@astram/identity 0.3.1 → 0.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (96) hide show
  1. package/dist/auth-facts-keys.js.map +1 -0
  2. package/dist/branch.object.js.map +1 -0
  3. package/dist/company-branch.object.js.map +1 -0
  4. package/dist/company-department.object.js.map +1 -0
  5. package/dist/company-membership.object.js.map +1 -0
  6. package/dist/company.object.js.map +1 -0
  7. package/dist/cross-tenant-grant.object.js.map +1 -0
  8. package/dist/department.object.js.map +1 -0
  9. package/dist/features/access/access-admin.access.js.map +1 -0
  10. package/dist/features/access/company-admin.access.js.map +1 -0
  11. package/dist/features/access/index.js.map +1 -0
  12. package/dist/features/access/user-management.access.js.map +1 -0
  13. package/dist/features/audit/audit-read.service.js.map +1 -0
  14. package/dist/features/audit/audit.controller.js.map +1 -0
  15. package/dist/features/audit/directory-label-resolver.js.map +1 -0
  16. package/dist/features/audit/mariadb-audit-reader.js.map +1 -0
  17. package/dist/features/authz/access-bundle-reconcile.job.js.map +1 -0
  18. package/dist/features/authz/access-bundle-store.js.map +1 -0
  19. package/dist/features/authz/catalog-bootstrap.provider.js.map +1 -0
  20. package/dist/features/authz/catalog-reconcile.job.js.map +1 -0
  21. package/dist/features/authz/db-permission-facts.adapter.d.ts +8 -4
  22. package/dist/features/authz/db-permission-facts.adapter.d.ts.map +1 -1
  23. package/dist/features/authz/db-permission-facts.adapter.js +47 -4
  24. package/dist/features/authz/db-permission-facts.adapter.js.map +1 -0
  25. package/dist/features/authz/grant-admin.controller.d.ts.map +1 -1
  26. package/dist/features/authz/grant-admin.controller.js +7 -2
  27. package/dist/features/authz/grant-admin.controller.js.map +1 -0
  28. package/dist/features/authz/grant-admin.service.d.ts +19 -6
  29. package/dist/features/authz/grant-admin.service.d.ts.map +1 -1
  30. package/dist/features/authz/grant-admin.service.js +25 -6
  31. package/dist/features/authz/grant-admin.service.js.map +1 -0
  32. package/dist/features/authz/grant-ceiling.d.ts +60 -0
  33. package/dist/features/authz/grant-ceiling.d.ts.map +1 -0
  34. package/dist/features/authz/grant-ceiling.js +94 -0
  35. package/dist/features/authz/grant-ceiling.js.map +1 -0
  36. package/dist/features/authz/mariadb-catalog-store.js.map +1 -0
  37. package/dist/features/authz/permission-version.bumper.js.map +1 -0
  38. package/dist/features/authz/record-authorization.js.map +1 -0
  39. package/dist/features/authz/session-facts.reader.js.map +1 -0
  40. package/dist/features/company/company.controller.js.map +1 -0
  41. package/dist/features/company/company.service.js.map +1 -0
  42. package/dist/features/cross-tenant/cross-tenant-grant-read.service.js.map +1 -0
  43. package/dist/features/cross-tenant/cross-tenant-grant.controller.js.map +1 -0
  44. package/dist/features/cross-tenant/grant-authorize.js.map +1 -0
  45. package/dist/features/identity-feature.module.d.ts.map +1 -1
  46. package/dist/features/identity-feature.module.js +65 -5
  47. package/dist/features/identity-feature.module.js.map +1 -0
  48. package/dist/features/membership/membership-checker.js.map +1 -0
  49. package/dist/features/membership/membership.controller.js.map +1 -0
  50. package/dist/features/membership/membership.service.js.map +1 -0
  51. package/dist/features/membership/posting-version-bump.js.map +1 -0
  52. package/dist/features/membership/posting.service.js.map +1 -0
  53. package/dist/features/org-structure/org-catalog.controller.js.map +1 -0
  54. package/dist/features/org-structure/org-catalog.service.js.map +1 -0
  55. package/dist/features/policy/policy.controller.js.map +1 -0
  56. package/dist/features/policy/policy.service.js.map +1 -0
  57. package/dist/features/role/role.controller.js.map +1 -0
  58. package/dist/features/role/role.service.js.map +1 -0
  59. package/dist/features/scope/scope-closure.service.js.map +1 -0
  60. package/dist/features/scope/scope-subtree.resolver.js.map +1 -0
  61. package/dist/features/service-account/service-account.controller.d.ts +62 -0
  62. package/dist/features/service-account/service-account.controller.d.ts.map +1 -0
  63. package/dist/features/service-account/service-account.controller.js +281 -0
  64. package/dist/features/service-account/service-account.service.d.ts +202 -0
  65. package/dist/features/service-account/service-account.service.d.ts.map +1 -0
  66. package/dist/features/service-account/service-account.service.js +483 -0
  67. package/dist/features/service-account/service-account.store.d.ts +91 -0
  68. package/dist/features/service-account/service-account.store.d.ts.map +1 -0
  69. package/dist/features/service-account/service-account.store.js +158 -0
  70. package/dist/features/share/share.controller.js.map +1 -0
  71. package/dist/features/share/share.service.js.map +1 -0
  72. package/dist/features/shared/http.js.map +1 -0
  73. package/dist/features/shared/list-query.js.map +1 -0
  74. package/dist/features/shared/named-option.js.map +1 -0
  75. package/dist/features/shared/record-resolver.js.map +1 -0
  76. package/dist/features/user/user.controller.js.map +1 -0
  77. package/dist/features/user/user.service.js.map +1 -0
  78. package/dist/index.d.ts +1 -0
  79. package/dist/index.d.ts.map +1 -1
  80. package/dist/index.js +3 -1
  81. package/dist/index.js.map +1 -0
  82. package/dist/membership-posting.object.js.map +1 -0
  83. package/dist/migrations-dir.js.map +1 -0
  84. package/dist/objects.d.ts.map +1 -1
  85. package/dist/objects.js +2 -1
  86. package/dist/objects.js.map +1 -0
  87. package/dist/record-share.object.js.map +1 -0
  88. package/dist/role.object.js.map +1 -0
  89. package/dist/schema.js.map +1 -0
  90. package/dist/service-account.object.d.ts +31 -0
  91. package/dist/service-account.object.d.ts.map +1 -0
  92. package/dist/service-account.object.js +75 -0
  93. package/dist/shared-resource.object.js.map +1 -0
  94. package/dist/user.object.js.map +1 -0
  95. package/migrations/1710000000018-CreateServiceAccount.cjs +53 -0
  96. package/package.json +4 -4
@@ -0,0 +1,94 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.GrantCeiling = exports.GrantCeilingError = void 0;
4
+ exports.coversKey = coversKey;
5
+ const core_1 = require("@astram/core");
6
+ const db_permission_facts_adapter_js_1 = require("./db-permission-facts.adapter.js");
7
+ const AUTHZ = 'shield_authz';
8
+ /** The grantor exceeds their own authority — cannot grant a key they do not hold (→ 403). */
9
+ class GrantCeilingError extends Error {
10
+ constructor(key) {
11
+ super(`You cannot grant '${key}' — it exceeds the permissions you hold.`);
12
+ this.name = 'GrantCeilingError';
13
+ }
14
+ }
15
+ exports.GrantCeilingError = GrantCeilingError;
16
+ /**
17
+ * Does `effective` (the grantor's held EXACT keys) cover `granted`?
18
+ *
19
+ * - An EXACT key is covered iff it is in `effective`.
20
+ * - A WILDCARD key (`module:*`, `module:type:*`, bare `module`) is covered iff EVERY registered
21
+ * exact key it expands to is in `effective` — you cannot grant a wildcard you don't fully hold.
22
+ * A wildcard that expands to ZERO registered keys is treated as NOT covered (nothing to hold ⇒
23
+ * no basis to grant; also prevents a typo'd wildcard from vacuously passing).
24
+ *
25
+ * `effective` is assumed already expanded to exact keys (the grantor's wildcards resolved).
