@acorex-platform/module-security-management-server 0.0.18 → 2.0.0-next.42

package/contracts/src/entities/roles/roles.entity.js.map

@@ -1 +1 @@
-{"version":3,"file":"roles.entity.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/contracts/src/entities/roles/roles.entity.ts"],"names":[],"mappings":";;AAIA,oCAkRC;;AAtRD,iEAA2E;AAC3E,qEAAoK;AACpK,mDAA+C;AAE/C,SAAsB,YAAY;;QAChC,MAAM,IAAI,GAAG,wBAAU,CAAC,MAAM,CAAC,IAAI,CAAC;QAEpC,MAAM,SAAS,GAAc;YAC3B,MAAM,EAAE,wBAAU,CAAC,MAAM,CAAC,IAAI;YAC9B,IAAI,EAAE,wBAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI;YACpC,KAAK,EAAE,wBAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK;YACtC,IAAI,EAAE,wBAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI;YACpC,OAAO,EAAE;gBACP,UAAU,EAAE,wBAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK;gBAC3C,MAAM,EAAE,wBAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW;aAC9C;YACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YAC1F,eAAe,EAAE,EAAE;YACnB,MAAM,EAAE;gBACN;oBACE,EAAE,EAAE,YAAY;oBAChB,KAAK,EAAE,qCAAqC;iBAC7C;gBACD;oBACE,EAAE,EAAE,aAAa;oBACjB,KAAK,EAAE,IAAI,IAAI,wCAAwC;iBACxD;aACF;YACD,UAAU,EAAE;gBACV;oBACE,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,0BAA0B;oBACjC,OAAO,EAAE,YAAY;oBACrB,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,KAAK;wBACd,QAAQ,EAAE,KAAK;wBACf,QAAQ,EAAE,IAAI;wBACd,MAAM,EAAE;4BACN,OAAO,EAAE,IAAI;yBACd;qBACF;iBACF;gBACD;oBACE,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,6BAA6B;oBACpC,OAAO,EAAE,YAAY;oBACrB,OAAO,EAAE;wBACP,IAAI,EAAE;4BACJ,OAAO,EAAE,IAAI;yBACd;wBACD,MAAM,EAAE;4BACN,OAAO,EAAE;gCACP,OAAO,EAAE,IAAI;6BACd;4BACD,MAAM,EAAE;gCACN,OAAO,EAAE,IAAI;6BACd;yBACF;qBACF;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE;4BACT,IAAI,EAAE,wBAAiB,CAAC,IAAI;yBAC7B;qBACF;iBACF;gBACD;oBACE,IAAI,EAAE,aAAa;oBACnB,KAAK,EAAE,mCAAmC;oBAC1C,OAAO,EAAE,YAAY;oBACrB,OAAO,EAAE;wBACP,IAAI,EAAE;4BACJ,OAAO,EAAE,IAAI;yBACd;wBACD,MAAM,EAAE;4BACN,OAAO,EAAE;gCACP,OAAO,EAAE,IAAI;6BACd;yBACF;qBACF;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE;4BACT,IAAI,EAAE,wBAAiB,CAAC,SAAS;4BACjC,OAAO,EAAE;gCACP,IAAI,EAAE,CAAC;6BACR;yBACF;qBACF;iBACF;gBACD;oBACE,IAAI,EAAE,aAAa;oBACnB,KAAK,EAAE,IAAI,IAAI,wCAAwC;oBACvD,OAAO,EAAE,aAAa;oBACtB,MAAM,EAAE;wBACN,QAAQ,EAAE,OAAO;wBACjB,SAAS,EAAE;4BACT,IAAI,EAAE,oBAAoB;4BAC1B,OAAO,EAAE;gCACP,QAAQ,EAAE,IAAI;6BACf;yBACF;qBACF;iBACF;aACF;YACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;YAC9E,UAAU,EAAE;gBACV,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN,QAAQ,EAAE;4BACR;gCACE,EAAE,EAAE,YAAY;6BACjB;4BACD;gCACE,EAAE,EAAE,aAAa;6BAClB;yBACF;wBACD,UAAU,EAAE;4BACV;gCACE,IAAI,EAAE,OAAO;gCACb,MAAM,EAAE;oCACN,SAAS,EAAE;wCACT,EAAE,EAAE;4CACF,OAAO,EAAE,EAAE;yCACZ;qCACF;iCACF;6BACF;4BACD;gCACE,IAAI,EAAE,aAAa;gCACnB,MAAM,EAAE;oCACN,KAAK,EAAE;wCACL,OAAO,EAAE,KAAK;qCACf;oCACD,SAAS,EAAE;wCACT,EAAE,EAAE;4CACF,OAAO,EAAE,EAAE;yCACZ;qCACF;iCACF;6BACF;4BACD;gCACE,IAAI,EAAE,aAAa;gCACnB,MAAM,EAAE;oCACN,SAAS,EAAE;wCACT,EAAE,EAAE;4CACF,OAAO,EAAE,EAAE;yCACZ;qCACF;iCACF;6BACF;yBACF;qBACF;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE;4BACR;gCACE,EAAE,EAAE,YAAY;6BACjB;4BACD;gCACE,EAAE,EAAE,aAAa;6BAClB;yBACF;wBACD,UAAU,EAAE;4BACV;gCACE,IAAI,EAAE,OAAO;gCACb,MAAM,EAAE;oCACN,SAAS,EAAE;wCACT,EAAE,EAAE;4CACF,OAAO,EAAE,EAAE;yCACZ;qCACF;iCACF;6BACF;4BACD;gCACE,IAAI,EAAE,aAAa;gCACnB,MAAM,EAAE;oCACN,SAAS,EAAE;wCACT,EAAE,EAAE;4CACF,OAAO,EAAE,EAAE;yCACZ;qCACF;iCACF;6BACF;4BACD;gCACE,IAAI,EAAE,aAAa;gCACnB,MAAM,EAAE;oCACN,KAAK,EAAE;wCACL,OAAO,EAAE,KAAK;qCACf;oCACD,SAAS,EAAE;wCACT,EAAE,EAAE;4CACF,OAAO,EAAE,EAAE;yCACZ;qCACF;iCACF;6BACF;yBACF;qBACF;oBACD,MAAM,EAAE;wBACN,KAAK,EAAE,WAAW;wBAClB,QAAQ,EAAE;4BACR;gCACE,EAAE,EAAE,YAAY;gCAChB,MAAM,EAAE;oCACN,SAAS,EAAE;wCACT,EAAE,EAAE;4CACF,OAAO,EAAE,EAAE;yCACZ;qCACF;iCACF;6BACF;4BACD;gCACE,EAAE,EAAE,aAAa;gCACjB,MAAM,EAAE;oCACN,SAAS,EAAE;wCACT,EAAE,EAAE;4CACF,OAAO,EAAE,EAAE;yCACZ;qCACF;iCACF;6BACF;yBACF;wBACD,UAAU,EAAE;4BACV;gCACE,IAAI,EAAE,OAAO;gCACb,MAAM,EAAE;oCACN,SAAS,EAAE;wCACT,EAAE,EAAE;4CACF,OAAO,EAAE,EAAE;yCACZ;qCACF;iCACF;6BACF;4BACD;gCACE,IAAI,EAAE,aAAa;gCACnB,MAAM,EAAE;oCACN,KAAK,EAAE;wCACL,OAAO,EAAE,KAAK;qCACf;oCACD,SAAS,EAAE;wCACT,EAAE,EAAE;4CACF,OAAO,EAAE,EAAE;yCACZ;qCACF;iCACF;6BACF;4BACD;gCACE,IAAI,EAAE,aAAa;gCACnB,MAAM,EAAE;oCACN,SAAS,EAAE;wCACT,EAAE,EAAE;4CACF,OAAO,EAAE,EAAE;yCACZ;qCACF;iCACF;6BACF;yBACF;wBACD,OAAO,EAAE,CAAC,GAAG,IAAA,kCAAyB,GAAE,CAAC;qBAC1C;oBACD,IAAI,EAAE;wBACJ,OAAO,EAAE;4BACP,GAAG,IAAA,gCAAuB,GAAE;4BAC5B;gCACE,KAAK,EAAE,IAAI,IAAI,2CAA2C;gCAC1D,OAAO,EAAE,oBAAoB;gCAC7B,QAAQ,EAAE,WAAW;gCACrB,IAAI,EAAE,MAAM;gCACZ,KAAK,EAAE,8BAAqB,CAAC,UAAU;6BACxC;yBACF;wBACD,KAAK,EAAE,CAAC,IAAA,2BAAkB,GAAE,CAAC;qBAC9B;iBACF;aACF;SACF,CAAC;QAEF,OAAO,SAAS,CAAC;IACnB,CAAC;CAAA"}
