@astram/identity 0.3.0 → 0.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (97) hide show
  1. package/dist/auth-facts-keys.js.map +1 -0
  2. package/dist/branch.object.js.map +1 -0
  3. package/dist/company-branch.object.js.map +1 -0
  4. package/dist/company-department.object.js.map +1 -0
  5. package/dist/company-membership.object.js.map +1 -0
  6. package/dist/company.object.js.map +1 -0
  7. package/dist/cross-tenant-grant.object.js.map +1 -0
  8. package/dist/department.object.js.map +1 -0
  9. package/dist/features/access/access-admin.access.js.map +1 -0
  10. package/dist/features/access/company-admin.access.js.map +1 -0
  11. package/dist/features/access/index.js.map +1 -0
  12. package/dist/features/access/user-management.access.js.map +1 -0
  13. package/dist/features/audit/audit-read.service.js.map +1 -0
  14. package/dist/features/audit/audit.controller.js.map +1 -0
  15. package/dist/features/audit/directory-label-resolver.js.map +1 -0
  16. package/dist/features/audit/mariadb-audit-reader.js.map +1 -0
  17. package/dist/features/authz/access-bundle-reconcile.job.js.map +1 -0
  18. package/dist/features/authz/access-bundle-store.js.map +1 -0
  19. package/dist/features/authz/catalog-bootstrap.provider.js.map +1 -0
  20. package/dist/features/authz/catalog-reconcile.job.js.map +1 -0
  21. package/dist/features/authz/db-permission-facts.adapter.d.ts +8 -4
  22. package/dist/features/authz/db-permission-facts.adapter.d.ts.map +1 -1
  23. package/dist/features/authz/db-permission-facts.adapter.js +47 -4
  24. package/dist/features/authz/db-permission-facts.adapter.js.map +1 -0
  25. package/dist/features/authz/grant-admin.controller.d.ts.map +1 -1
  26. package/dist/features/authz/grant-admin.controller.js +7 -2
  27. package/dist/features/authz/grant-admin.controller.js.map +1 -0
  28. package/dist/features/authz/grant-admin.service.d.ts +19 -6
  29. package/dist/features/authz/grant-admin.service.d.ts.map +1 -1
  30. package/dist/features/authz/grant-admin.service.js +25 -6
  31. package/dist/features/authz/grant-admin.service.js.map +1 -0
  32. package/dist/features/authz/grant-ceiling.d.ts +60 -0
  33. package/dist/features/authz/grant-ceiling.d.ts.map +1 -0
  34. package/dist/features/authz/grant-ceiling.js +94 -0
  35. package/dist/features/authz/grant-ceiling.js.map +1 -0
  36. package/dist/features/authz/mariadb-catalog-store.js.map +1 -0
  37. package/dist/features/authz/permission-version.bumper.js.map +1 -0
  38. package/dist/features/authz/record-authorization.js.map +1 -0
  39. package/dist/features/authz/session-facts.reader.js.map +1 -0
  40. package/dist/features/company/company.controller.js.map +1 -0
  41. package/dist/features/company/company.service.js.map +1 -0
  42. package/dist/features/cross-tenant/cross-tenant-grant-read.service.js.map +1 -0
  43. package/dist/features/cross-tenant/cross-tenant-grant.controller.js.map +1 -0
  44. package/dist/features/cross-tenant/grant-authorize.js.map +1 -0
  45. package/dist/features/identity-feature.module.d.ts +9 -1
  46. package/dist/features/identity-feature.module.d.ts.map +1 -1
  47. package/dist/features/identity-feature.module.js +78 -8
  48. package/dist/features/identity-feature.module.js.map +1 -0
  49. package/dist/features/membership/membership-checker.js.map +1 -0
  50. package/dist/features/membership/membership.controller.js.map +1 -0
  51. package/dist/features/membership/membership.service.js.map +1 -0
  52. package/dist/features/membership/posting-version-bump.js.map +1 -0
  53. package/dist/features/membership/posting.service.js.map +1 -0
  54. package/dist/features/org-structure/org-catalog.controller.js.map +1 -0
  55. package/dist/features/org-structure/org-catalog.service.js.map +1 -0
  56. package/dist/features/policy/policy.controller.js.map +1 -0
  57. package/dist/features/policy/policy.service.js.map +1 -0
  58. package/dist/features/role/role.controller.js.map +1 -0
  59. package/dist/features/role/role.service.js.map +1 -0
  60. package/dist/features/scope/scope-closure.service.js.map +1 -0
  61. package/dist/features/scope/scope-subtree.resolver.js.map +1 -0
  62. package/dist/features/service-account/service-account.controller.d.ts +62 -0
  63. package/dist/features/service-account/service-account.controller.d.ts.map +1 -0
  64. package/dist/features/service-account/service-account.controller.js +281 -0
  65. package/dist/features/service-account/service-account.service.d.ts +202 -0
  66. package/dist/features/service-account/service-account.service.d.ts.map +1 -0
  67. package/dist/features/service-account/service-account.service.js +483 -0
  68. package/dist/features/service-account/service-account.store.d.ts +91 -0
  69. package/dist/features/service-account/service-account.store.d.ts.map +1 -0
  70. package/dist/features/service-account/service-account.store.js +158 -0
  71. package/dist/features/share/share.controller.js.map +1 -0
  72. package/dist/features/share/share.service.js.map +1 -0
  73. package/dist/features/shared/http.js.map +1 -0
  74. package/dist/features/shared/list-query.js.map +1 -0
  75. package/dist/features/shared/named-option.js.map +1 -0
  76. package/dist/features/shared/record-resolver.js.map +1 -0
  77. package/dist/features/user/user.controller.js.map +1 -0
  78. package/dist/features/user/user.service.js.map +1 -0
  79. package/dist/index.d.ts +1 -0
  80. package/dist/index.d.ts.map +1 -1
  81. package/dist/index.js +3 -1
  82. package/dist/index.js.map +1 -0
  83. package/dist/membership-posting.object.js.map +1 -0
  84. package/dist/migrations-dir.js.map +1 -0
  85. package/dist/objects.d.ts.map +1 -1
  86. package/dist/objects.js +2 -1
  87. package/dist/objects.js.map +1 -0
  88. package/dist/record-share.object.js.map +1 -0
  89. package/dist/role.object.js.map +1 -0
  90. package/dist/schema.js.map +1 -0
  91. package/dist/service-account.object.d.ts +31 -0
  92. package/dist/service-account.object.d.ts.map +1 -0
  93. package/dist/service-account.object.js +75 -0
  94. package/dist/shared-resource.object.js.map +1 -0
  95. package/dist/user.object.js.map +1 -0
  96. package/migrations/1710000000018-CreateServiceAccount.cjs +53 -0
  97. package/package.json +4 -4
@@ -0,0 +1,94 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.GrantCeiling = exports.GrantCeilingError = void 0;
4
+ exports.coversKey = coversKey;
5
+ const core_1 = require("@astram/core");
6
+ const db_permission_facts_adapter_js_1 = require("./db-permission-facts.adapter.js");
7
+ const AUTHZ = 'shield_authz';
8
+ /** The grantor exceeds their own authority — cannot grant a key they do not hold (→ 403). */
9
+ class GrantCeilingError extends Error {
10
+ constructor(key) {
11
+ super(`You cannot grant '${key}' — it exceeds the permissions you hold.`);
12
+ this.name = 'GrantCeilingError';
13
+ }
14
+ }
15
+ exports.GrantCeilingError = GrantCeilingError;
16
+ /**
17
+ * Does `effective` (the grantor's held EXACT keys) cover `granted`?
18
+ *
19
+ * - An EXACT key is covered iff it is in `effective`.
20
+ * - A WILDCARD key (`module:*`, `module:type:*`, bare `module`) is covered iff EVERY registered
21
+ * exact key it expands to is in `effective` — you cannot grant a wildcard you don't fully hold.
22
+ * A wildcard that expands to ZERO registered keys is treated as NOT covered (nothing to hold ⇒
23
+ * no basis to grant; also prevents a typo'd wildcard from vacuously passing).
24
+ *
25
+ * `effective` is assumed already expanded to exact keys (the grantor's wildcards resolved).
26
+ * PURE — no I/O; `registeredKeys` is the live registry's exact-key universe.
27
+ */
28
+ function coversKey(effective, registeredKeys, granted) {
29
+ const isWildcard = granted.endsWith(':*') || !granted.includes(':');
30
+ if (!isWildcard) {
31
+ return effective.has(granted);
32
+ }
33
+ // Expand the granted wildcard against the SAME registry universe, then require full coverage.
34
+ const expanded = (0, db_permission_facts_adapter_js_1.expandGrantKeys)([granted], [...registeredKeys]);
35
+ if (expanded.length === 0)
36
+ return false;
37
+ return expanded.every((k) => effective.has(k));
38
+ }
39
+ /**
40
+ * Resolves a grantor's effective keys and enforces the ADR-0029 ceiling. Constructed in the
41
+ * identity module over the shared authz pool + the identity registry.
42
+ */
43
+ class GrantCeiling {
44
+ pool;
45
+ registry;
46
+ now;
47
+ constructor(pool, registry,
48
+ /** Injectable clock (epoch-ms) for the posting effective-window read; defaults to Date.now. */
49
+ now = Date.now) {
50
+ this.pool = pool;
51
+ this.registry = registry;
52
+ this.now = now;
53
+ }
54
+ /**
55
+ * The grantor's EFFECTIVE exact keys: the keys granted to the grantor's roles (active
56
+ * membership's in-effect postings in the grantor's tenant), wildcards expanded against the
57
+ * live registry. Fail-closed: a store outage throws AuthorizationUnavailableError (never an
58
+ * empty set masking an outage).
59
+ */
60
+ async effectiveKeys(grantor) {
61
+ try {
62
+ const roleIds = await (0, db_permission_facts_adapter_js_1.readRoleIdsForTenant)(this.pool, grantor.id, grantor.tenantId, this.now);
63
+ if (roleIds.length === 0)
64
+ return new Set();
65
+ const ph = roleIds.map(() => '?').join(', ');
66
+ const rows = (await this.pool.query(`SELECT rp_perm_key FROM \`${AUTHZ}\`.\`role_permission\` WHERE rp_role_uuid IN (${ph})`, roleIds));
67
+ const raw = rows.map((r) => r.rp_perm_key);
68
+ const registered = this.registry.listActions().map((a) => a.permissionKey);
69
+ return new Set((0, db_permission_facts_adapter_js_1.expandGrantKeys)(raw, registered));
70
+ }
71
+ catch (cause) {
72
+ if (cause instanceof core_1.AuthorizationUnavailableError)
73
+ throw cause;
74
+ throw new core_1.AuthorizationUnavailableError('grant-ceiling facts unavailable', cause);
75
+ }
76
+ }
77
+ /**
78
+ * Assert the grantor may grant EVERY key in `keys`. Root (strict) bypasses. A non-root grantor
79
+ * must effectively hold each key (exact) or fully hold each wildcard's expansion. Throws
80
+ * `GrantCeilingError` on the FIRST key that exceeds the grantor's authority.
