@astram/identity 0.3.0 → 0.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/auth-facts-keys.js.map +1 -0
- package/dist/branch.object.js.map +1 -0
- package/dist/company-branch.object.js.map +1 -0
- package/dist/company-department.object.js.map +1 -0
- package/dist/company-membership.object.js.map +1 -0
- package/dist/company.object.js.map +1 -0
- package/dist/cross-tenant-grant.object.js.map +1 -0
- package/dist/department.object.js.map +1 -0
- package/dist/features/access/access-admin.access.js.map +1 -0
- package/dist/features/access/company-admin.access.js.map +1 -0
- package/dist/features/access/index.js.map +1 -0
- package/dist/features/access/user-management.access.js.map +1 -0
- package/dist/features/audit/audit-read.service.js.map +1 -0
- package/dist/features/audit/audit.controller.js.map +1 -0
- package/dist/features/audit/directory-label-resolver.js.map +1 -0
- package/dist/features/audit/mariadb-audit-reader.js.map +1 -0
- package/dist/features/authz/access-bundle-reconcile.job.js.map +1 -0
- package/dist/features/authz/access-bundle-store.js.map +1 -0
- package/dist/features/authz/catalog-bootstrap.provider.js.map +1 -0
- package/dist/features/authz/catalog-reconcile.job.js.map +1 -0
- package/dist/features/authz/db-permission-facts.adapter.d.ts +8 -4
- package/dist/features/authz/db-permission-facts.adapter.d.ts.map +1 -1
- package/dist/features/authz/db-permission-facts.adapter.js +47 -4
- package/dist/features/authz/db-permission-facts.adapter.js.map +1 -0
- package/dist/features/authz/grant-admin.controller.d.ts.map +1 -1
- package/dist/features/authz/grant-admin.controller.js +7 -2
- package/dist/features/authz/grant-admin.controller.js.map +1 -0
- package/dist/features/authz/grant-admin.service.d.ts +19 -6
- package/dist/features/authz/grant-admin.service.d.ts.map +1 -1
- package/dist/features/authz/grant-admin.service.js +25 -6
- package/dist/features/authz/grant-admin.service.js.map +1 -0
- package/dist/features/authz/grant-ceiling.d.ts +60 -0
- package/dist/features/authz/grant-ceiling.d.ts.map +1 -0
- package/dist/features/authz/grant-ceiling.js +94 -0
- package/dist/features/authz/grant-ceiling.js.map +1 -0
- package/dist/features/authz/mariadb-catalog-store.js.map +1 -0
- package/dist/features/authz/permission-version.bumper.js.map +1 -0
- package/dist/features/authz/record-authorization.js.map +1 -0
- package/dist/features/authz/session-facts.reader.js.map +1 -0
- package/dist/features/company/company.controller.js.map +1 -0
- package/dist/features/company/company.service.js.map +1 -0
- package/dist/features/cross-tenant/cross-tenant-grant-read.service.js.map +1 -0
- package/dist/features/cross-tenant/cross-tenant-grant.controller.js.map +1 -0
- package/dist/features/cross-tenant/grant-authorize.js.map +1 -0
- package/dist/features/identity-feature.module.d.ts +9 -1
- package/dist/features/identity-feature.module.d.ts.map +1 -1
- package/dist/features/identity-feature.module.js +78 -8
- package/dist/features/identity-feature.module.js.map +1 -0
- package/dist/features/membership/membership-checker.js.map +1 -0
- package/dist/features/membership/membership.controller.js.map +1 -0
- package/dist/features/membership/membership.service.js.map +1 -0
- package/dist/features/membership/posting-version-bump.js.map +1 -0
- package/dist/features/membership/posting.service.js.map +1 -0
- package/dist/features/org-structure/org-catalog.controller.js.map +1 -0
- package/dist/features/org-structure/org-catalog.service.js.map +1 -0
- package/dist/features/policy/policy.controller.js.map +1 -0
- package/dist/features/policy/policy.service.js.map +1 -0
- package/dist/features/role/role.controller.js.map +1 -0
- package/dist/features/role/role.service.js.map +1 -0
- package/dist/features/scope/scope-closure.service.js.map +1 -0
- package/dist/features/scope/scope-subtree.resolver.js.map +1 -0
- package/dist/features/service-account/service-account.controller.d.ts +62 -0
- package/dist/features/service-account/service-account.controller.d.ts.map +1 -0
- package/dist/features/service-account/service-account.controller.js +281 -0
- package/dist/features/service-account/service-account.service.d.ts +202 -0
- package/dist/features/service-account/service-account.service.d.ts.map +1 -0
- package/dist/features/service-account/service-account.service.js +483 -0
- package/dist/features/service-account/service-account.store.d.ts +91 -0
- package/dist/features/service-account/service-account.store.d.ts.map +1 -0
- package/dist/features/service-account/service-account.store.js +158 -0
- package/dist/features/share/share.controller.js.map +1 -0
- package/dist/features/share/share.service.js.map +1 -0
- package/dist/features/shared/http.js.map +1 -0
- package/dist/features/shared/list-query.js.map +1 -0
- package/dist/features/shared/named-option.js.map +1 -0
- package/dist/features/shared/record-resolver.js.map +1 -0
- package/dist/features/user/user.controller.js.map +1 -0
- package/dist/features/user/user.service.js.map +1 -0
- package/dist/index.d.ts +1 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +3 -1
- package/dist/index.js.map +1 -0
- package/dist/membership-posting.object.js.map +1 -0
- package/dist/migrations-dir.js.map +1 -0
- package/dist/objects.d.ts.map +1 -1
- package/dist/objects.js +2 -1
- package/dist/objects.js.map +1 -0
- package/dist/record-share.object.js.map +1 -0
- package/dist/role.object.js.map +1 -0
- package/dist/schema.js.map +1 -0
- package/dist/service-account.object.d.ts +31 -0
- package/dist/service-account.object.d.ts.map +1 -0
- package/dist/service-account.object.js +75 -0
- package/dist/shared-resource.object.js.map +1 -0
- package/dist/user.object.js.map +1 -0
- package/migrations/1710000000018-CreateServiceAccount.cjs +53 -0
- package/package.json +4 -4
|
@@ -0,0 +1,94 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.GrantCeiling = exports.GrantCeilingError = void 0;
|
|
4
|
+
exports.coversKey = coversKey;
|
|
5
|
+
const core_1 = require("@astram/core");
|
|
6
|
+
const db_permission_facts_adapter_js_1 = require("./db-permission-facts.adapter.js");
|
|
7
|
+
const AUTHZ = 'shield_authz';
|
|
8
|
+
/** The grantor exceeds their own authority — cannot grant a key they do not hold (→ 403). */
|
|
9
|
+
class GrantCeilingError extends Error {
|
|
10
|
+
constructor(key) {
|
|
11
|
+
super(`You cannot grant '${key}' — it exceeds the permissions you hold.`);
|
|
12
|
+
this.name = 'GrantCeilingError';
|
|
13
|
+
}
|
|
14
|
+
}
|
|
15
|
+
exports.GrantCeilingError = GrantCeilingError;
|
|
16
|
+
/**
|
|
17
|
+
* Does `effective` (the grantor's held EXACT keys) cover `granted`?
|
|
18
|
+
*
|
|
19
|
+
* - An EXACT key is covered iff it is in `effective`.
|
|
20
|
+
* - A WILDCARD key (`module:*`, `module:type:*`, bare `module`) is covered iff EVERY registered
|
|
21
|
+
* exact key it expands to is in `effective` — you cannot grant a wildcard you don't fully hold.
|
|
22
|
+
* A wildcard that expands to ZERO registered keys is treated as NOT covered (nothing to hold ⇒
|
|
23
|
+
* no basis to grant; also prevents a typo'd wildcard from vacuously passing).
|
|
24
|
+
*
|
|
25
|
+
* `effective` is assumed already expanded to exact keys (the grantor's wildcards resolved).
|
|
26
|
+
* PURE — no I/O; `registeredKeys` is the live registry's exact-key universe.
|
|
27
|
+
*/
|
|
28
|
+
function coversKey(effective, registeredKeys, granted) {
|
|
29
|
+
const isWildcard = granted.endsWith(':*') || !granted.includes(':');
|
|
30
|
+
if (!isWildcard) {
|
|
31
|
+
return effective.has(granted);
|
|
32
|
+
}
|
|
33
|
+
// Expand the granted wildcard against the SAME registry universe, then require full coverage.
|
|
34
|
+
const expanded = (0, db_permission_facts_adapter_js_1.expandGrantKeys)([granted], [...registeredKeys]);
|
|
35
|
+
if (expanded.length === 0)
|
|
36
|
+
return false;
|
|
37
|
+
return expanded.every((k) => effective.has(k));
|
|
38
|
+
}
|
|
39
|
+
/**
|
|
40
|
+
* Resolves a grantor's effective keys and enforces the ADR-0029 ceiling. Constructed in the
|
|
41
|
+
* identity module over the shared authz pool + the identity registry.
|
|
42
|
+
*/
|
|
43
|
+
class GrantCeiling {
|
|
44
|
+
pool;
|
|
45
|
+
registry;
|
|
46
|
+
now;
|
|
47
|
+
constructor(pool, registry,
|
|
48
|
+
/** Injectable clock (epoch-ms) for the posting effective-window read; defaults to Date.now. */
|
|
49
|
+
now = Date.now) {
|
|
50
|
+
this.pool = pool;
|
|
51
|
+
this.registry = registry;
|
|
52
|
+
this.now = now;
|
|
53
|
+
}
|
|
54
|
+
/**
|
|
55
|
+
* The grantor's EFFECTIVE exact keys: the keys granted to the grantor's roles (active
|
|
56
|
+
* membership's in-effect postings in the grantor's tenant), wildcards expanded against the
|
|
57
|
+
* live registry. Fail-closed: a store outage throws AuthorizationUnavailableError (never an
|
|
58
|
+
* empty set masking an outage).
|
|
59
|
+
*/
|
|
60
|
+
async effectiveKeys(grantor) {
|
|
61
|
+
try {
|
|
62
|
+
const roleIds = await (0, db_permission_facts_adapter_js_1.readRoleIdsForTenant)(this.pool, grantor.id, grantor.tenantId, this.now);
|
|
63
|
+
if (roleIds.length === 0)
|
|
64
|
+
return new Set();
|
|
65
|
+
const ph = roleIds.map(() => '?').join(', ');
|
|
66
|
+
const rows = (await this.pool.query(`SELECT rp_perm_key FROM \`${AUTHZ}\`.\`role_permission\` WHERE rp_role_uuid IN (${ph})`, roleIds));
|
|
67
|
+
const raw = rows.map((r) => r.rp_perm_key);
|
|
68
|
+
const registered = this.registry.listActions().map((a) => a.permissionKey);
|
|
69
|
+
return new Set((0, db_permission_facts_adapter_js_1.expandGrantKeys)(raw, registered));
|
|
70
|
+
}
|
|
71
|
+
catch (cause) {
|
|
72
|
+
if (cause instanceof core_1.AuthorizationUnavailableError)
|
|
73
|
+
throw cause;
|
|
74
|
+
throw new core_1.AuthorizationUnavailableError('grant-ceiling facts unavailable', cause);
|
|
75
|
+
}
|
|
76
|
+
}
|
|
77
|
+
/**
|
|
78
|
+
* Assert the grantor may grant EVERY key in `keys`. Root (strict) bypasses. A non-root grantor
|
|
79
|
+
* must effectively hold each key (exact) or fully hold each wildcard's expansion. Throws
|
|
80
|
+
* `GrantCeilingError` on the FIRST key that exceeds the grantor's authority.
