@acorex-platform/module-security-management-server 0.0.15 → 2.0.0-next.42

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (453) hide show
  1. package/contracts/src/AXM_USER_ACCESS_STATE_DEFINITION_KEY.js.map +1 -1
  2. package/contracts/src/AXM_USER_EFFECTIVE_STATE_DEFINITION_KEY.js.map +1 -1
  3. package/contracts/src/ROLE_PERMISSIONS_PAGE_COMPONENT_KEY.d.ts +2 -0
  4. package/contracts/src/ROLE_PERMISSIONS_PAGE_COMPONENT_KEY.js +6 -0
  5. package/contracts/src/ROLE_PERMISSIONS_PAGE_COMPONENT_KEY.js.map +1 -0
  6. package/contracts/src/USER_ROLES_PAGE_COMPONENT_KEY.d.ts +1 -0
  7. package/contracts/src/USER_ROLES_PAGE_COMPONENT_KEY.js +5 -0
  8. package/contracts/src/USER_ROLES_PAGE_COMPONENT_KEY.js.map +1 -0
  9. package/contracts/src/create-application-role-rows.util.d.ts +15 -0
  10. package/contracts/src/create-application-role-rows.util.js +67 -0
  11. package/contracts/src/create-application-role-rows.util.js.map +1 -0
  12. package/contracts/src/device-session-admin-scope.d.ts +15 -0
  13. package/contracts/src/device-session-admin-scope.js +16 -0
  14. package/contracts/src/device-session-admin-scope.js.map +1 -0
  15. package/contracts/src/entities/device-sessions/device-sessions.entity.js +50 -1
  16. package/contracts/src/entities/device-sessions/device-sessions.entity.js.map +1 -1
  17. package/contracts/src/entities/device-sessions/device-sessions.types.d.ts +7 -0
  18. package/contracts/src/entities/device-sessions/device-sessions.types.js.map +1 -1
  19. package/contracts/src/entities/device-sessions/index.d.ts +0 -1
  20. package/contracts/src/entities/device-sessions/index.js +0 -1
  21. package/contracts/src/entities/device-sessions/index.js.map +1 -1
  22. package/contracts/src/entities/identity-provider/identity-provider.entity.d.ts +2 -0
  23. package/contracts/src/entities/identity-provider/identity-provider.entity.js +453 -0
  24. package/contracts/src/entities/identity-provider/identity-provider.entity.js.map +1 -0
  25. package/contracts/src/entities/identity-provider/identity-provider.types.d.ts +61 -0
  26. package/contracts/src/entities/identity-provider/identity-provider.types.js +14 -0
  27. package/contracts/src/entities/identity-provider/identity-provider.types.js.map +1 -0
  28. package/contracts/src/entities/identity-provider/index.d.ts +1 -0
  29. package/contracts/src/entities/identity-provider/index.js +5 -0
  30. package/contracts/src/entities/identity-provider/index.js.map +1 -0
  31. package/contracts/src/entities/index.d.ts +4 -0
  32. package/contracts/src/entities/index.js +4 -0
  33. package/contracts/src/entities/index.js.map +1 -1
  34. package/contracts/src/entities/policy/index.d.ts +0 -1
  35. package/contracts/src/entities/policy/index.js +0 -1
  36. package/contracts/src/entities/policy/index.js.map +1 -1
  37. package/contracts/src/entities/policy/policy.entity.js +15 -0
  38. package/contracts/src/entities/policy/policy.entity.js.map +1 -1
  39. package/contracts/src/entities/policy/policy.types.js.map +1 -1
  40. package/contracts/src/entities/profile/index.d.ts +0 -1
  41. package/contracts/src/entities/profile/index.js +0 -1
  42. package/contracts/src/entities/profile/index.js.map +1 -1
  43. package/contracts/src/entities/profile/profile.entity.js +15 -0
  44. package/contracts/src/entities/profile/profile.entity.js.map +1 -1
  45. package/contracts/src/entities/profile/profile.types.js.map +1 -1
  46. package/contracts/src/entities/role-permission/index.d.ts +1 -0
  47. package/contracts/src/entities/role-permission/index.js +5 -0
  48. package/contracts/src/entities/role-permission/index.js.map +1 -0
  49. package/contracts/src/entities/role-permission/role-permission.entity.d.ts +2 -0
  50. package/contracts/src/entities/role-permission/role-permission.entity.js +163 -0
  51. package/contracts/src/entities/role-permission/role-permission.entity.js.map +1 -0
  52. package/contracts/src/entities/role-permission/role-permission.types.d.ts +11 -0
  53. package/contracts/src/entities/role-permission/role-permission.types.js +5 -0
  54. package/contracts/src/entities/role-permission/role-permission.types.js.map +1 -0
  55. package/contracts/src/entities/roles/index.d.ts +0 -1
  56. package/contracts/src/entities/roles/index.js +0 -1
  57. package/contracts/src/entities/roles/index.js.map +1 -1
  58. package/contracts/src/entities/roles/roles.entity.js +73 -144
  59. package/contracts/src/entities/roles/roles.entity.js.map +1 -1
  60. package/contracts/src/entities/roles/roles.types.d.ts +4 -1
  61. package/contracts/src/entities/roles/roles.types.js.map +1 -1
  62. package/contracts/src/entities/user-role/index.d.ts +1 -0
  63. package/{src/lib/seed/tenant → contracts/src/entities/user-role}/index.js +1 -1
  64. package/contracts/src/entities/user-role/index.js.map +1 -0
  65. package/contracts/src/entities/user-role/user-role.entity.d.ts +2 -0
  66. package/contracts/src/entities/user-role/user-role.entity.js +164 -0
  67. package/contracts/src/entities/user-role/user-role.entity.js.map +1 -0
  68. package/contracts/src/entities/user-role/user-role.types.d.ts +11 -0
  69. package/contracts/src/entities/user-role/user-role.types.js +5 -0
  70. package/contracts/src/entities/user-role/user-role.types.js.map +1 -0
  71. package/contracts/src/entities/user-two-factor/index.d.ts +2 -0
  72. package/contracts/src/entities/user-two-factor/index.js +8 -0
  73. package/contracts/src/entities/user-two-factor/index.js.map +1 -0
  74. package/contracts/src/entities/user-two-factor/user-two-factor.entity.d.ts +6 -0
  75. package/contracts/src/entities/user-two-factor/user-two-factor.entity.js +103 -0
  76. package/contracts/src/entities/user-two-factor/user-two-factor.entity.js.map +1 -0
  77. package/contracts/src/entities/user-two-factor/user-two-factor.types.d.ts +24 -0
  78. package/contracts/src/entities/user-two-factor/user-two-factor.types.js +4 -0
  79. package/contracts/src/entities/user-two-factor/user-two-factor.types.js.map +1 -0
  80. package/contracts/src/entities/users/index.d.ts +1 -1
  81. package/contracts/src/entities/users/index.js +1 -1
  82. package/contracts/src/entities/users/index.js.map +1 -1
  83. package/contracts/src/entities/users/user-provisioning-list-actions.d.ts +8 -0
  84. package/contracts/src/entities/users/user-provisioning-list-actions.js +95 -0
  85. package/contracts/src/entities/users/user-provisioning-list-actions.js.map +1 -0
  86. package/contracts/src/entities/users/users.entity.js +341 -283
  87. package/contracts/src/entities/users/users.entity.js.map +1 -1
  88. package/contracts/src/entities/users/users.types.d.ts +24 -1
  89. package/contracts/src/entities/users/users.types.js.map +1 -1
  90. package/contracts/src/entity-catalog.d.ts +7 -0
  91. package/contracts/src/entity-catalog.js +28 -0
  92. package/contracts/src/entity-catalog.js.map +1 -0
  93. package/contracts/src/entity-entry.device-sessions.d.ts +1 -0
  94. package/contracts/src/entity-entry.device-sessions.js +6 -0
  95. package/contracts/src/entity-entry.device-sessions.js.map +1 -0
  96. package/contracts/src/entity-entry.identity-provider.d.ts +1 -0
  97. package/contracts/src/entity-entry.identity-provider.js +6 -0
  98. package/contracts/src/entity-entry.identity-provider.js.map +1 -0
  99. package/contracts/src/entity-entry.policy.d.ts +1 -0
  100. package/contracts/src/entity-entry.policy.js +6 -0
  101. package/contracts/src/entity-entry.policy.js.map +1 -0
  102. package/contracts/src/entity-entry.profile.d.ts +1 -0
  103. package/contracts/src/entity-entry.profile.js +6 -0
  104. package/contracts/src/entity-entry.profile.js.map +1 -0
  105. package/contracts/src/entity-entry.role-permission.d.ts +1 -0
  106. package/contracts/src/entity-entry.role-permission.js +6 -0
  107. package/contracts/src/entity-entry.role-permission.js.map +1 -0
  108. package/contracts/src/entity-entry.roles.d.ts +1 -0
  109. package/contracts/src/entity-entry.roles.js +6 -0
  110. package/contracts/src/entity-entry.roles.js.map +1 -0
  111. package/contracts/src/entity-entry.user-role.d.ts +1 -0
  112. package/contracts/src/entity-entry.user-role.js +6 -0
  113. package/contracts/src/entity-entry.user-role.js.map +1 -0
  114. package/contracts/src/entity-entry.user-two-factor.d.ts +1 -0
  115. package/contracts/src/entity-entry.user-two-factor.js +6 -0
  116. package/contracts/src/entity-entry.user-two-factor.js.map +1 -0
  117. package/contracts/src/entity-entry.users.d.ts +1 -0
  118. package/contracts/src/entity-entry.users.js +6 -0
  119. package/contracts/src/entity-entry.users.js.map +1 -0
  120. package/contracts/src/features.keys.d.ts +4 -0
