@acorex-platform/module-security-management-server 0.0.15

package/contracts/src/menu.keys.d.ts

@@ -0,0 +1,8 @@
+export declare const AXPSecurityManagementMenuKeys: {
+    readonly Root: "SecurityManagement:Menu";
+    readonly Users: "SecurityManagement:Menu:Users";
+    readonly Roles: "SecurityManagement:Menu:Roles";
+    readonly DeviceSessions: "SecurityManagement:Menu:DeviceSessions";
+    readonly Policy: "SecurityManagement:Menu:Policy";
+    readonly MyProfile: "SecurityManagement:Menu:MyProfile";
+};

package/contracts/src/menu.keys.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AXPSecurityManagementMenuKeys = void 0;
+exports.AXPSecurityManagementMenuKeys = {
+    Root: 'SecurityManagement:Menu',
+    Users: 'SecurityManagement:Menu:Users',
+    Roles: 'SecurityManagement:Menu:Roles',
+    DeviceSessions: 'SecurityManagement:Menu:DeviceSessions',
+    Policy: 'SecurityManagement:Menu:Policy',
+    MyProfile: 'SecurityManagement:Menu:MyProfile',
+};
+//# sourceMappingURL=menu.keys.js.map

package/contracts/src/menu.keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"menu.keys.js","sourceRoot":"","sources":["../../../../../libs/modules/security-management/server/contracts/src/menu.keys.ts"],"names":[],"mappings":";;;AAAa,QAAA,6BAA6B,GAAG;IAC3C,IAAI,EAAE,yBAAyB;IAC/B,KAAK,EAAE,+BAA+B;IACtC,KAAK,EAAE,+BAA+B;IACtC,cAAc,EAAE,wCAAwC;IACxD,MAAM,EAAE,gCAAgC;IACxC,SAAS,EAAE,mCAAmC;CACtC,CAAC"}

package/contracts/src/permission.keys.d.ts

@@ -0,0 +1,28 @@
+export declare const AXPSecurityManagementPermissionKeys: {
+    readonly User: {
+        readonly Management: "SecurityManagement:Permission:User.Management";
+        readonly View: "SecurityManagement:Permission:User.View";
+        readonly Edit: "SecurityManagement:Permission:User.Edit";
+        readonly Delete: "SecurityManagement:Permission:User.Delete";
+        readonly Create: "SecurityManagement:Permission:User.Create";
+    };
+    readonly Role: {
+        readonly Management: "SecurityManagement:Permission:Role.Management";
+        readonly View: "SecurityManagement:Permission:Role.View";
+        readonly Edit: "SecurityManagement:Permission:Role.Edit";
+        readonly Delete: "SecurityManagement:Permission:Role.Delete";
+        readonly Create: "SecurityManagement:Permission:Role.Create";
+    };
+    readonly DeviceSession: {
+        readonly Management: "SecurityManagement:Permission:DeviceSession.Management";
+        readonly View: "SecurityManagement:Permission:DeviceSession.View";
+        readonly Terminate: "SecurityManagement:Permission:DeviceSession.Terminate";
+    };
+    readonly Policy: {
+        readonly Management: "SecurityManagement:Permission:Policy.Management";
+        readonly View: "SecurityManagement:Permission:Policy.View";
+        readonly Edit: "SecurityManagement:Permission:Policy.Edit";
+        readonly Delete: "SecurityManagement:Permission:Policy.Delete";
+        readonly Create: "SecurityManagement:Permission:Policy.Create";
+    };
+};

package/contracts/src/permission.keys.js

@@ -0,0 +1,34 @@
+"use strict";
+//#region ----   Permission Keys   ----
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AXPSecurityManagementPermissionKeys = void 0;
+exports.AXPSecurityManagementPermissionKeys = {
+    User: {
+        Management: 'SecurityManagement:Permission:User.Management',
+        View: 'SecurityManagement:Permission:User.View',
+        Edit: 'SecurityManagement:Permission:User.Edit',
+        Delete: 'SecurityManagement:Permission:User.Delete',
+        Create: 'SecurityManagement:Permission:User.Create',
+    },
+    Role: {
+        Management: 'SecurityManagement:Permission:Role.Management',
+        View: 'SecurityManagement:Permission:Role.View',
+        Edit: 'SecurityManagement:Permission:Role.Edit',
+        Delete: 'SecurityManagement:Permission:Role.Delete',
+        Create: 'SecurityManagement:Permission:Role.Create',
+    },
+    DeviceSession: {
+        Management: 'SecurityManagement:Permission:DeviceSession.Management',
+        View: 'SecurityManagement:Permission:DeviceSession.View',
+        Terminate: 'SecurityManagement:Permission:DeviceSession.Terminate',
+    },
+    Policy: {
+        Management: 'SecurityManagement:Permission:Policy.Management',
+        View: 'SecurityManagement:Permission:Policy.View',
+        Edit: 'SecurityManagement:Permission:Policy.Edit',
+        Delete: 'SecurityManagement:Permission:Policy.Delete',
+        Create: 'SecurityManagement:Permission:Policy.Create',
+    },
+};
+//#endregion
+//# sourceMappingURL=permission.keys.js.map