|
|
81
|
+
*/
|
|
82
|
+
async assertCanGrant(grantor, keys) {
|
|
83
|
+
if (grantor.isRoot === true)
|
|
84
|
+
return; // strict root bypass
|
|
85
|
+
const effective = await this.effectiveKeys(grantor);
|
|
86
|
+
const registered = this.registry.listActions().map((a) => a.permissionKey);
|
|
87
|
+
for (const key of keys) {
|
|
88
|
+
if (!coversKey(effective, registered, key)) {
|
|
89
|
+
throw new GrantCeilingError(key);
|
|
90
|
+
}
|
|
91
|
+
}
|
|
92
|
+
}
|
|
93
|
+
}
|
|
94
|
+
exports.GrantCeiling = GrantCeiling;
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"grant-ceiling.js","sourceRoot":"","sources":["../../../src/features/authz/grant-ceiling.ts"],"names":[],"mappings":";;;AAyCA,8BAaC;AAtCD,uCAA6D;AAC7D,qFAAyF;AAEzF,MAAM,KAAK,GAAG,cAAc,CAAC;AAE7B,6FAA6F;AAC7F,MAAa,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,GAAW;QACrB,KAAK,CAAC,qBAAqB,GAAG,0CAA0C,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AALD,8CAKC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,SAAS,CACvB,SAA8B,EAC9B,cAAiC,EACjC,OAAe;IAEf,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IACD,8FAA8F;IAC9F,MAAM,QAAQ,GAAG,IAAA,gDAAe,EAAC,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC;IACjE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAa,YAAY;IAEJ;IACA;IAEA;IAJnB,YACmB,IAAU,EACV,QAAwB;IACzC,+FAA+F;IAC9E,MAAoB,IAAI,CAAC,GAAG;QAH5B,SAAI,GAAJ,IAAI,CAAM;QACV,aAAQ,GAAR,QAAQ,CAAgB;QAExB,QAAG,GAAH,GAAG,CAAyB;IAC5C,CAAC;IAEJ;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,OAAkB;QACpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAA,qDAAoB,EAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,GAAG,EAAE,CAAC;YAC3C,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACjC,6BAA6B,KAAK,iDAAiD,EAAE,GAAG,EACxF,OAAO,CACR,CAAmC,CAAC;YACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAuB,CAAC,CAAC;YACrF,OAAO,IAAI,GAAG,CAAC,IAAA,gDAAe,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,oCAA6B;gBAAE,MAAM,KAAK,CAAC;YAChE,MAAM,IAAI,oCAA6B,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,OAAkB,EAAE,IAAuB;QAC9D,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,CAAC,qBAAqB;QAC1D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAuB,CAAC,CAAC;QACrF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;CACF;AA/CD,oCA+CC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"mariadb-catalog-store.js","sourceRoot":"","sources":["../../../src/features/authz/mariadb-catalog-store.ts"],"names":[],"mappings":";;;AAMA,MAAM,KAAK,GAAG,cAAc,CAAC;AAE7B;;;;GAIG;AACH,MAAa,mBAAmB;IACD;IAA7B,YAA6B,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAE3C,KAAK,CAAC,eAAe;QACnB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACjC;kBACY,KAAK,mBAAmB,CACrC,CAGC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtB,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,aAAa;YAC7E,MAAM,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS;YAC7D,MAAM,EAAE,CAAC,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;SAC7D,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,GAAyC;QAC9D,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAChC,iBAAiB,KAAK;;;8CAGkB,KAAK,uCAAuC,EACpF,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,aAAa,CAAC,CACpG,CAA8B,CAAC;QAChC,OAAO,MAAM,CAAC,GAAG,EAAE,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAuB;QACxC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB,YAAY,KAAK,qEAAqE,EAAE,GAAG,EAC3F,CAAC,GAAG,IAAI,CAAC,CACV,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAuB;QACtC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB,YAAY,KAAK,mEAAmE,EAAE,GAAG,EACzF,CAAC,GAAG,IAAI,CAAC,CACV,CAAC;IACJ,CAAC;CACF;AA9CD,kDA8CC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"permission-version.bumper.js","sourceRoot":"","sources":["../../../src/features/authz/permission-version.bumper.ts"],"names":[],"mappings":";;;AAAA,uCAA6D;AAE7D,uEAAuE;AACvE,MAAM,KAAK,GAAG,cAAc,CAAC;AAE7B,mFAAmF;AACnF,MAAM,GAAG,GAAG,YAAY,CAAC;AAWzB;;;;;;;;;;;;;GAaG;AACH,MAAa,uBAAuB;IAClC;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,IAAe;QACrD,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,WAAW,CAAC,QAAgB,EAAE,IAAe;QACjD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAC5B;oBACY,GAAG;oBACH,GAAG;4DACqC,EACpD,CAAC,QAAQ,CAAC,CACX,CAA8B,CAAC;YAChC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC1C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACtC,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,oCAA6B,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,0DAA0D;IAClD,KAAK,CAAC,UAAU,CAAC,UAAkB,EAAE,IAAe;QAC1D,MAAM,IAAI,CAAC,KAAK,CACd,iBAAiB,KAAK;;6DAEiC,EACvD,CAAC,UAAU,CAAC,CACb,CAAC;IACJ,CAAC;CACF;AAnDD,0DAmDC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"record-authorization.js","sourceRoot":"","sources":["../../../src/features/authz/record-authorization.ts"],"names":[],"mappings":";;;;;AAuBA,0DAUC;AAoBD,4EAYC;AAjED;;;;;;;;;;GAUG;AACH,sDAA6C;AAC7C,yCAA0G;AAE1G,iDAAmD;AACnD,qFAA4E;AAC5E,uEAAkE;AAElE;;;;GAIG;AACH,SAAgB,uBAAuB;IACrC,MAAM,EAAE,GAAG,IAAA,oBAAY,GAAE,CAAC;IAC1B,OAAO,iBAAO,CAAC,UAAU,CAAC;QACxB,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,QAAQ,EAAE,EAAE,CAAC,QAAQ;QACrB,QAAQ,EAAE,EAAE,CAAC,QAAQ;QACrB,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,CAAC;KAC7D,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,gCAAgC,CAC9C,IAAU,EACV,eAA2C,EAAE;IAE7C,MAAM,QAAQ,GAAG,IAAA,mCAA2B,EAAC,CAAC,GAAG,4BAAe,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC;IACpF,OAAO;QACL,IAAI;QACJ,eAAe,EAAE,IAAI,yDAAwB,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC7D,YAAY,EAAE,IAAI,+CAAqB,EAAE;QACzC,QAAQ;QACR,iBAAiB,EAAE,EAAE;KACtB,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"session-facts.reader.js","sourceRoot":"","sources":["../../../src/features/authz/session-facts.reader.ts"],"names":[],"mappings":";;;AAoBA,yCAAmG;AAEnG;;;;;GAKG;AACH,MAAa,qBAAqB;IAGb;IAFnB;IACE,uFAAuF;IACtE,MAEb,gCAAwB;QAFX,QAAG,GAAH,GAAG,CAEQ;IAC3B,CAAC;IAEJ,6FAA6F;IAC7F,IAAI,WAAW;QACb,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,wBAAgB,CAAC,CAAC,WAAW,CAAC;IAC/D,CAAC;IAED,yFAAyF;IACzF,IAAI,kBAAkB;QACpB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,wBAAgB,CAAC,CAAC,kBAAkB,CAAC;IACtE,CAAC;CACF;AAjBD,sDAiBC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"company.controller.js","sourceRoot":"","sources":["../../../src/features/company/company.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAwF;AACxF,yCAA2C;AAC3C,6DAAsD;AACtD,2DAA4E;AAGrE,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IACC;IAA7B,YAA6B,SAAyB;QAAzB,cAAS,GAAT,SAAS,CAAgB;IAAG,CAAC;IAE1D;;;;OAIG;IAGG,AAAN,KAAK,CAAC,aAAa,CAAU,KAAmB;QAC9C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAA,8BAAc,EAAC,KAAK,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC1D,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACjE,CAAC;IAED,4EAA4E;IAGtE,AAAN,KAAK,CAAC,aAAa,CAAS,IAAuB;QACjD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,IAAI,UAAU,CAAC,CAAC;QACxE,OAAO,EAAE,EAAE,EAAE,CAAC;IAChB,CAAC;IAED,2DAA2D;IAG3D,UAAU,CAAgB,IAAY;QACpC,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,6DAA6D;IAGvD,AAAN,KAAK,CAAC,aAAa,CAAgB,IAAY,EAAU,IAAwC;QAC/F,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,6DAA6D;IAGvD,AAAN,KAAK,CAAC,aAAa,CAAgB,IAAY;QAC7C,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;CACF,CAAA;AA9CY,8CAAiB;AAUtB;IAFL,IAAA,YAAG,EAAC,WAAW,CAAC;IAChB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9B,WAAA,IAAA,cAAK,GAAE,CAAA;;;;sDAI3B;AAKK;IAFL,IAAA,aAAI,EAAC,WAAW,CAAC;IACjB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChC,WAAA,IAAA,aAAI,GAAE,CAAA;;;;sDAG1B;AAKD;IAFC,IAAA,YAAG,EAAC,iBAAiB,CAAC;IACtB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACvC,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;;;;mDAExB;AAKK;IAFL,IAAA,YAAG,EAAC,iBAAiB,CAAC;IACtB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChC,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;IAAgB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;sDAGvD;AAKK;IAFL,IAAA,eAAM,EAAC,iBAAiB,CAAC;IACzB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChC,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;;;;sDAGjC;4BA7CU,iBAAiB;IAD7B,IAAA,mBAAU,EAAC,UAAU,CAAC;qCAEmB,mCAAc;GAD3C,iBAAiB,CA8C7B"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"company.service.js","sourceRoot":"","sources":["../../../src/features/company/company.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,2CAA+D;AAC/D,2DAA0E;AAE1E,MAAM,qBAAqB,GAAG,CAAC,MAAM,CAAU,CAAC;AAChD,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAU,CAAC;AAErE;;;;GAIG;AAEI,IAAM,cAAc,GAApB,MAAM,cAAc;IACI;IAA7B,YAA6B,OAAuB;QAAvB,YAAO,GAAP,OAAO,CAAgB;IAAG,CAAC;IAExD,iCAAiC;IACjC,aAAa,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,2EAA2E;IAC3E,aAAa,CAAC,MAAmB;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAA,8BAAc,EAAC,MAAM,EAAE,qBAAqB,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC1G,CAAC;IAED,6BAA6B;IAC7B,UAAU,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,wBAAwB;IACxB,aAAa,CAAC,IAAY,EAAE,KAAyC;QACnE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,wBAAwB;IACxB,aAAa,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9C,CAAC;CACF,CAAA;AA3BY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;qCAE2B,uBAAc;GADzC,cAAc,CA2B1B"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"cross-tenant-grant-read.service.js","sourceRoot":"","sources":["../../../src/features/cross-tenant/cross-tenant-grant-read.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iFAAiF;AACjF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,2CAA4C;AAG5C,2CAAmD;AAEnD,MAAM,KAAK,GAAG,cAAc,CAAC;AAC7B,MAAM,GAAG,GAAG,YAAY,CAAC;AAwEzB;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,GAAY;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;QAC7F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,8FAA8F;AAC9F,SAAS,WAAW,CAAC,GAAkB;IACrC,MAAM,IAAI,GAAG,GAAG,CAAC,gBAAgB,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC7F,OAAO,IAAI,IAAI,iBAAiB,CAAC;AACnC,CAAC;AAED,SAAS,WAAW,CAAC,GAAkB;IACrC,OAAO,GAAG,CAAC,gBAAgB,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3D,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,GAA6B;IAChD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,yFAAyF;AACzF,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;CAkBtB,CAAC;AAEF,MAAM,KAAK,GAAG;WACH,KAAK;gBACA,GAAG;gBACH,GAAG;gBACH,GAAG;gBACH,GAAG;gBACH,GAAG;CAClB,CAAC;AAGK,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IAiBnB;IACA;IACA;IAlBnB;;;;;;;;;;;;;;OAcG;IACH,YACmB,IAAU,EACV,mBAA+C,EAC/C,aAAqD;QAFrD,SAAI,GAAJ,IAAI,CAAM;QACV,wBAAmB,GAAnB,mBAAmB,CAA4B;QAC/C,kBAAa,GAAb,aAAa,CAAwC;IACrE,CAAC;IAEJ;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CAAC,QAAgB,EAAE,KAAa;QAC7C,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACjC,UAAU,cAAc;SACrB,KAAK;;;;0CAI4B,EACpC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAClB,CAAoB,CAAC;QAEtB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,IAAI,gBAAgB;YAC5D,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC;YAC7B,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC;YAC7B,OAAO,EAAE,GAAG,CAAC,YAAY;YACzB,SAAS,EAAE,GAAG,CAAC,YAAY;YAC3B,KAAK,EAAE,GAAG,CAAC,SAAS;YACpB,cAAc,EAAE,mBAAmB,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAC5D,aAAa,EAAE,GAAG,CAAC,eAAe,IAAI,cAAc;YACpD,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC;SAChD,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACjC,UAAU,cAAc;SACrB,KAAK;;wCAE0B,EAClC,CAAC,QAAQ,CAAC,CACX,CAAoB,CAAC;QAEtB