  121. package/contracts/src/features.keys.js +4 -0
  122. package/contracts/src/features.keys.js.map +1 -1
  123. package/contracts/src/index.d.ts +13 -1
  124. package/contracts/src/index.js +13 -1
  125. package/contracts/src/index.js.map +1 -1
  126. package/contracts/src/invite-application-role-rows.util.d.ts +16 -0
  127. package/contracts/src/invite-application-role-rows.util.js +68 -0
  128. package/contracts/src/invite-application-role-rows.util.js.map +1 -0
  129. package/contracts/src/invite-assignable-roles.util.d.ts +34 -0
  130. package/contracts/src/invite-assignable-roles.util.js +75 -0
  131. package/contracts/src/invite-assignable-roles.util.js.map +1 -0
  132. package/contracts/src/lib/context.definitions.d.ts +2 -0
  133. package/contracts/src/lib/context.definitions.js +15 -0
  134. package/contracts/src/lib/context.definitions.js.map +1 -0
  135. package/contracts/src/manifest.d.ts +6 -0
  136. package/contracts/src/manifest.js +24 -0
  137. package/contracts/src/manifest.js.map +1 -0
  138. package/contracts/src/menu.keys.d.ts +1 -0
  139. package/contracts/src/menu.keys.js +1 -0
  140. package/contracts/src/menu.keys.js.map +1 -1
  141. package/contracts/src/permission.keys.d.ts +48 -18
  142. package/contracts/src/permission.keys.js +49 -21
  143. package/contracts/src/permission.keys.js.map +1 -1
  144. package/contracts/src/resolve-user-effective-state.d.ts +10 -0
  145. package/contracts/src/resolve-user-effective-state.js +46 -0
  146. package/contracts/src/resolve-user-effective-state.js.map +1 -0
  147. package/contracts/src/root-config.d.ts +33 -0
  148. package/contracts/src/root-config.js +33 -0
  149. package/contracts/src/root-config.js.map +1 -1
  150. package/contracts/src/server-commands.d.ts +340 -0
  151. package/contracts/src/server-commands.js +88 -0
  152. package/contracts/src/server-commands.js.map +1 -0
  153. package/contracts/src/settings.keys.d.ts +16 -0
  154. package/contracts/src/settings.keys.js +21 -0
  155. package/contracts/src/settings.keys.js.map +1 -0
  156. package/contracts/src/user-access-state.js.map +1 -1
  157. package/contracts/src/user-effective-state.js.map +1 -1
  158. package/contracts/src/user-invitation.d.ts +41 -0
  159. package/contracts/src/user-invitation.js +18 -0
  160. package/contracts/src/user-invitation.js.map +1 -0
  161. package/contracts/src/user-password-reset.d.ts +9 -0
  162. package/contracts/src/user-password-reset.js +5 -0
  163. package/contracts/src/user-password-reset.js.map +1 -0
  164. package/package.json +16 -11
  165. package/server/src/index.d.ts +3 -0
  166. package/server/src/index.js +11 -0
  167. package/server/src/index.js.map +1 -0
  168. package/server/src/lib/effective-access-history/effective-access-history.service.d.ts +35 -0
  169. package/server/src/lib/effective-access-history/effective-access-history.service.js +486 -0
  170. package/server/src/lib/effective-access-history/effective-access-history.service.js.map +1 -0
  171. package/server/src/lib/effective-access-history/effective-access-history.types.d.ts +64 -0
  172. package/server/src/lib/effective-access-history/effective-access-history.types.js +5 -0
  173. package/server/src/lib/effective-access-history/effective-access-history.types.js.map +1 -0
  174. package/server/src/lib/effective-access-history/version-as-of.util.d.ts +37 -0
  175. package/server/src/lib/effective-access-history/version-as-of.util.js +167 -0
  176. package/server/src/lib/effective-access-history/version-as-of.util.js.map +1 -0
  177. package/server/src/lib/entities/index.d.ts +1 -0
  178. package/server/src/lib/entities/index.js +5 -0
  179. package/{src/lib/seed/tenant → server/src/lib/entities}/index.js.map +1 -1
  180. package/server/src/lib/entities/security-management.entity-catalog.d.ts +1 -0
  181. package/server/src/lib/entities/security-management.entity-catalog.js +12 -0
  182. package/server/src/lib/entities/security-management.entity-catalog.js.map +1 -0
  183. package/server/src/lib/handlers/security-report.handlers.d.ts +36 -0
  184. package/server/src/lib/handlers/security-report.handlers.js +164 -0
  185. package/server/src/lib/handlers/security-report.handlers.js.map +1 -0
  186. package/server/src/lib/identity-provider/auth-oauth-clients.constants.d.ts +5 -0
  187. package/server/src/lib/identity-provider/auth-oauth-clients.constants.js +11 -0
  188. package/server/src/lib/identity-provider/auth-oauth-clients.constants.js.map +1 -0
  189. package/server/src/lib/identity-provider/identity-provider-catalog.service.d.ts +20 -0
  190. package/server/src/lib/identity-provider/identity-provider-catalog.service.js +169 -0
  191. package/server/src/lib/identity-provider/identity-provider-catalog.service.js.map +1 -0
  192. package/server/src/lib/identity-provider/identity-provider-ids.constants.d.ts +8 -0
  193. package/server/src/lib/identity-provider/identity-provider-ids.constants.js +19 -0
  194. package/server/src/lib/identity-provider/identity-provider-ids.constants.js.map +1 -0
  195. package/server/src/lib/identity-provider/identity-provider-stub.bootstrap.d.ts +12 -0
  196. package/server/src/lib/identity-provider/identity-provider-stub.bootstrap.js +48 -0
  197. package/server/src/lib/identity-provider/identity-provider-stub.bootstrap.js.map +1 -0
  198. package/server/src/lib/identity-provider/identity-provider.constants.d.ts +1 -0
  199. package/server/src/lib/identity-provider/identity-provider.constants.js +7 -0
  200. package/server/src/lib/identity-provider/identity-provider.constants.js.map +1 -0
  201. package/server/src/lib/middlewares/device-sessions-active.middleware.d.ts +15 -0
  202. package/server/src/lib/middlewares/device-sessions-active.middleware.js +76 -0
  203. package/server/src/lib/middlewares/device-sessions-active.middleware.js.map +1 -0
  204. package/server/src/lib/middlewares/device-sessions-app-scope.middleware.d.ts +29 -0
  205. package/server/src/lib/middlewares/device-sessions-app-scope.middleware.js +137 -0
  206. package/server/src/lib/middlewares/device-sessions-app-scope.middleware.js.map +1 -0
  207. package/server/src/lib/middlewares/device-sessions-app-scope.util.d.ts +41 -0
  208. package/server/src/lib/middlewares/device-sessions-app-scope.util.js +69 -0
  209. package/server/src/lib/middlewares/device-sessions-app-scope.util.js.map +1 -0
  210. package/server/src/lib/middlewares/device-sessions-token-revoke.middleware.d.ts +18 -0
  211. package/server/src/lib/middlewares/device-sessions-token-revoke.middleware.js +90 -0
  212. package/server/src/lib/middlewares/device-sessions-token-revoke.middleware.js.map +1 -0
  213. package/server/src/lib/middlewares/user-assigned-roles.middleware.d.ts +36 -0
  214. package/server/src/lib/middlewares/user-assigned-roles.middleware.js +359 -0
  215. package/server/src/lib/middlewares/user-assigned-roles.middleware.js.map +1 -0
  216. package/server/src/lib/middlewares/user-effective-state.middleware.d.ts +13 -0
  217. package/server/src/lib/middlewares/user-effective-state.middleware.js +57 -0
  218. package/server/src/lib/middlewares/user-effective-state.middleware.js.map +1 -0
  219. package/server/src/lib/middlewares/user-invitation-list.middleware.d.ts +32 -0
  220. package/server/src/lib/middlewares/user-invitation-list.middleware.js +250 -0
  221. package/server/src/lib/middlewares/user-invitation-list.middleware.js.map +1 -0
  222. package/server/src/lib/middlewares/user-profile-write.middleware.d.ts +18 -0
  223. package/server/src/lib/middlewares/user-profile-write.middleware.js +206 -0
  224. package/server/src/lib/middlewares/user-profile-write.middleware.js.map +1 -0
  225. package/server/src/lib/password-reset/change-own-password.command.d.ts +8 -0
  226. package/server/src/lib/password-reset/change-own-password.command.js +38 -0
  227. package/server/src/lib/password-reset/change-own-password.command.js.map +1 -0
  228. package/server/src/lib/password-reset/complete-password-reset.command.d.ts +8 -0
  229. package/server/src/lib/password-reset/complete-password-reset.command.js +37 -0
  230. package/server/src/lib/password-reset/complete-password-reset.command.js.map +1 -0
  231. package/server/src/lib/password-reset/get-own-password-status.command.d.ts +8 -0
  232. package/server/src/lib/password-reset/get-own-password-status.command.js +31 -0
  233. package/server/src/lib/password-reset/get-own-password-status.command.js.map +1 -0
  234. package/server/src/lib/password-reset/send-password-reset-email.command.d.ts +20 -0
  235. package/server/src/lib/password-reset/send-password-reset-email.command.js +43 -0