26
+ * PURE — no I/O; `registeredKeys` is the live registry's exact-key universe.
27
+ */
28
+ function coversKey(effective, registeredKeys, granted) {
29
+ const isWildcard = granted.endsWith(':*') || !granted.includes(':');
30
+ if (!isWildcard) {
31
+ return effective.has(granted);
32
+ }
33
+ // Expand the granted wildcard against the SAME registry universe, then require full coverage.
34
+ const expanded = (0, db_permission_facts_adapter_js_1.expandGrantKeys)([granted], [...registeredKeys]);
35
+ if (expanded.length === 0)
36
+ return false;
37
+ return expanded.every((k) => effective.has(k));
38
+ }
39
+ /**
40
+ * Resolves a grantor's effective keys and enforces the ADR-0029 ceiling. Constructed in the
41
+ * identity module over the shared authz pool + the identity registry.
42
+ */
43
+ class GrantCeiling {
44
+ pool;
45
+ registry;
46
+ now;
47
+ constructor(pool, registry,
48
+ /** Injectable clock (epoch-ms) for the posting effective-window read; defaults to Date.now. */
49
+ now = Date.now) {
50
+ this.pool = pool;
51
+ this.registry = registry;
52
+ this.now = now;
53
+ }
54
+ /**
55
+ * The grantor's EFFECTIVE exact keys: the keys granted to the grantor's roles (active
56
+ * membership's in-effect postings in the grantor's tenant), wildcards expanded against the
57
+ * live registry. Fail-closed: a store outage throws AuthorizationUnavailableError (never an
58
+ * empty set masking an outage).
59
+ */
60
+ async effectiveKeys(grantor) {
61
+ try {
62
+ const roleIds = await (0, db_permission_facts_adapter_js_1.readRoleIdsForTenant)(this.pool, grantor.id, grantor.tenantId, this.now);
63
+ if (roleIds.length === 0)
64
+ return new Set();
65
+ const ph = roleIds.map(() => '?').join(', ');
66
+ const rows = (await this.pool.query(`SELECT rp_perm_key FROM \`${AUTHZ}\`.\`role_permission\` WHERE rp_role_uuid IN (${ph})`, roleIds));
67
+ const raw = rows.map((r) => r.rp_perm_key);
68
+ const registered = this.registry.listActions().map((a) => a.permissionKey);
69
+ return new Set((0, db_permission_facts_adapter_js_1.expandGrantKeys)(raw, registered));
70
+ }
71
+ catch (cause) {
72
+ if (cause instanceof core_1.AuthorizationUnavailableError)
73
+ throw cause;
74
+ throw new core_1.AuthorizationUnavailableError('grant-ceiling facts unavailable', cause);
75
+ }
76
+ }
77
+ /**
78
+ * Assert the grantor may grant EVERY key in `keys`. Root (strict) bypasses. A non-root grantor
79
+ * must effectively hold each key (exact) or fully hold each wildcard's expansion. Throws
80
+ * `GrantCeilingError` on the FIRST key that exceeds the grantor's authority.
81
+ */
82
+ async assertCanGrant(grantor, keys) {
83
+ if (grantor.isRoot === true)
84
+ return; // strict root bypass
85
+ const effective = await this.effectiveKeys(grantor);
86
+ const registered = this.registry.listActions().map((a) => a.permissionKey);
87
+ for (const key of keys) {
88
+ if (!coversKey(effective, registered, key)) {
89
+ throw new GrantCeilingError(key);
90
+ }
91
+ }
92
+ }
93
+ }
94
+ exports.GrantCeiling = GrantCeiling;
@@ -0,0 +1 @@
1
+ {"version":3,"file":"grant-ceiling.js","sourceRoot":"","sources":["../../../src/features/authz/grant-ceiling.ts"],"names":[],"mappings":";;;AAyCA,8BAaC;AAtCD,uCAA6D;AAC7D,qFAAyF;AAEzF,MAAM,KAAK,GAAG,cAAc,CAAC;AAE7B,6FAA6F;AAC7F,MAAa,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,GAAW;QACrB,KAAK,CAAC,qBAAqB,GAAG,0CAA0C,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AALD,8CAKC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,SAAS,CACvB,SAA8B,EAC9B,cAAiC,EACjC,OAAe;IAEf,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IACD,8FAA8F;IAC9F,MAAM,QAAQ,GAAG,IAAA,gDAAe,EAAC,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC;IACjE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAa,YAAY;IAEJ;IACA;IAEA;IAJnB,YACmB,IAAU,EACV,QAAwB;IACzC,+FAA+F;IAC9E,MAAoB,IAAI,CAAC,GAAG;QAH5B,SAAI,GAAJ,IAAI,CAAM;QACV,aAAQ,GAAR,QAAQ,CAAgB;QAExB,QAAG,GAAH,GAAG,CAAyB;IAC5C,CAAC;IAEJ;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CAAC,OAAkB;QACpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAA,qDAAoB,EAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,GAAG,EAAE,CAAC;YAC3C,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACjC,6BAA6B,KAAK,iDAAiD,EAAE,GAAG,EACxF,OAAO,CACR,CAAmC,CAAC;YACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAuB,CAAC,CAAC;YACrF,OAAO,IAAI,GAAG,CAAC,IAAA,gDAAe,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,oCAA6B;gBAAE,MAAM,KAAK,CAAC;YAChE,MAAM,IAAI,oCAA6B,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,OAAkB,EAAE,IAAuB;QAC9D,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,CAAC,qBAAqB;QAC1D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAuB,CAAC,CAAC;QACrF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;CACF;AA/CD,oCA+CC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"mariadb-catalog-store.js","sourceRoot":"","sources":["../../../src/features/authz/mariadb-catalog-store.ts"],"names":[],"mappings":";;;AAMA,MAAM,KAAK,GAAG,cAAc,CAAC;AAE7B;;;;GAIG;AACH,MAAa,mBAAmB;IACD;IAA7B,YAA6B,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAE3C,KAAK,CAAC,eAAe;QACnB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACjC;kBACY,KAAK,mBAAmB,CACrC,CAGC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtB,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,aAAa;YAC7E,MAAM,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS;YAC7D,MAAM,EAAE,CAAC,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;SAC7D,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,GAAyC;QAC9D,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAChC,iBAAiB,KAAK;;;8CAGkB,KAAK,uCAAuC,EACpF,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,aAAa,CAAC,CACpG,CAA8B,CAAC;QAChC,OAAO,MAAM,CAAC,GAAG,EAAE,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAuB;QACxC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB,YAAY,KAAK,qEAAqE,EAAE,GAAG,EAC3F,CAAC,GAAG,IAAI,CAAC,CACV,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAuB;QACtC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnB,YAAY,KAAK,mEAAmE,EAAE,GAAG,EACzF,CAAC,GAAG,IAAI,CAAC,CACV,CAAC;IACJ,CAAC;CACF;AA9CD,kDA8CC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"permission-version.bumper.js","sourceRoot":"","sources":["../../../src/features/authz/permission-version.bumper.ts"],"names":[],"mappings":";;;AAAA,uCAA6D;AAE7D,uEAAuE;AACvE,MAAM,KAAK,GAAG,cAAc,CAAC;AAE7B,mFAAmF;AACnF,MAAM,GAAG,GAAG,YAAY,CAAC;AAWzB;;;;;;;;;;;;;GAaG;AACH,MAAa,uBAAuB;IAClC;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,IAAe;QACrD,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,WAAW,CAAC,QAAgB,EAAE,IAAe;QACjD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAC5B;oBACY,GAAG;oBACH,GAAG;4DACqC,EACpD,CAAC,QAAQ,CAAC,CACX,CAA8B,CAAC;YAChC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC1C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACtC,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,oCAA6B,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,0DAA0D;IAClD,KAAK,CAAC,UAAU,CAAC,UAAkB,EAAE,IAAe;QAC1D,MAAM,IAAI,CAAC,KAAK,CACd,iBAAiB,KAAK;;6DAEiC,EACvD,CAAC,UAAU,CAAC,CACb,CAAC;IACJ,CAAC;CACF;AAnDD,0DAmDC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"record-authorization.js","sourceRoot":"","sources":["../../../src/features/authz/record