+{"version":3,"file":"roles.entity.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/contracts/src/entities/roles/roles.entity.ts"],"names":[],"mappings":";;AAWA,oCA0MC;;AArND,iEAA2E;AAC3E,qEAMkD;AAClD,mGAAgG;AAChG,mDAA+C;AAE/C,SAAsB,YAAY;;QAChC,MAAM,IAAI,GAAG,wBAAU,CAAC,MAAM,CAAC,IAAI,CAAC;QAEpC,MAAM,SAAS,GAAc;YAC3B,MAAM,EAAE,wBAAU,CAAC,MAAM,CAAC,IAAI;YAC9B,IAAI,EAAE,wBAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI;YACpC,KAAK,EAAE,wBAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK;YACtC,IAAI,EAAE,wBAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI;YACpC,UAAU,EAAE;gBACV,MAAM;gBACN,OAAO;gBACP,MAAM;gBACN,mBAAmB;gBACnB,eAAe;gBACf,gBAAgB;gBAChB,YAAY;gBACZ,uBAAuB;gBACvB,cAAc;gBACd,KAAK;gBACL,QAAQ;gBACR,MAAM;gBACN,QAAQ;gBACR,OAAO;aACR;YACD,OAAO,EAAE;gBACP,UAAU,EAAE,wBAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK;gBAC3C,MAAM,EAAE,wBAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW;aAC9C;YACD,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,SAAS,EAAE;gBACnB,EAAE,IAAI,EAAE,MAAM,EAAE;gBAChB,EAAE,IAAI,EAAE,SAAS,EAAE;gBACnB,EAAE,IAAI,EAAE,SAAS,EAAE;gBACnB,EAAE,IAAI,EAAE,SAAS,EAAE;aACpB;YACD,eAAe,EAAE,EAAE;YACnB,KAAK,EAAE;gBACL;oBACE,YAAY,EAAE,yEAAmC;oBACjD,KAAK,EAAE,kEAAkE;oBACzE,IAAI,EAAE,4BAA4B;oBAClC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE;oBACvC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;iBACzC;aACF;YACD,MAAM,EAAE;gBACN;oBACE,EAAE,EAAE,YAAY;oBAChB,KAAK,EAAE,qCAAqC;iBAC7C;aACF;YACD,UAAU,EAAE;gBACV;oBACE,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,0BAA0B;oBACjC,OAAO,EAAE,YAAY;oBACrB,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,KAAK;wBACd,QAAQ,EAAE,KAAK;wBACf,QAAQ,EAAE,IAAI;wBACd,MAAM,EAAE;4BACN,OAAO,EAAE,IAAI;yBACd;qBACF;iBACF;gBACD;oBACE,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,4BAA4B;oBACnC,OAAO,EAAE,YAAY;oBACrB,OAAO,EAAE;wBACP,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;wBACvB,MAAM,EAAE;4BACN,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;4BAC1B,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;yBAC1B;qBACF;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE;4BACT,IAAI,EAAE,wBAAiB,CAAC,IAAI;yBAC7B;qBACF;iBACF;gBACD;oBACE,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,6BAA6B;oBACpC,OAAO,EAAE,YAAY;oBACrB,OAAO,EAAE;wBACP,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;wBACvB,MAAM,EAAE;4BACN,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;4BAC1B,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;yBAC1B;qBACF;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE;4BACT,IAAI,EAAE,wBAAiB,CAAC,IAAI;yBAC7B;qBACF;iBACF;gBACD;oBACE,IAAI,EAAE,aAAa;oBACnB,KAAK,EAAE,mCAAmC;oBAC1C,OAAO,EAAE,YAAY;oBACrB,OAAO,EAAE;wBACP,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;wBACvB,MAAM,EAAE;4BACN,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;yBAC3B;qBACF;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE;4BACT,IAAI,EAAE,wBAAiB,CAAC,SAAS;4BACjC,OAAO,EAAE;gCACP,IAAI,EAAE,CAAC;6BACR;yBACF;qBACF;iBACF;aACF;YACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;YACvE,UAAU,EAAE;gBACV,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC;wBAChC,UAAU,EAAE;4BACV;gCACE,IAAI,EAAE,OAAO;gCACb,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE;6BAC/C;4BACD;gCACE,IAAI,EAAE,MAAM;gCACZ,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE;6BAC/C;4BACD;gCACE,IAAI,EAAE,aAAa;gCACnB,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE;6BAC/C;yBACF;qBACF;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC;wBAChC,UAAU,EAAE;4BACV;gCACE,IAAI,EAAE,OAAO;gCACb,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE;6BAC/C;4BACD;gCACE,IAAI,EAAE,MAAM;gCACZ,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE;6BAC/C;4BACD;gCACE,IAAI,EAAE,aAAa;gCACnB,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE;6BAC/C;yBACF;qBACF;oBACD,MAAM,EAAE;wBACN,KAAK,EAAE,WAAW;wBAClB,QAAQ,EAAE;4BACR;gCACE,EAAE,EAAE,YAAY;gCAChB,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE;6BAC/C;yBACF;wBACD,UAAU,EAAE;4BACV;gCACE,IAAI,EAAE,OAAO;gCACb,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE;6BAC/C;4BACD;gCACE,IAAI,EAAE,MAAM;gCACZ,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE;6BAC/C;4BACD;gCACE,IAAI,EAAE,aAAa;gCACnB,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE;6BAC/C;yBACF;wBACD,OAAO,EAAE,CAAC,GAAG,IAAA,kCAAyB,GAAE,CAAC;qBAC1C;oBACD,IAAI,EAAE;wBACJ,OAAO,EAAE;4BACP,GAAG,IAAA,gCAAuB,GAAE;4BAC5B;gCACE,KAAK,EAAE,IAAI,IAAI,2CAA2C;gCAC1D,OAAO,EAAE,oBAAoB;gCAC7B,QAAQ,EAAE,WAAW;gCACrB,IAAI,EAAE,MAAM;gCACZ,KAAK,EAAE,8BAAqB,CAAC,UAAU;6BACxC;yBACF;wBACD,KAAK,EAAE,CAAC,IAAA,2BAAkB,GAAE,CAAC;qBAC9B;iBACF;aACF;SACF,CAAC;QAEF,OAAO,SAAS,CAAC;IACnB,CAAC;CAAA"}