  236. package/server/src/lib/password-reset/send-password-reset-email.command.js.map +1 -0
  237. package/server/src/lib/password-reset/user-change-password.service.d.ts +24 -0
  238. package/server/src/lib/password-reset/user-change-password.service.js +92 -0
  239. package/server/src/lib/password-reset/user-change-password.service.js.map +1 -0
  240. package/server/src/lib/password-reset/user-password-reset.service.d.ts +26 -0
  241. package/server/src/lib/password-reset/user-password-reset.service.js +221 -0
  242. package/server/src/lib/password-reset/user-password-reset.service.js.map +1 -0
  243. package/server/src/lib/queries/get-permission-holders-history.query.d.ts +4 -0
  244. package/server/src/lib/queries/get-permission-holders-history.query.definition.d.ts +5 -0
  245. package/server/src/lib/queries/get-permission-holders-history.query.definition.js +38 -0
  246. package/server/src/lib/queries/get-permission-holders-history.query.definition.js.map +1 -0
  247. package/server/src/lib/queries/get-permission-holders-history.query.js +25 -0
  248. package/server/src/lib/queries/get-permission-holders-history.query.js.map +1 -0
  249. package/server/src/lib/queries/get-role-holders-history.query.d.ts +4 -0
  250. package/server/src/lib/queries/get-role-holders-history.query.definition.d.ts +5 -0
  251. package/server/src/lib/queries/get-role-holders-history.query.definition.js +38 -0
  252. package/server/src/lib/queries/get-role-holders-history.query.definition.js.map +1 -0
  253. package/server/src/lib/queries/get-role-holders-history.query.js +25 -0
  254. package/server/src/lib/queries/get-role-holders-history.query.js.map +1 -0
  255. package/server/src/lib/queries/get-user-effective-permissions-history.query.d.ts +4 -0
  256. package/server/src/lib/queries/get-user-effective-permissions-history.query.definition.d.ts +5 -0
  257. package/server/src/lib/queries/get-user-effective-permissions-history.query.definition.js +35 -0
  258. package/server/src/lib/queries/get-user-effective-permissions-history.query.definition.js.map +1 -0
  259. package/server/src/lib/queries/get-user-effective-permissions-history.query.js +26 -0
  260. package/server/src/lib/queries/get-user-effective-permissions-history.query.js.map +1 -0
  261. package/server/src/lib/queries/get-user-effective-roles-history.query.d.ts +4 -0
  262. package/server/src/lib/queries/get-user-effective-roles-history.query.definition.d.ts +5 -0
  263. package/server/src/lib/queries/get-user-effective-roles-history.query.definition.js +36 -0
  264. package/server/src/lib/queries/get-user-effective-roles-history.query.definition.js.map +1 -0
  265. package/server/src/lib/queries/get-user-effective-roles-history.query.js +25 -0
  266. package/server/src/lib/queries/get-user-effective-roles-history.query.js.map +1 -0
  267. package/server/src/lib/queries/get-user-password-change-history.query.d.ts +4 -0
  268. package/server/src/lib/queries/get-user-password-change-history.query.definition.d.ts +5 -0
  269. package/server/src/lib/queries/get-user-password-change-history.query.definition.js +33 -0
  270. package/server/src/lib/queries/get-user-password-change-history.query.definition.js.map +1 -0
  271. package/server/src/lib/queries/get-user-password-change-history.query.js +23 -0
  272. package/server/src/lib/queries/get-user-password-change-history.query.js.map +1 -0
  273. package/server/src/lib/queries/security-query.helpers.d.ts +47 -0
  274. package/server/src/lib/queries/security-query.helpers.js +184 -0
  275. package/server/src/lib/queries/security-query.helpers.js.map +1 -0
  276. package/server/src/lib/reports/password-change-history.service.d.ts +14 -0
  277. package/server/src/lib/reports/password-change-history.service.js +74 -0
  278. package/server/src/lib/reports/password-change-history.service.js.map +1 -0
  279. package/server/src/lib/reports/permission-display-catalog.d.ts +7 -0
  280. package/server/src/lib/reports/permission-display-catalog.js +101 -0
  281. package/server/src/lib/reports/permission-display-catalog.js.map +1 -0
  282. package/server/src/lib/reports/security-report-definition.provider.d.ts +5 -0
  283. package/server/src/lib/reports/security-report-definition.provider.js +23 -0
  284. package/server/src/lib/reports/security-report-definition.provider.js.map +1 -0
  285. package/server/src/lib/reports/security-report-parameter-groups.d.ts +343 -0
  286. package/server/src/lib/reports/security-report-parameter-groups.js +167 -0
  287. package/server/src/lib/reports/security-report-parameter-groups.js.map +1 -0
  288. package/server/src/lib/reports/security-report-scope.constants.d.ts +5 -0
  289. package/server/src/lib/reports/security-report-scope.constants.js +11 -0
  290. package/server/src/lib/reports/security-report-scope.constants.js.map +1 -0
  291. package/server/src/lib/reports/security-report.definitions.d.ts +12 -0
  292. package/server/src/lib/reports/security-report.definitions.js +386 -0
  293. package/server/src/lib/reports/security-report.definitions.js.map +1 -0
  294. package/server/src/lib/security-management-entity-storage.bootstrap.d.ts +26 -0
  295. package/server/src/lib/security-management-entity-storage.bootstrap.js +56 -0
  296. package/server/src/lib/security-management-entity-storage.bootstrap.js.map +1 -0
  297. package/server/src/lib/security-management-server.module.d.ts +7 -0
  298. package/server/src/lib/security-management-server.module.js +190 -0
  299. package/server/src/lib/security-management-server.module.js.map +1 -0
  300. package/server/src/lib/two-factor/admin-reset-two-factor.command.d.ts +8 -0
  301. package/server/src/lib/two-factor/admin-reset-two-factor.command.js +35 -0
  302. package/server/src/lib/two-factor/admin-reset-two-factor.command.js.map +1 -0
  303. package/server/src/lib/two-factor/confirm-two-factor-enrollment.command.d.ts +8 -0
  304. package/server/src/lib/two-factor/confirm-two-factor-enrollment.command.js +34 -0
  305. package/server/src/lib/two-factor/confirm-two-factor-enrollment.command.js.map +1 -0
  306. package/server/src/lib/two-factor/disable-two-factor.command.d.ts +8 -0
  307. package/server/src/lib/two-factor/disable-two-factor.command.js +31 -0
  308. package/server/src/lib/two-factor/disable-two-factor.command.js.map +1 -0
  309. package/server/src/lib/two-factor/generate-two-factor-recovery-codes.command.d.ts +8 -0
  310. package/server/src/lib/two-factor/generate-two-factor-recovery-codes.command.js +34 -0
  311. package/server/src/lib/two-factor/generate-two-factor-recovery-codes.command.js.map +1 -0
  312. package/server/src/lib/two-factor/get-two-factor-status.command.d.ts +8 -0
  313. package/server/src/lib/two-factor/get-two-factor-status.command.js +31 -0
  314. package/server/src/lib/two-factor/get-two-factor-status.command.js.map +1 -0
  315. package/server/src/lib/two-factor/recovery-codes.util.d.ts +11 -0
  316. package/server/src/lib/two-factor/recovery-codes.util.js +73 -0
  317. package/server/src/lib/two-factor/recovery-codes.util.js.map +1 -0
  318. package/server/src/lib/two-factor/start-two-factor-enrollment.command.d.ts +8 -0
  319. package/server/src/lib/two-factor/start-two-factor-enrollment.command.js +31 -0
  320. package/server/src/lib/two-factor/start-two-factor-enrollment.command.js.map +1 -0
  321. package/server/src/lib/two-factor/totp.util.d.ts +32 -0
  322. package/server/src/lib/two-factor/totp.util.js +128 -0
  323. package/server/src/lib/two-factor/totp.util.js.map +1 -0
  324. package/server/src/lib/two-factor/two-factor-encryption.util.d.ts +25 -0
  325. package/server/src/lib/two-factor/two-factor-encryption.util.js +123 -0
  326. package/server/src/lib/two-factor/two-factor-encryption.util.js.map +1 -0
  327. package/server/src/lib/two-factor/two-factor-gate.bootstrap.d.ts +9 -0
  328. package/server/src/lib/two-factor/two-factor-gate.bootstrap.js +65 -0
  329. package/server/src/lib/two-factor/two-factor-gate.bootstrap.js.map +1 -0
  330. package/server/src/lib/two-factor/two-factor-redis.store.d.ts +63 -0
  331. package/server/src/lib/two-factor/two-factor-redis.store.js +321 -0
  332. package/server/src/lib/two-factor/two-factor-redis.store.js.map +1 -0
  333. package/server/src/lib/two-factor/user-two-factor.service.d.ts +62 -0
  334. package/server/src/lib/two-factor/user-two-factor.service.js +573 -0
  335. package/server/src/lib/two-factor/user-two-factor.service.js.map +1 -0
  336. package/server/src/lib/two-factor/verify-two-factor-login.command.d.ts +18 -0
  337. package/server/src/lib/two-factor/verify-two-factor-login.command.js +54 -0