-authorization.ts"],"names":[],"mappings":";;;;;AAuBA,0DAUC;AAoBD,4EAYC;AAjED;;;;;;;;;;GAUG;AACH,sDAA6C;AAC7C,yCAA0G;AAE1G,iDAAmD;AACnD,qFAA4E;AAC5E,uEAAkE;AAElE;;;;GAIG;AACH,SAAgB,uBAAuB;IACrC,MAAM,EAAE,GAAG,IAAA,oBAAY,GAAE,CAAC;IAC1B,OAAO,iBAAO,CAAC,UAAU,CAAC;QACxB,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,QAAQ,EAAE,EAAE,CAAC,QAAQ;QACrB,QAAQ,EAAE,EAAE,CAAC,QAAQ;QACrB,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,CAAC;KAC7D,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAgB,gCAAgC,CAC9C,IAAU,EACV,eAA2C,EAAE;IAE7C,MAAM,QAAQ,GAAG,IAAA,mCAA2B,EAAC,CAAC,GAAG,4BAAe,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC;IACpF,OAAO;QACL,IAAI;QACJ,eAAe,EAAE,IAAI,yDAAwB,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC7D,YAAY,EAAE,IAAI,+CAAqB,EAAE;QACzC,QAAQ;QACR,iBAAiB,EAAE,EAAE;KACtB,CAAC;AACJ,CAAC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"session-facts.reader.js","sourceRoot":"","sources":["../../../src/features/authz/session-facts.reader.ts"],"names":[],"mappings":";;;AAoBA,yCAAmG;AAEnG;;;;;GAKG;AACH,MAAa,qBAAqB;IAGb;IAFnB;IACE,uFAAuF;IACtE,MAEb,gCAAwB;QAFX,QAAG,GAAH,GAAG,CAEQ;IAC3B,CAAC;IAEJ,6FAA6F;IAC7F,IAAI,WAAW;QACb,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,wBAAgB,CAAC,CAAC,WAAW,CAAC;IAC/D,CAAC;IAED,yFAAyF;IACzF,IAAI,kBAAkB;QACpB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,wBAAgB,CAAC,CAAC,kBAAkB,CAAC;IACtE,CAAC;CACF;AAjBD,sDAiBC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"company.controller.js","sourceRoot":"","sources":["../../../src/features/company/company.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAwF;AACxF,yCAA2C;AAC3C,6DAAsD;AACtD,2DAA4E;AAGrE,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IACC;IAA7B,YAA6B,SAAyB;QAAzB,cAAS,GAAT,SAAS,CAAgB;IAAG,CAAC;IAE1D;;;;OAIG;IAGG,AAAN,KAAK,CAAC,aAAa,CAAU,KAAmB;QAC9C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAA,8BAAc,EAAC,KAAK,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC1D,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACjE,CAAC;IAED,4EAA4E;IAGtE,AAAN,KAAK,CAAC,aAAa,CAAS,IAAuB;QACjD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,IAAI,UAAU,CAAC,CAAC;QACxE,OAAO,EAAE,EAAE,EAAE,CAAC;IAChB,CAAC;IAED,2DAA2D;IAG3D,UAAU,CAAgB,IAAY;QACpC,OAAO,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,6DAA6D;IAGvD,AAAN,KAAK,CAAC,aAAa,CAAgB,IAAY,EAAU,IAAwC;QAC/F,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,6DAA6D;IAGvD,AAAN,KAAK,CAAC,aAAa,CAAgB,IAAY;QAC7C,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;CACF,CAAA;AA9CY,8CAAiB;AAUtB;IAFL,IAAA,YAAG,EAAC,WAAW,CAAC;IAChB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9B,WAAA,IAAA,cAAK,GAAE,CAAA;;;;sDAI3B;AAKK;IAFL,IAAA,aAAI,EAAC,WAAW,CAAC;IACjB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChC,WAAA,IAAA,aAAI,GAAE,CAAA;;;;sDAG1B;AAKD;IAFC,IAAA,YAAG,EAAC,iBAAiB,CAAC;IACtB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACvC,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;;;;mDAExB;AAKK;IAFL,IAAA,YAAG,EAAC,iBAAiB,CAAC;IACtB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChC,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;IAAgB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;sDAGvD;AAKK;IAFL,IAAA,eAAM,EAAC,iBAAiB,CAAC;IACzB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChC,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;;;;sDAGjC;4BA7CU,iBAAiB;IAD7B,IAAA,mBAAU,EAAC,UAAU,CAAC;qCAEmB,mCAAc;GAD3C,iBAAiB,CA8C7B"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"company.service.js","sourceRoot":"","sources":["../../../src/features/company/company.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,2CAA+D;AAC/D,2DAA0E;AAE1E,MAAM,qBAAqB,GAAG,CAAC,MAAM,CAAU,CAAC;AAChD,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAU,CAAC;AAErE;;;;GAIG;AAEI,IAAM,cAAc,GAApB,MAAM,cAAc;IACI;IAA7B,YAA6B,OAAuB;QAAvB,YAAO,GAAP,OAAO,CAAgB;IAAG,CAAC;IAExD,iCAAiC;IACjC,aAAa,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,2EAA2E;IAC3E,aAAa,CAAC,MAAmB;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAA,8BAAc,EAAC,MAAM,EAAE,qBAAqB,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC1G,CAAC;IAED,6BAA6B;IAC7B,UAAU,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,wBAAwB;IACxB,aAAa,CAAC,IAAY,EAAE,KAAyC;QACnE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,wBAAwB;IACxB,aAAa,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9C,CAAC;CACF,CAAA;AA3BY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;qCAE2B,uBAAc;GADzC,cAAc,CA2B1B"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"cross-tenant-grant-read.service.js","sourceRoot":"","sources":["../../../src/features/cross-tenant/cross-tenant-grant-read.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,iFAAiF;AACjF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,2CAA4C;AAG5C,2CAAmD;AAEnD,MAAM,KAAK,GAAG,cAAc,CAAC;AAC7B,MAAM,GAAG,GAAG,YAAY,CAAC;AAwEzB;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,GAAY;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;QAC7F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,8FAA8F;AAC9F,SAAS,WAAW,CAAC,GAAkB;IACrC,MAAM,IAAI,GAAG,GAAG,CAAC,gBAAgB,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC7F,OAAO,IAAI,IAAI,iBAAiB,CAAC;AACnC,CAAC;AAED,SAAS,WAAW,CAAC,GAAkB;IACrC,OAAO,GAAG,CAAC,gBAAgB,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3D,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,GAA6B;IAChD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,yFAAyF;AACzF,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;;CAkBtB,CAAC;AAEF,MAAM,KAAK,GAAG;WACH,KAAK;gBACA,GAAG;gBACH,GAAG;gBACH,GAAG;gBACH,GAAG;gBACH,GAAG;CAClB,CAAC;AAGK,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IAiBnB;IACA;IACA;IAlBnB;;;;;;;;;;;;;;OAcG;IACH,YACmB,IAAU,EACV,mBAA+C,EAC/C,aAAqD;QAFrD,SAAI,GAAJ,IAAI,CAAM;QACV,wBAAmB,GAAnB,mBAAmB,CAA4B;QAC/C,kBAAa,GAAb,aAAa,CAAwC;IACrE,CAAC;IAEJ;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CAAC,QAAgB,EAAE,KAAa;QAC7C,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACjC,UAAU,cAAc;SACrB,KAAK;;;;0CAI4B,EACpC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAClB,CAAoB,CAAC;QAEtB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,IAAI,gBAAgB;YAC5D,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC;YAC7B,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC;YAC7B,OAAO,EAAE,GAAG,CAAC,YAAY;YACzB,SAAS,EAAE,GAAG,CAAC,YAAY;YAC3B,KAAK,EAAE,GAAG,CAAC,SAAS;YACpB,cAAc,EAAE,mBAAmB,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAC5D,aAAa,EAAE,GAAG,CAAC,eAAe,IAAI,cAAc;YACpD,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC;SAChD,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ,CAAC,QAAgB;QAC7B,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACjC,UAAU,cAAc;SACrB,KAAK;;wCAE0B,EAClC,CAAC,QAAQ,CAAC,CACX,CAAoB,CAAC;QAEtB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,iBAAiB,EAAE,GAAG,CAAC,mBAAmB,IAAI,gBAAgB;YAC9D,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC;YAC7B,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC;YAC7B,OAAO,EAAE,GAAG,CAAC,YAAY;YACzB,SAAS,EAAE,GAAG,CAAC,YAAY;YAC3B,KAAK,EAAE,GAAG,CAAC,SAAS;YACpB,cAAc,EAAE,mBAAmB,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAC5D,MAAM,EAAE,GAAG,CAAC,UAAU;YACtB,aAAa,EAAE,GAAG,CAAC,eAAe,IAAI,cAAc;YACpD,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC;SAChD,