81
+ */
82
+ async assertCanGrant(grantor, keys) {
83
+ if (grantor.isRoot === true)
84
+ return; // strict root bypass
85
+ const effective = await this.effectiveKeys(grantor);
86
+ const registered = this.registry.listActions().map((a) => a.permissionKey);
87
+ for (const key of keys) {
88
+ if (!coversKey(effective, registered, key)) {
89
+ throw new GrantCeilingError(key);
90
+ }
91
+ }
92
+ }
93
+ }
94
+ exports.GrantCeiling = GrantCeiling;
@@ -0,0 +1 @@
1
+ {"version":3,"file":"grant-ceiling.js","sourceRoot":"","sources":["../../../src/features/authz/grant-ceiling.ts"],"names":[],"mappings":";;;AAyCA,8BAaC;AAtCD,uCAA6D;AAC7D,qFAAyF;AAEzF,MAAM,KAAK,GAAG,cAAc,CAAC;AAE7B,6FAA6F;AAC7F,MAAa,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,GAAW;QACrB,KAAK,CAAC,qBAAqB,GAAG,0CAA0C,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AALD,8CAKC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,SAAS,CACvB,SAA8B,EAC9B,cAAiC,EACjC,OAAe;IAEf,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IACD,8FAA8F;IAC9F,MAAM,QAAQ,GAAG,IAAA,gDAAe,EAAC,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC;IACjE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAa,YAAY;IAEJ;IACA;IAEA;IAJnB,YACmB,IAAU,EACV,QAAwB;IACzC,+FAA+F;IAC9E,MAAoB,IAAI,CAAC,GAAG;QAH5B,SAAI,GAAJ,IAAI,CAAM;QACV,aAAQ,GAAR,QAAQ,CAAgB;QAExB,QAAG,GAAH,GAAG,CAAyB;IAC5C,CAAC;IAEJ;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,OAAkB;QACpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAA,qDAAoB,EAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,GAAG,EAAE,CAAC;YAC3C,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACjC,6BAA6B,KAAK,iDAAiD,EAAE,GAAG,EACxF,OAAO,CACR,CAAmC,CAAC;YACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAuB,CAAC,CAAC;YACrF,OAAO,IAAI,GAAG,CAAC,IAAA,gDAAe,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,oCAA6B;gBAAE,MAAM,KAAK,CAAC;YAChE,MAAM,IAAI,oCAA6B,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,OAAkB,EAAE,IAAuB;QAC9D,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,CAAC,qBAAqB;QAC1D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAuB,CAAC,CAAC;QACrF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;CACF;AA/CD,oCA+CC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"mariadb-catalog-store.js","sourceRoot":"","sources":["../../../src/features/authz/mariadb-catalog-store.ts"],"names":[],"mappings":";;;AAMA,MAAM,KAAK,GAAG,cAAc,CAAC;AAE7B;;;;GAIG;AACH,MAAa,mBAAmB;IACD;IAA7B,YAA6B,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAE3C,KAAK,CAAC,eAAe;QACnB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACjC;kBACY,KAAK,mBAAmB,CACrC,CAGC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtB,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,aAAa;YAC7E,MAAM,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS;YAC7D,MAAM,EAAE,CAAC,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;SAC7D,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,GAAyC;QAC9D,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAChC,iBAAiB,KAAK;;;8CAGkB,KAAK,uCAAuC,EACpF,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,aAAa,CAAC,CACpG,CAA8B,CAAC;QAChC,OAAO,MAAM,CAAC,GAAG,EAAE,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAuB;QACxC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB,YAAY,KAAK,qEAAqE,EAAE,GAAG,EAC3F,CAAC,GAAG,IAAI,CAAC,CACV,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAuB;QACtC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB,YAAY,KAAK,mEAAmE,EAAE,GAAG,EACzF,CAAC,GAAG,IAAI,CAAC,CACV,CAAC;IACJ,CAAC;CACF;AA9CD,kDA8CC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"permission-version.bumper.js","sourceRoot":"","sources":["../../../src/features/authz/permission-version.bumper.ts"],"names":[],"mappings":";;;AAAA,uCAA6D;AAE7D,uEAAuE;AACvE,MAAM,KAAK,GAAG,cAAc,CAAC;AAE7B,mFAAmF;AACnF,MAAM,GAAG,GAAG,YAAY,CAAC;AAWzB;;;;;;;;;;;;;GAaG;AACH,MAAa,uBAAuB;IAClC;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,IAAe;QACrD,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,WAAW,CAAC,QAAgB,EAAE,IAAe;QACjD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAC5B;oBACY,GAAG;oBACH,GAAG;4DACqC,EACpD,CAAC,QAAQ,CAAC,CACX,CAA8B,CAAC;YAChC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC1C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACtC,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,oCAA6B,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,0DAA0D;IAClD,KAAK,CAAC,UAAU,CAAC,UAAkB,EAAE,IAAe;QAC1D,MAAM,IAAI,CAAC,KAAK,CACd,iBAAiB,KAAK;;6DAEiC,EACvD,CAAC,UAAU,CAAC,CACb,CAAC;IACJ,CAAC;CACF;AAnDD,0DAmDC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"record-authorization.js","sourceRoot":"","sources":["../../../src/features/authz/record-authorization.ts"],"names":[],"mappings":";;;;;AAuBA,0DAUC;AAoBD,4EAYC;AAjED;;;;;;;;;;GAUG;AACH,sDAA6C;AAC7C,yCAA0G;AAE1G,iDAAmD;AACnD,qFAA4E;AAC5E,uEAAkE;AAElE;;;;GAIG;AACH,SAAgB,uBAAuB;IACrC,MAAM,EAAE,GAAG,IAAA,oBAAY,GAAE,CAAC;IAC1B,OAAO,iBAAO,CAAC,UAAU,CAAC;QACxB,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,QAAQ,EAAE,EAAE,CAAC,QAAQ;QACrB,QAAQ,EAAE,EAAE,CAAC,QAAQ;QACrB,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,CAAC;KAC7D,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,gCAAgC,CAC9C,IAAU,EACV,eAA2C,EAAE;IAE7C,MAAM,QAAQ,GAAG,IAAA,mCAA2B,EAAC,CAAC,GAAG,4BAAe,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC;IACpF,OAAO;QACL,IAAI;QACJ,eAAe,EAAE,IAAI,yDAAwB,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC7D,YAAY,EAAE,IAAI,+CAAqB,EAAE;QACzC,QAAQ;QACR,iBAAiB,EAAE,EAAE;KACtB,CAAC;AACJ,CAAC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"session-facts.reader.js","sourceRoot":"","sources":["../../../src/features/authz/session-facts.reader.ts"],"names":[],"mappings":";;;AAoBA,yCAAmG;AAEnG;;;;;GAKG;AACH,MAAa,qBAAqB;IAGb;IAFnB;IACE,uFAAuF;IACtE,MAEb,gCAAwB;QAFX,QAAG,GAAH,GAAG,CAEQ;IAC3B,CAAC;IAEJ,6FAA6F;IAC7F,IAAI,WAAW;QACb,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,wBAAgB,CAAC,CAAC,WAAW,CAAC;IAC/D,CAAC;IAED,yFAAyF;IACzF,IAAI,kBAAkB;QACpB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,wBAAgB,CAAC,CAAC,kBAAkB,CAAC;IACtE,CAAC;CACF;AAjBD,sDAiBC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"company.controller.js","sourceRoot":"","sources":["../../../src/features/company/company.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAwF;AACxF,yCAA2C;AAC3C,6DAAsD;AACtD,2DAA4E;AAGrE,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IACC;IAA7B,YAA6B,SAAyB;QAAzB,cAAS,GAAT,SAAS,CAAgB;IAAG,CAAC;IAE1D;;;;OAIG;IAGG,AAAN,KAAK,CAAC,aAAa,CAAU,KAAmB;QAC9C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAA,8BAAc,EAAC,KAAK,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC1D,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACjE,CAAC;IAED,4EAA4E;IAGtE,AAAN,KAAK,CAAC,aAAa,CAAS,IAAuB;QACjD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,IAAI,UAAU,CAAC,CAAC;QACxE,OAAO,EAAE,EAAE,EAAE,CAAC;IAChB,CAAC;IAED,2DAA2D;IAG3D,UAAU,CAAgB,IAAY;QACpC,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,6DAA6D;IAGvD,AAAN,KAAK,CAAC,aAAa,CAAgB,IAAY,EAAU,IAAwC;QAC/F,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,6DAA6D;IAGvD,AAAN,KAAK,CAAC,aAAa,CAAgB,IAAY;QAC7C,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;CACF,CAAA;AA9CY,8CAAiB;AAUtB;IAFL,IAAA,YAAG,EAAC,WAAW,CAAC;IAChB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9B,WAAA,IAAA,cAAK,GAAE,CAAA;;;;sDAI3B;AAKK;IAFL,IAAA,aAAI,EAAC,WAAW,CAAC;IACjB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChC,WAAA,IAAA,aAAI,GAAE,CAAA;;;;sDAG1B;AAKD;IAFC,IAAA,YAAG,EAAC,iBAAiB,CAAC;IACtB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACvC,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;;;;mDAExB;AAKK;IAFL,IAAA,YAAG,EAAC,iBAAiB,CAAC;IACtB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChC,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;IAAgB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;sDAGvD;AAKK;IAFL,IAAA,eAAM,EAAC,iBAAiB,CAAC;IACzB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChC,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;;;;sDAGjC;4BA7CU,iBAAiB;IAD7B,IAAA,mBAAU,EAAC,UAAU,CAAC;qCAEmB,mCAAc;GAD3C,iBAAiB,CA8C7B"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"company.service.js","sourceRoot":"","sources":["../../../src/features/company/company.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,2CAA+D;AAC/D,2DAA0E;AAE1E,MAAM,qBAAqB,GAAG,CAAC,MAAM,CAAU,CAAC;AAChD,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAU,CAAC;AAErE;;;;GAIG;AAEI,IAAM,cAAc,GAApB,MAAM,cAAc;IACI;IAA7B,YAA6B,OAAuB;QAAvB,YAAO,GAAP,OAAO,CAAgB;IAAG,CAAC;IAExD,iCAAiC;IACjC,aAAa,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,2EAA2E;IAC3E,aAAa,CAAC,MAAmB;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAA,8BAAc,EAAC,MAAM,EAAE,qBAAqB,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC1G,CAAC;IAED,6BAA6B;IAC7B,UAAU,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,wBAAwB;IACxB,aAAa,CAAC,IAAY,EAAE,KAAyC;QACnE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,wBAAwB;IACxB,aAAa,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9C,CAAC;CACF,CAAA;AA3BY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;qCAE2B,uBAAc;GADzC,cAAc,CA2B1B"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"cross-tenant-grant-read.service.js","sourceRoot":"","sources":["../../../src/features/cross-tenant/cross-tenant-grant-read.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iFAAiF;AACjF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,2CAA4C;AAG5C,2CAAmD;AAEnD,MAAM,KAAK,GAAG,cAAc,CAAC;AAC7B,MAAM,GAAG,GAAG,YAAY,CAAC;AAwEzB;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,GAAY;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;QAC7F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,8FAA8F;AAC9F,SAAS,WAAW,CAAC,GAAkB;IACrC,MAAM,IAAI,GAAG,GAAG,CAAC,gBAAgB,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC7F,OAAO,IAAI,IAAI,iBAAiB,CAAC;AACnC,CAAC;AAED,SAAS,WAAW,CAAC,GAAkB;IACrC,OAAO,GAAG,CAAC,gBAAgB,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3D,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,GAA6B;IAChD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,yFAAyF;AACzF,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;CAkBtB,CAAC;AAEF,MAAM,KAAK,GAAG;WACH,KAAK;gBACA,GAAG;gBACH,GAAG;gBACH,GAAG;gBACH,GAAG;gBACH,GAAG;CAClB,CAAC;AAGK,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IAiBnB;IACA;IACA;IAlBnB;;;;;;;;;;;;;;OAcG;IACH,YACmB,IAAU,EACV,mBAA+C,EAC/C,aAAqD;QAFrD,SAAI,GAAJ,IAAI,CAAM;QACV,wBAAmB,GAAnB,mBAAmB,CAA4B;QAC/C,kBAAa,GAAb,aAAa,CAAwC;IACrE,CAAC;IAEJ;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CAAC,QAAgB,EAAE,KAAa;QAC7C,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACjC,UAAU,cAAc;SACrB,KAAK;;;;0CAI4B,EACpC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAClB,CAAoB,CAAC;QAEtB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,IAAI,gBAAgB;YAC5D,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC;YAC7B,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC;YAC7B,OAAO,EAAE,GAAG,CAAC,YAAY;YACzB,SAAS,EAAE,GAAG,CAAC,YAAY;YAC3B,KAAK,EAAE,GAAG,CAAC,SAAS;YACpB,cAAc,EAAE,mBAAmB,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAC5D,aAAa,EAAE,GAAG,CAAC,eAAe,IAAI,cAAc;YACpD,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC;SAChD,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACjC,UAAU,cAAc;SACrB,KAAK;;wCAE0B,EAClC,CAAC,QAAQ,CAAC,CACX,CAAoB,CAAC;QAEtB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,iBAAiB,EAAE,GAAG,CAAC,mBAAmB,IAAI,gBAAgB;YAC9D,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC;YAC7B,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC;YAC7B,OAAO,EAAE,GAAG,CAAC,YAAY;YACzB,SAAS,EAAE,GAAG,CAAC,YAAY;YAC3B,KAAK,EAAE,GAAG,CAAC,SAAS;YACpB,cAAc,EAAE,mBAAmB,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAC5D,MAAM,EAAE,GAAG,CAAC,UAAU;YACtB,aAAa,EAAE,GAAG,CAAC,eAAe,IAAI,cAAc;YACpD,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC;SAChD,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACjC,UAAU,cAAc;SACrB,KAAK;;;0CAG4B,EACpC,CAAC,QAAQ,CAAC,CACX,CAAoB,CAAC;QAEtB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,IAAI,gBAAgB;YAC5D,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC;YAC7B,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC;YAC7B,OAAO,EAAE,GAAG,CAAC,YAAY;YACzB,SAAS,EAAE,GAAG,CAAC,YAAY;YAC3B,KAAK,EAAE,GAAG,CAAC,SAAS;YACpB,cAAc,EAAE,mBAAmB,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAC5D,aAAa,EAAE,GAAG,CAAC,eAAe,IAAI,cAAc;YACpD,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC;SAChD,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;;;;OAQG;IACK,iBAAiB;QACvB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7C,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAC3E,IAAI,GAAG,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,gCAAgC;QAChG,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,eAAe,CAAC,OAAe;QAC7B,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,kBAAkB;QACtB,MAAM,GAAG,GAAuB,EAAE,CAAC;QACnC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YAC/C,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO;gBACP,KAAK,EAAE,OAAO,EAAE,oFAAoF;gBACpG,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;aAC1C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF,CAAA;AA5KY,kEAA2B;sCAA3B,2BAA2B;IADvC,IAAA,mBAAU,GAAE;;GACA,2BAA2B,CA4KvC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"cross-tenant-grant.controller.js","sourceRoot":"","sources":["../../../src/features/cross-tenant/cross-tenant-grant.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,+EAA+E;AAC/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,2CAWwB;AACxB,yCAQuB;AAEvB,6FAAmF;AAiBnF,MAAM,mBAAmB,GAAgC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE1E,qFAAqF;AACrF,SAAS,cAAc,CAAC,IAAmC;IAQzD,MAAM,eAAe,GAAG,IAAI,EAAE,eAAe,CAAC;IAC9C,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,4BAAmB,CAAC,6BAA6B,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,CAAC;IACtC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,WAA+B,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,4BAAmB,CAAC,sCAAsC,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,CAAC;IACtC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,4BAAmB,CAAC,yBAAyB,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,CAAC;IAC9B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,4BAAmB,CAAC,qBAAqB,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,EAAE,cAAc,CAAC;IAC5C,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;QAC9B,cAAc,CAAC,MAAM,KAAK,CAAC;QAC3B,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EACnE,CAAC;QACD,MAAM,IAAI,4BAAmB,CAAC,yDAAyD,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,CAAC;IACtC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,4BAAmB,CAAC,iEAAiE,CAAC,CAAC;IACnG,CAAC;IACD,OAAO;QACL,eAAe;QACf,WAAW,EAAE,WAA+B;QAC5C,WAAW;QACX,OAAO;QACP,cAAc,EAAE,cAA0B;QAC1C,WAAW;KACZ,CAAC;AACJ,CAAC;AAGM,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IAEwB;IAC1C;IAFnB,YAC6D,WAAmC,EAC7E,KAAkC;QADQ,gBAAW,GAAX,WAAW,CAAwB;QAC7E,UAAK,GAAL,KAAK,CAA6B;IAClD,CAAC;IAEJ;;;;OAIG;IAGG,AAAN,KAAK,CAAC,KAAK,CAAQ,GAAkB,EAAU,IAAuB;QACpE,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACpC,oFAAoF;QACpF,uFAAuF;QACvF,oFAAoF;QACpF,+DAA+D;QAC/D,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,4BAAmB,CAC3B,YAAY,MAAM,CAAC,OAAO,+CAA+C;gBACvE,wDAAwD,CAC3D,CAAC;QACJ,CAAC;QACD,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;gBAClC,cAAc,EAAE,GAAG,CAAC,SAAS,CAAC,QAAQ;gBACtC,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,KAAK,EAAE,aAAa;gBACpB,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE;aAC5B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,yFAAyF;IAGnF,AAAN,KAAK,CAAC,MAAM,CAAQ,GAAkB,EAAiB,IAAY;QACjE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;QACnF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IAGG,AAAN,KAAK,CAAC,MAAM,CAAQ,GAAkB,EAAiB,IAAY;QACjE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;OAGG;IAGG,AAAN,KAAK,CAAC,KAAK,CAAQ,GAAkB;QACnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5E,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAED;;;;OAIG;IAGG,AAAN,KAAK,CAAC,IAAI,CAAQ,GAAkB;QAClC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACzC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC3C,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC;SAChD,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAClC,CAAC;IAED,wFAAwF;IAGlF,AAAN,KAAK,CAAC,cAAc;QAClB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;QACpD,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;CACF,CAAA;AA1GY,gEAA0B;AAa/B;IAFL,IAAA,aAAI,EAAC,qBAAqB,CAAC;IAC3B,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAClD,WAAA,IAAA,YAAG,GAAE,CAAA;IAAsB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;uDA6B7C;AAKK;IAFL,IAAA,aAAI,EAAC,kCAAkC,CAAC;IACxC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAClD,WAAA,IAAA,YAAG,GAAE,CAAA;IAAsB,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;;;;wDAOrD;AAUK;IAFL,IAAA,aAAI,EAAC,kCAAkC,CAAC;IACxC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAClD,WAAA,IAAA,YAAG,GAAE,CAAA;IAAsB,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;;;;wDAOrD;AAQK;IAFL,IAAA,YAAG,EAAC,2BAA2B,CAAC;IAChC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACnC,WAAA,IAAA,YAAG,GAAE,CAAA;;;;uDAGjB;AASK;IAFL,IAAA,YAAG,EAAC,qBAAqB,CAAC;IAC1B,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACpC,WAAA,IAAA,YAAG,GAAE,CAAA;;;;sDAMhB;AAKK;IAFL,IAAA,YAAG,EAAC,qCAAqC,CAAC;IAC1C,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;;;;gEAI/C;qCAzGU,0BAA0B;IADtC,IAAA,mBAAU,EAAC,UAAU,CAAC;IAGlB,WAAA,IAAA,eAAM,EAAC,wCAAgC,CAAC,CAAA;qCAA+B,8BAAsB;QACtE,gEAA2B;GAH1C,0BAA0B,CA0GtC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,GAAG,YAAY,8BAAsB;QAAE,OAAO,IAAI,2BAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtF,IAAI,GAAG,YAAY,yBAAiB;QAAE,OAAO,IAAI,4BAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClF,IAAI,GAAG,YAAY,kCAA0B;QAAE,OAAO,IAAI,oCAA2B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnG,OAAO,GAAY,CAAC;AACtB,CAAC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"grant-authorize.js","sourceRoot":"","sources":["../../../src/features/cross-tenant/grant-authorize.ts"],"names":[],"mappings":";;AA2CA,sEAuBC;AAvBD,SAAgB,6BAA6B,CAC3C,IAAuC;IAEvC,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG;YAChB,IAAI,EAAE,MAAe;YACrB,EAAE,EAAE,WAAW;YACf,8FAA8F;YAC9F,iBAAiB,EAAE,QAAQ;YAC3B,mBAAmB,EAAE,CAAC,QAAQ,CAAC;YAC/B,QAAQ;YACR,OAAO;YACP,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;SACjC,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAC1C,SAAS,EACT,EAAE,GAAG,EAAE,MAAM,EAAE,EACf,EAAE,KAAK,EAAE,aAAsB,EAAE,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,EAC1E,EAAE,eAAe,EAAE,IAAI,EAAE,CAC1B,CAAC;QACF,OAAO,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC;IACrC,CAAC,CAAC;AACJ,CAAC"}
@@ -1,4 +1,5 @@
1
1
  import { type DynamicModule } from '@nestjs/common';
2
+ import { type ObjectTypeInput } from '@astram/engine';
2
3
  /**
3
4
  * IdentityFeatureModule — the framework-owned identity FEATURE surface (company/user/role CRUD;
4
5
  * more in later phases) as thin controllers over the engine's RecordsService. The CONSUMER imports
@@ -18,9 +19,16 @@ export declare class IdentityFeatureModule {
18
19
  * by the writer's own `decide()` (a route-allows/writer-denies split). Omitted ⇒
19
20
  * `isRoot` is always false (a non-root consumer works; only a root offering
20
21
  * cross-tenant grants needs it). See ADR-0026 + the template wiring.
22
+ * @param extraObjects the consumer's OWN registered object types — pass the SAME array
23
+ * given to `buildIdentityRecordAuthorization(pool, extraObjects)`. Without them, the
24
+ * guided rule-builder SCHEMA (Phase 5) and the OWNER-SHARE resolver (Phase 6) only know
25
+ * the framework identity types, so a consumer's own OWNED type (e.g. `note`) is NOT
26
+ * policy-authorable and NOT shareable ("type '…' is not registered — cannot share").
27
+ * Passing them here lets an owner share their own records + author policies over them.
21
28
  */
22
- static forRoot({ rootIds }?: {
29
+ static forRoot({ rootIds, extraObjects, }?: {
23
30
  rootIds?: readonly string[];
31
+ extraObjects?: readonly ObjectTypeInput[];
24
32
  }): DynamicModule;
25
33
  }
26
34
  //# sourceMappingURL=identity-feature.module.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"identity-feature.module.d.ts","sourceRoot":"","sources":["../../src/features/identity-feature.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAqF5D;;;;;;;;;;GAUG;AACH,qBACa,qBAAqB;IAChC;;;;;;;OAOG;IACH,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,GAAE;QAAE,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAO,GAAG,aAAa;CAoTjF"}
1
+ {"version":3,"file":"identity-feature.module.d.ts","sourceRoot":"","sources":["../../src/features/identity-feature.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE5D,OAAO,EAYL,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AA4ExB;;;;;;;;;;GAUG;AACH,qBACa,qBAAqB;IAChC;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,OAAO,CAAC,EACb,OAAO,EACP,YAAiB,GAClB,GAAE;QAAE,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,YAAY,CAAC,EAAE,SAAS,eAAe,EAAE,CAAA;KAAO,GAAG,aAAa;CAmYnG"}
@@ -33,10 +33,14 @@ const db_permission_facts_adapter_js_1 = require("./authz/db-permission-facts.ad
33
33
  const access_bundle_store_js_1 = require("./authz/access-bundle-store.js");
34
34
  const grant_admin_service_js_1 = require("./authz/grant-admin.service.js");
35
35
  const grant_admin_controller_js_1 = require("./authz/grant-admin.controller.js");
36
+ const grant_ceiling_js_1 = require("./authz/grant-ceiling.js");
36
37
  const policy_service_js_1 = require("./policy/policy.service.js");
37
38
  const policy_controller_js_1 = require("./policy/policy.controller.js");
38
39
  const share_service_js_1 = require("./share/share.service.js");
39
40
  const share_controller_js_1 = require("./share/share.controller.js");
41
+ const service_account_store_js_1 = require("./service-account/service-account.store.js");
42
+ const service_account_service_js_1 = require("./service-account/service-account.service.js");
43
+ const service_account_controller_js_1 = require("./service-account/service-account.controller.js");
40
44
  const catalog_reconcile_job_js_1 = require("./authz/catalog-reconcile.job.js");
41
45
  const access_bundle_reconcile_job_js_1 = require("./authz/access-bundle-reconcile.job.js");
42
46
  const catalog_bootstrap_provider_js_1 = require("./authz/catalog-bootstrap.provider.js");
@@ -81,8 +85,14 @@ let IdentityFeatureModule = IdentityFeatureModule_1 = class IdentityFeatureModul
81
85
  * by the writer's own `decide()` (a route-allows/writer-denies split). Omitted ⇒
82
86
  * `isRoot` is always false (a non-root consumer works; only a root offering
83
87
  * cross-tenant grants needs it). See ADR-0026 + the template wiring.