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,iBAAiB,EAAE,GAAG,CAAC,mBAAmB,IAAI,gBAAgB;YAC9D,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC;YAC7B,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC;YAC7B,OAAO,EAAE,GAAG,CAAC,YAAY;YACzB,SAAS,EAAE,GAAG,CAAC,YAAY;YAC3B,KAAK,EAAE,GAAG,CAAC,SAAS;YACpB,cAAc,EAAE,mBAAmB,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAC5D,MAAM,EAAE,GAAG,CAAC,UAAU;YACtB,aAAa,EAAE,GAAG,CAAC,eAAe,IAAI,cAAc;YACpD,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC;SAChD,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACjC,UAAU,cAAc;SACrB,KAAK;;;0CAG4B,EACpC,CAAC,QAAQ,CAAC,CACX,CAAoB,CAAC;QAEtB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,IAAI,gBAAgB;YAC5D,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC;YAC7B,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC;YAC7B,OAAO,EAAE,GAAG,CAAC,YAAY;YACzB,SAAS,EAAE,GAAG,CAAC,YAAY;YAC3B,KAAK,EAAE,GAAG,CAAC,SAAS;YACpB,cAAc,EAAE,mBAAmB,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAC5D,aAAa,EAAE,GAAG,CAAC,eAAe,IAAI,cAAc;YACpD,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC;SAChD,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;;;;OAQG;IACK,iBAAiB;QACvB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7C,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAC3E,IAAI,GAAG,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,gCAAgC;QAChG,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,eAAe,CAAC,OAAe;QAC7B,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,kBAAkB;QACtB,MAAM,GAAG,GAAuB,EAAE,CAAC;QACnC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YAC/C,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO;gBACP,KAAK,EAAE,OAAO,EAAE,oFAAoF;gBACpG,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;aAC1C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF,CAAA;AA5KY,kEAA2B;sCAA3B,2BAA2B;IADvC,IAAA,mBAAU,GAAE;;GACA,2BAA2B,CA4KvC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"cross-tenant-grant.controller.js","sourceRoot":"","sources":["../../../src/features/cross-tenant/cross-tenant-grant.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,+EAA+E;AAC/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,2CAWwB;AACxB,yCAQuB;AAEvB,6FAAmF;AAiBnF,MAAM,mBAAmB,GAAgC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE1E,qFAAqF;AACrF,SAAS,cAAc,CAAC,IAAmC;IAQzD,MAAM,eAAe,GAAG,IAAI,EAAE,eAAe,CAAC;IAC9C,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,4BAAmB,CAAC,6BAA6B,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,CAAC;IACtC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,WAA+B,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,4BAAmB,CAAC,sCAAsC,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,CAAC;IACtC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,4BAAmB,CAAC,yBAAyB,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,CAAC;IAC9B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,4BAAmB,CAAC,qBAAqB,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,EAAE,cAAc,CAAC;IAC5C,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;QAC9B,cAAc,CAAC,MAAM,KAAK,CAAC;QAC3B,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EACnE,CAAC;QACD,MAAM,IAAI,4BAAmB,CAAC,yDAAyD,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,CAAC;IACtC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,4BAAmB,CAAC,iEAAiE,CAAC,CAAC;IACnG,CAAC;IACD,OAAO;QACL,eAAe;QACf,WAAW,EAAE,WAA+B;QAC5C,WAAW;QACX,OAAO;QACP,cAAc,EAAE,cAA0B;QAC1C,WAAW;KACZ,CAAC;AACJ,CAAC;AAGM,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IAEwB;IAC1C;IAFnB,YAC6D,WAAmC,EAC7E,KAAkC;QADQ,gBAAW,GAAX,WAAW,CAAwB;QAC7E,UAAK,GAAL,KAAK,CAA6B;IAClD,CAAC;IAEJ;;;;OAIG;IAGG,AAAN,KAAK,CAAC,KAAK,CAAQ,GAAkB,EAAU,IAAuB;QACpE,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACpC,oFAAoF;QACpF,uFAAuF;QACvF,oFAAoF;QACpF,+DAA+D;QAC/D,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,4BAAmB,CAC3B,YAAY,MAAM,CAAC,OAAO,+CAA+C;gBACvE,wDAAwD,CAC3D,CAAC;QACJ,CAAC;QACD,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;gBAClC,cAAc,EAAE,GAAG,CAAC,SAAS,CAAC,QAAQ;gBACtC,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,KAAK,EAAE,aAAa;gBACpB,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE;aAC5B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,yFAAyF;IAGnF,AAAN,KAAK,CAAC,MAAM,CAAQ,GAAkB,EAAiB,IAAY;QACjE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;QACnF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IAGG,AAAN,KAAK,CAAC,MAAM,CAAQ,GAAkB,EAAiB,IAAY;QACjE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;OAGG;IAGG,AAAN,KAAK,CAAC,KAAK,CAAQ,GAAkB;QACnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5E,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAED;;;;OAIG;IAGG,AAAN,KAAK,CAAC,IAAI,CAAQ,GAAkB;QAClC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACzC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC3C,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC;SAChD,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAClC,CAAC;IAED,wFAAwF;IAGlF,AAAN,KAAK,CAAC,cAAc;QAClB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;QACpD,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;CACF,CAAA;AA1GY,gEAA0B;AAa/B;IAFL,IAAA,aAAI,EAAC,qBAAqB,CAAC;IAC3B,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAClD,WAAA,IAAA,YAAG,GAAE,CAAA;IAAsB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;uDA6B7C;AAKK;IAFL,IAAA,aAAI,EAAC,kCAAkC,CAAC;IACxC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAClD,WAAA,IAAA,YAAG,GAAE,CAAA;IAAsB,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;;;;wDAOrD;AAUK;IAFL,IAAA,aAAI,EAAC,kCAAkC,CAAC;IACxC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAClD,WAAA,IAAA,YAAG,GAAE,CAAA;IAAsB,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;;;;wDAOrD;AAQK;IAFL,IAAA,YAAG,EAAC,2BAA2B,CAAC;IAChC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACnC,WAAA,IAAA,YAAG,GAAE,CAAA;;;;uDAGjB;AASK;IAFL,IAAA,YAAG,EAAC,qBAAqB,CAAC;IAC1B,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACpC,WAAA,IAAA,YAAG,GAAE,CAAA;;;;sDAMhB;AAKK;IAFL,IAAA,YAAG,EAAC,qCAAqC,CAAC;IAC1C,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;;;;gEAI/C;qCAzGU,0BAA0B;IADtC,IAAA,mBAAU,EAAC,UAAU,CAAC;IAGlB,WAAA,IAAA,eAAM,EAAC,wCAAgC,CAAC,CAAA;qCAA+B,8BAAsB;QACtE,gEAA2B;GAH1C,0BAA0B,CA0GtC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,GAAG,YAAY,8BAAsB;QAAE,OAAO,IAAI,2BAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtF,IAAI,GAAG,YAAY,yBAAiB;QAAE,OAAO,IAAI,4BAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClF,IAAI,GAAG,YAAY,kCAA0B;QAAE,OAAO,IAAI,oCAA2B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnG,OAAO,GAAY,CAAC;AACtB,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"grant-authorize.js","sourceRoot":"","sources":["../../../src/features/cross-tenant/grant-authorize.ts"],"names":[],"mappings":";;AA2CA,sEAuBC;AAvBD,SAAgB,6BAA6B,CAC3C,IAAuC;IAEvC,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG;YAChB,IAAI,EAAE,MAAe;YACrB,EAAE,EAAE,WAAW;YACf,8FAA8F;YAC9F,iBAAiB,EAAE,QAAQ;YAC3B,mBAAmB,EAAE,CAAC,QAAQ,CAAC;YAC/B,QAAQ;YACR,OAAO;YACP,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;SACjC,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAC1C,SAAS,EACT,EAAE,GAAG,EAAE,MAAM,EAAE,EACf,EAAE,KAAK,EAAE,aAAsB,EAAE,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,EAC1E,EAAE,eAAe,EAAE,IAAI,EAAE,CAC1B,CAAC;QACF,OAAO,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC;IACrC,CAAC,CAAC;AACJ,CAAC"}
|
|
@@ -1,4 +1,5 @@
|
|
|
1
1
|
import { type DynamicModule } from '@nestjs/common';
|
|
2
|
+
import { type ObjectTypeInput } from '@astram/engine';
|
|
2
3
|
/**
|
|
3
4
|
* IdentityFeatureModule — the framework-owned identity FEATURE surface (company/user/role CRUD;
|
|
4
5
|
* more in later phases) as thin controllers over the engine's RecordsService. The CONSUMER imports
|
|
@@ -18,9 +19,16 @@ export declare class IdentityFeatureModule {
|
|
|
18
19
|
* by the writer's own `decide()` (a route-allows/writer-denies split). Omitted ⇒
|
|
19
20
|
* `isRoot` is always false (a non-root consumer works; only a root offering
|
|
20
21
|
* cross-tenant grants needs it). See ADR-0026 + the template wiring.
|
|
22
|
+
* @param extraObjects the consumer's OWN registered object types — pass the SAME array
|
|
23
|
+
* given to `buildIdentityRecordAuthorization(pool, extraObjects)`. Without them, the
|
|
24
|
+
* guided rule-builder SCHEMA (Phase 5) and the OWNER-SHARE resolver (Phase 6) only know
|
|
25
|
+
* the framework identity types, so a consumer's own OWNED type (e.g. `note`) is NOT
|
|
26
|
+
* policy-authorable and NOT shareable ("type '…' is not registered — cannot share").
|
|
27
|
+
* Passing them here lets an owner share their own records + author policies over them.
|
|
21
28
|
*/
|
|
22
|
-
static forRoot({ rootIds }?: {
|
|
29
|
+
static forRoot({ rootIds, extraObjects, }?: {
|
|
23
30
|
rootIds?: readonly string[];
|
|
31
|
+
extraObjects?: readonly ObjectTypeInput[];
|
|
24
32
|
}): DynamicModule;
|
|
25
33
|
}
|
|
26
34
|
//# sourceMappingURL=identity-feature.module.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"identity-feature.module.d.ts","sourceRoot":"","sources":["../../src/features/identity-feature.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;
|
|
1
|
+
{"version":3,"file":"identity-feature.module.d.ts","sourceRoot":"","sources":["../../src/features/identity-feature.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE5D,OAAO,EAYL,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AA4ExB;;;;;;;;;;GAUG;AACH,qBACa,qBAAqB;IAChC;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,OAAO,CAAC,EACb,OAAO,EACP,YAAiB,GAClB,GAAE;QAAE,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,YAAY,CAAC,EAAE,SAAS,eAAe,EAAE,CAAA;KAAO,GAAG,aAAa;CAmYnG"}
|
|
@@ -33,10 +33,14 @@ const db_permission_facts_adapter_js_1 = require("./authz/db-permission-facts.ad
|
|
|
33
33
|
const access_bundle_store_js_1 = require("./authz/access-bundle-store.js");
|
|
34
34
|
const grant_admin_service_js_1 = require("./authz/grant-admin.service.js");
|
|
35
35
|
const grant_admin_controller_js_1 = require("./authz/grant-admin.controller.js");
|
|
36
|
+
const grant_ceiling_js_1 = require("./authz/grant-ceiling.js");
|
|
36
37
|
const policy_service_js_1 = require("./policy/policy.service.js");
|
|
37
38
|
const policy_controller_js_1 = require("./policy/policy.controller.js");
|
|
38
39
|
const share_service_js_1 = require("./share/share.service.js");
|
|
39
40
|
const share_controller_js_1 = require("./share/share.controller.js");
|
|
41
|
+
const service_account_store_js_1 = require("./service-account/service-account.store.js");
|
|
42
|
+
const service_account_service_js_1 = require("./service-account/service-account.service.js");
|
|
43
|
+
const service_account_controller_js_1 = require("./service-account/service-account.controller.js");
|
|
40
44
|
const catalog_reconcile_job_js_1 = require("./authz/catalog-reconcile.job.js");
|
|
41
45
|
const access_bundle_reconcile_job_js_1 = require("./authz/access-bundle-reconcile.job.js");
|
|
42
46
|
const catalog_bootstrap_provider_js_1 = require("./authz/catalog-bootstrap.provider.js");
|
|
@@ -81,8 +85,14 @@ let IdentityFeatureModule = IdentityFeatureModule_1 = class IdentityFeatureModul
|
|
|
81
85
|
* by the writer's own `decide()` (a route-allows/writer-denies split). Omitted ⇒
|
|
82
86
|
* `isRoot` is always false (a non-root consumer works; only a root offering
|
|
83
87
|
* cross-tenant grants needs it). See ADR-0026 + the template wiring.