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACjC,UAAU,cAAc;SACrB,KAAK;;;0CAG4B,EACpC,CAAC,QAAQ,CAAC,CACX,CAAoB,CAAC;QAEtB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,IAAI,gBAAgB;YAC5D,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC;YAC7B,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC;YAC7B,OAAO,EAAE,GAAG,CAAC,YAAY;YACzB,SAAS,EAAE,GAAG,CAAC,YAAY;YAC3B,KAAK,EAAE,GAAG,CAAC,SAAS;YACpB,cAAc,EAAE,mBAAmB,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAC5D,aAAa,EAAE,GAAG,CAAC,eAAe,IAAI,cAAc;YACpD,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC;SAChD,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;;;;OAQG;IACK,iBAAiB;QACvB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7C,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAC3E,IAAI,GAAG,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,gCAAgC;QAChG,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,eAAe,CAAC,OAAe;QAC7B,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,kBAAkB;QACtB,MAAM,GAAG,GAAuB,EAAE,CAAC;QACnC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YAC/C,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO;gBACP,KAAK,EAAE,OAAO,EAAE,oFAAoF;gBACpG,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;aAC1C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF,CAAA;AA5KY,kEAA2B;sCAA3B,2BAA2B;IADvC,IAAA,mBAAU,GAAE;;GACA,2BAA2B,CA4KvC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"cross-tenant-grant.controller.js","sourceRoot":"","sources":["../../../src/features/cross-tenant/cross-tenant-grant.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,+EAA+E;AAC/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,2CAWwB;AACxB,yCAQuB;AAEvB,6FAAmF;AAiBnF,MAAM,mBAAmB,GAAgC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE1E,qFAAqF;AACrF,SAAS,cAAc,CAAC,IAAmC;IAQzD,MAAM,eAAe,GAAG,IAAI,EAAE,eAAe,CAAC;IAC9C,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,4BAAmB,CAAC,6BAA6B,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,CAAC;IACtC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,WAA+B,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,4BAAmB,CAAC,sCAAsC,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,CAAC;IACtC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,4BAAmB,CAAC,yBAAyB,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,CAAC;IAC9B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,4BAAmB,CAAC,qBAAqB,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,EAAE,cAAc,CAAC;IAC5C,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;QAC9B,cAAc,CAAC,MAAM,KAAK,CAAC;QAC3B,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EACnE,CAAC;QACD,MAAM,IAAI,4BAAmB,CAAC,yDAAyD,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,CAAC;IACtC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,4BAAmB,CAAC,iEAAiE,CAAC,CAAC;IACnG,CAAC;IACD,OAAO;QACL,eAAe;QACf,WAAW,EAAE,WAA+B;QAC5C,WAAW;QACX,OAAO;QACP,cAAc,EAAE,cAA0B;QAC1C,WAAW;KACZ,CAAC;AACJ,CAAC;AAGM,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IAEwB;IAC1C;IAFnB,YAC6D,WAAmC,EAC7E,KAAkC;QADQ,gBAAW,GAAX,WAAW,CAAwB;QAC7E,UAAK,GAAL,KAAK,CAA6B;IAClD,CAAC;IAEJ;;;;OAIG;IAGG,AAAN,KAAK,CAAC,KAAK,CAAQ,GAAkB,EAAU,IAAuB;QACpE,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACpC,oFAAoF;QACpF,uFAAuF;QACvF,oFAAoF;QACpF,+DAA+D;QAC/D,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,4BAAmB,CAC3B,YAAY,MAAM,CAAC,OAAO,+CAA+C;gBACvE,wDAAwD,CAC3D,CAAC;QACJ,CAAC;QACD,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;gBAClC,cAAc,EAAE,GAAG,CAAC,SAAS,CAAC,QAAQ;gBACtC,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,KAAK,EAAE,aAAa;gBACpB,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE;aAC5B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,yFAAyF;IAGnF,AAAN,KAAK,CAAC,MAAM,CAAQ,GAAkB,EAAiB,IAAY;QACjE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;QACnF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IAGG,AAAN,KAAK,CAAC,MAAM,CAAQ,GAAkB,EAAiB,IAAY;QACjE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;OAGG;IAGG,AAAN,KAAK,CAAC,KAAK,CAAQ,GAAkB;QACnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5E,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAED;;;;OAIG;IAGG,AAAN,KAAK,CAAC,IAAI,CAAQ,GAAkB;QAClC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACzC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC3C,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC;SAChD,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAClC,CAAC;IAED,wFAAwF;IAGlF,AAAN,KAAK,CAAC,cAAc;QAClB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;QACpD,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;CACF,CAAA;AA1GY,gEAA0B;AAa/B;IAFL,IAAA,aAAI,EAAC,qBAAqB,CAAC;IAC3B,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAClD,WAAA,IAAA,YAAG,GAAE,CAAA;IAAsB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;uDA6B7C;AAKK;IAFL,IAAA,aAAI,EAAC,kCAAkC,CAAC;IACxC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAClD,WAAA,IAAA,YAAG,GAAE,CAAA;IAAsB,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;;;;wDAOrD;AAUK;IAFL,IAAA,aAAI,EAAC,kCAAkC,CAAC;IACxC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAClD,WAAA,IAAA,YAAG,GAAE,CAAA;IAAsB,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;;;;wDAOrD;AAQK;IAFL,IAAA,YAAG,EAAC,2BAA2B,CAAC;IAChC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACnC,WAAA,IAAA,YAAG,GAAE,CAAA;;;;uDAGjB;AASK;IAFL,IAAA,YAAG,EAAC,qBAAqB,CAAC;IAC1B,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACpC,WAAA,IAAA,YAAG,GAAE,CAAA;;;;sDAMhB;AAKK;IAFL,IAAA,YAAG,EAAC,qCAAqC,CAAC;IAC1C,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;;;;gEAI/C;qCAzGU,0BAA0B;IADtC,IAAA,mBAAU,EAAC,UAAU,CAAC;IAGlB,WAAA,IAAA,eAAM,EAAC,wCAAgC,CAAC,CAAA;qCAA+B,8BAAsB;QACtE,gEAA2B;GAH1C,0BAA0B,CA0GtC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,GAAG,YAAY,8BAAsB;QAAE,OAAO,IAAI,2BAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtF,IAAI,GAAG,YAAY,yBAAiB;QAAE,OAAO,IAAI,4BAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClF,IAAI,GAAG,YAAY,kCAA0B;QAAE,OAAO,IAAI,oCAA2B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnG,OAAO,GAAY,CAAC;AACtB,CAAC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"grant-authorize.js","sourceRoot":"","sources":["../../../src/features/cross-tenant/grant-authorize.ts"],"names":[],"mappings":";;AA2CA,sEAuBC;AAvBD,SAAgB,6BAA6B,CAC3C,IAAuC;IAEvC,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG;YAChB,IAAI,EAAE,MAAe;YACrB,EAAE,EAAE,WAAW;YACf,8FAA8F;YAC9F,iBAAiB,EAAE,QAAQ;YAC3B,mBAAmB,EAAE,CAAC,QAAQ,CAAC;YAC/B,QAAQ;YACR,OAAO;YACP,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;SACjC,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAC1C,SAAS,EACT,EAAE,GAAG,EAAE,MAAM,EAAE,EACf,EAAE,KAAK,EAAE,aAAsB,EAAE,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,EAC1E,EAAE,eAAe,EAAE,IAAI,EAAE,CAC1B,CAAC;QACF,OAAO,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC;IACrC,CAAC,CAAC;AACJ,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"identity-feature.module.d.ts","sourceRoot":"","sources":["../../src/features/identity-feature.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE5D,OAAO,EAYL,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AAsExB;;;;;;;;;;GAUG;AACH,qBACa,qBAAqB;IAChC;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,OAAO,CAAC,EACb,OAAO,EACP,YAAiB,GAClB,GAAE;QAAE,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,YAAY,CAAC,EAAE,SAAS,eAAe,EAAE,CAAA;KAAO,GAAG,aAAa;CAwTnG"}