88
+ * @param extraObjects the consumer's OWN registered object types — pass the SAME array
89
+ * given to `buildIdentityRecordAuthorization(pool, extraObjects)`. Without them, the
90
+ * guided rule-builder SCHEMA (Phase 5) and the OWNER-SHARE resolver (Phase 6) only know
91
+ * the framework identity types, so a consumer's own OWNED type (e.g. `note`) is NOT
92
+ * policy-authorable and NOT shareable ("type '…' is not registered — cannot share").
93
+ * Passing them here lets an owner share their own records + author policies over them.
84
94
  */
85
- static forRoot({ rootIds } = {}) {
95
+ static forRoot({ rootIds, extraObjects = [], } = {}) {
86
96
  // ONE shared shield_authz pool for the whole grant-admin stack (ADR-0011): the
87
97
  // permission-version bumper, the AccessBundleStore, the GrantAdminService, and the two
88
98
  // reconcile jobs all run over this single pool (don't open several). Opened once at
@@ -92,19 +102,24 @@ let IdentityFeatureModule = IdentityFeatureModule_1 = class IdentityFeatureModul
92
102
  const postingVersionBump = {
93
103
  bumpTenant: (tenantUuid) => bumper.bumpForTenant(tenantUuid, authzPool),
94
104
  };
105
+ // The core ModuleRegistry the catalog reconcile job needs, built from the identity
106
+ // object registrations (guard's bridge reflects decorated classes → registry). Built BEFORE
107
+ // the grant-admin service so the GrantCeiling (ADR-0029) can share it as the key universe.
108
+ const identityRegistry = (0, guard_1.buildIdentityModuleRegistry)([...objects_js_1.identityObjects]);
95
109
  // The grant-admin collaborators built at forRoot() over the shared pool (mirrors the
96
- // postingVersionBump closure pattern above).
110
+ // postingVersionBump closure pattern above). GrantCeiling (ADR-0029) enforces the
111
+ // self-escalation ceiling: a non-root grantor may only grant a key they themselves hold —
112
+ // resolved over the SAME authz pool + registry the object-type gate uses (one source of
113
+ // truth for "what a principal holds"). ALWAYS wired here, so production always enforces.
97
114
  const accessBundleStore = new access_bundle_store_js_1.AccessBundleStore(authzPool);
98
- const grantAdminService = new grant_admin_service_js_1.GrantAdminService(authzPool, bumper, accessBundleStore);
115
+ const grantCeiling = new grant_ceiling_js_1.GrantCeiling(authzPool, identityRegistry);
116
+ const grantAdminService = new grant_admin_service_js_1.GrantAdminService(authzPool, bumper, accessBundleStore, grantCeiling);
99
117
  // Scope closure (Task 1.2 of the scoped-hierarchy program): the reconciler + node
100
118
  // move/delete maintenance, over the SAME shared authzPool (it reaches BOTH shield_app —
101
119
  // companies — and shield_authz — scope_closure). Reuses the SAME `bumper` instance so a
102
120
  // moveNode's session-invalidation joins the move's transaction. reconcileClosure() is
103
121
  // kicked post-boot by the CatalogBootstrapProvider (mirrors the catalog reconcile).
104
122
  const scopeClosureService = new scope_closure_service_js_1.ScopeClosureService(authzPool, bumper);
105
- // The core ModuleRegistry the catalog reconcile job needs, built from the identity
106
- // object registrations (guard's bridge reflects decorated classes → registry).
107
- const identityRegistry = (0, guard_1.buildIdentityModuleRegistry)([...objects_js_1.identityObjects]);
108
123
  // Audit viewer (Phase 5): the AuditReader + LabelResolver over the SAME shared authzPool
109
124
  // (the reader queries shield_audit + the resolver/actor-lookup query shield_app, both
110
125
  // reachable by that pool). `auditNameToId` is the actor-name -> uuid reverse lookup for the
@@ -212,7 +227,8 @@ let IdentityFeatureModule = IdentityFeatureModule_1 = class IdentityFeatureModul
212
227
  // are meaningfully policy-authorable in v1; but we expose every registered type's fields and
213
228
  // let the delegated-admin ceiling + validateGuidedPolicy gate what a caller may actually
214
229
  // author. A consumer's own types (extraObjects) would extend this the same way (future).
215
- const schemaSource = [...objects_js_1.identityObjects].map((input) => {
230
+ // Include the consumer's `extraObjects` so their OWNED types are policy-authorable too.
231
+ const schemaSource = [...objects_js_1.identityObjects, ...extraObjects].map((input) => {
216
232
  const reg = typeof input === 'function' ? (0, engine_1.reflectObjectType)(input) : input;
217
233
  return {
218
234
  typeKey: reg.typeKey,
@@ -235,8 +251,11 @@ let IdentityFeatureModule = IdentityFeatureModule_1 = class IdentityFeatureModul
235
251
  // surfaces `owned`/table/schema/pk/owner/tenant columns via the engine helpers. The writer's
236
252
  // audit reuses the SAME shield_audit sink pattern (best-effort). The ShareService adds
237
253
  // name-resolution (no raw uuid) via the existing DirectoryLabelResolver (`auditLabels`).
254
+ // Include the consumer's `extraObjects` so their OWNED types are shareable (a `note` a user
255
+ // owns can be shared) — without them the resolver only knows the framework identity types
256
+ // and the writer rejects "type 'note' is not registered — cannot share." (Live-acceptance fix.)
238
257
  const shareTypeInfoByKey = new Map();
239
- for (const input of objects_js_1.identityObjects) {
258
+ for (const input of [...objects_js_1.identityObjects, ...extraObjects]) {
240
259
  const reg = typeof input === 'function' ? (0, engine_1.reflectObjectType)(input) : input;
241
260
  const owner = (0, engine_1.ownerColumn)(reg);
242
261
  const pk = reg.primaryKey.kind === 'uuid' ? (0, engine_1.uuidPkColumn)(reg.primaryKey) : null;
@@ -282,6 +301,50 @@ let IdentityFeatureModule = IdentityFeatureModule_1 = class IdentityFeatureModul
282
301
  },
283
302
  });
284
303
  const shareService = new share_service_js_1.ShareService(recordShareWriter, auditLabels);
304
+ // ── SERVICE ACCOUNTS + API KEYS (ADR-0033, Phase 2) ──────────────────────────────────────
305
+ // The machine-identity admin surface: create/scope service accounts + issue/rotate/revoke
306
+ // their `ask_…` API keys. Self-wired here over the SAME shared authzPool (which reaches BOTH
307
+ // shield_app.service_account — the accounts — AND shield_authz.service_account_key — the hashed
308
+ // keys). The guard's MariaDbApiKeyStore + Argon2idPasswordHasher back the credential lifecycle;
309
+ // the service enforces own-tenant + the ADR-0029 ceiling (scope ⊆ mine, roles ⊆ mine).
310
+ const serviceAccountStore = new service_account_store_js_1.ServiceAccountStore(authzPool);
311
+ const serviceAccountKeyStore = new guard_1.MariaDbApiKeyStore(authzPool);
312
+ const serviceAccountHasher = new guard_1.Argon2idPasswordHasher();
313
+ // Best-effort audit → the SAME shield_audit sink pattern (a sink throw never fails the op).
314
+ const serviceAccountAuditSink = new engine_1.MariaDbAuditSink({}); // shield_audit.audit_log defaults
315
+ const serviceAccountAudit = {
316
+ record: async (event) => {
317
+ try {
318
+ await serviceAccountAuditSink.record({
319
+ type: 'admin_action',
320
+ occurredAtMs: event.occurredAtMs,
321
+ actorId: event.actorId,
322
+ tenantId: event.tenantId,
323
+ action: { key: event.action },
324
+ attributes: { ...event.attributes, eventType: 'service_account' },
325
+ }, (sql, params) => authzPool.query(sql, params));
326
+ }
327
+ catch {
328
+ // Best-effort — an audit failure must never fail a legitimate account/key operation.
329
+ }
330
+ },
331
+ };
332
+ // Resolve a principal id → username for the "created by" view (no raw uuid). Reuses the same
333
+ // shield_app.users lookup the audit actor filter uses (inverted). Unknown → null (view falls
334
+ // back to no name, never an id).
335
+ const resolveActorName = async (id) => {
336
+ const rows = (await authzPool.query('SELECT u_username AS name FROM `shield_app`.`users` WHERE u_uuid = ? LIMIT 1', [id]));
337
+ return rows[0]?.name ?? null;
338
+ };
339
+ const serviceAccountService = new service_account_service_js_1.ServiceAccountService(serviceAccountStore, serviceAccountKeyStore, serviceAccountHasher, serviceAccountAudit, resolveActorName,
340
+ // The ceiling's roles: in-effect postings (the same source as gate 5 and GrantCeiling).
341
+ (principalId, tenantId) => (0, db_permission_facts_adapter_js_1.readRoleIdsForTenant)(authzPool, principalId, tenantId));
342
+ // NOTE: the machine AUTH path (the `ServiceAuthenticator` behind `SHIELD_SERVICE_AUTHENTICATOR`)
343
+ // is provided by the guard's own AuthModule (under `auth: true`), NOT here — a token provided in
344
+ // this later, sibling feature module is invisible to the APP_GUARD in ShieldModule (that DI
345
+ // boundary made an identity-provided authenticator resolve to `undefined` → `ask_…` bearers
346
+ // 401'd). This module owns only the ACCOUNT ADMIN surface (store + service + controller); the
347
+ // guard owns authentication. (ADR-0033.)
285
348
  return {
286
349
  module: IdentityFeatureModule_1,
287
350
  imports: [
@@ -322,6 +385,9 @@ let IdentityFeatureModule = IdentityFeatureModule_1 = class IdentityFeatureModul
322
385
  policy_controller_js_1.PolicyController,
323
386
  // Owner shares (Phase 6) — `record-shares` collides with nothing. Appended last.
324
387
  share_controller_js_1.ShareController,
388
+ // Service accounts (ADR-0033) — `service-accounts/*` collides with nothing; its static
389
+ // sub-paths (/keys, /keys/rotate, /keys/revoke) sit under `:id` and are method-distinct.
390
+ service_account_controller_js_1.ServiceAccountController,
325
391
  ],
326
392
  providers: [
327
393
  company_service_js_1.CompanyService,
@@ -349,6 +415,10 @@ let IdentityFeatureModule = IdentityFeatureModule_1 = class IdentityFeatureModul
349
415
  // Owner shares (Phase 6) — the ShareService over the framework RecordShareWriter + the
350
416
  // DirectoryLabelResolver (name resolution). useValue, all over the shared authzPool.
351
417
  { provide: share_service_js_1.ShareService, useValue: shareService },
418
+ // Service accounts (ADR-0033) — the ServiceAccountService over the shared authzPool +
419
+ // guard key-store/hasher, and the ServiceAuthenticator under the guard's token so the
420
+ // enforcement guard can authenticate `ask_…` bearers out-of-the-box. Both useValue.
421
+ { provide: service_account_service_js_1.ServiceAccountService, useValue: serviceAccountService },
352
422
  // The mutating half of auto-catalog: a single CatalogReconcileJob (post-boot pass +
353
423
  // cron), over the shared pool + the identity registry.