package/contracts/src/permission.keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.keys.js","sourceRoot":"","sources":["../../../../../libs/modules/security-management/server/contracts/src/permission.keys.ts"],"names":[],"mappings":";AAAA,uCAAuC;;;AAE1B,QAAA,mCAAmC,GAAG;IACjD,IAAI,EAAE;QACJ,UAAU,EAAE,+CAA+C;QAC3D,IAAI,EAAE,yCAAyC;QAC/C,IAAI,EAAE,yCAAyC;QAC/C,MAAM,EAAE,2CAA2C;QACnD,MAAM,EAAE,2CAA2C;KACpD;IACD,IAAI,EAAE;QACJ,UAAU,EAAE,+CAA+C;QAC3D,IAAI,EAAE,yCAAyC;QAC/C,IAAI,EAAE,yCAAyC;QAC/C,MAAM,EAAE,2CAA2C;QACnD,MAAM,EAAE,2CAA2C;KACpD;IACD,aAAa,EAAE;QACb,UAAU,EAAE,wDAAwD;QACpE,IAAI,EAAE,kDAAkD;QACxD,SAAS,EAAE,uDAAuD;KACnE;IACD,MAAM,EAAE;QACN,UAAU,EAAE,iDAAiD;QAC7D,IAAI,EAAE,2CAA2C;QACjD,IAAI,EAAE,2CAA2C;QACjD,MAAM,EAAE,6CAA6C;QACrD,MAAM,EAAE,6CAA6C;KACtD;CACO,CAAC;AAEX,YAAY"}

package/contracts/src/root-config.d.ts

@@ -0,0 +1,44 @@
+export declare const RootConfig: {
+    readonly config: {
+        i18n: string;
+        profileEntity: string;
+    };
+    readonly module: {
+        readonly route: "security-management";
+        readonly name: "SecurityManagement";
+        readonly title: `@${string}:module.title`;
+        readonly icon: "fa-light fa-shield-halved";
+    };
+    readonly entities: {
+        readonly policy: {
+            readonly name: "Policy";
+            readonly title: `@${string}:policies.entities.policy.title`;
+            readonly titlePlural: `@${string}:policies.entities.policy.plural`;
+            readonly icon: "fa-light fa-clipboard-list";
+        };
+        readonly deviceSessions: {
+            readonly name: "DeviceSessions";
+            readonly title: `@${string}:sessions.entities.session.title`;
+            readonly titlePlural: `@${string}:sessions.entities.session.plural`;
+            readonly icon: "fa-light fa-laptop";
+        };
+        readonly users: {
+            readonly name: "User";
+            readonly title: `@${string}:users.entities.user.title`;
+            readonly titlePlural: `@${string}:users.entities.user.plural`;
+            readonly icon: "fa-light fa-users";
+        };
+        readonly roles: {
+            readonly name: "Role";
+            readonly title: `@${string}:roles.entities.role.title`;
+            readonly titlePlural: `@${string}:roles.entities.role.plural`;
+            readonly icon: "fa-light fa-user-tag";
+        };
+        readonly profile: {
+            readonly name: "Profile";
+            readonly title: `@${string}:profile.entities.profile.title`;
+            readonly titlePlural: `@${string}:profile.entities.profile.plural`;
+            readonly icon: "fa-light fa-user";
+        };
+    };
+};