  338. package/server/src/lib/two-factor/verify-two-factor-login.command.js.map +1 -0
  339. package/server/src/lib/user-invitation/accept-invitation.command.d.ts +8 -0
  340. package/server/src/lib/user-invitation/accept-invitation.command.js +41 -0
  341. package/server/src/lib/user-invitation/accept-invitation.command.js.map +1 -0
  342. package/server/src/lib/user-invitation/accept-my-invitation.command.d.ts +8 -0
  343. package/server/src/lib/user-invitation/accept-my-invitation.command.js +40 -0
  344. package/server/src/lib/user-invitation/accept-my-invitation.command.js.map +1 -0
  345. package/server/src/lib/user-invitation/approve-join-request.command.d.ts +8 -0
  346. package/server/src/lib/user-invitation/approve-join-request.command.js +41 -0
  347. package/server/src/lib/user-invitation/approve-join-request.command.js.map +1 -0
  348. package/server/src/lib/user-invitation/cancel-invitation.command.d.ts +8 -0
  349. package/server/src/lib/user-invitation/cancel-invitation.command.js +37 -0
  350. package/server/src/lib/user-invitation/cancel-invitation.command.js.map +1 -0
  351. package/server/src/lib/user-invitation/cancel-my-join-request.command.d.ts +8 -0
  352. package/server/src/lib/user-invitation/cancel-my-join-request.command.js +40 -0
  353. package/server/src/lib/user-invitation/cancel-my-join-request.command.js.map +1 -0
  354. package/server/src/lib/user-invitation/create-user-in-tenant.command.d.ts +8 -0
  355. package/server/src/lib/user-invitation/create-user-in-tenant.command.js +37 -0
  356. package/server/src/lib/user-invitation/create-user-in-tenant.command.js.map +1 -0
  357. package/server/src/lib/user-invitation/decline-invitation.command.d.ts +8 -0
  358. package/server/src/lib/user-invitation/decline-invitation.command.js +37 -0
  359. package/server/src/lib/user-invitation/decline-invitation.command.js.map +1 -0
  360. package/server/src/lib/user-invitation/invite-user.command.d.ts +8 -0
  361. package/server/src/lib/user-invitation/invite-user.command.js +37 -0
  362. package/server/src/lib/user-invitation/invite-user.command.js.map +1 -0
  363. package/server/src/lib/user-invitation/list-invite-assignable-roles.command.d.ts +8 -0
  364. package/server/src/lib/user-invitation/list-invite-assignable-roles.command.js +41 -0
  365. package/server/src/lib/user-invitation/list-invite-assignable-roles.command.js.map +1 -0
  366. package/server/src/lib/user-invitation/list-my-join-requests.command.d.ts +8 -0
  367. package/server/src/lib/user-invitation/list-my-join-requests.command.js +40 -0
  368. package/server/src/lib/user-invitation/list-my-join-requests.command.js.map +1 -0
  369. package/server/src/lib/user-invitation/list-my-pending-invitations.command.d.ts +8 -0
  370. package/server/src/lib/user-invitation/list-my-pending-invitations.command.js +37 -0
  371. package/server/src/lib/user-invitation/list-my-pending-invitations.command.js.map +1 -0
  372. package/server/src/lib/user-invitation/list-tenant-entitled-applications.command.d.ts +8 -0
  373. package/server/src/lib/user-invitation/list-tenant-entitled-applications.command.js +41 -0
  374. package/server/src/lib/user-invitation/list-tenant-entitled-applications.command.js.map +1 -0
  375. package/server/src/lib/user-invitation/lookup-tenant-by-unique-name.command.d.ts +8 -0
  376. package/server/src/lib/user-invitation/lookup-tenant-by-unique-name.command.js +40 -0
  377. package/server/src/lib/user-invitation/lookup-tenant-by-unique-name.command.js.map +1 -0
  378. package/server/src/lib/user-invitation/reject-join-request.command.d.ts +8 -0
  379. package/server/src/lib/user-invitation/reject-join-request.command.js +41 -0
  380. package/server/src/lib/user-invitation/reject-join-request.command.js.map +1 -0
  381. package/server/src/lib/user-invitation/request-tenant-membership.command.d.ts +8 -0
  382. package/server/src/lib/user-invitation/request-tenant-membership.command.js +40 -0
  383. package/server/src/lib/user-invitation/request-tenant-membership.command.js.map +1 -0
  384. package/server/src/lib/user-invitation/resend-invitation.command.d.ts +12 -0
  385. package/server/src/lib/user-invitation/resend-invitation.command.js +37 -0
  386. package/server/src/lib/user-invitation/resend-invitation.command.js.map +1 -0
  387. package/server/src/lib/user-invitation/user-invitation-application-access.util.d.ts +25 -0
  388. package/server/src/lib/user-invitation/user-invitation-application-access.util.js +121 -0
  389. package/server/src/lib/user-invitation/user-invitation-application-access.util.js.map +1 -0
  390. package/server/src/lib/user-invitation/user-invitation.service.d.ts +162 -0
  391. package/server/src/lib/user-invitation/user-invitation.service.js +1658 -0
  392. package/server/src/lib/user-invitation/user-invitation.service.js.map +1 -0
  393. package/contracts/src/datasource.keys.d.ts +0 -4
  394. package/contracts/src/datasource.keys.js +0 -10
  395. package/contracts/src/datasource.keys.js.map +0 -1
  396. package/src/index.d.ts +0 -5
  397. package/src/index.js +0 -13
  398. package/src/index.js.map +0 -1
  399. package/src/lib/security-management-server.module.d.ts +0 -2
  400. package/src/lib/security-management-server.module.js +0 -23
  401. package/src/lib/security-management-server.module.js.map +0 -1
  402. package/src/lib/seed/index.d.ts +0 -22
  403. package/src/lib/seed/index.js +0 -24
  404. package/src/lib/seed/index.js.map +0 -1
  405. package/src/lib/seed/policy/index.d.ts +0 -2
  406. package/src/lib/seed/policy/index.js +0 -6
  407. package/src/lib/seed/policy/index.js.map +0 -1
  408. package/src/lib/seed/policy/policy.mock.d.ts +0 -7
  409. package/src/lib/seed/policy/policy.mock.js +0 -40
  410. package/src/lib/seed/policy/policy.mock.js.map +0 -1
  411. package/src/lib/seed/policy/policy.seed.d.ts +0 -5
  412. package/src/lib/seed/policy/policy.seed.js +0 -31
  413. package/src/lib/seed/policy/policy.seed.js.map +0 -1
  414. package/src/lib/seed/role/index.d.ts +0 -4
  415. package/src/lib/seed/role/index.js +0 -8
  416. package/src/lib/seed/role/index.js.map +0 -1
  417. package/src/lib/seed/role/role-ids.constants.d.ts +0 -14
  418. package/src/lib/seed/role/role-ids.constants.js +0 -20
  419. package/src/lib/seed/role/role-ids.constants.js.map +0 -1
  420. package/src/lib/seed/role/role-permission-keys.constants.d.ts +0 -578
  421. package/src/lib/seed/role/role-permission-keys.constants.js +0 -620
  422. package/src/lib/seed/role/role-permission-keys.constants.js.map +0 -1
  423. package/src/lib/seed/role/role.mock.d.ts +0 -4
  424. package/src/lib/seed/role/role.mock.js +0 -321
  425. package/src/lib/seed/role/role.mock.js.map +0 -1
  426. package/src/lib/seed/role/role.seed.d.ts +0 -5
  427. package/src/lib/seed/role/role.seed.js +0 -31
  428. package/src/lib/seed/role/role.seed.js.map +0 -1
  429. package/src/lib/seed/security-management-seed.provider.d.ts +0 -4
  430. package/src/lib/seed/security-management-seed.provider.js +0 -18
  431. package/src/lib/seed/security-management-seed.provider.js.map +0 -1
  432. package/src/lib/seed/security-management-seed.tokens.d.ts +0 -1
  433. package/src/lib/seed/security-management-seed.tokens.js +0 -7
  434. package/src/lib/seed/security-management-seed.tokens.js.map +0 -1
  435. package/src/lib/seed/security-management.seed-catalog.d.ts +0 -2
  436. package/src/lib/seed/security-management.seed-catalog.js +0 -17
  437. package/src/lib/seed/security-management.seed-catalog.js.map +0 -1
  438. package/src/lib/seed/tenant/index.d.ts +0 -1
  439. package/src/lib/seed/tenant/tenant-ids.constants.d.ts +0 -11
  440. package/src/lib/seed/tenant/tenant-ids.constants.js +0 -17
  441. package/src/lib/seed/tenant/tenant-ids.constants.js.map +0 -1
  442. package/src/lib/seed/user/index.d.ts +0 -4
  443. package/src/lib/seed/user/index.js +0 -13
  444. package/src/lib/seed/user/index.js.map +0 -1
  445. package/src/lib/seed/user/resolve-user-effective-state.util.d.ts +0 -14
  446. package/src/lib/seed/user/resolve-user-effective-state.util.js +0 -61
  447. package/src/lib/seed/user/resolve-user-effective-state.util.js.map +0 -1
  448. package/src/lib/seed/user/user.mock.d.ts +0 -20
  449. package/src/lib/seed/user/user.mock.js +0 -332
  450. package/src/lib/seed/user/user.mock.js.map +0 -1
  451. package/src/lib/seed/user/user.seed.d.ts +0 -5
  452. package/src/lib/seed/user/user.seed.js +0 -31
  453. package/src/lib/seed/user/user.seed.js.map +0 -1
@@ -0,0 +1,6 @@
1
+ import { AXPModuleManifest } from '@acorex-platform/framework-shared/core';
2
+ /**
3
+ * Security Management Module Manifest.