354
424
  { provide: catalog_reconcile_job_js_1.CatalogReconcileJob, useValue: new catalog_reconcile_job_js_1.CatalogReconcileJob(authzPool, identityRegistry) },
@@ -0,0 +1 @@
1
+ {"version":3,"file":"identity-feature.module.js","sourceRoot":"","sources":["../../src/features/identity-feature.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAA4D;AAC5D,uCAA+C;AAC/C,2CAawB;AACxB,yCAauB;AACvB,8CAAgD;AAChD,gDAA0D;AAC1D,qEAA8D;AAC9D,2EAAoE;AACpE,4DAAqD;AACrD,kEAA2D;AAC3D,4DAAqD;AACrD,kEAA2D;AAC3D,oFAA6E;AAC7E,8EAAuE;AACvE,wEAAiE;AACjE,yFAAiF;AACjF,mFAA2E;AAC3E,oEAAoE;AACpE,kFAAqG;AACrG,uFAA+E;AAC/E,6EAGyC;AACzC,2FAA8E;AAC9E,2EAAmE;AACnE,2EAAmE;AACnE,iFAAyE;AACzE,+DAAwD;AACxD,kEAA2D;AAC3D,wEAAiE;AACjE,+DAAwD;AACxD,qEAA8D;AAC9D,+EAAuE;AACvE,2FAAkF;AAClF,yFAAiF;AACjF,+EAAuE;AACvE,6EAAqE;AACrE,qFAA6E;AAC7E,yEAAiE;AACjE,qEAA8D;AAC9D,0GAAgG;AAChG,sGAA6F;AAC7F,0EAAkF;AAElF,mGAAmG;AACnG,SAAS,eAAe;IACtB,MAAM,EAAE,GAAG,IAAA,oBAAY,GAAE,CAAC;IAC1B,OAAO;QACL,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,QAAQ,EAAE,EAAE,CAAC,QAAQ;QACrB,QAAQ,EAAE,EAAE,CAAC,QAAQ;QACrB,6FAA6F;QAC7F,uFAAuF;QACvF,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC;KAClE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AAEI,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IAChC;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,OAAO,CAAC,EACb,OAAO,EACP,YAAY,GAAG,EAAE,MAC6D,EAAE;QAChF,+EAA+E;QAC/E,uFAAuF;QACvF,oFAAoF;QACpF,4EAA4E;QAC5E,MAAM,SAAS,GAAG,IAAA,iDAAuB,GAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,sDAAuB,EAAE,CAAC;QAC7C,MAAM,kBAAkB,GAAuB;YAC7C,UAAU,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC;SACxE,CAAC;QAEF,mFAAmF;QACnF,4FAA4F;QAC5F,2FAA2F;QAC3F,MAAM,gBAAgB,GAAG,IAAA,mCAA2B,EAAC,CAAC,GAAG,4BAAe,CAAC,CAAC,CAAC;QAE3E,qFAAqF;QACrF,kFAAkF;QAClF,0FAA0F;QAC1F,wFAAwF;QACxF,yFAAyF;QACzF,MAAM,iBAAiB,GAAG,IAAI,0CAAiB,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,IAAI,+BAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACnE,MAAM,iBAAiB,GAAG,IAAI,0CAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC;QACpG,kFAAkF;QAClF,wFAAwF;QACxF,wFAAwF;QACxF,sFAAsF;QACtF,oFAAoF;QACpF,MAAM,mBAAmB,GAAG,IAAI,8CAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAEvE,yFAAyF;QACzF,sFAAsF;QACtF,4FAA4F;QAC5F,yFAAyF;QACzF,uFAAuF;QACvF,4FAA4F;QAC5F,MAAM,WAAW,GAAG,IAAI,4CAAkB,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,IAAI,oDAAsB,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,aAAa,GAAG,KAAK,EAAE,IAAY,EAA0B,EAAE;YACnE,MAAM,IAAI,GAAG,CAAC,MAAM,SAAS,CAAC,KAAK,CACjC,4EAA4E,EAC5E,CAAC,IAAI,CAAC,CACP,CAAqB,CAAC;YACvB,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC;QAC7B,CAAC,CAAC;QACF,MAAM,gBAAgB,GAAG,IAAI,wCAAgB,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;QAEvF,yFAAyF;QACzF,6FAA6F;QAC7F,8FAA8F;QAC9F,4FAA4F;QAC5F,kEAAkE;QAClE,MAAM,oBAAoB,GAAG,IAAA,gCAAwB,EAAC,IAAA,0DAAgC,EAAC,SAAS,CAAC,CAAC,CAAC;QACnG,sFAAsF;QACtF,2FAA2F;QAC3F,wFAAwF;QACxF,0FAA0F;QAC1F,6FAA6F;QAC7F,6FAA6F;QAC7F,uCAAuC;QACvC,MAAM,SAAS,GAAG,IAAA,wBAAgB,EAAC,IAAA,0DAAgC,EAAC,SAAS,CAAC,CAAC,CAAC;QAChF,wFAAwF;QACxF,uFAAuF;QACvF,uFAAuF;QACvF,MAAM,yBAAyB,GAAG,IAAA,kDAA6B,EAAC;YAC9D,SAAS,EAAE,oBAAoB;YAC/B,WAAW,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAA,qDAAoB,EAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC;YAC9F,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;SAC/D,CAAC,CAAC;QACH,0FAA0F;QAC1F,gGAAgG;QAChG,+FAA+F;QAC/F,6FAA6F;QAC7F,6FAA6F;QAC7F,+FAA+F;QAC/F,sFAAsF;QACtF,2FAA2F;QAC3F,8FAA8F;QAC9F,iEAAiE;QACjE,+FAA+F;QAC/F,kEAAkE;QAClE,MAAM,cAAc,GAAG,IAAI,yBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,mCAAmC;QACpF,MAAM,UAAU,GAAG;YACjB,MAAM,EAAE,KAAK,EAAE,KAAsB,EAAiB,EAAE;gBACtD,IAAI,CAAC;oBACH,MAAM,SAAS,GACb,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,eAAe,KAAK,KAAK,CAAC,cAAc;wBACrE,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,eAAe,CAAC;wBAC/C,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;oBAC7B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;wBACjC,MAAM,cAAc,CAAC,MAAM,CACzB;4BACE,IAAI,EAAE,gBAAgB;4BACtB,YAAY,EAAE,KAAK,CAAC,YAAY;4BAChC,OAAO,EAAE,KAAK,CAAC,OAAO;4BACtB,QAAQ;4BACR,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE;4BAC7B,UAAU,EAAE;gCACV,GAAG,KAAK,CAAC,UAAU;gCACnB,cAAc,EAAE,KAAK,CAAC,cAAc;gCACpC,eAAe,EAAE,KAAK,CAAC,eAAe;6BACvC;yBACF,EACD,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAC9C,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,gFAAgF;gBAClF,CAAC;YACH,CAAC;SACF,CAAC;QACF,MAAM,sBAAsB,GAAG,IAAI,8BAAsB,CAAC;YACxD,EAAE,EAAE,SAAS;YACb,SAAS,EAAE,yBAAyB;YACpC,KAAK,EAAE,UAAU;SAClB,CAAC,CAAC;QACH,6FAA6F;QAC7F,8EAA8E;QAC9E,MAAM,2BAA2B,GAAG,IAAI,gEAA2B,CACjE,SAAS,EACT,CAAC,GAAG,4BAAe,CAAC,EACpB,kBAAU,CACX,CAAC;QAEF,4FAA4F;QAC5F,8FAA8F;QAC9F,4FAA4F;QAC5F,6FAA6F;QAC7F,wFAAwF;QACxF,oFAAoF;QACpF,yFAAyF;QACzF,MAAM,eAAe,GAAG,IAAI,yBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,kCAAkC;QACpF,MAAM,WAAW,GAAG;YAClB,MAAM,EAAE,KAAK,EAAE,KAAmD,EAAiB,EAAE;gBACnF,IAAI,CAAC;oBACH,MAAM,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;gBACrF,CAAC;gBAAC,MAAM,CAAC;oBACP,0EAA0E;gBAC5E,CAAC;YACH,CAAC;SACF,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,0BAAkB,CAAC,SAAS,CAAC,CAAC;QACtD,8FAA8F;QAC9F,wFAAwF;QACxF,+FAA+F;QAC/F,6FAA6F;QAC7F,yFAAyF;QACzF,yFAAyF;QACzF,wFAAwF;QACxF,MAAM,YAAY,GAAG,CAAC,GAAG,4BAAe,EAAE,GAAG,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,KAAsB,EAAE,EAAE;YACxF,MAAM,GAAG,GACP,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACjE,OAAO;gBACL,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,KAAK,EAAE,GAAG,CAAC,OAAO;gBAClB,OAAO,EAAE,IAAA,kBAAU,EAAC,GAAG,CAAC,OAAO,CAAC;gBAChC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;aAC9D,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,iCAAa,CAAC;YACtC,QAAQ,EAAE,gBAAgB;YAC1B,WAAW;YACX,MAAM,EAAE,oBAAoB;YAC5B,KAAK,EAAE,WAAW;YAClB,YAAY;SACb,CAAC,CAAC;QAEH,4FAA4F;QAC5F,6FAA6F;QAC7F,4FAA4F;QAC5F,yFAAyF;QACzF,6FAA6F;QAC7F,uFAAuF;QACvF,yFAAyF;QACzF,4FAA4F;QAC5F,0FAA0F;QAC1F,gGAAgG;QAChG,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAyB,CAAC;QAC5D,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,4BAAe,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC;YAC1D,MAAM,GAAG,GAAe,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACvF,MAAM,KAAK,GAAG,IAAA,oBAAW,EAAC,GAAG,CAAC,CAAC;YAC/B,MAAM,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAA,qBAAY,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAChF,2FAA2F;YAC3F,0FAA0F;YAC1F,IAAI,CAAC,IAAA,gBAAO,EAAC,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI;gBAAE,SAAS;YAC7D,MAAM,SAAS,GAAG,IAAA,uBAAc,EAAC,GAAG,CAAC,CAAC;YACtC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE;gBAClC,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,QAAQ,EAAE,EAAE;gBACZ,WAAW,EAAE,KAAK;gBAClB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;QACL,CAAC;QACD,MAAM,iBAAiB,GAAsB;YAC3C,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC;SACtD,CAAC;QACF,MAAM,cAAc,GAAG,IAAI,yBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,yBAAyB;QAC1E,MAAM,iBAAiB,GAAG,IAAI,yBAAiB,CAAC;YAC9C,EAAE,EAAE,SAAS;YACb,KAAK,EAAE,iBAAiB;YACxB,KAAK,EAAE;gBACL,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;oBACtB,IAAI,CAAC;wBACH,MAAM,cAAc,CAAC,MAAM,CACzB;4BACE,qFAAqF;4BACrF,iFAAiF;4BACjF,IAAI,EAAE,cAAc;4BACpB,YAAY,EAAE,KAAK,CAAC,YAAY;4BAChC,OAAO,EAAE,KAAK,CAAC,OAAO;4BACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;4BACxB,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,oCAAoC;4BACnE,UAAU,EAAE,EAAE,GAAG,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE;yBAC/D,EACD,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAC9C,CAAC;oBACJ,CAAC;oBAAC,MAAM,CAAC;wBACP,6EAA6E;oBAC/E,CAAC;gBACH,CAAC;aACF;SACF,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,+BAAY,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;QAEtE,OAAO;YACL,MAAM,EAAE,uBAAqB;YAC7B,OAAO,EAAE;gBACP,qFAAqF;gBACrF,uFAAuF;gBACvF,6EAA6E;gBAC7E,oFAAoF;gBACpF,+EAA+E;gBAC/E,8EAA8E;gBAC9E,qBAAY,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,gCAAqB,EAAE,CAAC;gBACrE,sEAAsE;gBACtE,qBAAY,CAAC,OAAO,CAAC;oBACnB,EAAE,EAAE,eAAe,EAAE;oBACrB,aAAa,EAAE,CAAC,GAAG,4BAAe,CAAC;oBACnC,SAAS;iBACV,CAAC;gBACF,qFAAqF;gBACrF,iEAAiE;gBACjE,sBAAe;aAChB;YACD,mFAAmF;YACnF,8EAA8E;YAC9E,2DAA2D;YAC3D,WAAW,EAAE;gBACX,yCAAiB;gBACjB,mCAAc;gBACd,gDAAoB;gBACpB,mCAAc;gBACd,+CAAoB;gBACpB,gDAAoB;gBACpB,oFAAoF;gBACpF,qCAAe;gBACf,oFAAoF;gBACpF,sFAAsF;gBACtF,gEAAgE;gBAChE,6DAA0B;gBAC1B,4FAA4F;gBAC5F,uCAAgB;gBAChB,iFAAiF;gBACjF,qCAAe;aAChB;YACD,SAAS,EAAE;gBACT,mCAAc;gBACd,6BAAW;gBACX,6BAAW;gBACX,yCAAiB;gBACjB,mCAAc;gBACd,0CAAiB;gBACjB,0CAAqB;gBACrB,EAAE,OAAO,EAAE,8CAAoB,EAAE,QAAQ,EAAE,kBAAkB,EAAE;gBAC/D,yDAAyD;gBACzD,EAAE,OAAO,EAAE,0CAAiB,EAAE,QAAQ,EAAE,iBAAiB,EAAE;gBAC3D,EAAE,OAAO,EAAE,0CAAiB,EAAE,QAAQ,EAAE,iBAAiB,EAAE;gBAC3D,qFAAqF;gBACrF,yFAAyF;gBACzF,EAAE,OAAO,EAAE,wCAAgB,EAAE,QAAQ,EAAE,gBAAgB,EAAE;gBACzD,oFAAoF;gBACpF,sFAAsF;gBACtF,8CAA8C;gBAC9C,EAAE,OAAO,EAAE,wCAAgC,EAAE,QAAQ,EAAE,sBAAsB,EAAE;gBAC/E,EAAE,OAAO,EAAE,gEAA2B,EAAE,QAAQ,EAAE,2BAA2B,EAAE;gBAC/E,yFAAyF;gBACzF,2FAA2F;gBAC3F,EAAE,OAAO,EAAE,iCAAa,EAAE,QAAQ,EAAE,aAAa,EAAE;gBACnD,uFAAuF;gBACvF,qFAAqF;gBACrF,EAAE,OAAO,EAAE,+BAAY,EAAE,QAAQ,EAAE,YAAY,EAAE;gBACjD,oFAAoF;gBACpF,uDAAuD;gBACvD,EAAE,OAAO,EAAE,8CAAmB,EAAE,QAAQ,EAAE,IAAI,8CAAmB,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE;gBAChG,wFAAwF;gBACxF,uFAAuF;gBACvF;oBACE,OAAO,EAAE,yDAAwB;oBACjC,UAAU,EAAE,CAAC,OAAoC,EAAE,EAAE,CACnD,IAAI,yDAAwB,CAAC,SAAS,EAAE,OAAO,CAAC;oBAClD,MAAM,EAAE,CAAC,kCAAyB,CAAC;iBACpC;gBACD,yFAAyF;gBACzF,oFAAoF;gBACpF,kEAAkE;gBAClE,EAAE,OAAO,EAAE,8CAAmB,EAAE,QAAQ,EAAE,mBAAmB,EAAE;gBAC/D,uFAAuF;gBACvF,uFAAuF;gBACvF,mFAAmF;gBACnF,2EAA2E;gBAC3E,wDAAwB;aACzB;YACD,OAAO,EAAE,CAAC,mCAAc,EAAE,6BAAW,EAAE,6BAAW,CAAC;SACpD,CAAC;IACJ,CAAC;CACF,CAAA;AAhVY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,qBAAqB,CAgVjC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"membership-checker.js","sourceRoot":"","sources":["../../../src/features/membership/membership-checker.ts"],"names":[],"mappings":";;;AAiCA,6DAA6D;AAC7D,MAAM,GAAG,GAAG,YAAY,CAAC;AAEzB,MAAa,mBAAmB;IACD;IAA7B,YAA6B,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAE3C;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CAAC,WAAmB,EAAE,MAAc;QAC3D,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACjC;kBACY,GAAG;;;gBAGL,EACV,CAAC,WAAW,EAAE,MAAM,CAAC,CACtB,CAA0B,CAAC;QAC5B,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACzB,CAAC;CACF;AAnBD,kDAmBC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"membership.controller.js","sourceRoot":"","sources":["../../../src/features/membership/membership.