1
+ {"version":3,"file":"identity-feature.module.d.ts","sourceRoot":"","sources":["../../src/features/identity-feature.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE5D,OAAO,EAYL,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AA4ExB;;;;;;;;;;GAUG;AACH,qBACa,qBAAqB;IAChC;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,OAAO,CAAC,EACb,OAAO,EACP,YAAiB,GAClB,GAAE;QAAE,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,YAAY,CAAC,EAAE,SAAS,eAAe,EAAE,CAAA;KAAO,GAAG,aAAa;CAmYnG"}
@@ -33,10 +33,14 @@ const db_permission_facts_adapter_js_1 = require("./authz/db-permission-facts.ad
33
33
  const access_bundle_store_js_1 = require("./authz/access-bundle-store.js");
34
34
  const grant_admin_service_js_1 = require("./authz/grant-admin.service.js");
35
35
  const grant_admin_controller_js_1 = require("./authz/grant-admin.controller.js");
36
+ const grant_ceiling_js_1 = require("./authz/grant-ceiling.js");
36
37
  const policy_service_js_1 = require("./policy/policy.service.js");
37
38
  const policy_controller_js_1 = require("./policy/policy.controller.js");
38
39
  const share_service_js_1 = require("./share/share.service.js");
39
40
  const share_controller_js_1 = require("./share/share.controller.js");
41
+ const service_account_store_js_1 = require("./service-account/service-account.store.js");
42
+ const service_account_service_js_1 = require("./service-account/service-account.service.js");
43
+ const service_account_controller_js_1 = require("./service-account/service-account.controller.js");
40
44
  const catalog_reconcile_job_js_1 = require("./authz/catalog-reconcile.job.js");
41
45
  const access_bundle_reconcile_job_js_1 = require("./authz/access-bundle-reconcile.job.js");
42
46
  const catalog_bootstrap_provider_js_1 = require("./authz/catalog-bootstrap.provider.js");
@@ -98,19 +102,24 @@ let IdentityFeatureModule = IdentityFeatureModule_1 = class IdentityFeatureModul
98
102
  const postingVersionBump = {
99
103
  bumpTenant: (tenantUuid) => bumper.bumpForTenant(tenantUuid, authzPool),
100
104
  };
105
+ // The core ModuleRegistry the catalog reconcile job needs, built from the identity
106
+ // object registrations (guard's bridge reflects decorated classes → registry). Built BEFORE
107
+ // the grant-admin service so the GrantCeiling (ADR-0029) can share it as the key universe.
108
+ const identityRegistry = (0, guard_1.buildIdentityModuleRegistry)([...objects_js_1.identityObjects]);
101
109
  // The grant-admin collaborators built at forRoot() over the shared pool (mirrors the
102
- // postingVersionBump closure pattern above).
110
+ // postingVersionBump closure pattern above). GrantCeiling (ADR-0029) enforces the
111
+ // self-escalation ceiling: a non-root grantor may only grant a key they themselves hold —
112
+ // resolved over the SAME authz pool + registry the object-type gate uses (one source of
113
+ // truth for "what a principal holds"). ALWAYS wired here, so production always enforces.
103
114
  const accessBundleStore = new access_bundle_store_js_1.AccessBundleStore(authzPool);
104
- const grantAdminService = new grant_admin_service_js_1.GrantAdminService(authzPool, bumper, accessBundleStore);
115
+ const grantCeiling = new grant_ceiling_js_1.GrantCeiling(authzPool, identityRegistry);
116
+ const grantAdminService = new grant_admin_service_js_1.GrantAdminService(authzPool, bumper, accessBundleStore, grantCeiling);
105
117
  // Scope closure (Task 1.2 of the scoped-hierarchy program): the reconciler + node
106
118
  // move/delete maintenance, over the SAME shared authzPool (it reaches BOTH shield_app —
107
119
  // companies — and shield_authz — scope_closure). Reuses the SAME `bumper` instance so a
108
120
  // moveNode's session-invalidation joins the move's transaction. reconcileClosure() is
109
121
  // kicked post-boot by the CatalogBootstrapProvider (mirrors the catalog reconcile).
110
122
  const scopeClosureService = new scope_closure_service_js_1.ScopeClosureService(authzPool, bumper);
111
- // The core ModuleRegistry the catalog reconcile job needs, built from the identity
112
- // object registrations (guard's bridge reflects decorated classes → registry).
113
- const identityRegistry = (0, guard_1.buildIdentityModuleRegistry)([...objects_js_1.identityObjects]);
114
123
  // Audit viewer (Phase 5): the AuditReader + LabelResolver over the SAME shared authzPool
115
124
  // (the reader queries shield_audit + the resolver/actor-lookup query shield_app, both
116
125
  // reachable by that pool). `auditNameToId` is the actor-name -> uuid reverse lookup for the
@@ -292,6 +301,50 @@ let IdentityFeatureModule = IdentityFeatureModule_1 = class IdentityFeatureModul
292
301
  },
293
302
  });
294
303
  const shareService = new share_service_js_1.ShareService(recordShareWriter, auditLabels);
304
+ // ── SERVICE ACCOUNTS + API KEYS (ADR-0033, Phase 2) ──────────────────────────────────────
305
+ // The machine-identity admin surface: create/scope service accounts + issue/rotate/revoke
306
+ // their `ask_…` API keys. Self-wired here over the SAME shared authzPool (which reaches BOTH
307
+ // shield_app.service_account — the accounts — AND shield_authz.service_account_key — the hashed
308
+ // keys). The guard's MariaDbApiKeyStore + Argon2idPasswordHasher back the credential lifecycle;
309
+ // the service enforces own-tenant + the ADR-0029 ceiling (scope ⊆ mine, roles ⊆ mine).
310
+ const serviceAccountStore = new service_account_store_js_1.ServiceAccountStore(authzPool);
311
+ const serviceAccountKeyStore = new guard_1.MariaDbApiKeyStore(authzPool);
312
+ const serviceAccountHasher = new guard_1.Argon2idPasswordHasher();
313
+ // Best-effort audit → the SAME shield_audit sink pattern (a sink throw never fails the op).
314
+ const serviceAccountAuditSink = new engine_1.MariaDbAuditSink({}); // shield_audit.audit_log defaults
315
+ const serviceAccountAudit = {
316
+ record: async (event) => {
317
+ try {
318
+ await serviceAccountAuditSink.record({
319
+ type: 'admin_action',
320
+ occurredAtMs: event.occurredAtMs,
321
+ actorId: event.actorId,
322
+ tenantId: event.tenantId,
323
+ action: { key: event.action },
324
+ attributes: { ...event.attributes, eventType: 'service_account' },
325
+ }, (sql, params) => authzPool.query(sql, params));
326
+ }
327
+ catch {
328
+ // Best-effort — an audit failure must never fail a legitimate account/key operation.
329
+ }
330
+ },
331
+ };
332
+ // Resolve a principal id → username for the "created by" view (no raw uuid). Reuses the same
333
+ // shield_app.users lookup the audit actor filter uses (inverted). Unknown → null (view falls
334
+ // back to no name, never an id).
335
+ const resolveActorName = async (id) => {
336
+ const rows = (await authzPool.query('SELECT u_username AS name FROM `shield_app`.`users` WHERE u_uuid = ? LIMIT 1', [id]));
337
+ return rows[0]?.name ?? null;
338
+ };
339
+ const serviceAccountService = new service_account_service_js_1.ServiceAccountService(serviceAccountStore, serviceAccountKeyStore, serviceAccountHasher, serviceAccountAudit, resolveActorName,
340
+ // The ceiling's roles: in-effect postings (the same source as gate 5 and GrantCeiling).