4
+ * Defines module metadata, features, and provider references.
5
+ */
6
+ export declare const SecurityManagementManifest: AXPModuleManifest;
@@ -0,0 +1,24 @@
1
+ "use strict";
2
+ //#region ---- Imports ----
3
+ Object.defineProperty(exports, "__esModule", { value: true });
4
+ exports.SecurityManagementManifest = void 0;
5
+ const root_config_1 = require("./root-config");
6
+ //#endregion
7
+ //#region ---- Manifest Definition ----
8
+ /**
9
+ * Security Management Module Manifest.
10
+ * Defines module metadata, features, and provider references.
11
+ */
12
+ exports.SecurityManagementManifest = {
13
+ name: root_config_1.RootConfig.module.name,
14
+ version: '1.0.0',
15
+ title: root_config_1.RootConfig.module.title,
16
+ icon: root_config_1.RootConfig.module.icon,
17
+ i18n: root_config_1.RootConfig.config.i18n,
18
+ type: 'platform',
19
+ domain: 'platform',
20
+ required: true,
21
+ // Module dependencies (optional)
22
+ };
23
+ //#endregion
24
+ //# sourceMappingURL=manifest.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../../../../libs/modules/security-management/contracts/src/manifest.ts"],"names":[],"mappings":";AAAA,+BAA+B;;;AAG/B,+CAA2C;AAE3C,YAAY;AAEZ,2CAA2C;AAE3C;;;GAGG;AACU,QAAA,0BAA0B,GAAsB;IAC3D,IAAI,EAAE,wBAAU,CAAC,MAAM,CAAC,IAAI;IAC5B,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,wBAAU,CAAC,MAAM,CAAC,KAAK;IAC9B,IAAI,EAAE,wBAAU,CAAC,MAAM,CAAC,IAAI;IAC5B,IAAI,EAAE,wBAAU,CAAC,MAAM,CAAC,IAAI;IAC5B,IAAI,EAAE,UAAU;IAChB,MAAM,EAAE,UAAU;IAClB,QAAQ,EAAE,IAAI;IAEd,iCAAiC;CAClC,CAAC;AAEF,YAAY"}
@@ -4,5 +4,6 @@ export declare const AXPSecurityManagementMenuKeys: {
4
4
  readonly Roles: "SecurityManagement:Menu:Roles";
5
5
  readonly DeviceSessions: "SecurityManagement:Menu:DeviceSessions";
6
6
  readonly Policy: "SecurityManagement:Menu:Policy";
7
+ readonly IdentityProviders: "SecurityManagement:Menu:IdentityProviders";
7
8
  readonly MyProfile: "SecurityManagement:Menu:MyProfile";
8
9
  };
@@ -7,6 +7,7 @@ exports.AXPSecurityManagementMenuKeys = {
7
7
  Roles: 'SecurityManagement:Menu:Roles',
8
8
  DeviceSessions: 'SecurityManagement:Menu:DeviceSessions',
9
9
  Policy: 'SecurityManagement:Menu:Policy',
10
+ IdentityProviders: 'SecurityManagement:Menu:IdentityProviders',
10
11
  MyProfile: 'SecurityManagement:Menu:MyProfile',
11
12
  };
12
13
  //# sourceMappingURL=menu.keys.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"menu.keys.js","sourceRoot":"","sources":["../../../../../libs/modules/security-management/server/contracts/src/menu.keys.ts"],"names":[],"mappings":";;;AAAa,QAAA,6BAA6B,GAAG;IAC3C,IAAI,EAAE,yBAAyB;IAC/B,KAAK,EAAE,+BAA+B;IACtC,KAAK,EAAE,+BAA+B;IACtC,cAAc,EAAE,wCAAwC;IACxD,MAAM,EAAE,gCAAgC;IACxC,SAAS,EAAE,mCAAmC;CACtC,CAAC"}
1
+ {"version":3,"file":"menu.keys.js","sourceRoot":"","sources":["../../../../../libs/modules/security-management/contracts/src/menu.keys.ts"],"names":[],"mappings":";;;AAAa,QAAA,6BAA6B,GAAG;IAC3C,IAAI,EAAE,yBAAyB;IAC/B,KAAK,EAAE,+BAA+B;IACtC,KAAK,EAAE,+BAA+B;IACtC,cAAc,EAAE,wCAAwC;IACxD,MAAM,EAAE,gCAAgC;IACxC,iBAAiB,EAAE,2CAA2C;IAC9D,SAAS,EAAE,mCAAmC;CACtC,CAAC"}
@@ -1,28 +1,58 @@
1
+ /**
2
+ * Administration capabilities used by this module.
3
+ * Domain capability keys for this module. Root groups live in `AXPCommonPermissionGroupKeys` (common contracts).
4
+ */
5
+ export declare const AXPAdministrationPermissionKeys: {
6
+ readonly Access: "Administration:Permission:Access";
7
+ /** Create and maintain users, roles, role assignments, and related security-access reports. */
8
+ readonly MaintainUsersAndRoles: "Administration:Permission:MaintainUsersAndRoles";
9
+ readonly ManageSessions: "Administration:Permission:ManageSessions";
10
+ readonly MaintainPolicies: "Administration:Permission:MaintainPolicies";
11
+ readonly ViewIntegrations: "Administration:Permission:ViewIntegrations";
12
+ readonly MaintainConnections: "Administration:Permission:MaintainConnections";
13
+ readonly ManageIntegrationActions: "Administration:Permission:ManageIntegrationActions";
14
+ readonly MaintainWorkflows: "Administration:Permission:MaintainWorkflows";
15
+ readonly ManageWorkflowActions: "Administration:Permission:ManageWorkflowActions";
16
+ readonly ViewRules: "Administration:Permission:ViewRules";
17
+ readonly MaintainRules: "Administration:Permission:MaintainRules";
18
+ readonly ManageRuleActions: "Administration:Permission:ManageRuleActions";
19
+ readonly MaintainAi: "Administration:Permission:MaintainAi";
20
+ readonly UseAiAssist: "Administration:Permission:UseAiAssist";
21
+ readonly MaintainDashboards: "Administration:Permission:MaintainDashboards";
22
+ readonly ViewJobs: "Administration:Permission:ViewJobs";
23
+ readonly ManageJobActions: "Administration:Permission:ManageJobActions";
24
+ readonly ViewObservability: "Administration:Permission:ViewObservability";
25
+ readonly MaintainObservability: "Administration:Permission:MaintainObservability";
26
+ };
27
+ /**
28
+ * @deprecated Prefer {@link AXPAdministrationPermissionKeys}.
29
+ * Legacy nested shape kept so existing imports compile during migration.