package/contracts/src/entities/roles/roles.types.d.ts

@@ -1,7 +1,10 @@
 import { AXPEntityModel } from '@acorex-platform/framework-shared/entity';
+/**
+ * Role identity only. Capability grants live on
+ * {@link AXMSecurityManagementRolePermissionEntityModel}.
+ */
 export interface AXMSecurityManagementRolesEntityModel extends AXPEntityModel<string> {
     name: string;
     title: string;
     description?: string;
-    permissions?: string[];
 }

package/contracts/src/entities/roles/roles.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"roles.types.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/contracts/src/entities/roles/roles.types.ts"],"names":[],"mappings":""}
+{"version":3,"file":"roles.types.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/contracts/src/entities/roles/roles.types.ts"],"names":[],"mappings":""}

package/contracts/src/entities/user-role/index.d.ts

@@ -0,0 +1 @@
+export * from './user-role.types';

package/{src/lib/seed/tenant → contracts/src/entities/user-role}/index.js

@@ -1,5 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const tslib_1 = require("tslib");
-tslib_1.__exportStar(require("./tenant-ids.constants"), exports);
+tslib_1.__exportStar(require("./user-role.types"), exports);
 //# sourceMappingURL=index.js.map

package/contracts/src/entities/user-role/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/contracts/src/entities/user-role/index.ts"],"names":[],"mappings":";;;AAAA,4DAAkC"}

package/contracts/src/entities/user-role/user-role.entity.d.ts

@@ -0,0 +1,2 @@
+import { AXPEntity } from '@acorex-platform/framework-shared/entity';
+export declare function userRoleFactory(): Promise<AXPEntity | null>;