|
|
88
|
+
* @param extraObjects the consumer's OWN registered object types — pass the SAME array
|
|
89
|
+
* given to `buildIdentityRecordAuthorization(pool, extraObjects)`. Without them, the
|
|
90
|
+
* guided rule-builder SCHEMA (Phase 5) and the OWNER-SHARE resolver (Phase 6) only know
|
|
91
|
+
* the framework identity types, so a consumer's own OWNED type (e.g. `note`) is NOT
|
|
92
|
+
* policy-authorable and NOT shareable ("type '…' is not registered — cannot share").
|
|
93
|
+
* Passing them here lets an owner share their own records + author policies over them.
|
|
84
94
|
*/
|
|
85
|
-
static forRoot({ rootIds } = {}) {
|
|
95
|
+
static forRoot({ rootIds, extraObjects = [], } = {}) {
|
|
86
96
|
// ONE shared shield_authz pool for the whole grant-admin stack (ADR-0011): the
|
|
87
97
|
// permission-version bumper, the AccessBundleStore, the GrantAdminService, and the two
|
|
88
98
|
// reconcile jobs all run over this single pool (don't open several). Opened once at
|
|
@@ -92,19 +102,24 @@ let IdentityFeatureModule = IdentityFeatureModule_1 = class IdentityFeatureModul
|
|
|
92
102
|
const postingVersionBump = {
|
|
93
103
|
bumpTenant: (tenantUuid) => bumper.bumpForTenant(tenantUuid, authzPool),
|
|
94
104
|
};
|
|
105
|
+
// The core ModuleRegistry the catalog reconcile job needs, built from the identity
|
|
106
|
+
// object registrations (guard's bridge reflects decorated classes → registry). Built BEFORE
|
|
107
|
+
// the grant-admin service so the GrantCeiling (ADR-0029) can share it as the key universe.
|
|
108
|
+
const identityRegistry = (0, guard_1.buildIdentityModuleRegistry)([...objects_js_1.identityObjects]);
|
|
95
109
|
// The grant-admin collaborators built at forRoot() over the shared pool (mirrors the
|
|
96
|
-
// postingVersionBump closure pattern above).
|
|
110
|
+
// postingVersionBump closure pattern above). GrantCeiling (ADR-0029) enforces the
|
|
111
|
+
// self-escalation ceiling: a non-root grantor may only grant a key they themselves hold —
|
|
112
|
+
// resolved over the SAME authz pool + registry the object-type gate uses (one source of
|
|
113
|
+
// truth for "what a principal holds"). ALWAYS wired here, so production always enforces.
|
|
97
114
|
const accessBundleStore = new access_bundle_store_js_1.AccessBundleStore(authzPool);
|
|
98
|
-
const
|
|
115
|
+
const grantCeiling = new grant_ceiling_js_1.GrantCeiling(authzPool, identityRegistry);
|
|
116
|
+
const grantAdminService = new grant_admin_service_js_1.GrantAdminService(authzPool, bumper, accessBundleStore, grantCeiling);
|
|
99
117
|
// Scope closure (Task 1.2 of the scoped-hierarchy program): the reconciler + node
|
|
100
118
|
// move/delete maintenance, over the SAME shared authzPool (it reaches BOTH shield_app —
|
|
101
119
|
// companies — and shield_authz — scope_closure). Reuses the SAME `bumper` instance so a
|
|
102
120
|
// moveNode's session-invalidation joins the move's transaction. reconcileClosure() is
|
|
103
121
|
// kicked post-boot by the CatalogBootstrapProvider (mirrors the catalog reconcile).
|
|
104
122
|
const scopeClosureService = new scope_closure_service_js_1.ScopeClosureService(authzPool, bumper);
|
|
105
|
-
// The core ModuleRegistry the catalog reconcile job needs, built from the identity
|
|
106
|
-
// object registrations (guard's bridge reflects decorated classes → registry).
|
|
107
|
-
const identityRegistry = (0, guard_1.buildIdentityModuleRegistry)([...objects_js_1.identityObjects]);
|
|
108
123
|
// Audit viewer (Phase 5): the AuditReader + LabelResolver over the SAME shared authzPool
|
|
109
124
|
// (the reader queries shield_audit + the resolver/actor-lookup query shield_app, both
|
|
110
125
|
// reachable by that pool). `auditNameToId` is the actor-name -> uuid reverse lookup for the
|
|
@@ -212,7 +227,8 @@ let IdentityFeatureModule = IdentityFeatureModule_1 = class IdentityFeatureModul
|
|
|
212
227
|
// are meaningfully policy-authorable in v1; but we expose every registered type's fields and
|
|
213
228
|
// let the delegated-admin ceiling + validateGuidedPolicy gate what a caller may actually
|
|
214
229
|
// author. A consumer's own types (extraObjects) would extend this the same way (future).
|
|
215
|
-
|
|
230
|
+
// Include the consumer's `extraObjects` so their OWNED types are policy-authorable too.
|
|
231
|
+
const schemaSource = [...objects_js_1.identityObjects, ...extraObjects].map((input) => {
|
|
216
232
|
const reg = typeof input === 'function' ? (0, engine_1.reflectObjectType)(input) : input;
|
|
217
233
|
return {
|
|
218
234
|
typeKey: reg.typeKey,
|
|
@@ -235,8 +251,11 @@ let IdentityFeatureModule = IdentityFeatureModule_1 = class IdentityFeatureModul
|
|
|
235
251
|
// surfaces `owned`/table/schema/pk/owner/tenant columns via the engine helpers. The writer's
|
|
236
252
|
// audit reuses the SAME shield_audit sink pattern (best-effort). The ShareService adds
|
|
237
253
|
// name-resolution (no raw uuid) via the existing DirectoryLabelResolver (`auditLabels`).
|
|
254
|
+
// Include the consumer's `extraObjects` so their OWNED types are shareable (a `note` a user
|
|
255
|
+
// owns can be shared) — without them the resolver only knows the framework identity types
|
|
256
|
+
// and the writer rejects "type 'note' is not registered — cannot share." (Live-acceptance fix.)
|
|
238
257
|
const shareTypeInfoByKey = new Map();
|
|
239
|
-
for (const input of objects_js_1.identityObjects) {
|
|
258
|
+
for (const input of [...objects_js_1.identityObjects, ...extraObjects]) {
|
|
240
259
|
const reg = typeof input === 'function' ? (0, engine_1.reflectObjectType)(input) : input;
|
|
241
260
|
const owner = (0, engine_1.ownerColumn)(reg);
|
|
242
261
|
const pk = reg.primaryKey.kind === 'uuid' ? (0, engine_1.uuidPkColumn)(reg.primaryKey) : null;
|
|
@@ -282,6 +301,50 @@ let IdentityFeatureModule = IdentityFeatureModule_1 = class IdentityFeatureModul
|
|
|
282
301
|
},
|
|
283
302
|
});
|
|
284
303
|
const shareService = new share_service_js_1.ShareService(recordShareWriter, auditLabels);
|
|
304
|
+
// ── SERVICE ACCOUNTS + API KEYS (ADR-0033, Phase 2) ──────────────────────────────────────
|
|
305
|
+
// The machine-identity admin surface: create/scope service accounts + issue/rotate/revoke
|
|
306
|
+
// their `ask_…` API keys. Self-wired here over the SAME shared authzPool (which reaches BOTH
|
|
307
|
+
// shield_app.service_account — the accounts — AND shield_authz.service_account_key — the hashed
|
|
308
|
+
// keys). The guard's MariaDbApiKeyStore + Argon2idPasswordHasher back the credential lifecycle;
|
|
309
|
+
// the service enforces own-tenant + the ADR-0029 ceiling (scope ⊆ mine, roles ⊆ mine).
|
|
310
|
+
const serviceAccountStore = new service_account_store_js_1.ServiceAccountStore(authzPool);
|
|
311
|
+
const serviceAccountKeyStore = new guard_1.MariaDbApiKeyStore(authzPool);
|
|
312
|
+
const serviceAccountHasher = new guard_1.Argon2idPasswordHasher();
|
|
313
|
+
// Best-effort audit → the SAME shield_audit sink pattern (a sink throw never fails the op).
|
|
314
|
+
const serviceAccountAuditSink = new engine_1.MariaDbAuditSink({}); // shield_audit.audit_log defaults
|
|
315
|
+
const serviceAccountAudit = {
|
|
316
|
+
record: async (event) => {
|
|
317
|
+
try {
|
|
318
|
+
await serviceAccountAuditSink.record({
|
|
319
|
+
type: 'admin_action',
|
|
320
|
+
occurredAtMs: event.occurredAtMs,
|
|
321
|
+
actorId: event.actorId,
|
|
322
|
+
tenantId: event.tenantId,
|
|
323
|
+
action: { key: event.action },
|
|
324
|
+
attributes: { ...event.attributes, eventType: 'service_account' },
|
|
325
|
+
}, (sql, params) => authzPool.query(sql, params));
|
|
326
|
+
}
|
|
327
|
+
catch {
|
|
328
|
+
// Best-effort — an audit failure must never fail a legitimate account/key operation.
|
|
329
|
+
}
|
|
330
|
+
},
|
|
331
|
+
};
|
|
332
|
+
// Resolve a principal id → username for the "created by" view (no raw uuid). Reuses the same
|
|
333
|
+
// shield_app.users lookup the audit actor filter uses (inverted). Unknown → null (view falls
|
|
334
|
+
// back to no name, never an id).
|
|
335
|
+
const resolveActorName = async (id) => {
|
|
336
|
+
const rows = (await authzPool.query('SELECT u_username AS name FROM `shield_app`.`users` WHERE u_uuid = ? LIMIT 1', [id]));
|
|
337
|
+
return rows[0]?.name ?? null;
|
|
338
|
+
};
|
|
339
|
+
const serviceAccountService = new service_account_service_js_1.ServiceAccountService(serviceAccountStore, serviceAccountKeyStore, serviceAccountHasher, serviceAccountAudit, resolveActorName,
|
|
340
|
+
// The ceiling's roles: in-effect postings (the same source as gate 5 and GrantCeiling).
|
|
341
|
+
(principalId, tenantId) => (0, db_permission_facts_adapter_js_1.readRoleIdsForTenant)(authzPool, principalId, tenantId));
|
|
342
|
+
// NOTE: the machine AUTH path (the `ServiceAuthenticator` behind `SHIELD_SERVICE_AUTHENTICATOR`)
|
|
343
|
+
// is provided by the guard's own AuthModule (under `auth: true`), NOT here — a token provided in
|
|
344
|
+
// this later, sibling feature module is invisible to the APP_GUARD in ShieldModule (that DI
|
|
345
|
+
// boundary made an identity-provided authenticator resolve to `undefined` → `ask_…` bearers
|
|
346
|
+
// 401'd). This module owns only the ACCOUNT ADMIN surface (store + service + controller); the
|
|
347
|
+
// guard owns authentication. (ADR-0033.)
|
|
285
348
|
return {
|
|
286
349
|
module: IdentityFeatureModule_1,
|
|
287
350
|
imports: [
|
|
@@ -322,6 +385,9 @@ let IdentityFeatureModule = IdentityFeatureModule_1 = class IdentityFeatureModul
|
|
|
322
385
|
policy_controller_js_1.PolicyController,
|
|
323
386
|
// Owner shares (Phase 6) — `record-shares` collides with nothing. Appended last.
|
|
324
387
|
share_controller_js_1.ShareController,
|
|
388
|
+
// Service accounts (ADR-0033) — `service-accounts/*` collides with nothing; its static
|
|
389
|
+
// sub-paths (/keys, /keys/rotate, /keys/revoke) sit under `:id` and are method-distinct.
|
|
390
|
+
service_account_controller_js_1.ServiceAccountController,
|
|
325
391
|
],
|
|
326
392
|
providers: [
|
|
327
393
|
company_service_js_1.CompanyService,
|
|
@@ -349,6 +415,10 @@ let IdentityFeatureModule = IdentityFeatureModule_1 = class IdentityFeatureModul
|
|
|
349
415
|
// Owner shares (Phase 6) — the ShareService over the framework RecordShareWriter + the
|
|
350
416
|
// DirectoryLabelResolver (name resolution). useValue, all over the shared authzPool.
|
|
351
417
|
{ provide: share_service_js_1.ShareService, useValue: shareService },
|
|
418
|
+
// Service accounts (ADR-0033) — the ServiceAccountService over the shared authzPool +
|
|
419
|
+
// guard key-store/hasher, and the ServiceAuthenticator under the guard's token so the
|
|
420
|
+
// enforcement guard can authenticate `ask_…` bearers out-of-the-box. Both useValue.
|
|
421
|
+
{ provide: service_account_service_js_1.ServiceAccountService, useValue: serviceAccountService },
|
|
352
422
|
// The mutating half of auto-catalog: a single CatalogReconcileJob (post-boot pass +
|
|
353
423
|
// cron), over the shared pool + the identity registry.