341
+ (principalId, tenantId) => (0, db_permission_facts_adapter_js_1.readRoleIdsForTenant)(authzPool, principalId, tenantId));
342
+ // NOTE: the machine AUTH path (the `ServiceAuthenticator` behind `SHIELD_SERVICE_AUTHENTICATOR`)
343
+ // is provided by the guard's own AuthModule (under `auth: true`), NOT here — a token provided in
344
+ // this later, sibling feature module is invisible to the APP_GUARD in ShieldModule (that DI
345
+ // boundary made an identity-provided authenticator resolve to `undefined` → `ask_…` bearers
346
+ // 401'd). This module owns only the ACCOUNT ADMIN surface (store + service + controller); the
347
+ // guard owns authentication. (ADR-0033.)
295
348
  return {
296
349
  module: IdentityFeatureModule_1,
297
350
  imports: [
@@ -332,6 +385,9 @@ let IdentityFeatureModule = IdentityFeatureModule_1 = class IdentityFeatureModul
332
385
  policy_controller_js_1.PolicyController,
333
386
  // Owner shares (Phase 6) — `record-shares` collides with nothing. Appended last.
334
387
  share_controller_js_1.ShareController,
388
+ // Service accounts (ADR-0033) — `service-accounts/*` collides with nothing; its static
389
+ // sub-paths (/keys, /keys/rotate, /keys/revoke) sit under `:id` and are method-distinct.
390
+ service_account_controller_js_1.ServiceAccountController,
335
391
  ],
336
392
  providers: [
337
393
  company_service_js_1.CompanyService,
@@ -359,6 +415,10 @@ let IdentityFeatureModule = IdentityFeatureModule_1 = class IdentityFeatureModul
359
415
  // Owner shares (Phase 6) — the ShareService over the framework RecordShareWriter + the
360
416
  // DirectoryLabelResolver (name resolution). useValue, all over the shared authzPool.
361
417
  { provide: share_service_js_1.ShareService, useValue: shareService },
418
+ // Service accounts (ADR-0033) — the ServiceAccountService over the shared authzPool +
419
+ // guard key-store/hasher, and the ServiceAuthenticator under the guard's token so the
420
+ // enforcement guard can authenticate `ask_…` bearers out-of-the-box. Both useValue.
421
+ { provide: service_account_service_js_1.ServiceAccountService, useValue: serviceAccountService },
362
422
  // The mutating half of auto-catalog: a single CatalogReconcileJob (post-boot pass +
363
423
  // cron), over the shared pool + the identity registry.
364
424
  { provide: catalog_reconcile_job_js_1.CatalogReconcileJob, useValue: new catalog_reconcile_job_js_1.CatalogReconcileJob(authzPool, identityRegistry) },
@@ -0,0 +1 @@
1
+ {"version":3,"file":"identity-feature.module.js","sourceRoot":"","sources":["../../src/features/identity-feature.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAA4D;AAC5D,uCAA+C;AAC/C,2CAawB;AACxB,yCAauB;AACvB,8CAAgD;AAChD,gDAA0D;AAC1D,qEAA8D;AAC9D,2EAAoE;AACpE,4DAAqD;AACrD,kEAA2D;AAC3D,4DAAqD;AACrD,kEAA2D;AAC3D,oFAA6E;AAC7E,8EAAuE;AACvE,wEAAiE;AACjE,yFAAiF;AACjF,mFAA2E;AAC3E,oEAAoE;AACpE,kFAAqG;AACrG,uFAA+E;AAC/E,6EAGyC;AACzC,2FAA8E;AAC9E,2EAAmE;AACnE,2EAAmE;AACnE,iFAAyE;AACzE,+DAAwD;AACxD,kEAA2D;AAC3D,wEAAiE;AACjE,+DAAwD;AACxD,qEAA8D;AAC9D,+EAAuE;AACvE,2FAAkF;AAClF,yFAAiF;AACjF,+EAAuE;AACvE,6EAAqE;AACrE,qFAA6E;AAC7E,yEAAiE;AACjE,qEAA8D;AAC9D,0GAAgG;AAChG,sGAA6F;AAC7F,0EAAkF;AAElF,mGAAmG;AACnG,SAAS,eAAe;IACtB,MAAM,EAAE,GAAG,IAAA,oBAAY,GAAE,CAAC;IAC1B,OAAO;QACL,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,QAAQ,EAAE,EAAE,CAAC,QAAQ;QACrB,QAAQ,EAAE,EAAE,CAAC,QAAQ;QACrB,6FAA6F;QAC7F,uFAAuF;QACvF,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC;KAClE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AAEI,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IAChC;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,OAAO,CAAC,EACb,OAAO,EACP,YAAY,GAAG,EAAE,MAC6D,EAAE;QAChF,+EAA+E;QAC/E,uFAAuF;QACvF,oFAAoF;QACpF,4EAA4E;QAC5E,MAAM,SAAS,GAAG,IAAA,iDAAuB,GAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,sDAAuB,EAAE,CAAC;QAC7C,MAAM,kBAAkB,GAAuB;YAC7C,UAAU,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC;SACxE,CAAC;QAEF,mFAAmF;QACnF,4FAA4F;QAC5F,2FAA2F;QAC3F,MAAM,gBAAgB,GAAG,IAAA,mCAA2B,EAAC,CAAC,GAAG,4BAAe,CAAC,CAAC,CAAC;QAE3E,qFAAqF;QACrF,kFAAkF;QAClF,0FAA0F;QAC1F,wFAAwF;QACxF,yFAAyF;QACzF,MAAM,iBAAiB,GAAG,IAAI,0CAAiB,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,IAAI,+BAAY,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACnE,MAAM,iBAAiB,GAAG,IAAI,0CAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC;QACpG,kFAAkF;QAClF,wFAAwF;QACxF,wFAAwF;QACxF,sFAAsF;QACtF,oFAAoF;QACpF,MAAM,mBAAmB,GAAG,IAAI,8CAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAEvE,yFAAyF;QACzF,sFAAsF;QACtF,4FAA4F;QAC5F,yFAAyF;QACzF,uFAAuF;QACvF,4FAA4F;QAC5F,MAAM,WAAW,GAAG,IAAI,4CAAkB,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,IAAI,oDAAsB,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,aAAa,GAAG,KAAK,EAAE,IAAY,EAA0B,EAAE;YACnE,MAAM,IAAI,GAAG,CAAC,MAAM,SAAS,CAAC,KAAK,CACjC,4EAA4E,EAC5E,CAAC,IAAI,CAAC,CACP,CAAqB,CAAC;YACvB,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,IAAI,CAAC;QAC7B,CAAC,CAAC;QACF,MAAM,gBAAgB,GAAG,IAAI,wCAAgB,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;QAEvF,yFAAyF;QACzF,6FAA6F;QAC7F,8FAA8F;QAC9F,4FAA4F;QAC5F,kEAAkE;QAClE,MAAM,oBAAoB,GAAG,IAAA,gCAAwB,EAAC,IAAA,0DAAgC,EAAC,SAAS,CAAC,CAAC,CAAC;QACnG,sFAAsF;QACtF,2FAA2F;QAC3F,wFAAwF;QACxF,0FAA0F;QAC1F,6FAA6F;QAC7F,6FAA6F;QAC7F,uCAAuC;QACvC,MAAM,SAAS,GAAG,IAAA,wBAAgB,EAAC,IAAA,0DAAgC,EAAC,SAAS,CAAC,CAAC,CAAC;QAChF,wFAAwF;QACxF,uFAAuF;QACvF,uFAAuF;QACvF,MAAM,yBAAyB,GAAG,IAAA,kDAA6B,EAAC;YAC9D,SAAS,EAAE,oBAAoB;YAC/B,WAAW,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAA,qDAAoB,EAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC;YAC9F,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;SAC/D,CAAC,CAAC;QACH,0FAA0F;QAC1F,gGAAgG;QAChG,+FAA+F;QAC/F,6FAA6F;QAC7F,6FAA