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAqG;AACrG,yCAA2C;AAE3C,mEAA4D;AAC5D,6DAAyE;AACzE,qEAAqE;AACrE,+CAAsD;AA2BtD,gFAAgF;AAChF,EAAE;AACF,oFAAoF;AACpF,uFAAuF;AACvF,qFAAqF;AACrF,oFAAoF;AAG7E,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAEZ;IACA;IACA;IAHnB,YACmB,WAA8B,EAC9B,QAAwB,EACxB,QAA+B;QAF/B,gBAAW,GAAX,WAAW,CAAmB;QAC9B,aAAQ,GAAR,QAAQ,CAAgB;QACxB,aAAQ,GAAR,QAAQ,CAAuB;IAC/C,CAAC;IAEJ;;;;;OAKG;IAGG,AAAN,KAAK,CAAC,mBAAmB,CAAoB,QAAgB;QAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAE9D,MAAM,KAAK,GAAwB,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,cAAc,GAAG,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACtE,MAAM,WAAW,GAAG,IAAA,gBAAM,EAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YACvD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;YAErE,MAAM,QAAQ,GAAqB,EAAE,CAAC;YACtC,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC5B,MAAM,QAAQ,GAAG,IAAA,gBAAM,EAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACjD,MAAM,cAAc,GAAG,IAAA,gBAAM,EAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBACvD,MAAM,UAAU,GAAG,IAAA,gBAAM,EAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC/C,QAAQ,CAAC,IAAI,CAAC;oBACZ,WAAW,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3D,QAAQ;oBACR,QAAQ,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC;oBAClD,cAAc;oBACd,cAAc,EAAE,cAAc;wBAC5B,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,cAAc,CAAC;wBACtD,CAAC,CAAC,IAAI;oBACR,UAAU;oBACV,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;oBAC5E,aAAa,EAAE,IAAA,mBAAS,EAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;oBAChD,cAAc,EAAE,IAAA,mBAAS,EAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;iBACnD,CAAC,CAAC;YACL,CAAC;YAED,KAAK,CAAC,IAAI,CAAC;gBACT,cAAc;gBACd,WAAW;gBACX,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW;gBACvF,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACpC,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;gBACxE,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAChC,CAAC;IAED,uEAAuE;IAGjE,AAAN,KAAK,CAAC,iBAAiB,CACF,QAAgB,EAC3B,IAA8B;QAEtC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;QACnF,OAAO,EAAE,EAAE,EAAE,CAAC;IAChB,CAAC;IAED;;;;OAIG;IAGG,AAAN,KAAK,CAAC,gBAAgB,CACK,cAAsB,EACvC,IAAgE;QAExE,IAAI,IAAI,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,MAAM,IAAI,2BAAkB,CAAC,+CAA+C,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,OAAO,IAAI,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,iEAAiE;IAG3D,AAAN,KAAK,CAAC,gBAAgB,CAA0B,cAAsB;QACpE,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;QACxD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,0EAA0E;IAGpE,AAAN,KAAK,CAAC,eAAe,CACM,cAAsB,EACvC,IAAmC;QAE3C,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,cAAc,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;QAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,IAAY;QACrD,IAAI,CAAC,IAAI;YAAE,OAAO,WAAW,CAAC;QAC9B,MAAM,IAAI,GAAsB,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC;QAChC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;IAC1E,CAAC;CACF,CAAA;AAzHY,oDAAoB;AAezB;IAFL,IAAA,YAAG,EAAC,6BAA6B,CAAC;IAClC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACnC,WAAA,IAAA,cAAK,EAAC,UAAU,CAAC,CAAA;;;;+DAwC3C;AAKK;IAFL,IAAA,aAAI,EAAC,6BAA6B,CAAC;IACnC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAE7D,WAAA,IAAA,cAAK,EAAC,UAAU,CAAC,CAAA;IACjB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;6DAIR;AASK;IAFL,IAAA,YAAG,EAAC,6BAA6B,CAAC;IAClC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAE7D,WAAA,IAAA,cAAK,EAAC,gBAAgB,CAAC,CAAA;IACvB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;4DAYR;AAKK;IAFL,IAAA,eAAM,EAAC,6BAA6B,CAAC;IACrC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACxC,WAAA,IAAA,cAAK,EAAC,gBAAgB,CAAC,CAAA;;;;4DAG9C;AAKK;IAFL,IAAA,YAAG,EAAC,sCAAsC,CAAC;IAC3C,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAE7D,WAAA,IAAA,cAAK,EAAC,gBAAgB,CAAC,CAAA;IACvB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;2DAIR;+BA5GU,oBAAoB;IADhC,IAAA,mBAAU,EAAC,UAAU,CAAC;qCAGW,yCAAiB;QACpB,mCAAc;QACd,0CAAqB;GAJvC,oBAAoB,CAyHhC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"membership.service.js","sourceRoot":"","sources":["../../../src/features/membership/membership.service.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;;;;;;;;;;;;;AAEH,2CAAiF;AACjF,2CAAgF;AAChF,uEAA0F;AAGnF,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAET;IAQA;IATnB,YACmB,OAAuB,EAQvB,WAAuC;QARvC,YAAO,GAAP,OAAO,CAAgB;QAQvB,gBAAW,GAAX,WAAW,CAA4B;IACvD,CAAC;IAEJ;;;;OAIG;IACK,KAAK,CAAC,QAAQ,CAAC,cAAsB;QAC3C,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;YACvE,MAAM,WAAW,GAAG,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC;YAC3C,OAAO,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QACxF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,WAAW,CAAC,WAAuC;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,KAAK,MAAM,MAAM,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,+EAA+E;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,aAAa,CAAC,QAAgB,EAAE,WAAmB;QACjD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE;YAC/C,MAAM,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE;SACrE,CAAC,CAAC;IACL,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,eAAe,CAAC,QAAgB;QACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpF,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,SAAS,CAAC,cAAsB,EAAE,QAAgB;QACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,cAAc,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,kFAAkF;YAClF,kCAAkC;YAClC,MAAM,IAAI,0BAAiB,CACzB,cAAc,cAAc,4BAA4B,QAAQ,EAAE,CACnE,CAAC;QACJ,CAAC;QAED,uFAAuF;QACvF,gFAAgF;QAChF,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAE3F,4EAA4E;QAC5E,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC1B,IAAI,CAAC,CAAC,EAAE,KAAK,cAAc;gBAAE,SAAS;YACtC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACvF,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;QAED,oFAAoF;QACpF,yFAAyF;QACzF,sFAAsF;QACtF,yFAAyF;QACzF,sFAAsF;QACtF,sFAAsF;QACtF,4CAA4C;QAC5C,MAAM,aAAa,GAAG,CAAC,CAAa,EAAiB,EAAE;YACrD,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC;YAChC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,CAAC,CAAC;QACF,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACrF,CAAC;IAED;;;;OAIG;IACH,gBAAgB,CAAC,cAAsB,EAAE,KAA0B;QACjE,8EAA8E;QAC9E,qFAAqF;QACrF,qFAAqF;QACrF,wFAAwF;QACxF,yFAAyF;QACzF,oFAAoF;QACpF,4CAA4C;QAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,0FAA0F;IAC1F,KAAK,CAAC,gBAAgB,CAAC,cAAsB;QAC3C,kFAAkF;QAClF,uFAAuF;QACvF,wFAAwF;QACxF,oFAAoF;QACpF,+DAA+D;QAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACnD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;QAChE,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACnC,CAAC;CACF,CAAA;AApJY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;IASR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,8CAAoB,CAAC,CAAA;qCAPH,uBAAc;GAF/B,iBAAiB,CAoJ7B"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"posting-version-bump.js","sourceRoot":"","sources":["../../../src/features/membership/posting-version-bump.ts"],"names":[],"mappings":";;;AASa,QAAA,oBAAoB,GAAG,MAAM,CAAC,sBAAsB,CAAC,CAAC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"posting.service.js","sourceRoot":"","sources":["../../../src/features/membership/posting.service.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;;;;;;;;;;;;;AAEH,2CAA8D;AAC9D,2CAAiE;AACjE,uEAA0F;AAgB1F,8FAA8F;AAC9F,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAEjE;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6FAA6F;AAC7F,SAAS,UAAU,CAAC,CAInB;IACC,OAAO,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,cAAc,IAAI,EAAE,IAAI,CAAC,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,UAAU,CAAC,KAAmB;IACrC,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,EAAE,KAAK,IAAI;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,oCAAoC;YAClE,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAGM,IAAM,cAAc,GAApB,MAAM,cAAc;IAEN;IAKA;IANnB,YACmB,OAAuB,EAKvB,WAAuC;QALvC,YAAO,GAAP,OAAO,CAAgB;QAKvB,gBAAW,GAAX,WAAW,CAA4B;IACvD,CAAC;IAEJ,gEAAgE;IAChE,KAAK,CAAC,YAAY,CAAC,cAAsB;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;QAC1F,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,eAAe,CAAC,cAAsB,EAAE,OAAgC;QAC5E,MAAM,OAAO,GAAG,CACd,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,EAAE,CAAC,CAC7E,CAAC,IAAI,CAAC;QAEP,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAChB,UAAU,CACR,CAAC,CAAC,MAA0F,CAC7F,CACF,CACF,CAAC;QAEF,sFAAsF;QACtF,sFAAsF;QACtF,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,sFAAsF;QACtF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,UAAU,CACpB,CAAC,CAAC,MAA0F,CAC7F,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBACtD,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QAED,oFAAoF;QACpF,0FAA0F;QAC1F,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE;oBAC9C,MAAM,EAAE,EAAE,cAAc,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE;iBAC7C,CAAC,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QAED,qFAAqF;QACrF,oFAAoF;QACpF,wFAAwF;QACxF,0FAA0F;QAC1F,wFAAwF;QACxF,uFAAuF;QACvF,wFAAwF;QACxF,kFAAkF;QAClF,IAAI,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAChC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,CAAC;YACtE,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBAChD,CAAC;gBAAC,MAAM,CAAC;oBACP,4EAA4E;gBAC9E,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,uBAAuB,CAAC,cAAsB;QAC1D,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;YACvE,MAAM,WAAW,GAAG,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC;YAC3C,OAAO,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QACxF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAA;AAlGY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;IAMR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,8CAAoB,CAAC,CAAA;qCAJH,uBAAc;GAF/B,cAAc,CAkG1B"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"org-catalog.controller.js","sourceRoot":"","sources":["../../../src/features/org-structure/org-catalog.