|
|
354
424
|
{ provide: catalog_reconcile_job_js_1.CatalogReconcileJob, useValue: new catalog_reconcile_job_js_1.CatalogReconcileJob(authzPool, identityRegistry) },
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"identity-feature.module.js","sourceRoot":"","sources":["../../src/features/identity-feature.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAA4D;AAC5D,uCAA+C;AAC/C,2CAawB;AACxB,yCAauB;AACvB,8CAAgD;AAChD,gDAA0D;AAC1D,qEAA8D;AAC9D,2EAAoE;AACpE,4DAAqD;AACrD,kEAA2D;AAC3D,4DAAqD;AACrD,kEAA2D;AAC3D,oFAA6E;AAC7E,8EAAuE;AACvE,wEAAiE;AACjE,yFAAiF;AACjF,mFAA2E;AAC3E,oEAAoE;AACpE,kFAAqG;AACrG,uFAA+E;AAC/E,6EAGyC;AACzC,2FAA8E;AAC9E,2EAAmE;AACnE,2EAAmE;AACnE,iFAAyE;AACzE,+DAAwD;AACxD,kEAA2D;AAC3D,wEAAiE;AACjE,+DAAwD;AACxD,qEAA8D;AAC9D,+EAAuE;AACvE,2FAAkF;AAClF,yFAAiF;AACjF,+EAAuE;AACvE,6EAAqE;AACrE,qFAA6E;AAC7E,yEAAiE;AACjE,qEAA8D;AAC9D,0GAAgG;AAChG,sGAA6F;AAC7F,0EAAkF;AAElF,mGAAmG;AACnG,SAAS,eAAe;IACtB,MAAM,EAAE,GAAG,IAAA,oBAAY,GAAE,CAAC;IAC1B,OAAO;QACL,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,QAAQ,EAAE,EAAE,CAAC,QAAQ;QACrB,QAAQ,EAAE,EAAE,CAAC,QAAQ;QACrB,6FAA6F;QAC7F,uFAAuF;QACvF,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC;KAClE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AAEI,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IAChC;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,OAAO,CAAC,EACb,OAAO,EACP,YAAY,GAAG,EAAE,MAC6D,EAAE;QAChF,+EAA+E;QAC/E,uFAAuF;QACvF,oFAAoF;QACpF,4EAA4E;QAC5E,MAAM,SAAS,GAAG,IAAA,iDAAuB,GAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,sDAAuB,EAAE,CAAC;QAC7C,MAAM,kBAAkB,GAAuB;YAC7C,UAAU,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC;SACxE,CAAC;QAEF,mFAAmF;QACnF,4FAA4F;QAC5F,2FAA2F;QAC3F,MAAM,gBAAgB,GAAG,IAAA,mCAA2B,EAAC,CAAC,GAAG,4BAAe,CAAC,CAAC,CAAC;QAE3E,qFAAqF;QACrF,kFAAkF;QAClF,0FAA0F;QAC1F,wFAAwF;QACxF,yFAAyF;QACzF,MAAM,iBAAiB,GAAG,IAAI,0CAAiB,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,IAAI,+BAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACnE,MAAM,iBAAiB,GAAG,IAAI,0CAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC;QACpG,kFAAkF;QAClF,wFAAwF;QACxF,wFAAwF;QACxF,sFAAsF;QACtF,oFAAoF;QACpF,MAAM,mBAAmB,GAAG,IAAI,8CAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAEvE,yFAAyF;QACzF,sFAAsF;QACtF,4FAA4F;QAC5F,yFAAyF;QACzF,uFAAuF;QACvF,4FAA4F;QAC5F,MAAM,WAAW,GAAG,IAAI,4CAAkB,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,IAAI,oDAAsB,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,aAAa,GAAG,KAAK,EAAE,IAAY,EAA0B,EAAE;YACnE,MAAM,IAAI,GAAG,CAAC,MAAM,SAAS,CAAC,KAAK,CACjC,4EAA4E,EAC5E,CAAC,IAAI,CAAC,CACP,CAAqB,CAAC;YACvB,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC;QAC7B,CAAC,CAAC;QACF,MAAM,gBAAgB,GAAG,IAAI,wCAAgB,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;QAEvF,yFAAyF;QACzF,6FAA6F;QAC7F,8FAA8F;QAC9F,4FAA4F;QAC5F,kEAAkE;QAClE,MAAM,oBAAoB,GAAG,IAAA,gCAAwB,EAAC,IAAA,0DAAgC,EAAC,SAAS,CAAC,CAAC,CAAC;QACnG,sFAAsF;QACtF,2FAA2F;QAC3F,wFAAwF;QACxF,0FAA0F;QAC1F,6FAA6F;QAC7F,6FAA6F;QAC7F,uCAAuC;QACvC,MAAM,SAAS,GAAG,IAAA,wBAAgB,EAAC,IAAA,0DAAgC,EAAC,SAAS,CAAC,CAAC,CAAC;QAChF,wFAAwF;QACxF,uFAAuF;QACvF,uFAAuF;QACvF,MAAM,yBAAyB,GAAG,IAAA,kDAA6B,EAAC;YAC9D,SAAS,EAAE,oBAAoB;YAC/B,WAAW,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAA,qDAAoB,EAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC;YAC9F,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;SAC/D,CAAC,CAAC;QACH,0FAA0F;QAC1F,gGAAgG;QAChG,+FAA+F;QAC/F,6FAA6F;QAC7F,6FAA6F;QAC7F,+FAA+F;QAC/F,sFAAsF;QACtF,2FAA2F;QAC3F,8FAA8F;QAC9F,iEAAiE;QACjE,+FAA+F;QAC/F,kEAAkE;QAClE,MAAM,cAAc,GAAG,IAAI,yBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,mCAAmC;QACpF,MAAM,UAAU,GAAG;YACjB,MAAM,EAAE,KAAK,EAAE,KAAsB,EAAiB,EAAE;gBACtD,IAAI,CAAC;oBACH,MAAM,SAAS,GACb,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,eAAe,KAAK,KAAK,CAAC,cAAc;wBACrE,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,eAAe,CAAC;wBAC/C,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;oBAC7B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;wBACjC,MAAM,cAAc,CAAC,MAAM,CACzB;4BACE,IAAI,EAAE,gBAAgB;4BACtB,YAAY,EAAE,KAAK,CAAC,YAAY;4BAChC,OAAO,EAAE,KAAK,CAAC,OAAO;4BACtB,QAAQ;4BACR,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE;4BAC7B,UAAU,EAAE;gCACV,GAAG,KAAK,CAAC,UAAU;gCACnB,cAAc,EAAE,KAAK,CAAC,cAAc;gCACpC,eAAe,EAAE,KAAK,CAAC,eAAe;6BACvC;yBACF,EACD,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAC9C,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,gFAAgF;gBAClF,CAAC;YACH,CAAC;SACF,CAAC;QACF,MAAM,sBAAsB,GAAG,IAAI,8BAAsB,CAAC;YACxD,EAAE,EAAE,SAAS;YACb,SAAS,EAAE,yBAAyB;YACpC,KAAK,EAAE,UAAU;SAClB,CAAC,CAAC;QACH,6FAA6F;QAC7F,8EAA8E;QAC9E,MAAM,2BAA2B,GAAG,IAAI,gEAA2B,CACjE,SAAS,EACT,CAAC,GAAG,4BAAe,CAAC,EACpB,kBAAU,CACX,CAAC;QAEF,4FAA4F;QAC5F,8FAA8F;QAC9F,4FAA4F;QAC5F,6FAA6F;QAC7F,wFAAwF;QACxF,oFAAoF;QACpF,yFAAyF;QACzF,MAAM,eAAe,GAAG,IAAI,yBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,kCAAkC;QACpF,MAAM,WAAW,GAAG;YAClB,MAAM,EAAE,KAAK,EAAE,KAAmD,EAAiB,EAAE;gBACnF,IAAI,CAAC;oBACH,MAAM,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;gBACrF,CAAC;gBAAC,MAAM,CAAC;oBACP,0EAA0E;gBAC5E,CAAC;YACH,CAAC;SACF,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,0BAAkB,CAAC,SAAS,CAAC,CAAC;QACtD,8FAA8F;QAC9F,wFAAwF;QACxF,+FAA+F;QAC/F,6FAA6F;QAC7F,yFAAyF;QACzF,yFAAyF;QACzF,wFAAwF;QACxF,MAAM,YAAY,GAAG,CAAC,GAAG,4BAAe,EAAE,GAAG,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,KAAsB,EAAE,EAAE;YACxF,MAAM,GAAG,GACP,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACjE,OAAO;gBACL,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,KAAK,EAAE,GAAG,CAAC,OAAO;gBAClB,OAAO,EAAE,IAAA,kBAAU,EAAC,GAAG,CAAC,OAAO,CAAC;gBAChC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;aAC9D,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,iCAAa,CAAC;YACtC,QAAQ,EAAE,gBAAgB;YAC1B,WAAW;YACX,MAAM,EAAE,oBAAoB;YAC5B,KAAK,EAAE,WAAW;YAClB,YAAY;SACb,CAAC,CAAC;QAEH,4FAA4F;QAC5F,6FAA6F;QAC7F,4FAA4F;QAC5F,yFAAyF;QACzF,6FAA6F;QAC7F,uFAAuF;QACvF,yFAAyF;QACzF,4FAA4F;QAC5F,0FAA0F;QAC1F,gGAAgG;QAChG,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAyB,CAAC;QAC5D,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,4BAAe,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC;YAC1D,MAAM,GAAG,GAAe,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACvF,MAAM,KAAK,GAAG,IAAA,oBAAW,EAAC,GAAG,CAAC,CAAC;YAC/B,MAAM,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAA,qBAAY,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAChF,2FAA2F;YAC3F,0FAA0F;YAC1F,IAAI,CAAC,IAAA,gBAAO,EAAC,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI;gBAAE,SAAS;YAC7D,MAAM,SAAS,GAAG,IAAA,uBAAc,EAAC,GAAG,CAAC,CAAC;YACtC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE;gBAClC,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,QAAQ,EAAE,EAAE;gBACZ,WAAW,EAAE,KAAK;gBAClB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;QACL,CAAC;QACD,MAAM,iBAAiB,GAAsB;YAC3C,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC;SACtD,CAAC;QACF,MAAM,cAAc,GAAG,IAAI,yBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,yBAAyB;QAC1E,MAAM,iBAAiB,GAAG,IAAI,yBAAiB,CAAC;YAC9C,EAAE,EAAE,SAAS;YACb,KAAK,EAAE,iBAAiB;YACxB,KAAK,EAAE;gBACL,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;oBACtB,IAAI,CAAC;wBACH,MAAM,cAAc,CAAC,MAAM,CACzB;4BACE,qFAAqF;4BACrF,iFAAiF;4BACjF,IAAI,EAAE,cAAc;4BACpB,YAAY,EAAE,KAAK,CAAC,YAAY;4BAChC,OAAO,EAAE,KAAK,CAAC,OAAO;4BACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;4BACxB,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,oCAAoC;4BACnE,UAAU,EAAE,EAAE,GAAG,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE;yBAC/D,EACD,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAC9C,CAAC;oBACJ,CAAC;oBAAC,MAAM,CAAC;wBACP,6EAA6E;oBAC/E,CAAC;gBACH,CAAC;aACF;SACF,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,+BAAY,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;QAEtE,OAAO;YACL,MAAM,EAAE,uBAAqB;YAC7B,OAAO,EAAE;gBACP,qFAAqF;gBACrF,uFAAuF;gBACvF,6EAA6E;gBAC7E,oFAAoF;gBACpF,+EAA+E;gBAC/E,8EAA8E;gBAC9E,qBAAY,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,gCAAqB,EAAE,CAAC;gBACrE,sEAAsE;gBACtE,qBAAY,CAAC,OAAO,CAAC;oBACnB,EAAE,EAAE,eAAe,EAAE;oBACrB,aAAa,EAAE,CAAC,GAAG,4BAAe,CAAC;oBACnC,SAAS;iBACV,CAAC;gBACF,qFAAqF;gBACrF,iEAAiE;gBACjE,sBAAe;aAChB;YACD,mFAAmF;YACnF,8EAA8E;YAC9E,2DAA2D;YAC3D,WAAW,EAAE;gBACX,yCAAiB;gBACjB,mCAAc;gBACd,gDAAoB;gBACpB,mCAAc;gBACd,+CAAoB;gBACpB,gDAAoB;gBACpB,oFAAoF;gBACpF,qCAAe;gBACf,oFAAoF;gBACpF,sFAAsF;gBACtF,gEAAgE;gBAChE,6DAA0B;gBAC1B,4FAA4F;gBAC5F,uCAAgB;gBAChB,iFAAiF;gBACjF,qCAAe;aAChB;YACD,SAAS,EAAE;gBACT,mCAAc;gBACd,6BAAW;gBACX,6BAAW;gBACX,yCAAiB;gBACjB,mCAAc;gBACd,0CAAiB;gBACjB,0CAAqB;gBACrB,EAAE,OAAO,EAAE,8CAAoB,EAAE,QAAQ,EAAE,kBAAkB,EAAE;gBAC/D,yDAAyD;gBACzD,EAAE,OAAO,EAAE,0CAAiB,EAAE,QAAQ,EAAE,iBAAiB,EAAE;gBAC3D,EAAE,OAAO,EAAE,0CAAiB,EAAE,QAAQ,EAAE,iBAAiB,EAAE;gBAC3D,qFAAqF;gBACrF,yFAAyF;gBACzF,EAAE,OAAO,EAAE,wCAAgB,EAAE,QAAQ,EAAE,gBAAgB,EAAE;gBACzD,oFAAoF;gBACpF,sFAAsF;gBACtF,8CAA8C;gBAC9C,EAAE,OAAO,EAAE,wCAAgC,EAAE,QAAQ,EAAE,sBAAsB,EAAE;gBAC/E,EAAE,OAAO,EAAE,gEAA2B,EAAE,QAAQ,EAAE,2BAA2B,EAAE;gBAC/E,yFAAyF;gBACzF,2FAA2F;gBAC3F,EAAE,OAAO,EAAE,iCAAa,EAAE,QAAQ,EAAE,aAAa,EAAE;gBACnD,uFAAuF;gBACvF,qFAAqF;gBACrF,EAAE,OAAO,EAAE,+BAAY,EAAE,QAAQ,EAAE,YAAY,EAAE;gBACjD,oFAAoF;gBACpF,uDAAuD;gBACvD,EAAE,OAAO,EAAE,8CAAmB,EAAE,QAAQ,EAAE,IAAI,8CAAmB,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE;gBAChG,wFAAwF;gBACxF,uFAAuF;gBACvF;oBACE,OAAO,EAAE,yDAAwB;oBACjC,UAAU,EAAE,CAAC,OAAoC,EAAE,EAAE,CACnD,IAAI,yDAAwB,CAAC,SAAS,EAAE,OAAO,CAAC;oBAClD,MAAM,EAAE,CAAC,kCAAyB,CAAC;iBACpC;gBACD,yFAAyF;gBACzF,oFAAoF;gBACpF,kEAAkE;gBAClE,EAAE,OAAO,EAAE,8CAAmB,EAAE,QAAQ,EAAE,mBAAmB,EAAE;gBAC/D,uFAAuF;gBACvF,uFAAuF;gBACvF,mFAAmF;gBACnF,2EAA2E;gBAC3E,wDAAwB;aACzB;YACD,OAAO,EAAE,CAAC,mCAAc,EAAE,6BAAW,EAAE,6BAAW,CAAC;SACpD,CAAC;IACJ,CAAC;CACF,CAAA;AAhVY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,qBAAqB,CAgVjC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"membership-checker.js","sourceRoot":"","sources":["../../../src/features/membership/membership-checker.ts"],"names":[],"mappings":";;;AAiCA,6DAA6D;AAC7D,MAAM,GAAG,GAAG,YAAY,CAAC;AAEzB,MAAa,mBAAmB;IACD;IAA7B,YAA6B,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAE3C;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CAAC,WAAmB,EAAE,MAAc;QAC3D,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACjC;kBACY,GAAG;;;gBAGL,EACV,CAAC,WAAW,EAAE,MAAM,CAAC,CACtB,CAA0B,CAAC;QAC5B,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACzB,CAAC;CACF;AAnBD,kDAmBC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"membership.controller.js","sourceRoot":"","sources":["../../../src/features/membership/membership.