package/contracts/src/root-config.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RootConfig = void 0;
+const config = {
+    i18n: 'security-management',
+    profileEntity: 'Profile',
+};
+exports.RootConfig = {
+    config,
+    module: {
+        route: 'security-management',
+        name: 'SecurityManagement',
+        title: `@${config.i18n}:module.title`,
+        icon: 'fa-light fa-shield-halved',
+    },
+    entities: {
+        policy: {
+            name: 'Policy',
+            title: `@${config.i18n}:policies.entities.policy.title`,
+            titlePlural: `@${config.i18n}:policies.entities.policy.plural`,
+            icon: 'fa-light fa-clipboard-list',
+        },
+        deviceSessions: {
+            name: 'DeviceSessions',
+            title: `@${config.i18n}:sessions.entities.session.title`,
+            titlePlural: `@${config.i18n}:sessions.entities.session.plural`,
+            icon: 'fa-light fa-laptop',
+        },
+        users: {
+            name: 'User',
+            title: `@${config.i18n}:users.entities.user.title`,
+            titlePlural: `@${config.i18n}:users.entities.user.plural`,
+            icon: 'fa-light fa-users',
+        },
+        roles: {
+            name: 'Role',
+            title: `@${config.i18n}:roles.entities.role.title`,
+            titlePlural: `@${config.i18n}:roles.entities.role.plural`,
+            icon: 'fa-light fa-user-tag',
+        },
+        profile: {
+            name: 'Profile',
+            title: `@${config.i18n}:profile.entities.profile.title`,
+            titlePlural: `@${config.i18n}:profile.entities.profile.plural`,
+            icon: 'fa-light fa-user',
+        },
+    },
+};
+//# sourceMappingURL=root-config.js.map

package/contracts/src/root-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-config.js","sourceRoot":"","sources":["../../../../../libs/modules/security-management/server/contracts/src/root-config.ts"],"names":[],"mappings":";;;AAAA,MAAM,MAAM,GAAG;IACb,IAAI,EAAE,qBAAqB;IAC3B,aAAa,EAAE,SAAS;CACzB,CAAC;AACW,QAAA,UAAU,GAAG;IACxB,MAAM;IACN,MAAM,EAAE;QACN,KAAK,EAAE,qBAAqB;QAC5B,IAAI,EAAE,oBAAoB;QAC1B,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,eAAe;QACrC,IAAI,EAAE,2BAA2B;KAClC;IACD,QAAQ,EAAE;QACR,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,iCAAiC;YACvD,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,kCAAkC;YAC9D,IAAI,EAAE,4BAA4B;SACnC;QACD,cAAc,EAAE;YACd,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,kCAAkC;YACxD,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,mCAAmC;YAC/D,IAAI,EAAE,oBAAoB;SAC3B;QACD,KAAK,EAAE;YACL,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,4BAA4B;YAClD,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,6BAA6B;YACzD,IAAI,EAAE,mBAAmB;SAC1B;QACD,KAAK,EAAE;YACL,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,4BAA4B;YAClD,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,6BAA6B;YACzD,IAAI,EAAE,sBAAsB;SAC7B;QACD,OAAO,EAAE;YACP,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,iCAAiC;YACvD,WAAW,EAAE,IAAI,MAAM,CAAC,IAAI,kCAAkC;YAC9D,IAAI,EAAE,kBAAkB;SACzB;KACF;CACO,CAAC"}

package/contracts/src/user-access-state.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Read-only sign-in gate from the authentication layer (distinct from account `accountState`).
+ * Persisted as the enum string value (e.g. `allowed`).
+ */
+export declare enum AXMUserAccessState {
+    Allowed = "allowed",
+    Blocked = "blocked",
+    Expired = "expired"
+}

package/contracts/src/user-access-state.js

@@ -0,0 +1,16 @@
+"use strict";
+//#region ---- User access state ----
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AXMUserAccessState = void 0;
+/**
+ * Read-only sign-in gate from the authentication layer (distinct from account `accountState`).
+ * Persisted as the enum string value (e.g. `allowed`).
+ */
+var AXMUserAccessState;
+(function (AXMUserAccessState) {
+    AXMUserAccessState["Allowed"] = "allowed";
+    AXMUserAccessState["Blocked"] = "blocked";
+    AXMUserAccessState["Expired"] = "expired";
+})(AXMUserAccessState || (exports.AXMUserAccessState = AXMUserAccessState = {}));
+//#endregion
+//# sourceMappingURL=user-access-state.js.map