package/contracts/src/entities/user-role/user-role.entity.js

@@ -0,0 +1,164 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.userRoleFactory = userRoleFactory;
+const tslib_1 = require("tslib");
+const core_1 = require("@acorex-platform/framework-shared/core");
+const entity_1 = require("@acorex-platform/framework-shared/entity");
+const root_config_1 = require("../../root-config");
+function userRoleFactory() {
+    return tslib_1.__awaiter(this, void 0, void 0, function* () {
+        const i18n = root_config_1.RootConfig.config.i18n;
+        const entityDef = {
+            module: root_config_1.RootConfig.module.name,
+            name: root_config_1.RootConfig.entities.userRole.name,
+            title: root_config_1.RootConfig.entities.userRole.title,
+            icon: root_config_1.RootConfig.entities.userRole.icon,
+            searchTags: [
+                'user-role',
+                'user-roles',
+                'role-assignment',
+                'membership',
+                'access-grant',
+                'user',
+                'role',
+                'join-table',
+                'authorization',
+                'نقش کاربر',
+                'نقش‌های کاربر',
+                'کاربر',
+                'نقش',
+                'تخصیص نقش',
+            ],
+            formats: {
+                individual: root_config_1.RootConfig.entities.userRole.title,
+                plural: root_config_1.RootConfig.entities.userRole.titlePlural,
+            },
+            plugins: [{ name: 'history' }, { name: 'lock' }, { name: 'compare' }, { name: 'archive' }],
+            relatedEntities: [],
+            groups: [
+                {
+                    id: 'basic-info',
+                    title: `@general:terms.interface.basic-info`,
+                },
+                {
+                    id: 'roles',
+                    title: `@${i18n}:users.entities.user.fields.roles.title`,
+                },
+            ],
+            properties: [
+                {
+                    name: 'id',
+                    title: `@general:terms.common.id`,
+                    groupId: 'basic-info',
+                    schema: {
+                        dataType: 'string',
+                        visible: false,
+                        nullable: false,
+                        readonly: true,
+                        unique: {
+                            enabled: true,
+                        },
+                    },
+                },
+                {
+                    name: 'userId',
+                    title: `@${i18n}:user-roles.entities.user-role.fields.user.title`,
+                    groupId: 'basic-info',
+                    schema: {
+                        dataType: 'string',
+                        nullable: false,
+                        interface: {
+                            type: core_1.AXPWidgetsCatalog.text,
+                        },
+                    },
+                    validations: [{ rule: 'required' }],
+                },
+                {
+                    name: 'roleIds',
+                    title: `@${i18n}:users.entities.user.fields.roles.title`,
+                    groupId: 'roles',
+                    schema: {
+                        dataType: 'object',
+                        interface: {
+                            type: core_1.AXPWidgetsCatalog.lookup,
+                            options: {
+                                entity: 'SecurityManagement.Role',
+                                multiple: true,
+                                look: 'select',
+                                expose: [
+                                    { source: 'id', target: 'rolesList.{id}' },
+                                    { source: 'title', target: 'rolesList.{title}' },
+                                ],
+                            },
+                        },
+                    },
+                    validations: [{ rule: 'required' }],
+                },
+            ],
+            columns: [
+                { name: 'userId' },
+                { name: 'roleIds', options: { dataPath: 'rolesList' } },
+            ],
+            interfaces: {
+                master: {
+                    create: {
+                        sections: [
+                            {
+                                id: 'basic-info',
+                                order: 1,
+                                layout: { positions: { lg: { colSpan: 12, colStart: 1 } } },
+                            },
+                            {
+                                id: 'roles',
+                                order: 2,
+                                layout: { positions: { lg: { colSpan: 12, colStart: 1 } } },
+                            },
+                        ],
+                        properties: [
+                            { name: 'userId', layout: { positions: { lg: { colSpan: 12 } } } },
+                            { name: 'roleIds', layout: { positions: { lg: { colSpan: 12 } } } },
+                        ],
+                    },
+                    update: {
+                        sections: [
+                            {
+                                id: 'basic-info',
+                                order: 1,
+                                layout: { positions: { lg: { colSpan: 12, colStart: 1 } } },
+                            },
+                            {
+                                id: 'roles',
+                                order: 2,
+                                layout: { positions: { lg: { colSpan: 12, colStart: 1 } } },
+                            },
+                        ],
+                        properties: [
+                            { name: 'userId', layout: { positions: { lg: { colSpan: 12 } } } },
+                            { name: 'roleIds', layout: { positions: { lg: { colSpan: 12 } } } },
+                        ],
+                    },
+                    single: {
+                        title: '{{userId}}',
+                        sections: [
+                            {
+                                id: 'basic-info',
+                                order: 1,
+                                layout: { positions: { lg: { colSpan: 12, colStart: 1 } } },
+                            },
+                        ],
+                        properties: [
+                            { name: 'userId', layout: { positions: { lg: { colSpan: 12 } } } },
+                            { name: 'roleIds', layout: { positions: { lg: { colSpan: 12 } } } },
+                        ],
+                    },
+                    list: {
+                        actions: [...(0, entity_1.entityMasterCrudActions)()],
+                        views: [(0, entity_1.createAllQueryView)()],
+                    },
+                },
+            },
+        };
+        return entityDef;
+    });
+}
+//# sourceMappingURL=user-role.entity.js.map

