;
+        widget: {
+            type: string;
+            options: {
+                format: string;
+                showTime: boolean;
+                defaultValue: string;
+                entity?: undefined;
+                multiple?: undefined;
+                textField?: undefined;
+                valueField?: undefined;
+                look?: undefined;
+                columns?: undefined;
+                hasClearButton?: undefined;
+            };
+        };
+        visible?: undefined;
+    } | {
+        path: string;
+        title: string;
+        description: string;
+        visible: string;
+        widget: {
+            type: string;
+            options: {
+                entity: string;
+                multiple: boolean;
+                textField: string;
+                valueField: string;
+                look: string;
+                columns: string[];
+                hasClearButton: boolean;
+                format?: undefined;
+                showTime?: undefined;
+                defaultValue?: undefined;
+            };
+        };
+    } | {
+        path: string;
+        title: string;
+        description: string;
+        visible: boolean;
+        widget: {
+            type: string;
+            options: {
+                entity: string;
+                multiple: boolean;
+                textField: string;
+                valueField: string;
+                look: string;
+                columns: string[];
+                hasClearButton: boolean;
+                format?: undefined;
+                showTime?: undefined;
+                defaultValue?: undefined;
+            };
+        };
+    } | {
+        path: string;
+        title: string;
+        description: string;
+        widget: {
+            type: string;
+            options: {
+                placeholder: string;
+            };
+        };
+    })[];
+};
+/** User + date range for password-change history (and similar user-scoped security reports). */
+export declare const USER_PASSWORD_CHANGE_PARAMETER_GROUP: {
+    name: string;
+    title: string;
+    description: string;
+    parameters: ({
+        path: string;
+        title: string;
+        description: string;
+        widget: {
+            type: string;
+            options: {
+                format: string;
+                showTime: boolean;
+                defaultValue: string;
+                entity?: undefined;
+                multiple?: undefined;
+                textField?: undefined;
+                valueField?: undefined;
+                look?: undefined;
+                columns?: undefined;
+                hasClearButton?: undefined;
+            };
+        };
+        visible?: undefined;
+    } | {
+        path: string;
+        title: string;
+        description: string;
+        visible: string;
+        widget: {
+            type: string;
+            options: {
+                entity: string;
+                multiple: boolean;
+                textField: string;
+                valueField: string;
+                look: string;
+                columns: string[];
+                hasClearButton: boolean;
+                format?: undefined;
+                showTime?: undefined;
+                defaultValue?: undefined;
+            };
+        };
+    } | {
+        path: string;
+        title: string;
+        description: string;
+        visible: boolean;
+        widget: {
+            type: string;
+            options: {
+                entity: string;
+                multiple: boolean;
+                textField: string;
+                valueField: string;
+                look: string;
+                columns: string[];
+                hasClearButton: boolean;
+                format?: undefined;
+                showTime?: undefined;
+                defaultValue?: undefined;
+            };
+        };
+    } | {
+        widget: {
+            options: {
+                validations: {
+                    rule: string;
+                }[];
+                entity: string;
+                multiple: boolean;
+                textField: string;
+                valueField: string;
+                look: string;
+                columns: string[];
+                hasClearButton: boolean;
+            };
+            type: string;
+        };
+        path: string;
+        title: string;
+        description: string;
+    })[];
+};