30
+ */
1
31
  export declare const AXPSecurityManagementPermissionKeys: {
2
32
  readonly User: {
3
- readonly Management: "SecurityManagement:Permission:User.Management";
4
- readonly View: "SecurityManagement:Permission:User.View";
5
- readonly Edit: "SecurityManagement:Permission:User.Edit";
6
- readonly Delete: "SecurityManagement:Permission:User.Delete";
7
- readonly Create: "SecurityManagement:Permission:User.Create";
33
+ readonly Management: "Administration:Permission:MaintainUsersAndRoles";
34
+ readonly View: "Administration:Permission:MaintainUsersAndRoles";
35
+ readonly Edit: "Administration:Permission:MaintainUsersAndRoles";
36
+ readonly Delete: "Administration:Permission:MaintainUsersAndRoles";
37
+ readonly Create: "Administration:Permission:MaintainUsersAndRoles";
8
38
  };
9
39
  readonly Role: {
10
- readonly Management: "SecurityManagement:Permission:Role.Management";
11
- readonly View: "SecurityManagement:Permission:Role.View";
12
- readonly Edit: "SecurityManagement:Permission:Role.Edit";
13
- readonly Delete: "SecurityManagement:Permission:Role.Delete";
14
- readonly Create: "SecurityManagement:Permission:Role.Create";
40
+ readonly Management: "Administration:Permission:MaintainUsersAndRoles";
41
+ readonly View: "Administration:Permission:MaintainUsersAndRoles";
42
+ readonly Edit: "Administration:Permission:MaintainUsersAndRoles";
43
+ readonly Delete: "Administration:Permission:MaintainUsersAndRoles";
44
+ readonly Create: "Administration:Permission:MaintainUsersAndRoles";
15
45
  };
16
46
  readonly DeviceSession: {
17
- readonly Management: "SecurityManagement:Permission:DeviceSession.Management";
18
- readonly View: "SecurityManagement:Permission:DeviceSession.View";
19
- readonly Terminate: "SecurityManagement:Permission:DeviceSession.Terminate";
47
+ readonly Management: "Administration:Permission:ManageSessions";
48
+ readonly View: "Administration:Permission:ManageSessions";
49
+ readonly Terminate: "Administration:Permission:ManageSessions";
20
50
  };
21
51
  readonly Policy: {
22
- readonly Management: "SecurityManagement:Permission:Policy.Management";
23
- readonly View: "SecurityManagement:Permission:Policy.View";
24
- readonly Edit: "SecurityManagement:Permission:Policy.Edit";
25
- readonly Delete: "SecurityManagement:Permission:Policy.Delete";
26
- readonly Create: "SecurityManagement:Permission:Policy.Create";
52
+ readonly Management: "Administration:Permission:MaintainPolicies";
53
+ readonly View: "Administration:Permission:MaintainPolicies";
54
+ readonly Edit: "Administration:Permission:MaintainPolicies";
55
+ readonly Delete: "Administration:Permission:MaintainPolicies";
56
+ readonly Create: "Administration:Permission:MaintainPolicies";
27
57
  };
28
58
  };
@@ -1,34 +1,62 @@
1
1
  "use strict";
2
- //#region ---- Permission Keys ----
3
2
  Object.defineProperty(exports, "__esModule", { value: true });
4
- exports.AXPSecurityManagementPermissionKeys = void 0;
3
+ exports.AXPSecurityManagementPermissionKeys = exports.AXPAdministrationPermissionKeys = void 0;
4
+ /**
5
+ * Administration capabilities used by this module.
6
+ * Domain capability keys for this module. Root groups live in `AXPCommonPermissionGroupKeys` (common contracts).
7
+ */
8
+ exports.AXPAdministrationPermissionKeys = {
9
+ Access: 'Administration:Permission:Access',
10
+ /** Create and maintain users, roles, role assignments, and related security-access reports. */
11
+ MaintainUsersAndRoles: 'Administration:Permission:MaintainUsersAndRoles',
12
+ ManageSessions: 'Administration:Permission:ManageSessions',
13
+ MaintainPolicies: 'Administration:Permission:MaintainPolicies',
14
+ ViewIntegrations: 'Administration:Permission:ViewIntegrations',
15
+ MaintainConnections: 'Administration:Permission:MaintainConnections',
16
+ ManageIntegrationActions: 'Administration:Permission:ManageIntegrationActions',
17
+ MaintainWorkflows: 'Administration:Permission:MaintainWorkflows',
18
+ ManageWorkflowActions: 'Administration:Permission:ManageWorkflowActions',
19
+ ViewRules: 'Administration:Permission:ViewRules',
20
+ MaintainRules: 'Administration:Permission:MaintainRules',
21
+ ManageRuleActions: 'Administration:Permission:ManageRuleActions',
22
+ MaintainAi: 'Administration:Permission:MaintainAi',
23
+ UseAiAssist: 'Administration:Permission:UseAiAssist',
24
+ MaintainDashboards: 'Administration:Permission:MaintainDashboards',
25
+ ViewJobs: 'Administration:Permission:ViewJobs',
26
+ ManageJobActions: 'Administration:Permission:ManageJobActions',
27
+ ViewObservability: 'Administration:Permission:ViewObservability',
28
+ MaintainObservability: 'Administration:Permission:MaintainObservability',
29
+ };
30
+ /**
31
+ * @deprecated Prefer {@link AXPAdministrationPermissionKeys}.
32
+ * Legacy nested shape kept so existing imports compile during migration.
33
+ */
5
34
  exports.AXPSecurityManagementPermissionKeys = {
6
35
  User: {
7
- Management: 'SecurityManagement:Permission:User.Management',
8
- View: 'SecurityManagement:Permission:User.View',
9
- Edit: 'SecurityManagement:Permission:User.Edit',
10
- Delete: 'SecurityManagement:Permission:User.Delete',
11
- Create: 'SecurityManagement:Permission:User.Create',
36
+ Management: exports.AXPAdministrationPermissionKeys.MaintainUsersAndRoles,
37
+ View: exports.AXPAdministrationPermissionKeys.MaintainUsersAndRoles,
38
+ Edit: exports.AXPAdministrationPermissionKeys.MaintainUsersAndRoles,
39
+ Delete: exports.AXPAdministrationPermissionKeys.MaintainUsersAndRoles,
40
+ Create: exports.AXPAdministrationPermissionKeys.MaintainUsersAndRoles,
12
41
  },
13
42
  Role: {
14
- Management: 'SecurityManagement:Permission:Role.Management',
15
- View: 'SecurityManagement:Permission:Role.View',
16
- Edit: 'SecurityManagement:Permission:Role.Edit',
17
- Delete: 'SecurityManagement:Permission:Role.Delete',
18
- Create: 'SecurityManagement:Permission:Role.Create',
43
+ Management: exports.AXPAdministrationPermissionKeys.MaintainUsersAndRoles,
44
+ View: exports.AXPAdministrationPermissionKeys.MaintainUsersAndRoles,
45
+ Edit: exports.AXPAdministrationPermissionKeys.MaintainUsersAndRoles,
46
+ Delete: exports.AXPAdministrationPermissionKeys.MaintainUsersAndRoles,
47
+ Create: exports.AXPAdministrationPermissionKeys.MaintainUsersAndRoles,
19
48
  },
20
49
  DeviceSession: {
21
- Management: 'SecurityManagement:Permission:DeviceSession.Management',
22
- View: 'SecurityManagement:Permission:DeviceSession.View',
23
- Terminate: 'SecurityManagement:Permission:DeviceSession.Terminate',
50
+ Management: exports.AXPAdministrationPermissionKeys.ManageSessions,
51
+ View: exports.AXPAdministrationPermissionKeys.ManageSessions,
52
+ Terminate: exports.AXPAdministrationPermissionKeys.ManageSessions,
24
53
  },
25
54
  Policy: {
26
- Management: 'SecurityManagement:Permission:Policy.Management',
27
- View: 'SecurityManagement:Permission:Policy.View',
28
- Edit: 'SecurityManagement:Permission:Policy.Edit',
29
- Delete: 'SecurityManagement:Permission:Policy.Delete',
30
- Create: 'SecurityManagement:Permission:Policy.Create',