6F;QAC7F,+FAA+F;QAC/F,sFAAsF;QACtF,2FAA2F;QAC3F,8FAA8F;QAC9F,iEAAiE;QACjE,+FAA+F;QAC/F,kEAAkE;QAClE,MAAM,cAAc,GAAG,IAAI,yBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,mCAAmC;QACpF,MAAM,UAAU,GAAG;YACjB,MAAM,EAAE,KAAK,EAAE,KAAsB,EAAiB,EAAE;gBACtD,IAAI,CAAC;oBACH,MAAM,SAAS,GACb,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,eAAe,KAAK,KAAK,CAAC,cAAc;wBACrE,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,eAAe,CAAC;wBAC/C,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;oBAC7B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;wBACjC,MAAM,cAAc,CAAC,MAAM,CACzB;4BACE,IAAI,EAAE,gBAAgB;4BACtB,YAAY,EAAE,KAAK,CAAC,YAAY;4BAChC,OAAO,EAAE,KAAK,CAAC,OAAO;4BACtB,QAAQ;4BACR,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE;4BAC7B,UAAU,EAAE;gCACV,GAAG,KAAK,CAAC,UAAU;gCACnB,cAAc,EAAE,KAAK,CAAC,cAAc;gCACpC,eAAe,EAAE,KAAK,CAAC,eAAe;6BACvC;yBACF,EACD,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAC9C,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,gFAAgF;gBAClF,CAAC;YACH,CAAC;SACF,CAAC;QACF,MAAM,sBAAsB,GAAG,IAAI,8BAAsB,CAAC;YACxD,EAAE,EAAE,SAAS;YACb,SAAS,EAAE,yBAAyB;YACpC,KAAK,EAAE,UAAU;SAClB,CAAC,CAAC;QACH,6FAA6F;QAC7F,8EAA8E;QAC9E,MAAM,2BAA2B,GAAG,IAAI,gEAA2B,CACjE,SAAS,EACT,CAAC,GAAG,4BAAe,CAAC,EACpB,kBAAU,CACX,CAAC;QAEF,4FAA4F;QAC5F,8FAA8F;QAC9F,4FAA4F;QAC5F,6FAA6F;QAC7F,wFAAwF;QACxF,oFAAoF;QACpF,yFAAyF;QACzF,MAAM,eAAe,GAAG,IAAI,yBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,kCAAkC;QACpF,MAAM,WAAW,GAAG;YAClB,MAAM,EAAE,KAAK,EAAE,KAAmD,EAAiB,EAAE;gBACnF,IAAI,CAAC;oBACH,MAAM,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;gBACrF,CAAC;gBAAC,MAAM,CAAC;oBACP,0EAA0E;gBAC5E,CAAC;YACH,CAAC;SACF,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,0BAAkB,CAAC,SAAS,CAAC,CAAC;QACtD,8FAA8F;QAC9F,wFAAwF;QACxF,+FAA+F;QAC/F,6FAA6F;QAC7F,yFAAyF;QACzF,yFAAyF;QACzF,wFAAwF;QACxF,MAAM,YAAY,GAAG,CAAC,GAAG,4BAAe,EAAE,GAAG,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,KAAsB,EAAE,EAAE;YACxF,MAAM,GAAG,GACP,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACjE,OAAO;gBACL,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,KAAK,EAAE,GAAG,CAAC,OAAO;gBAClB,OAAO,EAAE,IAAA,kBAAU,EAAC,GAAG,CAAC,OAAO,CAAC;gBAChC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;aAC9D,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,iCAAa,CAAC;YACtC,QAAQ,EAAE,gBAAgB;YAC1B,WAAW;YACX,MAAM,EAAE,oBAAoB;YAC5B,KAAK,EAAE,WAAW;YAClB,YAAY;SACb,CAAC,CAAC;QAEH,4FAA4F;QAC5F,6FAA6F;QAC7F,4FAA4F;QAC5F,yFAAyF;QACzF,6FAA6F;QAC7F,uFAAuF;QACvF,yFAAyF;QACzF,4FAA4F;QAC5F,0FAA0F;QAC1F,gGAAgG;QAChG,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAyB,CAAC;QAC5D,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,4BAAe,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC;YAC1D,MAAM,GAAG,GAAe,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,IAAA,0BAAiB,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACvF,MAAM,KAAK,GAAG,IAAA,oBAAW,EAAC,GAAG,CAAC,CAAC;YAC/B,MAAM,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAA,qBAAY,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAChF,2FAA2F;YAC3F,0FAA0F;YAC1F,IAAI,CAAC,IAAA,gBAAO,EAAC,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI;gBAAE,SAAS;YAC7D,MAAM,SAAS,GAAG,IAAA,uBAAc,EAAC,GAAG,CAAC,CAAC;YACtC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE;gBAClC,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,QAAQ,EAAE,EAAE;gBACZ,WAAW,EAAE,KAAK;gBAClB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;QACL,CAAC;QACD,MAAM,iBAAiB,GAAsB;YAC3C,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC;SACtD,CAAC;QACF,MAAM,cAAc,GAAG,IAAI,yBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,yBAAyB;QAC1E,MAAM,iBAAiB,GAAG,IAAI,yBAAiB,CAAC;YAC9C,EAAE,EAAE,SAAS;YACb,KAAK,EAAE,iBAAiB;YACxB,KAAK,EAAE;gBACL,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;oBACtB,IAAI,CAAC;wBACH,MAAM,cAAc,CAAC,MAAM,CACzB;4BACE,qFAAqF;4BACrF,iFAAiF;4BACjF,IAAI,EAAE,cAAc;4BACpB,YAAY,EAAE,KAAK,CAAC,YAAY;4BAChC,OAAO,EAAE,KAAK,CAAC,OAAO;4BACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;4BACxB,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,oCAAoC;4BACnE,UAAU,EAAE,EAAE,GAAG,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE;yBAC/D,EACD,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAC9C,CAAC;oBACJ,CAAC;oBAAC,MAAM,CAAC;wBACP,6EAA6E;oBAC/E,CAAC;gBACH,CAAC;aACF;SACF,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,+BAAY,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;QAEtE,OAAO;YACL,MAAM,EAAE,uBAAqB;YAC7B,OAAO,EAAE;gBACP,qFAAqF;gBACrF,uFAAuF;gBACvF,6EAA6E;gBAC7E,oFAAoF;gBACpF,+EAA+E;gBAC/E,8EAA8E;gBAC9E,qBAAY,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,gCAAqB,EAAE,CAAC;gBACrE,sEAAsE;gBACtE,qBAAY,CAAC,OAAO,CAAC;oBACnB,EAAE,EAAE,eAAe,EAAE;oBACrB,aAAa,EAAE,CAAC,GAAG,4BAAe,CAAC;oBACnC,SAAS;iBACV,CAAC;gBACF,qFAAqF;gBACrF,iEAAiE;gBACjE,sBAAe;aAChB;YACD,mFAAmF;YACnF,8EAA8E;YAC9E,2DAA2D;YAC3D,WAAW,EAAE;gBACX,yCAAiB;gBACjB,mCAAc;gBACd,gDAAoB;gBACpB,mCAAc;gBACd,+CAAoB;gBACpB,gDAAoB;gBACpB,oFAAoF;gBACpF,qCAAe;gBACf,oFAAoF;gBACpF,sFAAsF;gBACtF,gEAAgE;gBAChE,6DAA0B;gBAC1B,4FAA4F;gBAC5F,uCAAgB;gBAChB,iFAAiF;gBACjF,qCAAe;aAChB;YACD,SAAS,EAAE;gBACT,mCAAc;gBACd,6BAAW;gBACX,6BAAW;gBACX,yCAAiB;gBACjB,mCAAc;gBACd,0CAAiB;gBACjB,0CAAqB;gBACrB,EAAE,OAAO,EAAE,8CAAoB,EAAE,QAAQ,EAAE,kBAAkB,EAAE;gBAC/D,yDAAyD;gBACzD,EAAE,OAAO,EAAE,0CAAiB,EAAE,QAAQ,EAAE,iBAAiB,EAAE;gBAC3D,EAAE,OAAO,EAAE,0CAAiB,EAAE,QAAQ,EAAE,iBAAiB,EAAE;gBAC3D,qFAAqF;gBACrF,yFAAyF;gBACzF,EAAE,OAAO,EAAE,wCAAgB,EAAE,QAAQ,EAAE,gBAAgB,EAAE;gBACzD,oFAAoF;gBACpF,sFAAsF;gBACtF,8CAA8C;gBAC9C,EAAE,OAAO,EAAE,wCAAgC,EAAE,QAAQ,EAAE,sBAAsB,EAAE;gBAC/E,EAAE,OAAO,EAAE,gEAA2B,EAAE,QAAQ,EAAE,2BAA2B,EAAE;gBAC/E,yFAAyF;gBACzF,2FAA2F;gBAC3F,EAAE,OAAO,EAAE,iCAAa,EAAE,QAAQ,EAAE,aAAa,EAAE;gBACnD,uFAAuF;gBACvF,qFAAqF;gBACrF,EAAE,OAAO