package/contracts/src/user-access-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-access-state.js","sourceRoot":"","sources":["../../../../../libs/modules/security-management/server/contracts/src/user-access-state.ts"],"names":[],"mappings":";AAAA,qCAAqC;;;AAErC;;;GAGG;AACH,IAAY,kBAIX;AAJD,WAAY,kBAAkB;IAC5B,yCAAmB,CAAA;IACnB,yCAAmB,CAAA;IACnB,yCAAmB,CAAA;AACrB,CAAC,EAJW,kBAAkB,kCAAlB,kBAAkB,QAI7B;AAED,YAAY"}

package/contracts/src/user-effective-state.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Single operational state derived from account lifecycle and sign-in gate (persisted snapshot in mock/backend).
+ */
+export declare enum AXMUserEffectiveState {
+    Pending = "pending",
+    Active = "active",
+    Suspended = "suspended",
+    Inactive = "inactive",
+    Archived = "archived",
+    SignInBlocked = "sign-in-blocked",
+    CredentialExpired = "credential-expired"
+}

package/contracts/src/user-effective-state.js

@@ -0,0 +1,19 @@
+"use strict";
+//#region ---- User effective (unified) state ----
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AXMUserEffectiveState = void 0;
+/**
+ * Single operational state derived from account lifecycle and sign-in gate (persisted snapshot in mock/backend).
+ */
+var AXMUserEffectiveState;
+(function (AXMUserEffectiveState) {
+    AXMUserEffectiveState["Pending"] = "pending";
+    AXMUserEffectiveState["Active"] = "active";
+    AXMUserEffectiveState["Suspended"] = "suspended";
+    AXMUserEffectiveState["Inactive"] = "inactive";
+    AXMUserEffectiveState["Archived"] = "archived";
+    AXMUserEffectiveState["SignInBlocked"] = "sign-in-blocked";
+    AXMUserEffectiveState["CredentialExpired"] = "credential-expired";
+})(AXMUserEffectiveState || (exports.AXMUserEffectiveState = AXMUserEffectiveState = {}));
+//#endregion
+//# sourceMappingURL=user-effective-state.js.map

package/contracts/src/user-effective-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-effective-state.js","sourceRoot":"","sources":["../../../../../libs/modules/security-management/server/contracts/src/user-effective-state.ts"],"names":[],"mappings":";AAAA,kDAAkD;;;AAElD;;GAEG;AACH,IAAY,qBAQX;AARD,WAAY,qBAAqB;IAC/B,4CAAmB,CAAA;IACnB,0CAAiB,CAAA;IACjB,gDAAuB,CAAA;IACvB,8CAAqB,CAAA;IACrB,8CAAqB,CAAA;IACrB,0DAAiC,CAAA;IACjC,iEAAwC,CAAA;AAC1C,CAAC,EARW,qBAAqB,qCAArB,qBAAqB,QAQhC;AAED,YAAY"}

package/package.json

@@ -0,0 +1,26 @@
+{
+  "name": "@acorex-platform/module-security-management-server",
+  "version": "0.0.15",
+  "type": "commonjs",
+  "main": "./src/index.js",
+  "types": "./src/index.d.ts",
+  "peerDependencies": {
+    "@nestjs/common": "^11.0.0",
+    "@acorex-platform/module-common-server": "0.0.15"
+  },
+  "exports": {
+    "./package.json": "./package.json",
+    ".": {
+      "types": "./src/index.d.ts",
+      "default": "./src/index.js"
+    },
+    "./seed": {
+      "types": "./src/lib/seed/index.d.ts",
+      "default": "./src/lib/seed/index.js"
+    },
+    "./contracts": {
+      "types": "./contracts/src/index.d.ts",
+      "default": "./contracts/src/index.js"
+    }
+  }
+}

package/src/index.d.ts

@@ -0,0 +1,5 @@
+export * from './lib/security-management-server.module';
+export { securitymanagementSeedCatalog } from './lib/seed/security-management.seed-catalog';
+export { SECURITY_MANAGEMENT_MODULE_SEED } from './lib/seed/security-management-seed.tokens';
+export { SecurityManagementSeedCatalogProvider } from './lib/seed/security-management-seed.provider';
+export * from './lib/seed';