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAwD;AACxD,yCAA2C;AAC3C,qEAA6D;AAE7D,kFAAkF;AAClF,EAAE;AACF,kFAAkF;AAClF,sFAAsF;AACtF,yEAAyE;AACzE,sFAAsF;AACtF,gDAAgD;AAGzC,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IACF;IAA7B,YAA6B,OAA0B;QAA1B,YAAO,GAAP,OAAO,CAAmB;IAAG,CAAC;IAE3D,kFAAkF;IAG5E,AAAN,KAAK,CAAC,sBAAsB,CAAuB,WAAmB;QACpE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;QACpE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAED,+EAA+E;IAGzE,AAAN,KAAK,CAAC,mBAAmB,CAAuB,WAAmB;QACjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACjE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;CACF,CAAA;AAlBY,oDAAoB;AAMzB;IAFL,IAAA,YAAG,EAAC,oCAAoC,CAAC;IACzC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAChC,WAAA,IAAA,cAAK,EAAC,aAAa,CAAC,CAAA;;;;kEAGjD;AAKK;IAFL,IAAA,YAAG,EAAC,iCAAiC,CAAC;IACtC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC/B,WAAA,IAAA,cAAK,EAAC,aAAa,CAAC,CAAA;;;;+DAG9C;+BAjBU,oBAAoB;IADhC,IAAA,mBAAU,EAAC,UAAU,CAAC;qCAEiB,0CAAiB;GAD5C,oBAAoB,CAkBhC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"org-catalog.service.js","sourceRoot":"","sources":["../../../src/features/org-structure/org-catalog.service.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;AAEH,2CAA4C;AAC5C,2CAAgD;AAIzC,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IACC;IAA7B,YAA6B,OAAuB;QAAvB,YAAO,GAAP,OAAO,CAAgB;IAAG,CAAC;IAExD,kFAAkF;IAClF,sBAAsB,CAAC,WAAmB;QACxC,OAAO,IAAI,CAAC,kBAAkB,CAAC,oBAAoB,EAAE,gBAAgB,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;IACpG,CAAC;IAED,+EAA+E;IAC/E,mBAAmB,CAAC,WAAmB;QACrC,OAAO,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IACxF,CAAC;IAED,qFAAqF;IAC7E,KAAK,CAAC,kBAAkB,CAC9B,eAAuB,EACvB,WAAmB,EACnB,cAAsB,EACtB,WAAmB;QAEnB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAClF,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACxC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAClE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF,CAAA;AA/BY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAE2B,uBAAc;GADzC,iBAAiB,CA+B7B"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"policy.controller.js","sourceRoot":"","sources":["../../../src/features/policy/policy.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,2CAYwB;AACxB,yCAA2C;AAE3C,2DAK6B;AAQtB,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IACE;IAA7B,YAA6B,QAAuB;QAAvB,aAAQ,GAAR,QAAQ,CAAe;IAAG,CAAC;IAExD;;;;;;;;OAQG;IAGG,AAAN,KAAK,CAAC,MAAM,CAAmB,OAAgB;QAC7C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,4BAAmB,CAAC,kBAAkB,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,uCAAmB;gBAAE,MAAM,IAAI,0BAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC7E,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IAED;;;OAGG;IAGG,AAAN,KAAK,CAAC,IAAI,CAAQ,GAAkB,EAAoB,OAAgB;QACtE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,4BAAmB,CAAC,kBAAkB,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAClE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACtB,CAAC;IAED;;;;;OAKG;IAGG,AAAN,KAAK,CAAC,MAAM,CAAQ,GAAkB,EAAU,IAAkB;QAChE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC/D,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,sCAAkB;gBAAE,MAAM,IAAI,4BAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC9E,IAAI,CAAC,YAAY,2CAAuB;gBAAE,MAAM,IAAI,2BAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAClF,MAAM,CAAC,CAAC,CAAC,wDAAwD;QACnE,CAAC;IACH,CAAC;IAED;;;;OAIG;IAGG,AAAN,KAAK,CAAC,MAAM,CAAQ,GAAkB,EAAe,EAAU;QAC7D,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,uCAAmB;gBAAE,MAAM,IAAI,0BAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC7E,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;CACF,CAAA;AA3EY,4CAAgB;AAcrB;IAFL,IAAA,YAAG,EAAC,wBAAwB,CAAC;IAC7B,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAClC,WAAA,IAAA,cAAK,EAAC,SAAS,CAAC,CAAA;;;;8CAU7B;AAQK;IAFL,IAAA,YAAG,EAAC,iBAAiB,CAAC;IACtB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACpC,WAAA,IAAA,YAAG,GAAE,CAAA;IAAsB,WAAA,IAAA,cAAK,EAAC,SAAS,CAAC,CAAA;;;;4CAMtD;AAUK;IAFL,IAAA,aAAI,EAAC,iBAAiB,CAAC;IACvB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACpC,WAAA,IAAA,YAAG,GAAE,CAAA;IAAsB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;8CAS9C;AASK;IAFL,IAAA,eAAM,EAAC,qBAAqB,CAAC;IAC7B,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACpC,WAAA,IAAA,YAAG,GAAE,CAAA;IAAsB,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;;;;8CAQnD;2BA1EU,gBAAgB;IAD5B,IAAA,mBAAU,EAAC,UAAU,CAAC;qCAEkB,iCAAa;GADzC,gBAAgB,CA2E5B"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"policy.service.js","sourceRoot":"","sources":["../../../src/features/policy/policy.service.ts"],"names":[],"mappings":";;;AAoIA,gEAgBC;AAtHD,uCAAgD;AAGhD,wFAAwF;AACxF,MAAa,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAO,GAAG,wBAAwB;QAC5C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AALD,gDAKC;AAED,kGAAkG;AAClG,MAAa,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAO,GAAG,iCAAiC;QACrD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AALD,0DAKC;AAED,mGAAmG;AACnG,MAAa,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAO,GAAG,mBAAmB;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AALD,kDAKC;AA8DD,8FAA8F;AAC9F,8FAA8F;AAC9F,MAAM,OAAO,GAAkC,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AAC1E,MAAM,SAAS,GAAkC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAClE,MAAM,UAAU,GAAkC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAC7E,MAAM,IAAI,GAAkC,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;AACzE,MAAM,QAAQ,GAAkC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;AAE7E;;;;;;GAMG;AACH,SAAgB,0BAA0B,CAAC,IAAmB;IAC5D,MAAM,IAAI,GAAyB,CAAC,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC,CAAC;IAC7D,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ,CAAC;QACd,KAAK,WAAW;YACd,OAAO,CAAC,GAAG,IAAI,EAAE,GAAG,UAAU,CAAC,CAAC;QAClC,KAAK,QAAQ;YACX,OAAO,CAAC,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;QAC5B,KAAK,SAAS;YACZ,sFAAsF;YACtF,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,CAAC;QAClC,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC;QACZ;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAiBD,MAAa,aAAa;IACP,KAAK,CAAkB;IACvB,YAAY,CAAsC;IAClD,YAAY,CAAwC;IAErE,YAAY,IAAuB;QACjC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,WAA8B,CAAC;QACjD,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,YAAY,GAAG,IAAA,uBAAgB,EAAC;YACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,yFAAyF;YACzF,WAAW,EAAE,IAAI,CAAC,WAA4D;YAC9E,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,OAAe;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,mBAAmB,CAAC,kCAAkC,OAAO,IAAI,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,MAAM,GAAwB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACvD,MAAM,KAAK,GAAG,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACjD,OAAO;gBACL,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,KAAK,EAAE,CAAC,CAAC,GAAG;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,cAAc,EAAE,KAAK;gBACrB,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC1D,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;aAC3D,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClF,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,KAAgB,EAAE,MAAoB;QACjD,MAAM,QAAQ,GAAkB;YAC9B,IAAI,EAAE,eAAe;YACrB,KAAK,EAAE,KAAK;YACZ,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE,mCAAmC;SACpE,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;QACD,yFAAyF;QACzF,yFAAyF;QACzF,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;YACvC,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,IAAI,uBAAuB,CAAC,yBAAyB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/E,CAAC;IAED,+FAA+F;IAC/F,KAAK,CAAC,IAAI,CAAC,KAAgB,EAAE,OAAe;QAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,KAAgB,EAAE,QAAgB;QAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjF,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAClB,MAAM,IAAI,mBAAmB,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;CACF;AArFD,sCAqFC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"role.controller.js","sourceRoot":"","sources":["../../../src/features/role/role.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAwF;AACxF,yCAA2C;AAC3C,uDAAgD;AAChD,2DAA4E;AAE5E,uFAAuF;AACvF,uFAAuF;AACvF,4EAA4E;AAErE,IAAM,cAAc,GAApB,MAAM,cAAc;IACI;IAA7B,YAA6B,KAAkB;QAAlB,UAAK,GAAL,KAAK,CAAa;IAAG,CAAC;IAEnD;;;;OAIG;IAGG,AAAN,KAAK,CAAC,SAAS,CAAU,KAAmB;QAC1C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAA,8BAAc,EAAC,KAAK,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACjE,CAAC;IAED,uDAAuD;IAGjD,AAAN,KAAK,CAAC,UAAU,CAAS,IAAuB;QAC9C,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,IAAI,UAAU,CAAC,CAAC;QACjE,OAAO,EAAE,EAAE,EAAE,CAAC;IAChB,CAAC;IAED;0CACsC;IAGtC,OAAO,CAAgB,IAAY;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,uDAAuD;IAGjD,AAAN,KAAK,CAAC,UAAU,CAAgB,IAAY,EAAU,IAAuB;QAC3E,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,uDAAuD;IAGjD,AAAN,KAAK,CAAC,UAAU,CAAgB,IAAY;QAC1C,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;CACF,CAAA;AA/CY,wCAAc;AAUnB;IAFL,IAAA,YAAG,EAAC,OAAO,CAAC;IACZ,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC/B,WAAA,IAAA,cAAK,GAAE,CAAA;;;;+CAIvB;AAKK;IAFL,IAAA,aAAI,EAAC,OAAO,CAAC;IACb,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChC,WAAA,IAAA,aAAI,GAAE,CAAA;;;;gDAGvB;AAMD;IAFC,IAAA,YAAG,EAAC,aAAa,CAAC;IAClB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACvC,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;;;;6CAErB;AAKK;IAFL,IAAA,YAAG,EAAC,aAAa,CAAC;IAClB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChC,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;IAAgB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;gDAGpD;AAKK;IAFL,IAAA,eAAM,EAAC,aAAa,CAAC;IACrB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChC,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;;;;gDAG9B;yBA9CU,cAAc;IAD1B,IAAA,mBAAU,EAAC,UAAU,CAAC;qCAEe,6BAAW;GADpC,cAAc,CA+C1B"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"role.service.js","sourceRoot":"","sources":["../../../src/features/role/role.