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAqG;AACrG,yCAA2C;AAE3C,mEAA4D;AAC5D,6DAAyE;AACzE,qEAAqE;AACrE,+CAAsD;AA2BtD,gFAAgF;AAChF,EAAE;AACF,oFAAoF;AACpF,uFAAuF;AACvF,qFAAqF;AACrF,oFAAoF;AAG7E,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAEZ;IACA;IACA;IAHnB,YACmB,WAA8B,EAC9B,QAAwB,EACxB,QAA+B;QAF/B,gBAAW,GAAX,WAAW,CAAmB;QAC9B,aAAQ,GAAR,QAAQ,CAAgB;QACxB,aAAQ,GAAR,QAAQ,CAAuB;IAC/C,CAAC;IAEJ;;;;;OAKG;IAGG,AAAN,KAAK,CAAC,mBAAmB,CAAoB,QAAgB;QAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAE9D,MAAM,KAAK,GAAwB,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,cAAc,GAAG,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACtE,MAAM,WAAW,GAAG,IAAA,gBAAM,EAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YACvD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;YAErE,MAAM,QAAQ,GAAqB,EAAE,CAAC;YACtC,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC5B,MAAM,QAAQ,GAAG,IAAA,gBAAM,EAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACjD,MAAM,cAAc,GAAG,IAAA,gBAAM,EAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBACvD,MAAM,UAAU,GAAG,IAAA,gBAAM,EAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC/C,QAAQ,CAAC,IAAI,CAAC;oBACZ,WAAW,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3D,QAAQ;oBACR,QAAQ,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC;oBAClD,cAAc;oBACd,cAAc,EAAE,cAAc;wBAC5B,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,cAAc,CAAC;wBACtD,CAAC,CAAC,IAAI;oBACR,UAAU;oBACV,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;oBAC5E,aAAa,EAAE,IAAA,mBAAS,EAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;oBAChD,cAAc,EAAE,IAAA,mBAAS,EAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;iBACnD,CAAC,CAAC;YACL,CAAC;YAED,KAAK,CAAC,IAAI,CAAC;gBACT,cAAc;gBACd,WAAW;gBACX,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW;gBACvF,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACpC,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;gBACxE,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAChC,CAAC;IAED,uEAAuE;IAGjE,AAAN,KAAK,CAAC,iBAAiB,CACF,QAAgB,EAC3B,IAA8B;QAEtC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;QACnF,OAAO,EAAE,EAAE,EAAE,CAAC;IAChB,CAAC;IAED;;;;OAIG;IAGG,AAAN,KAAK,CAAC,gBAAgB,CACK,cAAsB,EACvC,IAAgE;QAExE,IAAI,IAAI,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,MAAM,IAAI,2BAAkB,CAAC,+CAA+C,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,OAAO,IAAI,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,iEAAiE;IAG3D,AAAN,KAAK,CAAC,gBAAgB,CAA0B,cAAsB;QACpE,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;QACxD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,0EAA0E;IAGpE,AAAN,KAAK,CAAC,eAAe,CACM,cAAsB,EACvC,IAAmC;QAE3C,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,cAAc,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;QAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,IAAY;QACrD,IAAI,CAAC,IAAI;YAAE,OAAO,WAAW,CAAC;QAC9B,MAAM,IAAI,GAAsB,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC;QAChC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;IAC1E,CAAC;CACF,CAAA;AAzHY,oDAAoB;AAezB;IAFL,IAAA,YAAG,EAAC,6BAA6B,CAAC;IAClC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACnC,WAAA,IAAA,cAAK,EAAC,UAAU,CAAC,CAAA;;;;+DAwC3C;AAKK;IAFL,IAAA,aAAI,EAAC,6BAA6B,CAAC;IACnC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAE7D,WAAA,IAAA,cAAK,EAAC,UAAU,CAAC,CAAA;IACjB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;6DAIR;AASK;IAFL,IAAA,YAAG,EAAC,6BAA6B,CAAC;IAClC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAE7D,WAAA,IAAA,cAAK,EAAC,gBAAgB,CAAC,CAAA;IACvB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;4DAYR;AAKK;IAFL,IAAA,eAAM,EAAC,6BAA6B,CAAC;IACrC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACxC,WAAA,IAAA,cAAK,EAAC,gBAAgB,CAAC,CAAA;;;;4DAG9C;AAKK;IAFL,IAAA,YAAG,EAAC,sCAAsC,CAAC;IAC3C,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAE7D,WAAA,IAAA,cAAK,EAAC,gBAAgB,CAAC,CAAA;IACvB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;2DAIR;+BA5GU,oBAAoB;IADhC,IAAA,mBAAU,EAAC,UAAU,CAAC;qCAGW,yCAAiB;QACpB,mCAAc;QACd,0CAAqB;GAJvC,oBAAoB,CAyHhC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"membership.service.js","sourceRoot":"","sources":["../../../src/features/membership/membership.service.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;;;;;;;;;;;;;AAEH,2CAAiF;AACjF,2CAAgF;AAChF,uEAA0F;AAGnF,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAET;IAQA;IATnB,YACmB,OAAuB,EAQvB,WAAuC;QARvC,YAAO,GAAP,OAAO,CAAgB;QAQvB,gBAAW,GAAX,WAAW,CAA4B;IACvD,CAAC;IAEJ;;;;OAIG;IACK,KAAK,CAAC,QAAQ,CAAC,cAAsB;QAC3C,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;YACvE,MAAM,WAAW,GAAG,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC;YAC3C,OAAO,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QACxF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,WAAW,CAAC,WAAuC;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,KAAK,MAAM,MAAM,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,+EAA+E;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,aAAa,CAAC,QAAgB,EAAE,WAAmB;QACjD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE;YAC/C,MAAM,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE;SACrE,CAAC,CAAC;IACL,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,eAAe,CAAC,QAAgB;QACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpF,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,SAAS,CAAC,cAAsB,EAAE,QAAgB;QACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,cAAc,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,kFAAkF;YAClF,kCAAkC;YAClC,MAAM,IAAI,0BAAiB,CACzB,cAAc,cAAc,4BAA4B,QAAQ,EAAE,CACnE,CAAC;QACJ,CAAC;QAED,uFAAuF;QACvF,gFAAgF;QAChF,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAE3F,4EAA4E;QAC5E,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC1B,IAAI,CAAC,CAAC,EAAE,KAAK,cAAc;gBAAE,SAAS;YACtC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACvF,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;QAED,oFAAoF;QACpF,yFAAyF;QACzF,sFAAsF;QACtF,yFAAyF;QACzF,sFAAsF;QACtF,sFAAsF;QACtF,4CAA4C;QAC5C,MAAM,aAAa,GAAG,CAAC,CAAa,EAAiB,EAAE;YACrD,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC;YAChC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,CAAC,CAAC;QACF,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACrF,CAAC;IAED;;;;OAIG;IACH,gBAAgB,CAAC,cAAsB,EAAE,KAA0B;QACjE,8EAA8E;QAC9E,qFAAqF;QACrF,qFAAqF;QACrF,wFAAwF;QACxF,yFAAyF;QACzF,oFAAoF;QACpF,4CAA4C;QAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,0FAA0F;IAC1F,KAAK,CAAC,gBAAgB,CAAC,cAAsB;QAC3C,kFAAkF;QAClF,uFAAuF;QACvF,wFAAwF;QACxF,oFAAoF;QACpF,+DAA+D;QAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACnD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;QAChE,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACnC,CAAC;CACF,CAAA;AApJY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;IASR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,8CAAoB,CAAC,CAAA;qCAPH,uBAAc;GAF/B,iBAAiB,CAoJ7B"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"posting-version-bump.js","sourceRoot":"","sources":["../../../src/features/membership/posting-version-bump.ts"],"names":[],"mappings":";;;AASa,QAAA,oBAAoB,GAAG,MAAM,CAAC,sBAAsB,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"posting.service.js","sourceRoot":"","sources":["../../../src/features/membership/posting.service.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;;;;;;;;;;;;;AAEH,2CAA8D;AAC9D,2CAAiE;AACjE,uEAA0F;AAgB1F,8FAA8F;AAC9F,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAEjE;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6FAA6F;AAC7F,SAAS,UAAU,CAAC,CAInB;IACC,OAAO,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,cAAc,IAAI,EAAE,IAAI,CAAC,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,UAAU,CAAC,KAAmB;IACrC,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,EAAE,KAAK,IAAI;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,oCAAoC;YAClE,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAGM,IAAM,cAAc,GAApB,MAAM,cAAc;IAEN;IAKA;IANnB,YACmB,OAAuB,EAKvB,WAAuC;QALvC,YAAO,GAAP,OAAO,CAAgB;QAKvB,gBAAW,GAAX,WAAW,CAA4B;IACvD,CAAC;IAEJ,gEAAgE;IAChE,KAAK,CAAC,YAAY,CAAC,cAAsB;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;QAC1F,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,eAAe,CAAC,cAAsB,EAAE,OAAgC;QAC5E,MAAM,OAAO,GAAG,CACd,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,EAAE,CAAC,CAC7E,CAAC,IAAI,CAAC;QAEP,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAChB,UAAU,CACR,CAAC,CAAC,MAA0F,CAC7F,CACF,CACF,CAAC;QAEF,sFAAsF;QACtF,sFAAsF;QACtF,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,sFAAsF;QACtF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,UAAU,CACpB,CAAC,CAAC,MAA0F,CAC7F,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBACtD,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QAED,oFAAoF;QACpF,0FAA0F;QAC1F,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE;oBAC9C,MAAM,EAAE,EAAE,cAAc,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE;iBAC7C,CAAC,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QAED,qFAAqF;QACrF,oFAAoF;QACpF,wFAAwF;QACxF,0FAA0F;QAC1F,wFAAwF;QACxF,uFAAuF;QACvF,wFAAwF;QACxF,kFAAkF;QAClF,IAAI,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAChC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,CAAC;YACtE,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBAChD,CAAC;gBAAC,MAAM,CAAC;oBACP,4EAA4E;gBAC9E,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,uBAAuB,CAAC,cAAsB;QAC1D,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;YACvE,MAAM,WAAW,GAAG,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC;YAC3C,OAAO,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QACxF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAA;AAlGY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;IAMR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,8CAAoB,CAAC,CAAA;qCAJH,uBAAc;GAF/B,cAAc,CAkG1B"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"org-catalog.controller.js","sourceRoot":"","sources":["../../../src/features/org-structure/org-catalog.