package/src/index.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecurityManagementSeedCatalogProvider = exports.SECURITY_MANAGEMENT_MODULE_SEED = exports.securitymanagementSeedCatalog = void 0;
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./lib/security-management-server.module"), exports);
+var security_management_seed_catalog_1 = require("./lib/seed/security-management.seed-catalog");
+Object.defineProperty(exports, "securitymanagementSeedCatalog", { enumerable: true, get: function () { return security_management_seed_catalog_1.securitymanagementSeedCatalog; } });
+var security_management_seed_tokens_1 = require("./lib/seed/security-management-seed.tokens");
+Object.defineProperty(exports, "SECURITY_MANAGEMENT_MODULE_SEED", { enumerable: true, get: function () { return security_management_seed_tokens_1.SECURITY_MANAGEMENT_MODULE_SEED; } });
+var security_management_seed_provider_1 = require("./lib/seed/security-management-seed.provider");
+Object.defineProperty(exports, "SecurityManagementSeedCatalogProvider", { enumerable: true, get: function () { return security_management_seed_provider_1.SecurityManagementSeedCatalogProvider; } });
+tslib_1.__exportStar(require("./lib/seed"), exports);
+//# sourceMappingURL=index.js.map

package/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../libs/modules/security-management/server/src/index.ts"],"names":[],"mappings":";;;;AAAA,kFAAwD;AACxD,gGAA4F;AAAnF,iJAAA,6BAA6B,OAAA;AACtC,8FAA6F;AAApF,kJAAA,+BAA+B,OAAA;AACxC,kGAAqG;AAA5F,0JAAA,qCAAqC,OAAA;AAC9C,qDAA2B"}

package/src/lib/security-management-server.module.d.ts

@@ -0,0 +1,2 @@
+export declare class SecurityManagementServerModule {
+}

package/src/lib/security-management-server.module.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecurityManagementServerModule = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const security_management_seed_catalog_1 = require("./seed/security-management.seed-catalog");
+const security_management_seed_tokens_1 = require("./seed/security-management-seed.tokens");
+const security_management_seed_provider_1 = require("./seed/security-management-seed.provider");
+let SecurityManagementServerModule = class SecurityManagementServerModule {
+};
+exports.SecurityManagementServerModule = SecurityManagementServerModule;
+exports.SecurityManagementServerModule = SecurityManagementServerModule = tslib_1.__decorate([
+    (0, common_1.Module)({
+        providers: [
+            security_management_seed_provider_1.SecurityManagementSeedCatalogProvider,
+            {
+                provide: security_management_seed_tokens_1.SECURITY_MANAGEMENT_MODULE_SEED,
+                useValue: security_management_seed_catalog_1.securitymanagementSeedCatalog,
+            },
+        ],
+    })
+], SecurityManagementServerModule);
+//# sourceMappingURL=security-management-server.module.js.map

package/src/lib/security-management-server.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-management-server.module.js","sourceRoot":"","sources":["../../../../../libs/modules/security-management/server/src/lib/security-management-server.module.ts"],"names":[],"mappings":";;;;AAAA,2CAAwC;AACxC,8FAAwF;AACxF,4FAAyF;AACzF,gGAAiG;AAW1F,IAAM,8BAA8B,GAApC,MAAM,8BAA8B;CAAG,CAAA;AAAjC,wEAA8B;yCAA9B,8BAA8B;IAR1C,IAAA,eAAM,EAAC;QACN,SAAS,EAAE;YACT,yEAAqC;YACrC;gBACE,OAAO,EAAE,iEAA+B;gBACxC,QAAQ,EAAE,gEAA6B;aACxC;SACF;KAAE,CAAC;GACO,8BAA8B,CAAG"}

package/src/lib/seed/index.d.ts

@@ -0,0 +1,22 @@
+export interface SecurityManagementSeedContext {
+    moduleName: string;
+    route: string;
+}
+export declare const securityManagementSeedContext: {
+    moduleName: "SecurityManagement";
+    route: string;
+};
+export declare const securityManagementSeedData: {
+    module: {
+        name: "SecurityManagement";
+        title: `@${string}:module.title`;
+        icon: "fa-light fa-shield-halved";
+        i18n: string;
+        required: boolean;
+    };
+};
+export * from './policy';
+export * from './role';
+export * from './security-management.seed-catalog';
+export * from './tenant';
+export * from './user';