55
+ Management: exports.AXPAdministrationPermissionKeys.MaintainPolicies,
56
+ View: exports.AXPAdministrationPermissionKeys.MaintainPolicies,
57
+ Edit: exports.AXPAdministrationPermissionKeys.MaintainPolicies,
58
+ Delete: exports.AXPAdministrationPermissionKeys.MaintainPolicies,
59
+ Create: exports.AXPAdministrationPermissionKeys.MaintainPolicies,
31
60
  },
32
61
  };
33
- //#endregion
34
62
  //# sourceMappingURL=permission.keys.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"permission.keys.js","sourceRoot":"","sources":["../../../../../libs/modules/security-management/server/contracts/src/permission.keys.ts"],"names":[],"mappings":";AAAA,uCAAuC;;;AAE1B,QAAA,mCAAmC,GAAG;IACjD,IAAI,EAAE;QACJ,UAAU,EAAE,+CAA+C;QAC3D,IAAI,EAAE,yCAAyC;QAC/C,IAAI,EAAE,yCAAyC;QAC/C,MAAM,EAAE,2CAA2C;QACnD,MAAM,EAAE,2CAA2C;KACpD;IACD,IAAI,EAAE;QACJ,UAAU,EAAE,+CAA+C;QAC3D,IAAI,EAAE,yCAAyC;QAC/C,IAAI,EAAE,yCAAyC;QAC/C,MAAM,EAAE,2CAA2C;QACnD,MAAM,EAAE,2CAA2C;KACpD;IACD,aAAa,EAAE;QACb,UAAU,EAAE,wDAAwD;QACpE,IAAI,EAAE,kDAAkD;QACxD,SAAS,EAAE,uDAAuD;KACnE;IACD,MAAM,EAAE;QACN,UAAU,EAAE,iDAAiD;QAC7D,IAAI,EAAE,2CAA2C;QACjD,IAAI,EAAE,2CAA2C;QACjD,MAAM,EAAE,6CAA6C;QACrD,MAAM,EAAE,6CAA6C;KACtD;CACO,CAAC;AAEX,YAAY"}
1
+ {"version":3,"file":"permission.keys.js","sourceRoot":"","sources":["../../../../../libs/modules/security-management/contracts/src/permission.keys.ts"],"names":[],"mappings":";;;AAAA;;;GAGG;AACU,QAAA,+BAA+B,GAAG;IAC7C,MAAM,EAAE,kCAAkC;IAC1C,+FAA+F;IAC/F,qBAAqB,EAAE,iDAAiD;IACxE,cAAc,EAAE,0CAA0C;IAC1D,gBAAgB,EAAE,4CAA4C;IAC9D,gBAAgB,EAAE,4CAA4C;IAC9D,mBAAmB,EAAE,+CAA+C;IACpE,wBAAwB,EAAE,oDAAoD;IAC9E,iBAAiB,EAAE,6CAA6C;IAChE,qBAAqB,EAAE,iDAAiD;IACxE,SAAS,EAAE,qCAAqC;IAChD,aAAa,EAAE,yCAAyC;IACxD,iBAAiB,EAAE,6CAA6C;IAChE,UAAU,EAAE,sCAAsC;IAClD,WAAW,EAAE,uCAAuC;IACpD,kBAAkB,EAAE,8CAA8C;IAClE,QAAQ,EAAE,oCAAoC;IAC9C,gBAAgB,EAAE,4CAA4C;IAC9D,iBAAiB,EAAE,6CAA6C;IAChE,qBAAqB,EAAE,iDAAiD;CAChE,CAAC;AAEX;;;GAGG;AACU,QAAA,mCAAmC,GAAG;IACjD,IAAI,EAAE;QACJ,UAAU,EAAE,uCAA+B,CAAC,qBAAqB;QACjE,IAAI,EAAE,uCAA+B,CAAC,qBAAqB;QAC3D,IAAI,EAAE,uCAA+B,CAAC,qBAAqB;QAC3D,MAAM,EAAE,uCAA+B,CAAC,qBAAqB;QAC7D,MAAM,EAAE,uCAA+B,CAAC,qBAAqB;KAC9D;IACD,IAAI,EAAE;QACJ,UAAU,EAAE,uCAA+B,CAAC,qBAAqB;QACjE,IAAI,EAAE,uCAA+B,CAAC,qBAAqB;QAC3D,IAAI,EAAE,uCAA+B,CAAC,qBAAqB;QAC3D,MAAM,EAAE,uCAA+B,CAAC,qBAAqB;QAC7D,MAAM,EAAE,uCAA+B,CAAC,qBAAqB;KAC9D;IACD,aAAa,EAAE;QACb,UAAU,EAAE,uCAA+B,CAAC,cAAc;QAC1D,IAAI,EAAE,uCAA+B,CAAC,cAAc;QACpD,SAAS,EAAE,uCAA+B,CAAC,cAAc;KAC1D;IACD,MAAM,EAAE;QACN,UAAU,EAAE,uCAA+B,CAAC,gBAAgB;QAC5D,IAAI,EAAE,uCAA+B,CAAC,gBAAgB;QACtD,IAAI,EAAE,uCAA+B,CAAC,gBAAgB;QACtD,MAAM,EAAE,uCAA+B,CAAC,gBAAgB;QACxD,MAAM,EAAE,uCAA+B,CAAC,gBAAgB;KACzD;CACO,CAAC"}
@@ -0,0 +1,10 @@
1
+ import { AXMUserAccessState } from './user-access-state';
2
+ import { AXMUserEffectiveState } from './user-effective-state';
3
+ /**
4
+ * Derives the unified operational state from account lifecycle and sign-in gate.
5
+ * Used for persisted `effectiveState` on SecurityManagement.User.
6
+ */
7
+ export declare function resolveAXMUserEffectiveState(input: {
8
+ accountState: string | undefined;
9
+ accessState: AXMUserAccessState | string | undefined;
10
+ }): AXMUserEffectiveState;
@@ -0,0 +1,46 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.resolveAXMUserEffectiveState = resolveAXMUserEffectiveState;
4
+ const user_access_state_1 = require("./user-access-state");
5
+ const user_effective_state_1 = require("./user-effective-state");
6
+ //#region ---- Resolve effective state ----
7
+ const AccountLifecycleState = {
8
+ Active: 'active',
9
+ Archived: 'archived',
10
+ Pending: 'pending',
11
+ Inactive: 'inactive',
12
+ Suspended: 'suspended',
13
+ };
14
+ /**
15
+ * Derives the unified operational state from account lifecycle and sign-in gate.
16
+ * Used for persisted `effectiveState` on SecurityManagement.User.
17
+ */
18
+ function resolveAXMUserEffectiveState(input) {
19
+ var _a;
20
+ const lifecycle = input.accountState;
21
+ const auth = ((_a = input.accessState) !== null && _a !== void 0 ? _a : user_access_state_1.AXMUserAccessState.Allowed);
22
+ if (lifecycle === AccountLifecycleState.Archived) {
23
+ return user_effective_state_1.AXMUserEffectiveState.Archived;
24
+ }
25
+ if (lifecycle === AccountLifecycleState.Pending) {
26
+ return user_effective_state_1.AXMUserEffectiveState.Pending;
27
+ }
28
+ if (lifecycle === AccountLifecycleState.Inactive) {
29
+ return user_effective_state_1.AXMUserEffectiveState.Inactive;
30
+ }
31
+ if (lifecycle === AccountLifecycleState.Suspended) {
32
+ return user_effective_state_1.AXMUserEffectiveState.Suspended;
33
+ }
34
+ if (auth === user_access_state_1.AXMUserAccessState.Expired) {
35
+ return user_effective_state_1.AXMUserEffectiveState.CredentialExpired;
36
+ }
37
+ if (auth === user_access_state_1.AXMUserAccessState.Blocked) {
38
+ return user_effective_state_1.AXMUserEffectiveState.SignInBlocked;
39
+ }
40
+ if (lifecycle === AccountLifecycleState.Active) {
41
+ return user_effective_state_1.AXMUserEffectiveState.Active;
42
+ }
43
+ return user_effective_state_1.AXMUserEffectiveState.Active;
44
+ }
45
+ //#endregion
46
+ //# sourceMappingURL=resolve-user-effective-state.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"resolve-user-effective-state.js","sourceRoot":"","sources":["../../../../../libs/modules/security-management/contracts/src/resolve-user-effective-state.ts"],"names":[],"mappings":";;AAiBA,oEA6BC;AA9CD,2DAAyD;AACzD,iEAA+D;AAE/D,2CAA2C;AAE3C,MAAM,qBAAqB,GAAG;IAC5B,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,WAAW;CACd,CAAC;AAEX;;;GAGG;AACH,SAAgB,4BAA4B,CAAC,KAG5C;;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC;IACrC,MAAM,IAAI,GAAG,CAAC,MAAA,KAAK,CAAC,WAAW,mCAAI,sCAAkB,CAAC,OAAO,CAAW,CAAC;IAEzE,IAAI,SAAS,KAAK,qBAAqB,CAAC,QAAQ,EAAE,CAAC;QACjD,OAAO,4CAAqB,CAAC,QAAQ,CAAC;IACxC,CAAC;IACD,IAAI,SAAS,KAAK,qBAAqB,CAAC,OAAO,EAAE,CAAC;QAChD,OAAO,4CAAqB,CAAC,OAAO,CAAC;IACvC,CAAC;IACD,IAAI,SAAS,KAAK,qBAAqB,CAAC,QAAQ,EAAE,CAAC;QACjD,OAAO,4CAAqB,CAAC,QAAQ,CAAC;IACxC,CAAC;IACD,IAAI,SAAS,KAAK,qBAAqB,CAAC,SAAS,EAAE,CAAC;QAClD,OAAO,4CAAqB,CAAC,SAAS,CAAC;IACzC,CAAC;IACD,IAAI,IAAI,KAAK,sCAAkB,CAAC,OAAO,EAAE,CAAC;QACxC,OAAO,4CAAqB,CAAC,iBAAiB,CAAC;IACjD,CAAC;IACD,IAAI,IAAI,KAAK,sCAAkB,CAAC,OAAO,EAAE,CAAC;QACxC,OAAO,4CAAqB,CAAC,aAAa,CAAC;IAC7C,CAAC;IACD,IAAI,SAAS,KAAK,qBAAqB,CAAC,MAAM,EAAE,CAAC;QAC/C,OAAO,4CAAqB,CAAC,MAAM,CAAC;IACtC,CAAC;IACD,OAAO,4CAAqB,CAAC,MAAM,CAAC;AACtC,CAAC;AAED,YAAY"}
@@ -34,11 +34,44 @@ export declare const RootConfig: {
34
34
  readonly titlePlural: `@${string}:roles.entities.role.plural`;
35
35
  readonly icon: "fa-light fa-user-tag";
36
36
  };
37
+ readonly rolePermission: {
38
+ readonly name: "RolePermission";
39
+ readonly title: `@${string}:role-permissions.entities.role-permission.title`;
40
+ readonly titlePlural: `@${string}:role-permissions.entities.role-permission.plural`;
41
+ readonly icon: "fa-light fa-key";
42
+ };
43
+ readonly userRole: {
44
+ readonly name: "UserRole";
45
+ readonly title: `@${string}:user-roles.entities.user-role.title`;
46