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,2CAA+D;AAC/D,2DAA0E;AAE1E,MAAM,kBAAkB,GAAG,CAAC,MAAM,CAAU,CAAC;AAC7C,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,WAAW,CAAU,CAAC;AAExD;;;;GAIG;AAEI,IAAM,WAAW,GAAjB,MAAM,WAAW;IACO;IAA7B,YAA6B,OAAuB;QAAvB,YAAO,GAAP,OAAO,CAAgB;IAAG,CAAC;IAExD,qBAAqB;IACrB,UAAU,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,uEAAuE;IACvE,SAAS,CAAC,MAAmB;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAA,8BAAc,EAAC,MAAM,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACjG,CAAC;IAED,0BAA0B;IAC1B,OAAO,CAAC,IAAY;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,qBAAqB;IACrB,UAAU,CAAC,IAAY,EAAE,KAAwB;QAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,qBAAqB;IACrB,UAAU,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;CACF,CAAA;AA3BY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;qCAE2B,uBAAc;GADzC,WAAW,CA2BvB"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"scope-closure.service.js","sourceRoot":"","sources":["../../../src/features/scope/scope-closure.service.ts"],"names":[],"mappings":";;;AAAA,iFAAiF;AACjF;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,yCAAkF;AAElF,mDAAmD;AACnD,MAAM,GAAG,GAAG,YAAY,CAAC;AACzB,+DAA+D;AAC/D,MAAM,KAAK,GAAG,cAAc,CAAC;AA6B7B,MAAa,mBAAmB;IAEX;IACA;IAFnB,YACmB,IAAe,EACf,MAA0B;QAD1B,SAAI,GAAJ,IAAI,CAAW;QACf,WAAM,GAAN,MAAM,CAAoB;IAC1C,CAAC;IAEJ;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAA,wBAAgB,EAAC,KAAK,CAAC,CAAC,CAAC,wDAAwD;QAE9F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACtC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,CAAC,MAAM,WAAW,IAAI,CAAC,MAAM,OAAO,CAAC,CAAC;QAC3E,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IACpD,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,QAAQ,CAAC,QAAgB,EAAE,aAA4B;QAC3D,IAAI,aAAa,KAAK,QAAQ,EAAE,CAAC;YAC/B,uDAAuD;YACvD,MAAM,IAAI,uBAAe,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC3B,uFAAuF;YACvF,qFAAqF;YACrF,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnC,mBAAmB,KAAK;kEACkC,EAC1D,CAAC,QAAQ,EAAE,aAAa,CAAC,CAC1B,CAAc,CAAC;YAChB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,uBAAe,CAAC,QAAQ,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAED,sFAAsF;QACtF,iFAAiF;QACjF,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACxC,iCAAiC,KAAK,8CAA8C,EACpF,CAAC,QAAQ,CAAC,CACX,CAAuC,CAAC;QACzC,sFAAsF;QACtF,6FAA6F;QAC7F,6FAA6F;QAC7F,4FAA4F;QAC5F,2FAA2F;QAC3F,4DAA4D;QAC5D,MAAM,kBAAkB,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAC/C,+BAA+B,KAAK;yDACe,EACnD,CAAC,QAAQ,EAAE,QAAQ,CAAC,CACrB,CAAqC,CAAC;QACvC,yFAAyF;QACzF,MAAM,YAAY,GAChB,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAClF,6FAA6F;QAC7F,mDAAmD;QACnD,MAAM,QAAQ,GAAG;YACf,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;SACjF,CAAC;QAEF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAE9B,yBAAyB;YACzB,MAAM,IAAI,CAAC,KAAK,CACd,YAAY,GAAG,yDAAyD,EACxE,CAAC,aAAa,EAAE,QAAQ,CAAC,CAC1B,CAAC;YAEF,yFAAyF;YACzF,0FAA0F;YAC1F,yFAAyF;YACzF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,IAAI,GAAG,IAAA,wBAAgB,EAAC,KAAK,CAAC,CAAC;YACrC,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAEtC,4FAA4F;YAC5F,KAAK,MAAM,UAAU,IAAI,QAAQ,EAAE,CAAC;gBAClC,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YACpD,CAAC;YAED,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,UAAU,CAAC,QAAgB;QAC/B,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACrC,mBAAmB,GAAG,kDAAkD,EACxE,CAAC,QAAQ,CAAC,CACX,CAAc,CAAC;QAChB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAED,4FAA4F;QAC5F,oFAAoF;QACpF,MAAM,kBAAkB,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAC/C,+BAA+B,KAAK;yDACe,EACnD,CAAC,QAAQ,EAAE,QAAQ,CAAC,CACrB,CAAqC,CAAC;QAEvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC9B,wFAAwF;YACxF,MAAM,IAAI,CAAC,KAAK,CACd,iBAAiB,KAAK;yDAC2B,EACjD,CAAC,QAAQ,EAAE,QAAQ,CAAC,CACrB,CAAC;YACF,iCAAiC;YACjC,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,GAAG,mCAAmC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YACtF,sFAAsF;YACtF,KAAK,MAAM,EAAE,aAAa,EAAE,IAAI,kBAAkB,EAAE,CAAC;gBACnD,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,yFAAyF;IACjF,KAAK,CAAC,SAAS,CAAC,CAAY;QAClC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CACzB,uCAAuC,GAAG,kBAAkB,CAC7D,CAA4D,CAAC;QAC9D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IAChF,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,cAAc,CAC1B,IAAe,EACf,IAAwE;QAExE,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,KAAK,sBAAsB,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CACd,iBAAiB,KAAK;kBACV,YAAY,EAAE,EAC1B,MAAM,CACP,CAAC;IACJ,CAAC;CACF;AAhND,kDAgNC;AAED,kGAAkG;AAClG,MAAa,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,QAAgB;QAC1B,KAAK,CACH,mCAAmC,QAAQ,6CAA6C;YACtF,kFAAkF;YAClF,sBAAsB,CACzB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AATD,oDASC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"scope-subtree.resolver.js","sourceRoot":"","sources":["../../../src/features/scope/scope-subtree.resolver.ts"],"names":[],"mappings":";;;AAoCA,+DAA+D;AAC/D,MAAM,KAAK,GAAG,cAAc,CAAC;AAE7B,MAAa,sBAAsB;IACJ;IAA7B,YAA6B,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAE3C;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACjC,iCAAiC,KAAK,8CAA8C,EACpF,CAAC,MAAM,CAAC,CACT,CAAuC,CAAC;QACzC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,kDAAkD;QAC1F,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IAC5C,CAAC;CACF;AAjBD,wDAiBC"}
@@ -0,0 +1,62 @@
1
+ import type { Principal } from '@astram/core';
2
+ import { ServiceAccountService } from './service-account.service.js';
3
+ /** The request shape after the enforcement guard attaches the resolved principal. */
4
+ interface AuthedRequest {
5
+ principal: Principal;
6
+ }
7
+ export declare class ServiceAccountController {
8
+ private readonly svc;
9
+ constructor(svc: ServiceAccountService);
10
+ /** List the caller's own-tenant service accounts (by label). Gated `service_account:read`. */
11
+ list(req: AuthedRequest): Promise<{
12
+ accounts: import("./service-account.service.js").ServiceAccountView[];
13
+ }>;
14
+ /**
15
+ * What the caller may grant an agent — the create/edit picker source (Phase 4). Gated
16
+ * `service_account:create` (only someone who can create agents needs the list). Computed from the
17
+ * SAME ceiling the create/update write check enforces: `{ roles: [{id,name}], scopeNodes:
18
+ * [{id,name,parentId|null}] }`. ⚠ Declared BEFORE `service-accounts/:id` so the static path wins.
19
+ */
20
+ assignable(req: AuthedRequest): Promise<import("./service-account.service.js").AssignableAccess>;
21
+ /** Fetch one own-tenant account. Gated `service_account:read`. Cross-tenant/unknown → 404. */
22
+ get(req: AuthedRequest, id: string): Promise<{
23
+ account: import("./service-account.service.js").ServiceAccountView;
24
+ }>;
25
+ /**
26
+ * Create an account in the caller's own tenant. Gated `service_account:create`.
27
+ * Body: `{ label, scopeSubtreeNodeIds?, roleIds? }`. Scope/roles must pass the ADR-0029 ceiling.
28
+ */
29
+ create(req: AuthedRequest, body: unknown): Promise<{
30
+ account: import("./service-account.service.js").ServiceAccountView;
31
+ }>;
32
+ /**
33
+ * Edit an account (label/scope/roles/status). Gated `service_account:update`. Own-tenant only;
34
+ * scope/roles re-checked against the ceiling (an edit cannot escalate).
35
+ */
36
+ update(req: AuthedRequest, id: string, body: unknown): Promise<{
37
+ account: import("./service-account.service.js").ServiceAccountView;
38
+ }>;
39
+ /**
40
+ * Issue a NEW key for an account. Gated `service_account:manage_keys`. Body: `{ expiresAtMs? }`.
41
+ * Returns the raw `ask_…` key EXACTLY ONCE — copy it now, it is never retrievable again.
42
+ */
43
+ issueKey(req: AuthedRequest, id: string, body: unknown): Promise<{
44
+ key: import("./service-account.service.js").IssuedKey;
45
+ }>;
46
+ /**
47
+ * Rotate an account's key. Gated `service_account:manage_keys`. The previous key stops
48
+ * authenticating; the new raw key is returned EXACTLY ONCE.
49
+ */
50
+ rotateKey(req: AuthedRequest, id: string, body: unknown): Promise<{
51
+ key: import("./service-account.service.js").IssuedKey;
52
+ }>;
53
+ /**
54
+ * Revoke ALL of an account's keys. Gated `service_account:manage_keys`. Fail-closed on the next
55
+ * request; idempotent.
56
+ */
57
+ revokeKeys(req: AuthedRequest, id: string): Promise<{
58
+ success: boolean;
59
+ }>;
60
+ }
61
+ export {};
62
+ //# sourceMappingURL=service-account.controller.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"service-account.controller.d.ts","sourceRoot":"","sources":["../../../src/features/service-account/service-account.controller.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EACL,qBAAqB,EAMtB,MAAM,8BAA8B,CAAC;AAEtC,qFAAqF;AACrF,UAAU,aAAa;IACrB,SAAS,EAAE,SAAS,CAAC;CACtB;AA0CD,qBACa,wBAAwB;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,qBAAqB;IAEvD,8FAA8F;IAGxF,IAAI,CAAQ,GAAG,EAAE,aAAa;;;IAQpC;;;;;OAKG;IAGG,UAAU,CAAQ,GAAG,EAAE,aAAa;IAQ1C,8FAA8F;IAGxF,GAAG,CAAQ,GAAG,EAAE,aAAa,EAAe,EAAE,EAAE,MAAM;;;IAQ5D;;;OAGG;IAGG,MAAM,CAAQ,GAAG,EAAE,aAAa,EAAU,IAAI,EAAE,OAAO;;;IAiB7D;;;OAGG;IAGG,MAAM,CAAQ,GAAG,EAAE,aAAa,EAAe,EAAE,EAAE,MAAM,EAAU,IAAI,EAAE,OAAO;;;IAuBtF;;;OAGG;IAGG,QAAQ,CAAQ,GAAG,EAAE,aAAa,EAAe,EAAE,EAAE,MAAM,EAAU,IAAI,EAAE,OAAO;;;IAWxF;;;OAGG;IAGG,SAAS,CAAQ,GAAG,EAAE,aAAa,EAAe,EAAE,EAAE,MAAM,EAAU,IAAI,EAAE,OAAO;;;IAWzF;;;OAGG;IAGG,UAAU,CAAQ,GAAG,EAAE,aAAa,EAAe,EAAE,EAAE,MAAM;;;CAQpE"}