package/src/lib/seed/index.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.securityManagementSeedData = exports.securityManagementSeedContext = void 0;
+const tslib_1 = require("tslib");
+const contracts_1 = require("@acorex-platform/module-security-management-server/contracts");
+exports.securityManagementSeedContext = {
+    moduleName: contracts_1.RootConfig.module.name,
+    route: 'security-management',
+};
+exports.securityManagementSeedData = {
+    module: {
+        name: contracts_1.RootConfig.module.name,
+        title: contracts_1.RootConfig.module.title,
+        icon: contracts_1.RootConfig.module.icon,
+        i18n: contracts_1.RootConfig.config.i18n,
+        required: false,
+    },
+};
+tslib_1.__exportStar(require("./policy"), exports);
+tslib_1.__exportStar(require("./role"), exports);
+tslib_1.__exportStar(require("./security-management.seed-catalog"), exports);
+tslib_1.__exportStar(require("./tenant"), exports);
+tslib_1.__exportStar(require("./user"), exports);
+//# sourceMappingURL=index.js.map

package/src/lib/seed/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../libs/modules/security-management/server/src/lib/seed/index.ts"],"names":[],"mappings":";;;;AAAA,4FAA0F;AAO7E,QAAA,6BAA6B,GAAG;IAC3C,UAAU,EAAE,sBAAU,CAAC,MAAM,CAAC,IAAI;IAClC,KAAK,EAAE,qBAAqB;CAC7B,CAAC;AAEW,QAAA,0BAA0B,GAAG;IACxC,MAAM,EAAE;QACN,IAAI,EAAE,sBAAU,CAAC,MAAM,CAAC,IAAI;QAC5B,KAAK,EAAE,sBAAU,CAAC,MAAM,CAAC,KAAK;QAC9B,IAAI,EAAE,sBAAU,CAAC,MAAM,CAAC,IAAI;QAC5B,IAAI,EAAE,sBAAU,CAAC,MAAM,CAAC,IAAI;QAC5B,QAAQ,EAAE,KAAK;KAChB;CACF,CAAC;AACF,mDAAyB;AACzB,iDAAuB;AACvB,6EAAmD;AACnD,mDAAyB;AACzB,iDAAuB"}

package/src/lib/seed/policy/index.d.ts

@@ -0,0 +1,2 @@
+export * from './policy.mock';
+export * from './policy.seed';

package/src/lib/seed/policy/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./policy.mock"), exports);
+tslib_1.__exportStar(require("./policy.seed"), exports);
+//# sourceMappingURL=index.js.map

package/src/lib/seed/policy/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/src/lib/seed/policy/index.ts"],"names":[],"mappings":";;;AAAA,wDAA8B;AAC9B,wDAA8B"}

package/src/lib/seed/policy/policy.mock.d.ts

@@ -0,0 +1,7 @@
+import { AXMSecurityManagementPolicyEntityModel } from '@acorex-platform/module-security-management-server/contracts';
+/**
+ * Mock policies for seeding into the Mock (IndexedDB) backend.
+ * This policy enforces readonly on entire records when control.isSystem === true.
+ * Note: The policy record itself is marked as system via control.isSystem = true.
+ */
+export declare const mockPolicyDefinitions: AXMSecurityManagementPolicyEntityModel[];

package/src/lib/seed/policy/policy.mock.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mockPolicyDefinitions = void 0;
+const seed_1 = require("@acorex-platform/module-common-server/seed");
+/**
+ * Mock policies for seeding into the Mock (IndexedDB) backend.
+ * This policy enforces readonly on entire records when control.isSystem === true.
+ * Note: The policy record itself is marked as system via control.isSystem = true.
+ */
+exports.mockPolicyDefinitions = [
+    {
+        id: seed_1.AXPDataGenerator.uuid(),
+        stateInfo: { isSystem: true },
+        name: 'immutable-record-protection',
+        title: 'Immutable Record Protection',
+        description: 'Protects records marked as system or immutable from modification and deletion.',
+        permission: 'policy.immutable.protection',
+        scope: 'system',
+        resource: {
+            type: 'entity',
+            target: '*',
+        },
+        rules: [
+            {
+                // Evaluated in middleware using AXPExpressionEvaluatorService
+                // Available scope: context.{ op, entity, id, data, existing, result, eval }
+                // Use context.eval to access data fields
+                // Checks EITHER isSystem OR isImmutable flags
+                conditions: '{{ context.eval("stateInfo.isSystem") == true || context.eval("stateInfo.isImmutable") == true }}',
+                effects: [
+                    // Apply readonly to the entire record (blocks write fields)
+                    { effect: 'readonly', target: '*' },
+                    // Block delete/update entirely for immutable records
+                    { effect: 'immutable', target: '*' },
+                ],
+            },
+        ],
+    },
+];
+//# sourceMappingURL=policy.mock.js.map