package/contracts/src/entities/user-role/user-role.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-role.entity.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/contracts/src/entities/user-role/user-role.entity.ts"],"names":[],"mappings":";;AAQA,0CA2JC;;AAnKD,iEAA2E;AAC3E,qEAIkD;AAClD,mDAA+C;AAE/C,SAAsB,eAAe;;QACnC,MAAM,IAAI,GAAG,wBAAU,CAAC,MAAM,CAAC,IAAI,CAAC;QAEpC,MAAM,SAAS,GAAc;YAC3B,MAAM,EAAE,wBAAU,CAAC,MAAM,CAAC,IAAI;YAC9B,IAAI,EAAE,wBAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI;YACvC,KAAK,EAAE,wBAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK;YACzC,IAAI,EAAE,wBAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI;YACvC,UAAU,EAAE;gBACV,WAAW;gBACX,YAAY;gBACZ,iBAAiB;gBACjB,YAAY;gBACZ,cAAc;gBACd,MAAM;gBACN,MAAM;gBACN,YAAY;gBACZ,eAAe;gBACf,WAAW;gBACX,eAAe;gBACf,OAAO;gBACP,KAAK;gBACL,WAAW;aACZ;YACD,OAAO,EAAE;gBACP,UAAU,EAAE,wBAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK;gBAC9C,MAAM,EAAE,wBAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW;aACjD;YACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YAC1F,eAAe,EAAE,EAAE;YACnB,MAAM,EAAE;gBACN;oBACE,EAAE,EAAE,YAAY;oBAChB,KAAK,EAAE,qCAAqC;iBAC7C;gBACD;oBACE,EAAE,EAAE,OAAO;oBACX,KAAK,EAAE,IAAI,IAAI,yCAAyC;iBACzD;aACF;YACD,UAAU,EAAE;gBACV;oBACE,IAAI,EAAE,IAAI;oBACV,KAAK,EAAE,0BAA0B;oBACjC,OAAO,EAAE,YAAY;oBACrB,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,OAAO,EAAE,KAAK;wBACd,QAAQ,EAAE,KAAK;wBACf,QAAQ,EAAE,IAAI;wBACd,MAAM,EAAE;4BACN,OAAO,EAAE,IAAI;yBACd;qBACF;iBACF;gBACD;oBACE,IAAI,EAAE,QAAQ;oBACd,KAAK,EAAE,IAAI,IAAI,kDAAkD;oBACjE,OAAO,EAAE,YAAY;oBACrB,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,QAAQ,EAAE,KAAK;wBACf,SAAS,EAAE;4BACT,IAAI,EAAE,wBAAiB,CAAC,IAAI;yBAC7B;qBACF;oBACD,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;iBACpC;gBACD;oBACE,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,IAAI,IAAI,yCAAyC;oBACxD,OAAO,EAAE,OAAO;oBAChB,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE;4BACT,IAAI,EAAE,wBAAiB,CAAC,MAAM;4BAC9B,OAAO,EAAE;gCACP,MAAM,EAAE,yBAAyB;gCACjC,QAAQ,EAAE,IAAI;gCACd,IAAI,EAAE,QAAQ;gCACd,MAAM,EAAE;oCACN,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE;oCAC1C,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE;iCACjD;6BACF;yBACF;qBACF;oBACD,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;iBACpC;aACF;YACD,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAClB,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE;aACxD;YACD,UAAU,EAAE;gBACV,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN,QAAQ,EAAE;4BACR;gCACE,EAAE,EAAE,YAAY;gCAChB,KAAK,EAAE,CAAC;gCACR,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE;6BAC5D;4BACD;gCACE,EAAE,EAAE,OAAO;gCACX,KAAK,EAAE,CAAC;gCACR,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE;6BAC5D;yBACF;wBACD,UAAU,EAAE;4BACV,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;4BAClE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;yBACpE;qBACF;oBACD,MAAM,EAAE;wBACN,QAAQ,EAAE;4BACR;gCACE,EAAE,EAAE,YAAY;gCAChB,KAAK,EAAE,CAAC;gCACR,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE;6BAC5D;4BACD;gCACE,EAAE,EAAE,OAAO;gCACX,KAAK,EAAE,CAAC;gCACR,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE;6BAC5D;yBACF;wBACD,UAAU,EAAE;4BACV,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;4BAClE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;yBACpE;qBACF;oBACD,MAAM,EAAE;wBACN,KAAK,EAAE,YAAY;wBACnB,QAAQ,EAAE;4BACR;gCACE,EAAE,EAAE,YAAY;gCAChB,KAAK,EAAE,CAAC;gCACR,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE;6BAC5D;yBACF;wBACD,UAAU,EAAE;4BACV,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;4BAClE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;yBACpE;qBACF;oBACD,IAAI,EAAE;wBACJ,OAAO,EAAE,CAAC,GAAG,IAAA,gCAAuB,GAAE,CAAC;wBACvC,KAAK,EAAE,CAAC,IAAA,2BAAkB,GAAE,CAAC;qBAC9B;iBACF;aACF;SACF,CAAC;QAEF,OAAO,SAAS,CAAC;IACnB,CAAC;CAAA"}

package/contracts/src/entities/user-role/user-role.types.d.ts

@@ -0,0 +1,11 @@
+import type { AXPEntityModel } from '@acorex-platform/framework-shared/entity';
+/**
+ * Scoped role assignments for a User.
+ * User rows are identity-only for roles; all role memberships live here.
+ */
+export interface AXMSecurityManagementUserRoleEntityModel extends AXPEntityModel<string> {
+    /** Target {@link SecurityManagement.User} id. */
+    userId: string;
+    /** Role ids granted for this scope. */
+    roleIds: string[];
+}

package/contracts/src/entities/user-role/user-role.types.js

@@ -0,0 +1,5 @@
+"use strict";
+//#region ----- UserRole types -----
+Object.defineProperty(exports, "__esModule", { value: true });
+//#endregion
+//# sourceMappingURL=user-role.types.js.map

package/contracts/src/entities/user-role/user-role.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-role.types.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/contracts/src/entities/user-role/user-role.types.ts"],"names":[],"mappings":";AAAA,oCAAoC;;AAepC,YAAY"}

package/contracts/src/entities/user-two-factor/index.d.ts

@@ -0,0 +1,2 @@
+export * from './user-two-factor.types';
+export { userTwoFactorFactory } from './user-two-factor.entity';

package/contracts/src/entities/user-two-factor/index.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.userTwoFactorFactory = void 0;
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./user-two-factor.types"), exports);
+var user_two_factor_entity_1 = require("./user-two-factor.entity");
+Object.defineProperty(exports, "userTwoFactorFactory", { enumerable: true, get: function () { return user_two_factor_entity_1.userTwoFactorFactory; } });
+//# sourceMappingURL=index.js.map

package/contracts/src/entities/user-two-factor/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/contracts/src/entities/user-two-factor/index.ts"],"names":[],"mappings":";;;;AAAA,kEAAwC;AACxC,mEAAgE;AAAvD,8HAAA,oBAAoB,OAAA"}

package/contracts/src/entities/user-two-factor/user-two-factor.entity.d.ts

@@ -0,0 +1,6 @@
+import { AXPEntity } from '@acorex-platform/framework-shared/entity';
+/**
+ * Schema-only entity for authenticator enrollment.
+ * No secret fields in UI; all mutations go through dedicated 2FA commands.
+ */
+export declare function userTwoFactorFactory(): Promise<AXPEntity | null>;