+ readonly titlePlural: `@${string}:user-roles.entities.user-role.plural`;
47
+ readonly icon: "fa-light fa-user-tag";
48
+ };
37
49
  readonly profile: {
38
50
  readonly name: "Profile";
39
51
  readonly title: `@${string}:profile.entities.profile.title`;
40
52
  readonly titlePlural: `@${string}:profile.entities.profile.plural`;
41
53
  readonly icon: "fa-light fa-user";
42
54
  };
55
+ readonly identityProvider: {
56
+ readonly name: "IdentityProvider";
57
+ readonly title: `@${string}:identity-providers.entities.identity-provider.title`;
58
+ readonly titlePlural: `@${string}:identity-providers.entities.identity-provider.plural`;
59
+ readonly icon: "fa-light fa-id-badge";
60
+ };
61
+ readonly userTwoFactor: {
62
+ readonly name: "UserTwoFactor";
63
+ readonly title: `@${string}:user-two-factor.entities.user-two-factor.title`;
64
+ readonly titlePlural: `@${string}:user-two-factor.entities.user-two-factor.plural`;
65
+ readonly icon: "fa-light fa-shield-keyhole";
66
+ };
67
+ };
68
+ readonly queries: {
69
+ readonly reports: {
70
+ readonly getUserEffectiveRolesHistory: "SecurityManagement:Reports:GetUserEffectiveRolesHistory";
71
+ readonly getUserEffectivePermissionsHistory: "SecurityManagement:Reports:GetUserEffectivePermissionsHistory";
72
+ readonly getRoleHoldersHistory: "SecurityManagement:Reports:GetRoleHoldersHistory";
73
+ readonly getPermissionHoldersHistory: "SecurityManagement:Reports:GetPermissionHoldersHistory";
74
+ readonly getUserPasswordChangeHistory: "SecurityManagement:Reports:GetUserPasswordChangeHistory";
75
+ };
43
76
  };
44
77
  };
@@ -38,12 +38,45 @@ exports.RootConfig = {
38
38
  titlePlural: `@${config.i18n}:roles.entities.role.plural`,
39
39
  icon: 'fa-light fa-user-tag',
40
40
  },
41
+ rolePermission: {
42
+ name: 'RolePermission',
43
+ title: `@${config.i18n}:role-permissions.entities.role-permission.title`,
44
+ titlePlural: `@${config.i18n}:role-permissions.entities.role-permission.plural`,
45
+ icon: 'fa-light fa-key',
46
+ },
47
+ userRole: {
48
+ name: 'UserRole',
49
+ title: `@${config.i18n}:user-roles.entities.user-role.title`,
50
+ titlePlural: `@${config.i18n}:user-roles.entities.user-role.plural`,
51
+ icon: 'fa-light fa-user-tag',
52
+ },
41
53
  profile: {
42
54
  name: 'Profile',
43
55
  title: `@${config.i18n}:profile.entities.profile.title`,
44
56
  titlePlural: `@${config.i18n}:profile.entities.profile.plural`,
45
57
  icon: 'fa-light fa-user',
46
58
  },
59
+ identityProvider: {
60
+ name: 'IdentityProvider',
61
+ title: `@${config.i18n}:identity-providers.entities.identity-provider.title`,
62
+ titlePlural: `@${config.i18n}:identity-providers.entities.identity-provider.plural`,
63
+ icon: 'fa-light fa-id-badge',
64
+ },
65
+ userTwoFactor: {
66
+ name: 'UserTwoFactor',
67
+ title: `@${config.i18n}:user-two-factor.entities.user-two-factor.title`,
68
+ titlePlural: `@${config.i18n}:user-two-factor.entities.user-two-factor.plural`,
69
+ icon: 'fa-light fa-shield-keyhole',
70
+ },
71
+ },
72
+ queries: {
73
+ reports: {
74
+ getUserEffectiveRolesHistory: 'SecurityManagement:Reports:GetUserEffectiveRolesHistory',
75
+ getUserEffectivePermissionsHistory: 'SecurityManagement:Reports:GetUserEffectivePermissionsHistory',
76
+ getRoleHoldersHistory: 'SecurityManagement:Reports:GetRoleHoldersHistory',
77
+ getPermissionHoldersHistory: 'SecurityManagement:Reports:GetPermissionHoldersHistory',
78
+ getUserPasswordChangeHistory: 'SecurityManagement:Reports:GetUserPasswordChangeHistory',
79
+ },
47
80
  },
48
81
  };
49
82
  //# sourceMappingURL=root-config.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"root-config.js","sourceRoot":"","sources":["../../../../../libs/modules/security-management/server/contracts/src/root-config.ts"],"names":[],"mappings":";;;AAAA,MAAM,MAAM,GAAG;IACb,IAAI,EAAE,qBAAqB;IAC3B,aAAa,EAAE,SAAS;CACzB,CAAC;AACW,QAAA,UAAU,GAAG;IACxB,MAAM;IACN,MAAM,EAAE;QACN,KAAK,EAAE,qBAAqB;QAC5B,IAAI,EAAE,oBAAoB;QAC1B,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,eAAe;QACrC,IAAI,EAAE,2BAA2B;KAClC;IACD,QAAQ,EAAE;QACR,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,iCAAiC;YACvD,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,kCAAkC;YAC9D,IAAI,EAAE,4BAA4B;SACnC;QACD,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,kCAAkC;YACxD,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,mCAAmC;YAC/D,IAAI,EAAE,oBAAoB;SAC3B;QACD,KAAK,EAAE;YACL,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,4BAA4B;YAClD,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,6BAA6B;YACzD,IAAI,EAAE,mBAAmB;SAC1B;QACD,KAAK,EAAE;YACL,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,4BAA4B;YAClD,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,6BAA6B;YACzD,IAAI,EAAE,sBAAsB;SAC7B;QACD,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,iCAAiC;YACvD,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,kCAAkC;YAC9D,IAAI,EAAE,kBAAkB;SACzB;KACF;CACO,CAAC"}
1
+ {"version":3,"file":"root-config.js","sourceRoot":"","sources":["../../../../../libs/modules/security-management/contracts/src/root-config.ts"],"names":[],"mappings":";;;AAAA,MAAM,MAAM,GAAG;IACb,IAAI,EAAE,qBAAqB;IAC3B,aAAa,EAAE,SAAS;CACzB,CAAC;AACW,QAAA,UAAU,GAAG;IACxB,MAAM;IACN,MAAM,EAAE;QACN,KAAK,EAAE,qBAAqB;QAC5B,IAAI,EAAE,oBAAoB;QAC1B,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,eAAe;QACrC,IAAI,EAAE,2BAA2B;KAClC;IACD,QAAQ,EAAE;QACR,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,iCAAiC;YACvD,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,kCAAkC;YAC9D,IAAI,EAAE,4BAA4B;SACnC;QACD,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,kCAAkC;YACxD,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,mCAAmC;YAC/D,IAAI,EAAE,oBAAoB;SAC3B;QACD,KAAK,EAAE;YACL,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,4BAA4B;YAClD,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,6BAA6B;YACzD,IAAI,EAAE,mBAAmB;SAC1B;QACD,KAAK,EAAE;YACL,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,4BAA4B;YAClD,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,6BAA6B;YACzD,IAAI,EAAE,sBAAsB;SAC7B;QACD,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,kDAAkD;YACxE,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,mDAAmD;YAC/E,IAAI,EAAE,iBAAiB;SACxB;QACD,QAAQ,EAAE;YACR,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,sCAAsC;YAC5D,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,uCAAuC;YACnE,IAAI,EAAE,sBAAsB;SAC7B;QACD,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,iCAAiC;YACvD,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,kCAAkC;YAC9D,IAAI,EAAE,kBAAkB;SACzB;QACD,gBAAgB,EAAE;YAChB,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,sDAAsD;YAC5E,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,uDAAuD;YACnF,IAAI,EAAE,sBAAsB;SAC7B;QACD,aAAa,EAAE;YACb,IAAI,EAAE,eAAe;YACrB,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,iDAAiD;YACvE,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,kDAAkD;YAC9E,IAAI,EAAE,4BAA4B;SACnC;KACF;IACD,OAAO,EAAE;QACP,OAAO,EAAE;YACP,4BAA4B,EAAE,yDAAyD;YACvF,kCAAkC,EAChC,+DAA+D;YACjE,qBAAqB,EAAE,kDAAkD;YACzE,2BAA2B,EAAE,wDAAwD;YACrF,4BAA4B,EAAE,yDAAyD;SACxF;KACF;CACO,CAAC"}