package/src/lib/seed/policy/policy.mock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.mock.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/src/lib/seed/policy/policy.mock.ts"],"names":[],"mappings":";;;AAAA,qEAA4E;AAI5E;;;;GAIG;AACU,QAAA,qBAAqB,GAA6C;IAC7E;QACE,EAAE,EAAE,uBAAgB,CAAC,IAAI,EAAE;QAC3B,SAAS,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC7B,IAAI,EAAE,6BAA6B;QACnC,KAAK,EAAE,6BAA6B;QACpC,WAAW,EAAE,gFAAgF;QAC7F,UAAU,EAAE,6BAA6B;QACzC,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,GAAG;SACZ;QACD,KAAK,EAAE;YACL;gBACE,8DAA8D;gBAC9D,4EAA4E;gBAC5E,yCAAyC;gBACzC,8CAA8C;gBAC9C,UAAU,EAAE,mGAAmG;gBAC/G,OAAO,EAAE;oBACP,4DAA4D;oBAC5D,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE;oBACnC,qDAAqD;oBACrD,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE;iBACrC;aACF;SACF;KACF;CACF,CAAC"}

package/src/lib/seed/policy/policy.seed.d.ts

@@ -0,0 +1,5 @@
+import { AXPDataSeeder, AXPEntitySeedDefinition, AXPEntitySeedStorage } from '@acorex-platform/module-common-server/seed';
+export declare const POLICY_ENTITY_NAME = "SecurityManagement.Policy";
+export declare function seedPolicyData(storage: AXPEntitySeedStorage): Promise<void>;
+export declare function createPolicyDataSeeder(storage: AXPEntitySeedStorage): AXPDataSeeder;
+export declare const policySeedDefinition: AXPEntitySeedDefinition;

package/src/lib/seed/policy/policy.seed.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.policySeedDefinition = exports.POLICY_ENTITY_NAME = void 0;
+exports.seedPolicyData = seedPolicyData;
+exports.createPolicyDataSeeder = createPolicyDataSeeder;
+const tslib_1 = require("tslib");
+const seed_1 = require("@acorex-platform/module-common-server/seed");
+const policy_mock_1 = require("./policy.mock");
+//#region ---- Constants ----
+exports.POLICY_ENTITY_NAME = 'SecurityManagement.Policy';
+//#endregion
+//#region ---- Pure seed logic ----
+function seedPolicyData(storage) {
+    return tslib_1.__awaiter(this, void 0, void 0, function* () {
+        yield storage.initial(exports.POLICY_ENTITY_NAME, policy_mock_1.mockPolicyDefinitions);
+    });
+}
+function createPolicyDataSeeder(storage) {
+    return {
+        name: 'PolicyDataSeeder',
+        seed: () => seedPolicyData(storage),
+    };
+}
+exports.policySeedDefinition = (0, seed_1.defineEntitySeed)({
+    name: 'PolicyDataSeeder',
+    entityName: exports.POLICY_ENTITY_NAME,
+    rows: policy_mock_1.mockPolicyDefinitions,
+    seed: seedPolicyData,
+});
+//#endregion
+//# sourceMappingURL=policy.seed.js.map

package/src/lib/seed/policy/policy.seed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.seed.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/src/lib/seed/policy/policy.seed.ts"],"names":[],"mappings":";;;AAWA,wCAEC;AAED,wDAKC;;AApBD,qEAA0I;AAC1I,+CAAsD;AAEtD,6BAA6B;AAEhB,QAAA,kBAAkB,GAAG,2BAA2B,CAAC;AAE9D,YAAY;AAEZ,mCAAmC;AAEnC,SAAsB,cAAc,CAAC,OAA6B;;QAChE,MAAM,OAAO,CAAC,OAAO,CAAC,0BAAkB,EAAE,mCAAqB,CAAC,CAAC;IACnE,CAAC;CAAA;AAED,SAAgB,sBAAsB,CAAC,OAA6B;IAClE,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC;KACpC,CAAC;AACJ,CAAC;AAEY,QAAA,oBAAoB,GAA4B,IAAA,uBAAgB,EAAC;IAC5E,IAAI,EAAE,kBAAkB;IACxB,UAAU,EAAE,0BAAkB;IAC9B,IAAI,EAAE,mCAAqB;IAC3B,IAAI,EAAE,cAAc;CACrB,CAAC,CAAC;AAEH,YAAY"}