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAwD;AACxD,yCAA2C;AAC3C,qEAA6D;AAE7D,kFAAkF;AAClF,EAAE;AACF,kFAAkF;AAClF,sFAAsF;AACtF,yEAAyE;AACzE,sFAAsF;AACtF,gDAAgD;AAGzC,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IACF;IAA7B,YAA6B,OAA0B;QAA1B,YAAO,GAAP,OAAO,CAAmB;IAAG,CAAC;IAE3D,kFAAkF;IAG5E,AAAN,KAAK,CAAC,sBAAsB,CAAuB,WAAmB;QACpE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;QACpE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAED,+EAA+E;IAGzE,AAAN,KAAK,CAAC,mBAAmB,CAAuB,WAAmB;QACjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACjE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;CACF,CAAA;AAlBY,oDAAoB;AAMzB;IAFL,IAAA,YAAG,EAAC,oCAAoC,CAAC;IACzC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAChC,WAAA,IAAA,cAAK,EAAC,aAAa,CAAC,CAAA;;;;kEAGjD;AAKK;IAFL,IAAA,YAAG,EAAC,iCAAiC,CAAC;IACtC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC/B,WAAA,IAAA,cAAK,EAAC,aAAa,CAAC,CAAA;;;;+DAG9C;+BAjBU,oBAAoB;IADhC,IAAA,mBAAU,EAAC,UAAU,CAAC;qCAEiB,0CAAiB;GAD5C,oBAAoB,CAkBhC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"org-catalog.service.js","sourceRoot":"","sources":["../../../src/features/org-structure/org-catalog.service.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;AAEH,2CAA4C;AAC5C,2CAAgD;AAIzC,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IACC;IAA7B,YAA6B,OAAuB;QAAvB,YAAO,GAAP,OAAO,CAAgB;IAAG,CAAC;IAExD,kFAAkF;IAClF,sBAAsB,CAAC,WAAmB;QACxC,OAAO,IAAI,CAAC,kBAAkB,CAAC,oBAAoB,EAAE,gBAAgB,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;IACpG,CAAC;IAED,+EAA+E;IAC/E,mBAAmB,CAAC,WAAmB;QACrC,OAAO,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IACxF,CAAC;IAED,qFAAqF;IAC7E,KAAK,CAAC,kBAAkB,CAC9B,eAAuB,EACvB,WAAmB,EACnB,cAAsB,EACtB,WAAmB;QAEnB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAClF,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACxC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAClE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF,CAAA;AA/BY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAE2B,uBAAc;GADzC,iBAAiB,CA+B7B"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"policy.controller.js","sourceRoot":"","sources":["../../../src/features/policy/policy.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,2CAYwB;AACxB,yCAA2C;AAE3C,2DAK6B;AAQtB,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IACE;IAA7B,YAA6B,QAAuB;QAAvB,aAAQ,GAAR,QAAQ,CAAe;IAAG,CAAC;IAExD;;;;;;;;OAQG;IAGG,AAAN,KAAK,CAAC,MAAM,CAAmB,OAAgB;QAC7C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,4BAAmB,CAAC,kBAAkB,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,uCAAmB;gBAAE,MAAM,IAAI,0BAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC7E,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IAED;;;OAGG;IAGG,AAAN,KAAK,CAAC,IAAI,CAAQ,GAAkB,EAAoB,OAAgB;QACtE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,4BAAmB,CAAC,kBAAkB,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAClE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACtB,CAAC;IAED;;;;;OAKG;IAGG,AAAN,KAAK,CAAC,MAAM,CAAQ,GAAkB,EAAU,IAAkB;QAChE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC/D,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,sCAAkB;gBAAE,MAAM,IAAI,4BAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC9E,IAAI,CAAC,YAAY,2CAAuB;gBAAE,MAAM,IAAI,2BAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAClF,MAAM,CAAC,CAAC,CAAC,wDAAwD;QACnE,CAAC;IACH,CAAC;IAED;;;;OAIG;IAGG,AAAN,KAAK,CAAC,MAAM,CAAQ,GAAkB,EAAe,EAAU;QAC7D,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,uCAAmB;gBAAE,MAAM,IAAI,0BAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC7E,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;CACF,CAAA;AA3EY,4CAAgB;AAcrB;IAFL,IAAA,YAAG,EAAC,wBAAwB,CAAC;IAC7B,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAClC,WAAA,IAAA,cAAK,EAAC,SAAS,CAAC,CAAA;;;;8CAU7B;AAQK;IAFL,IAAA,YAAG,EAAC,iBAAiB,CAAC;IACtB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACpC,WAAA,IAAA,YAAG,GAAE,CAAA;IAAsB,WAAA,IAAA,cAAK,EAAC,SAAS,CAAC,CAAA;;;;4CAMtD;AAUK;IAFL,IAAA,aAAI,EAAC,iBAAiB,CAAC;IACvB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACpC,WAAA,IAAA,YAAG,GAAE,CAAA;IAAsB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;8CAS9C;AASK;IAFL,IAAA,eAAM,EAAC,qBAAqB,CAAC;IAC7B,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACpC,WAAA,IAAA,YAAG,GAAE,CAAA;IAAsB,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;;;;8CAQnD;2BA1EU,gBAAgB;IAD5B,IAAA,mBAAU,EAAC,UAAU,CAAC;qCAEkB,iCAAa;GADzC,gBAAgB,CA2E5B"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"policy.service.js","sourceRoot":"","sources":["../../../src/features/policy/policy.service.ts"],"names":[],"mappings":";;;AAoIA,gEAgBC;AAtHD,uCAAgD;AAGhD,wFAAwF;AACxF,MAAa,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAO,GAAG,wBAAwB;QAC5C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AALD,gDAKC;AAED,kGAAkG;AAClG,MAAa,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAO,GAAG,iCAAiC;QACrD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AALD,0DAKC;AAED,mGAAmG;AACnG,MAAa,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAO,GAAG,mBAAmB;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AALD,kDAKC;AA8DD,8FAA8F;AAC9F,8FAA8F;AAC9F,MAAM,OAAO,GAAkC,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AAC1E,MAAM,SAAS,GAAkC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAClE,MAAM,UAAU,GAAkC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAC7E,MAAM,IAAI,GAAkC,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;AACzE,MAAM,QAAQ,GAAkC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;AAE7E;;;;;;GAMG;AACH,SAAgB,0BAA0B,CAAC,IAAmB;IAC5D,MAAM,IAAI,GAAyB,CAAC,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC,CAAC;IAC7D,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ,CAAC;QACd,KAAK,WAAW;YACd,OAAO,CAAC,GAAG,IAAI,EAAE,GAAG,UAAU,CAAC,CAAC;QAClC,KAAK,QAAQ;YACX,OAAO,CAAC,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;QAC5B,KAAK,SAAS;YACZ,sFAAsF;YACtF,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,CAAC;QAClC,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC;QACZ;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAiBD,MAAa,aAAa;IACP,KAAK,CAAkB;IACvB,YAAY,CAAsC;IAClD,YAAY,CAAwC;IAErE,YAAY,IAAuB;QACjC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,WAA8B,CAAC;QACjD,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,YAAY,GAAG,IAAA,uBAAgB,EAAC;YACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,yFAAyF;YACzF,WAAW,EAAE,IAAI,CAAC,WAA4D;YAC9E,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,OAAe;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,mBAAmB,CAAC,kCAAkC,OAAO,IAAI,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,MAAM,GAAwB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACvD,MAAM,KAAK,GAAG,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACjD,OAAO;gBACL,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,KAAK,EAAE,CAAC,CAAC,GAAG;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,cAAc,EAAE,KAAK;gBACrB,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC1D,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;aAC3D,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClF,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,KAAgB,EAAE,MAAoB;QACjD,MAAM,QAAQ,GAAkB;YAC9B,IAAI,EAAE,eAAe;YACrB,KAAK,EAAE,KAAK;YACZ,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE,mCAAmC;SACpE,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;QACD,yFAAyF;QACzF,yFAAyF;QACzF,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;YACvC,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,IAAI,uBAAuB,CAAC,yBAAyB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/E,CAAC;IAED,+FAA+F;IAC/F,KAAK,CAAC,IAAI,CAAC,KAAgB,EAAE,OAAe;QAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,KAAgB,EAAE,QAAgB;QAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjF,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAClB,MAAM,IAAI,mBAAmB,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;CACF;AArFD,sCAqFC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"role.controller.js","sourceRoot":"","sources":["../../../src/features/role/role.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAwF;AACxF,yCAA2C;AAC3C,uDAAgD;AAChD,2DAA4E;AAE5E,uFAAuF;AACvF,uFAAuF;AACvF,4EAA4E;AAErE,IAAM,cAAc,GAApB,MAAM,cAAc;IACI;IAA7B,YAA6B,KAAkB;QAAlB,UAAK,GAAL,KAAK,CAAa;IAAG,CAAC;IAEnD;;;;OAIG;IAGG,AAAN,KAAK,CAAC,SAAS,CAAU,KAAmB;QAC1C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAA,8BAAc,EAAC,KAAK,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACjE,CAAC;IAED,uDAAuD;IAGjD,AAAN,KAAK,CAAC,UAAU,CAAS,IAAuB;QAC9C,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,IAAI,UAAU,CAAC,CAAC;QACjE,OAAO,EAAE,EAAE,EAAE,CAAC;IAChB,CAAC;IAED;0CACsC;IAGtC,OAAO,CAAgB,IAAY;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,uDAAuD;IAGjD,AAAN,KAAK,CAAC,UAAU,CAAgB,IAAY,EAAU,IAAuB;QAC3E,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,uDAAuD;IAGjD,AAAN,KAAK,CAAC,UAAU,CAAgB,IAAY;QAC1C,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;CACF,CAAA;AA/CY,wCAAc;AAUnB;IAFL,IAAA,YAAG,EAAC,OAAO,CAAC;IACZ,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC/B,WAAA,IAAA,cAAK,GAAE,CAAA;;;;+CAIvB;AAKK;IAFL,IAAA,aAAI,EAAC,OAAO,CAAC;IACb,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChC,WAAA,IAAA,aAAI,GAAE,CAAA;;;;gDAGvB;AAMD;IAFC,IAAA,YAAG,EAAC,aAAa,CAAC;IAClB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACvC,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;;;;6CAErB;AAKK;IAFL,IAAA,YAAG,EAAC,aAAa,CAAC;IAClB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChC,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;IAAgB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;gDAGpD;AAKK;IAFL,IAAA,eAAM,EAAC,aAAa,CAAC;IACrB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChC,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;;;;gDAG9B;yBA9CU,cAAc;IAD1B,IAAA,mBAAU,EAAC,UAAU,CAAC;qCAEe,6BAAW;GADpC,cAAc,CA+C1B"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"role.service.js","sourceRoot":"","sources":["../../../src/features/role/role.