package/contracts/src/entities/user-two-factor/user-two-factor.entity.js

@@ -0,0 +1,103 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.userTwoFactorFactory = userTwoFactorFactory;
+const tslib_1 = require("tslib");
+const core_1 = require("@acorex-platform/framework-shared/core");
+const entity_1 = require("@acorex-platform/framework-shared/entity");
+const root_config_1 = require("../../root-config");
+/**
+ * Schema-only entity for authenticator enrollment.
+ * No secret fields in UI; all mutations go through dedicated 2FA commands.
+ */
+function userTwoFactorFactory() {
+    return tslib_1.__awaiter(this, void 0, void 0, function* () {
+        const i18n = root_config_1.RootConfig.config.i18n;
+        const entityDef = {
+            module: root_config_1.RootConfig.module.name,
+            name: root_config_1.RootConfig.entities.userTwoFactor.name,
+            title: root_config_1.RootConfig.entities.userTwoFactor.title,
+            icon: root_config_1.RootConfig.entities.userTwoFactor.icon,
+            searchTags: ['two-factor', '2fa', 'totp', 'authenticator', 'احراز هویت دو مرحله‌ای'],
+            formats: {
+                individual: root_config_1.RootConfig.entities.userTwoFactor.title,
+                plural: root_config_1.RootConfig.entities.userTwoFactor.titlePlural,
+                searchResult: {
+                    title: '{{ userId }}',
+                    description: root_config_1.RootConfig.module.title,
+                },
+            },
+            groups: [
+                {
+                    id: 'basic-info',
+                    title: `@general:terms.interface.basic-info`,
+                },
+            ],
+            properties: [
+                {
+                    name: 'userId',
+                    title: `@${i18n}:user-two-factor.fields.user-id.title`,
+                    groupId: 'basic-info',
+                    schema: {
+                        dataType: 'string',
+                        interface: {
+                            type: core_1.AXPWidgetsCatalog.text,
+                            options: { readOnly: true },
+                        },
+                    },
+                    validations: [{ rule: 'required' }],
+                },
+                {
+                    name: 'method',
+                    title: `@${i18n}:user-two-factor.fields.method.title`,
+                    groupId: 'basic-info',
+                    schema: {
+                        dataType: 'string',
+                        interface: {
+                            type: core_1.AXPWidgetsCatalog.text,
+                            options: { readOnly: true },
+                        },
+                    },
+                    validations: [{ rule: 'required' }],
+                },
+                {
+                    name: 'verifiedAt',
+                    title: `@${i18n}:user-two-factor.fields.verified-at.title`,
+                    groupId: 'basic-info',
+                    schema: {
+                        dataType: 'dateTime',
+                        interface: {
+                            type: core_1.AXPWidgetsCatalog.dateTime,
+                            options: { readOnly: true },
+                        },
+                    },
+                },
+            ],
+            columns: [{ name: 'userId' }, { name: 'method' }, { name: 'verifiedAt' }],
+            interfaces: {
+                master: {
+                    single: {
+                        title: '{{ userId }}',
+                        sections: [
+                            {
+                                id: 'basic-info',
+                                layout: { positions: { lg: { colSpan: 12 } } },
+                            },
+                        ],
+                        properties: [
+                            { name: 'userId', layout: { positions: { lg: { colSpan: 6 } } } },
+                            { name: 'method', layout: { positions: { lg: { colSpan: 6 } } } },
+                            { name: 'verifiedAt', layout: { positions: { lg: { colSpan: 6 } } } },
+                        ],
+                        actions: [],
+                    },
+                    list: {
+                        actions: [...(0, entity_1.entityMasterCrudActions)({ create: false, delete: false, edit: false })],
+                        views: [(0, entity_1.createAllQueryView)({ sorts: [{ name: 'verifiedAt', dir: 'desc' }] })],
+                    },
+                },
+            },
+        };
+        return entityDef;
+    });
+}
+//# sourceMappingURL=user-two-factor.entity.js.map

package/contracts/src/entities/user-two-factor/user-two-factor.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-two-factor.entity.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/contracts/src/entities/user-two-factor/user-two-factor.entity.ts"],"names":[],"mappings":";;AAQA,oDA0FC;;AAlGD,iEAA2E;AAC3E,qEAAkH;AAClH,mDAA+C;AAE/C;;;GAGG;AACH,SAAsB,oBAAoB;;QACxC,MAAM,IAAI,GAAG,wBAAU,CAAC,MAAM,CAAC,IAAI,CAAC;QAEpC,MAAM,SAAS,GAAc;YAC3B,MAAM,EAAE,wBAAU,CAAC,MAAM,CAAC,IAAI;YAC9B,IAAI,EAAE,wBAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI;YAC5C,KAAK,EAAE,wBAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK;YAC9C,IAAI,EAAE,wBAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI;YAC5C,UAAU,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,wBAAwB,CAAC;YACpF,OAAO,EAAE;gBACP,UAAU,EAAE,wBAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK;gBACnD,MAAM,EAAE,wBAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,WAAW;gBACrD,YAAY,EAAE;oBACZ,KAAK,EAAE,cAAc;oBACrB,WAAW,EAAE,wBAAU,CAAC,MAAM,CAAC,KAAK;iBACrC;aACF;YACD,MAAM,EAAE;gBACN;oBACE,EAAE,EAAE,YAAY;oBAChB,KAAK,EAAE,qCAAqC;iBAC7C;aACF;YACD,UAAU,EAAE;gBACV;oBACE,IAAI,EAAE,QAAQ;oBACd,KAAK,EAAE,IAAI,IAAI,uCAAuC;oBACtD,OAAO,EAAE,YAAY;oBACrB,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE;4BACT,IAAI,EAAE,wBAAiB,CAAC,IAAI;4BAC5B,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;yBAC5B;qBACF;oBACD,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;iBACpC;gBACD;oBACE,IAAI,EAAE,QAAQ;oBACd,KAAK,EAAE,IAAI,IAAI,sCAAsC;oBACrD,OAAO,EAAE,YAAY;oBACrB,MAAM,EAAE;wBACN,QAAQ,EAAE,QAAQ;wBAClB,SAAS,EAAE;4BACT,IAAI,EAAE,wBAAiB,CAAC,IAAI;4BAC5B,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;yBAC5B;qBACF;oBACD,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;iBACpC;gBACD;oBACE,IAAI,EAAE,YAAY;oBAClB,KAAK,EAAE,IAAI,IAAI,2CAA2C;oBAC1D,OAAO,EAAE,YAAY;oBACrB,MAAM,EAAE;wBACN,QAAQ,EAAE,UAAU;wBACpB,SAAS,EAAE;4BACT,IAAI,EAAE,wBAAiB,CAAC,QAAQ;4BAChC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;yBAC5B;qBACF;iBACF;aACF;YACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YACzE,UAAU,EAAE;gBACV,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN,KAAK,EAAE,cAAc;wBACrB,QAAQ,EAAE;4BACR;gCACE,EAAE,EAAE,YAAY;gCAChB,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE;6BAC/C;yBACF;wBACD,UAAU,EAAE;4BACV,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE;4BACjE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE;4BACjE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE;yBACtE;wBACD,OAAO,EAAE,EAAE;qBACZ;oBACD,IAAI,EAAE;wBACJ,OAAO,EAAE,CAAC,GAAG,IAAA,gCAAuB,EAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;wBACpF,KAAK,EAAE,CAAC,IAAA,2BAAkB,EAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;qBAC9E;iBACF;aACF;SACF,CAAC;QAEF,OAAO,SAAS,CAAC;IACnB,CAAC;CAAA"}