package/src/lib/seed/role/index.d.ts

@@ -0,0 +1,4 @@
+export * from './role-ids.constants';
+export * from './role-permission-keys.constants';
+export * from './role.mock';
+export * from './role.seed';

package/src/lib/seed/role/index.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./role-ids.constants"), exports);
+tslib_1.__exportStar(require("./role-permission-keys.constants"), exports);
+tslib_1.__exportStar(require("./role.mock"), exports);
+tslib_1.__exportStar(require("./role.seed"), exports);
+//# sourceMappingURL=index.js.map

package/src/lib/seed/role/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/src/lib/seed/role/index.ts"],"names":[],"mappings":";;;AAAA,+DAAqC;AACrC,2EAAiD;AACjD,sDAA4B;AAC5B,sDAA4B"}

package/src/lib/seed/role/role-ids.constants.d.ts

@@ -0,0 +1,14 @@
+export declare const MOCK_ROLE_IDS: {
+    readonly root: "f0000004-0000-4000-a000-000000000001";
+    readonly platformApplicationAdministrator: "f0000004-0000-4000-a000-000000000002";
+    readonly admin: "f0000004-0000-4000-a000-000000000003";
+    readonly manager: "f0000004-0000-4000-a000-000000000004";
+    readonly user: "f0000004-0000-4000-a000-000000000005";
+    readonly support: "f0000004-0000-4000-a000-000000000006";
+    readonly hr: "f0000004-0000-4000-a000-000000000007";
+    readonly finance: "f0000004-0000-4000-a000-000000000008";
+    readonly dev: "f0000004-0000-4000-a000-000000000009";
+    readonly accountHolder: "f0000004-0000-4000-a000-00000000000a";
+    readonly tenantAdministrator: "f0000004-0000-4000-a000-00000000000b";
+    readonly conversationOnly: "f0000004-0000-4000-a000-00000000000c";
+};

package/src/lib/seed/role/role-ids.constants.js

@@ -0,0 +1,20 @@
+"use strict";
+//#region ---- Role ID Constants ----
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MOCK_ROLE_IDS = void 0;
+exports.MOCK_ROLE_IDS = {
+    root: 'f0000004-0000-4000-a000-000000000001',
+    platformApplicationAdministrator: 'f0000004-0000-4000-a000-000000000002',
+    admin: 'f0000004-0000-4000-a000-000000000003',
+    manager: 'f0000004-0000-4000-a000-000000000004',
+    user: 'f0000004-0000-4000-a000-000000000005',
+    support: 'f0000004-0000-4000-a000-000000000006',
+    hr: 'f0000004-0000-4000-a000-000000000007',
+    finance: 'f0000004-0000-4000-a000-000000000008',
+    dev: 'f0000004-0000-4000-a000-000000000009',
+    accountHolder: 'f0000004-0000-4000-a000-00000000000a',
+    tenantAdministrator: 'f0000004-0000-4000-a000-00000000000b',
+    conversationOnly: 'f0000004-0000-4000-a000-00000000000c',
+};
+//#endregion
+//# sourceMappingURL=role-ids.constants.js.map

package/src/lib/seed/role/role-ids.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-ids.constants.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/src/lib/seed/role/role-ids.constants.ts"],"names":[],"mappings":";AAAA,qCAAqC;;;AAExB,QAAA,aAAa,GAAG;IAC3B,IAAI,EAAE,sCAAsC;IAC5C,gCAAgC,EAAE,sCAAsC;IACxE,KAAK,EAAE,sCAAsC;IAC7C,OAAO,EAAE,sCAAsC;IAC/C,IAAI,EAAE,sCAAsC;IAC5C,OAAO,EAAE,sCAAsC;IAC/C,EAAE,EAAE,sCAAsC;IAC1C,OAAO,EAAE,sCAAsC;IAC/C,GAAG,EAAE,sCAAsC;IAC3C,aAAa,EAAE,sCAAsC;IACrD,mBAAmB,EAAE,sCAAsC;IAC3D,gBAAgB,EAAE,sCAAsC;CAChD,CAAC;AAEX,YAAY"}