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,2CAA+D;AAC/D,2DAA0E;AAE1E,MAAM,kBAAkB,GAAG,CAAC,MAAM,CAAU,CAAC;AAC7C,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,WAAW,CAAU,CAAC;AAExD;;;;GAIG;AAEI,IAAM,WAAW,GAAjB,MAAM,WAAW;IACO;IAA7B,YAA6B,OAAuB;QAAvB,YAAO,GAAP,OAAO,CAAgB;IAAG,CAAC;IAExD,qBAAqB;IACrB,UAAU,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,uEAAuE;IACvE,SAAS,CAAC,MAAmB;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAA,8BAAc,EAAC,MAAM,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACjG,CAAC;IAED,0BAA0B;IAC1B,OAAO,CAAC,IAAY;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,qBAAqB;IACrB,UAAU,CAAC,IAAY,EAAE,KAAwB;QAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,qBAAqB;IACrB,UAAU,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;CACF,CAAA;AA3BY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;qCAE2B,uBAAc;GADzC,WAAW,CA2BvB"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"scope-closure.service.js","sourceRoot":"","sources":["../../../src/features/scope/scope-closure.service.ts"],"names":[],"mappings":";;;AAAA,iFAAiF;AACjF;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,yCAAkF;AAElF,mDAAmD;AACnD,MAAM,GAAG,GAAG,YAAY,CAAC;AACzB,+DAA+D;AAC/D,MAAM,KAAK,GAAG,cAAc,CAAC;AA6B7B,MAAa,mBAAmB;IAEX;IACA;IAFnB,YACmB,IAAe,EACf,MAA0B;QAD1B,SAAI,GAAJ,IAAI,CAAW;QACf,WAAM,GAAN,MAAM,CAAoB;IAC1C,CAAC;IAEJ;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAA,wBAAgB,EAAC,KAAK,CAAC,CAAC,CAAC,wDAAwD;QAE9F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACtC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,CAAC,MAAM,WAAW,IAAI,CAAC,MAAM,OAAO,CAAC,CAAC;QAC3E,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IACpD,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,QAAQ,CAAC,QAAgB,EAAE,aAA4B;QAC3D,IAAI,aAAa,KAAK,QAAQ,EAAE,CAAC;YAC/B,uDAAuD;YACvD,MAAM,IAAI,uBAAe,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC3B,uFAAuF;YACvF,qFAAqF;YACrF,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnC,mBAAmB,KAAK;kEACkC,EAC1D,CAAC,QAAQ,EAAE,aAAa,CAAC,CAC1B,CAAc,CAAC;YAChB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,uBAAe,CAAC,QAAQ,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAED,sFAAsF;QACtF,iFAAiF;QACjF,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACxC,iCAAiC,KAAK,8CAA8C,EACpF,CAAC,QAAQ,CAAC,CACX,CAAuC,CAAC;QACzC,sFAAsF;QACtF,6FAA6F;QAC7F,6FAA6F;QAC7F,4FAA4F;QAC5F,2FAA2F;QAC3F,4DAA4D;QAC5D,MAAM,kBAAkB,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAC/C,+BAA+B,KAAK;yDACe,EACnD,CAAC,QAAQ,EAAE,QAAQ,CAAC,CACrB,CAAqC,CAAC;QACvC,yFAAyF;QACzF,MAAM,YAAY,GAChB,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAClF,6FAA6F;QAC7F,mDAAmD;QACnD,MAAM,QAAQ,GAAG;YACf,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;SACjF,CAAC;QAEF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAE9B,yBAAyB;YACzB,MAAM,IAAI,CAAC,KAAK,CACd,YAAY,GAAG,yDAAyD,EACxE,CAAC,aAAa,EAAE,QAAQ,CAAC,CAC1B,CAAC;YAEF,yFAAyF;YACzF,0FAA0F;YAC1F,yFAAyF;YACzF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,IAAI,GAAG,IAAA,wBAAgB,EAAC,KAAK,CAAC,CAAC;YACrC,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAEtC,4FAA4F;YAC5F,KAAK,MAAM,UAAU,IAAI,QAAQ,EAAE,CAAC;gBAClC,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YACpD,CAAC;YAED,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,UAAU,CAAC,QAAgB;QAC/B,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACrC,mBAAmB,GAAG,kDAAkD,EACxE,CAAC,QAAQ,CAAC,CACX,CAAc,CAAC;QAChB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAED,4FAA4F;QAC5F,oFAAoF;QACpF,MAAM,kBAAkB,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAC/C,+BAA+B,KAAK;yDACe,EACnD,CAAC,QAAQ,EAAE,QAAQ,CAAC,CACrB,CAAqC,CAAC;QAEvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC9B,wFAAwF;YACxF,MAAM,IAAI,CAAC,KAAK,CACd,iBAAiB,KAAK;yDAC2B,EACjD,CAAC,QAAQ,EAAE,QAAQ,CAAC,CACrB,CAAC;YACF,iCAAiC;YACjC,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,GAAG,mCAAmC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YACtF,sFAAsF;YACtF,KAAK,MAAM,EAAE,aAAa,EAAE,IAAI,kBAAkB,EAAE,CAAC;gBACnD,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,yFAAyF;IACjF,KAAK,CAAC,SAAS,CAAC,CAAY;QAClC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CACzB,uCAAuC,GAAG,kBAAkB,CAC7D,CAA4D,CAAC;QAC9D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IAChF,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,cAAc,CAC1B,IAAe,EACf,IAAwE;QAExE,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,KAAK,sBAAsB,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CACd,iBAAiB,KAAK;kBACV,YAAY,EAAE,EAC1B,MAAM,CACP,CAAC;IACJ,CAAC;CACF;AAhND,kDAgNC;AAED,kGAAkG;AAClG,MAAa,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,QAAgB;QAC1B,KAAK,CACH,mCAAmC,QAAQ,6CAA6C;YACtF,kFAAkF;YAClF,sBAAsB,CACzB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AATD,oDASC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"scope-subtree.resolver.js","sourceRoot":"","sources":["../../../src/features/scope/scope-subtree.resolver.ts"],"names":[],"mappings":";;;AAoCA,+DAA+D;AAC/D,MAAM,KAAK,GAAG,cAAc,CAAC;AAE7B,MAAa,sBAAsB;IACJ;IAA7B,YAA6B,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAE3C;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACjC,iCAAiC,KAAK,8CAA8C,EACpF,CAAC,MAAM,CAAC,CACT,CAAuC,CAAC;QACzC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,kDAAkD;QAC1F,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IAC5C,CAAC;CACF;AAjBD,wDAiBC"}
|
|
@@ -0,0 +1,62 @@
|
|
|
1
|
+
import type { Principal } from '@astram/core';
|
|
2
|
+
import { ServiceAccountService } from './service-account.service.js';
|
|
3
|
+
/** The request shape after the enforcement guard attaches the resolved principal. */
|
|
4
|
+
interface AuthedRequest {
|
|
5
|
+
principal: Principal;
|
|
6
|
+
}
|
|
7
|
+
export declare class ServiceAccountController {
|
|
8
|
+
private readonly svc;
|
|
9
|
+
constructor(svc: ServiceAccountService);
|
|
10
|
+
/** List the caller's own-tenant service accounts (by label). Gated `service_account:read`. */
|
|
11
|
+
list(req: AuthedRequest): Promise<{
|
|
12
|
+
accounts: import("./service-account.service.js").ServiceAccountView[];
|
|
13
|
+
}>;
|
|
14
|
+
/**
|
|
15
|
+
* What the caller may grant an agent — the create/edit picker source (Phase 4). Gated
|
|
16
|
+
* `service_account:create` (only someone who can create agents needs the list). Computed from the
|
|
17
|
+
* SAME ceiling the create/update write check enforces: `{ roles: [{id,name}], scopeNodes:
|
|
18
|
+
* [{id,name,parentId|null}] }`. ⚠ Declared BEFORE `service-accounts/:id` so the static path wins.
|
|
19
|
+
*/
|
|
20
|
+
assignable(req: AuthedRequest): Promise<import("./service-account.service.js").AssignableAccess>;
|
|
21
|
+
/** Fetch one own-tenant account. Gated `service_account:read`. Cross-tenant/unknown → 404. */
|
|
22
|
+
get(req: AuthedRequest, id: string): Promise<{
|
|
23
|
+
account: import("./service-account.service.js").ServiceAccountView;
|
|
24
|
+
}>;
|
|
25
|
+
/**
|
|
26
|
+
* Create an account in the caller's own tenant. Gated `service_account:create`.
|
|
27
|
+
* Body: `{ label, scopeSubtreeNodeIds?, roleIds? }`. Scope/roles must pass the ADR-0029 ceiling.
|
|
28
|
+
*/
|
|
29
|
+
create(req: AuthedRequest, body: unknown): Promise<{
|
|
30
|
+
account: import("./service-account.service.js").ServiceAccountView;
|
|
31
|
+
}>;
|
|
32
|
+
/**
|
|
33
|
+
* Edit an account (label/scope/roles/status). Gated `service_account:update`. Own-tenant only;
|
|
34
|
+
* scope/roles re-checked against the ceiling (an edit cannot escalate).
|
|
35
|
+
*/
|
|
36
|
+
update(req: AuthedRequest, id: string, body: unknown): Promise<{
|
|
37
|
+
account: import("./service-account.service.js").ServiceAccountView;
|
|
38
|
+
}>;
|
|
39
|
+
/**
|
|
40
|
+
* Issue a NEW key for an account. Gated `service_account:manage_keys`. Body: `{ expiresAtMs? }`.
|
|
41
|
+
* Returns the raw `ask_…` key EXACTLY ONCE — copy it now, it is never retrievable again.
|
|
42
|
+
*/
|
|
43
|
+
issueKey(req: AuthedRequest, id: string, body: unknown): Promise<{
|
|
44
|
+
key: import("./service-account.service.js").IssuedKey;
|
|
45
|
+
}>;
|
|
46
|
+
/**
|
|
47
|
+
* Rotate an account's key. Gated `service_account:manage_keys`. The previous key stops
|
|
48
|
+
* authenticating; the new raw key is returned EXACTLY ONCE.
|
|
49
|
+
*/
|
|
50
|
+
rotateKey(req: AuthedRequest, id: string, body: unknown): Promise<{
|
|
51
|
+
key: import("./service-account.service.js").IssuedKey;
|
|
52
|
+
}>;
|
|
53
|
+
/**
|
|
54
|
+
* Revoke ALL of an account's keys. Gated `service_account:manage_keys`. Fail-closed on the next
|
|
55
|
+
* request; idempotent.
|
|
56
|
+
*/
|
|
57
|
+
revokeKeys(req: AuthedRequest, id: string): Promise<{
|
|
58
|
+
success: boolean;
|
|
59
|
+
}>;
|
|
60
|
+
}
|
|
61
|
+
export {};
|
|
62
|
+
//# sourceMappingURL=service-account.controller.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"service-account.controller.d.ts","sourceRoot":"","sources":["../../../src/features/service-account/service-account.controller.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EACL,qBAAqB,EAMtB,MAAM,8BAA8B,CAAC;AAEtC,qFAAqF;AACrF,UAAU,aAAa;IACrB,SAAS,EAAE,SAAS,CAAC;CACtB;AA0CD,qBACa,wBAAwB;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,qBAAqB;IAEvD,8FAA8F;IAGxF,IAAI,CAAQ,GAAG,EAAE,aAAa;;;IAQpC;;;;;OAKG;IAGG,UAAU,CAAQ,GAAG,EAAE,aAAa;IAQ1C,8FAA8F;IAGxF,GAAG,CAAQ,GAAG,EAAE,aAAa,EAAe,EAAE,EAAE,MAAM;;;IAQ5D;;;OAGG;IAGG,MAAM,CAAQ,GAAG,EAAE,aAAa,EAAU,IAAI,EAAE,OAAO;;;IAiB7D;;;OAGG;IAGG,MAAM,CAAQ,GAAG,EAAE,aAAa,EAAe,EAAE,EAAE,MAAM,EAAU,IAAI,EAAE,OAAO;;;IAuBtF;;;OAGG;IAGG,QAAQ,CAAQ,GAAG,EAAE,aAAa,EAAe,EAAE,EAAE,MAAM,EAAU,IAAI,EAAE,OAAO;;;IAWxF;;;OAGG;IAGG,SAAS,CAAQ,GAAG,EAAE,aAAa,EAAe,EAAE,EAAE,MAAM,EAAU,IAAI,EAAE,OAAO;;;IAWzF;;;OAGG;IAGG,UAAU,CAAQ,GAAG,EAAE,aAAa,EAAe,EAAE,EAAE,MAAM;;;CAQpE"}
|