package/contracts/src/entities/user-two-factor/user-two-factor.types.d.ts

@@ -0,0 +1,24 @@
+import { AXPEntityModel } from '@acorex-platform/framework-shared/entity';
+export type AXMUserTwoFactorMethod = 'authenticator';
+export interface AXMUserTwoFactorRecoveryCode {
+    hash: string;
+    /** Salt / hashing metadata (e.g. full pbkdf2 encoded string already embeds salt — optional extra). */
+    salt?: string;
+    usedAt?: string | null;
+}
+/**
+ * Persisted authenticator enrollment for one user.
+ * Secrets must never be returned on client/entity APIs.
+ */
+export interface AXMSecurityManagementUserTwoFactorEntityModel extends AXPEntityModel<string> {
+    userId: string;
+    method: AXMUserTwoFactorMethod;
+    encryptedSecret: string;
+    iv: string;
+    authTag: string;
+    keyVersion: number;
+    verifiedAt: string;
+    /** Last accepted TOTP time-step (floor(unix/period)); replay guard. */
+    lastAcceptedStep?: number | null;
+    recoveryCodes?: AXMUserTwoFactorRecoveryCode[];
+}

package/contracts/src/entities/user-two-factor/user-two-factor.types.js

@@ -0,0 +1,4 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//#endregion
+//# sourceMappingURL=user-two-factor.types.js.map

package/contracts/src/entities/user-two-factor/user-two-factor.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-two-factor.types.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/contracts/src/entities/user-two-factor/user-two-factor.types.ts"],"names":[],"mappings":";;AA8BA,YAAY"}

package/contracts/src/entities/users/index.d.ts

@@ -1,2 +1,2 @@
-export * from './users.entity';
 export * from './users.types';
+export * from './user-provisioning-list-actions';

package/contracts/src/entities/users/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const tslib_1 = require("tslib");
-tslib_1.__exportStar(require("./users.entity"), exports);
 tslib_1.__exportStar(require("./users.types"), exports);
+tslib_1.__exportStar(require("./user-provisioning-list-actions"), exports);
 //# sourceMappingURL=index.js.map

package/contracts/src/entities/users/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/server/contracts/src/entities/users/index.ts"],"names":[],"mappings":";;;AAAA,yDAA+B;AAC/B,wDAA8B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/contracts/src/entities/users/index.ts"],"names":[],"mappings":";;;AAAA,wDAA8B;AAC9B,2EAAiD"}

package/contracts/src/entities/users/user-provisioning-list-actions.d.ts

@@ -0,0 +1,8 @@
+import { type AXPEntityAction } from '@acorex-platform/framework-shared/entity';
+/** Type-level Invite / Create actions, including the legacy Create dropdown. */
+export declare function isUserProvisioningListAction(action: AXPEntityAction): boolean;
+/**
+ * Users list add actions driven by the platform provisioning setting.
+ * Create-only and invite-only stay primary. Both are secondary menu items.
+ */
+export declare function userProvisioningListActions(): AXPEntityAction[];

package/contracts/src/entities/users/user-provisioning-list-actions.js

@@ -0,0 +1,95 @@
+"use strict";
+//#region ----- Imports -----
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isUserProvisioningListAction = isUserProvisioningListAction;
+exports.userProvisioningListActions = userProvisioningListActions;
+const core_1 = require("@acorex-platform/framework-shared/core");
+const entity_1 = require("@acorex-platform/framework-shared/entity");
+const server_commands_1 = require("../../server-commands");
+const settings_keys_1 = require("../../settings.keys");
+//#endregion
+//#region ----- List actions -----
+const PROVISIONING_MODE_KEY = settings_keys_1.AXMSecurityManagementSettings.UserProvisioningMode;
+/**
+ * Hides the action unless the platform provisioning setting matches `mode`.
+ * A missing value uses {@link AXM_USER_PROVISIONING_MODE_DEFAULT}.
+ * Select widgets may persist either the scalar or `{ value }`.
+ */
+function hiddenUnlessProvisioningMode(mode) {
+    return `{{ (((await settings.get('${PROVISIONING_MODE_KEY}'))?.value ?? (await settings.get('${PROVISIONING_MODE_KEY}'))) || '${settings_keys_1.AXM_USER_PROVISIONING_MODE_DEFAULT}') !== '${mode}' }}`;
+}
+const USER_ADD_COMMANDS = new Set([server_commands_1.AXM_USER_INVITE_COMMAND, server_commands_1.AXM_USER_CREATE_IN_TENANT_COMMAND]);
+function commandNameOf(action) {
+    var _a;
+    return typeof action.command === 'string' ? action.command : (_a = action.command) === null || _a === void 0 ? void 0 : _a.name;
+}
+/** Type-level Invite / Create actions, including the legacy Create dropdown. */
+function isUserProvisioningListAction(action) {
+    var _a, _b;
+    if (action.scope !== entity_1.AXPEntityCommandScope.TypeLevel) {
+        return false;
+    }
+    if (USER_ADD_COMMANDS.has((_a = commandNameOf(action)) !== null && _a !== void 0 ? _a : '')) {
+        return true;
+    }
+    return ((_b = action.items) !== null && _b !== void 0 ? _b : []).some((child) => { var _a; return USER_ADD_COMMANDS.has((_a = commandNameOf(child)) !== null && _a !== void 0 ? _a : ''); });
+}
+function provisioningAction(input) {
+    return {
+        name: input.name,
+        title: input.title,
+        icon: input.icon,
+        command: { name: input.command },
+        priority: input.priority,
+        type: core_1.AXPSystemActionType.Create,
+        scope: entity_1.AXPEntityCommandScope.TypeLevel,
+        order: input.order,
+        hidden: hiddenUnlessProvisioningMode(input.mode),
+    };
+}
+/**
+ * Users list add actions driven by the platform provisioning setting.
+ * Create-only and invite-only stay primary. Both are secondary menu items.
+ */
+function userProvisioningListActions() {
+    return [
+        provisioningAction({
+            name: 'provision-create',
+            title: '@general:actions.create.title',
+            icon: 'fa-light fa-user-plus',
+            command: server_commands_1.AXM_USER_CREATE_IN_TENANT_COMMAND,
+            priority: 'primary',
+            mode: settings_keys_1.AXMUserProvisioningMode.Create,
+            order: 1,
+        }),
+        provisioningAction({
+            name: 'provision-invite',
+            title: '@security-management:users.entities.user.actions.invite.title',
+            icon: 'fa-light fa-envelope',
+            command: server_commands_1.AXM_USER_INVITE_COMMAND,
+            priority: 'primary',
+            mode: settings_keys_1.AXMUserProvisioningMode.Invite,
+            order: 1,
+        }),
+        provisioningAction({
+            name: 'provision-invite-secondary',
+            title: '@security-management:users.entities.user.actions.invite.title',
+            icon: 'fa-light fa-envelope',
+            command: server_commands_1.AXM_USER_INVITE_COMMAND,
+            priority: 'secondary',
+            mode: settings_keys_1.AXMUserProvisioningMode.Both,
+            order: 1,
+        }),
+        provisioningAction({
+            name: 'provision-create-secondary',
+            title: '@security-management:users.entities.user.actions.create-in-tenant.title',
+            icon: 'fa-light fa-user-plus',
+            command: server_commands_1.AXM_USER_CREATE_IN_TENANT_COMMAND,
+            priority: 'secondary',
+            mode: settings_keys_1.AXMUserProvisioningMode.Both,
+            order: 2,
+        }),
+    ];
+}
+//#endregion
+//# sourceMappingURL=user-provisioning-list-actions.js.map

package/contracts/src/entities/users/user-provisioning-list-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-provisioning-list-actions.js","sourceRoot":"","sources":["../../../../../../../libs/modules/security-management/contracts/src/entities/users/user-provisioning-list-actions.ts"],"names":[],"mappings":";AAAA,6BAA6B;;AAiC7B,oEAQC;AA4BD,kEAuCC;AA1GD,iEAA6E;AAC7E,qEAAuG;AACvG,2DAAmG;AACnG,uDAI6B;AAE7B,YAAY;AAEZ,kCAAkC;AAElC,MAAM,qBAAqB,GAAG,6CAA6B,CAAC,oBAAoB,CAAC;AAEjF;;;;GAIG;AACH,SAAS,4BAA4B,CAAC,IAA6B;IACjE,OAAO,6BAA6B,qBAAqB,sCAAsC,qBAAqB,YAAY,kDAAkC,WAAW,IAAI,MAAM,CAAC;AAC1L,CAAC;AAED,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAS,CAAC,yCAAuB,EAAE,mDAAiC,CAAC,CAAC,CAAC;AAExG,SAAS,aAAa,CAAC,MAAuB;;IAC5C,OAAO,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAA,MAAM,CAAC,OAAO,0CAAE,IAAI,CAAC;AACpF,CAAC;AAED,gFAAgF;AAChF,SAAgB,4BAA4B,CAAC,MAAuB;;IAClE,IAAI,MAAM,CAAC,KAAK,KAAK,8BAAqB,CAAC,SAAS,EAAE,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,iBAAiB,CAAC,GAAG,CAAC,MAAA,aAAa,CAAC,MAAM,CAAC,mCAAI,EAAE,CAAC,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,CAAC,MAAA,MAAM,CAAC,KAAK,mCAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,WAAC,OAAA,iBAAiB,CAAC,GAAG,CAAC,MAAA,aAAa,CAAC,KAAK,CAAC,mCAAI,EAAE,CAAC,CAAA,EAAA,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,kBAAkB,CAAC,KAQ3B;IACC,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE;QAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,0BAAmB,CAAC,MAAM;QAChC,KAAK,EAAE,8BAAqB,CAAC,SAAS;QACtC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,4BAA4B,CAAC,KAAK,CAAC,IAAI,CAAC;KACjD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,2BAA2B;IACzC,OAAO;QACL,kBAAkB,CAAC;YACjB,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,+BAA+B;YACtC,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,mDAAiC;YAC1C,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,uCAAuB,CAAC,MAAM;YACpC,KAAK,EAAE,CAAC;SACT,CAAC;QACF,kBAAkB,CAAC;YACjB,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,+DAA+D;YACtE,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,yCAAuB;YAChC,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,uCAAuB,CAAC,MAAM;YACpC,KAAK,EAAE,CAAC;SACT,CAAC;QACF,kBAAkB,CAAC;YACjB,IAAI,EAAE,4BAA4B;YAClC,KAAK,EAAE,+DAA+D;YACtE,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,yCAAuB;YAChC,QAAQ,EAAE,WAAW;YACrB,IAAI,EAAE,uCAAuB,CAAC,IAAI;YAClC,KAAK,EAAE,CAAC;SACT,CAAC;QACF,kBAAkB,CAAC;YACjB,IAAI,EAAE,4BAA4B;YAClC,KAAK,EAAE,yEAAyE;YAChF,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,mDAAiC;YAC1C,QAAQ,EAAE,WAAW;YACrB,IAAI,EAAE,uCAAuB,CAAC,IAAI;YAClC,KAAK,EAAE,CAAC;SACT,CAAC;KACH,CAAC;AACJ,CAAC;AAED,YAAY"}