,EAAE,+BAAY,EAAE,QAAQ,EAAE,YAAY,EAAE;gBACjD,oFAAoF;gBACpF,uDAAuD;gBACvD,EAAE,OAAO,EAAE,8CAAmB,EAAE,QAAQ,EAAE,IAAI,8CAAmB,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE;gBAChG,wFAAwF;gBACxF,uFAAuF;gBACvF;oBACE,OAAO,EAAE,yDAAwB;oBACjC,UAAU,EAAE,CAAC,OAAoC,EAAE,EAAE,CACnD,IAAI,yDAAwB,CAAC,SAAS,EAAE,OAAO,CAAC;oBAClD,MAAM,EAAE,CAAC,kCAAyB,CAAC;iBACpC;gBACD,yFAAyF;gBACzF,oFAAoF;gBACpF,kEAAkE;gBAClE,EAAE,OAAO,EAAE,8CAAmB,EAAE,QAAQ,EAAE,mBAAmB,EAAE;gBAC/D,uFAAuF;gBACvF,uFAAuF;gBACvF,mFAAmF;gBACnF,2EAA2E;gBAC3E,wDAAwB;aACzB;YACD,OAAO,EAAE,CAAC,mCAAc,EAAE,6BAAW,EAAE,6BAAW,CAAC;SACpD,CAAC;IACJ,CAAC;CACF,CAAA;AAhVY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,qBAAqB,CAgVjC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"membership-checker.js","sourceRoot":"","sources":["../../../src/features/membership/membership-checker.ts"],"names":[],"mappings":";;;AAiCA,6DAA6D;AAC7D,MAAM,GAAG,GAAG,YAAY,CAAC;AAEzB,MAAa,mBAAmB;IACD;IAA7B,YAA6B,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAE3C;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CAAC,WAAmB,EAAE,MAAc;QAC3D,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACjC;kBACY,GAAG;;;gBAGL,EACV,CAAC,WAAW,EAAE,MAAM,CAAC,CACtB,CAA0B,CAAC;QAC5B,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACzB,CAAC;CACF;AAnBD,kDAmBC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"membership.controller.js","sourceRoot":"","sources":["../../../src/features/membership/membership.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAqG;AACrG,yCAA2C;AAE3C,mEAA4D;AAC5D,6DAAyE;AACzE,qEAAqE;AACrE,+CAAsD;AA2BtD,gFAAgF;AAChF,EAAE;AACF,oFAAoF;AACpF,uFAAuF;AACvF,qFAAqF;AACrF,oFAAoF;AAG7E,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAEZ;IACA;IACA;IAHnB,YACmB,WAA8B,EAC9B,QAAwB,EACxB,QAA+B;QAF/B,gBAAW,GAAX,WAAW,CAAmB;QAC9B,aAAQ,GAAR,QAAQ,CAAgB;QACxB,aAAQ,GAAR,QAAQ,CAAuB;IAC/C,CAAC;IAEJ;;;;;OAKG;IAGG,AAAN,KAAK,CAAC,mBAAmB,CAAoB,QAAgB;QAC3D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAE9D,MAAM,KAAK,GAAwB,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,cAAc,GAAG,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACtE,MAAM,WAAW,GAAG,IAAA,gBAAM,EAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YACvD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;YAErE,MAAM,QAAQ,GAAqB,EAAE,CAAC;YACtC,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC5B,MAAM,QAAQ,GAAG,IAAA,gBAAM,EAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACjD,MAAM,cAAc,GAAG,IAAA,gBAAM,EAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBACvD,MAAM,UAAU,GAAG,IAAA,gBAAM,EAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC/C,QAAQ,CAAC,IAAI,CAAC;oBACZ,WAAW,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3D,QAAQ;oBACR,QAAQ,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC;oBAClD,cAAc;oBACd,cAAc,EAAE,cAAc;wBAC5B,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,cAAc,CAAC;wBACtD,CAAC,CAAC,IAAI;oBACR,UAAU;oBACV,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;oBAC5E,aAAa,EAAE,IAAA,mBAAS,EAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;oBAChD,cAAc,EAAE,IAAA,mBAAS,EAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;iBACnD,CAAC,CAAC;YACL,CAAC;YAED,KAAK,CAAC,IAAI,CAAC;gBACT,cAAc;gBACd,WAAW;gBACX,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW;gBACvF,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;gBACpC,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;gBACxE,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAChC,CAAC;IAED,uEAAuE;IAGjE,AAAN,KAAK,CAAC,iBAAiB,CACF,QAAgB,EAC3B,IAA8B;QAEtC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;QACnF,OAAO,EAAE,EAAE,EAAE,CAAC;IAChB,CAAC;IAED;;;;OAIG;IAGG,AAAN,KAAK,CAAC,gBAAgB,CACK,cAAsB,EACvC,IAAgE;QAExE,IAAI,IAAI,EAAE,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,MAAM,IAAI,2BAAkB,CAAC,+CAA+C,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,OAAO,IAAI,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,iEAAiE;IAG3D,AAAN,KAAK,CAAC,gBAAgB,CAA0B,cAAsB;QACpE,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;QACxD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,0EAA0E;IAGpE,AAAN,KAAK,CAAC,eAAe,CACM,cAAsB,EACvC,IAAmC;QAE3C,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,cAAc,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;QAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,IAAY;QACrD,IAAI,CAAC,IAAI;YAAE,OAAO,WAAW,CAAC;QAC9B,MAAM,IAAI,GAAsB,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC;QAChC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;IAC1E,CAAC;CACF,CAAA;AAzHY,oDAAoB;AAezB;IAFL,IAAA,YAAG,EAAC,6BAA6B,CAAC;IAClC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACnC,WAAA,IAAA,cAAK,EAAC,UAAU,CAAC,CAAA;;;;+DAwC3C;AAKK;IAFL,IAAA,aAAI,EAAC,6BAA6B,CAAC;IACnC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAE7D,WAAA,IAAA,cAAK,EAAC,UAAU,CAAC,CAAA;IACjB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;6DAIR;AASK;IAFL,IAAA,YAAG,EAAC,6BAA6B,CAAC;IAClC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAE7D,WAAA,IAAA,cAAK,EAAC,gBAAgB,CAAC,CAAA;IACvB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;4DAYR;AAKK;IAFL,IAAA,eAAM,EAAC,6BAA6B,CAAC;IACrC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACxC,WAAA,IAAA,cAAK,EAAC,gBAAgB,CAAC,CAAA;;;;4DAG9C;AAKK;IAFL,IAAA,YAAG,EAAC,sCAAsC,CAAC;IAC3C,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAE7D,WAAA,IAAA,cAAK,EAAC,gBAAgB,CAAC,CAAA;IACvB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;2DAIR;+BA5GU,oBAAoB;IADhC,IAAA,mBAAU,EAAC,UAAU,CAAC;qCAGW,yCAAiB;QACpB,mCAAc;QACd,0CAAqB;GAJvC,oBAAoB,CAyHhC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"membership.service.js","sourceRoot":"","sources":["../../../src/features/membership/membership.service.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;;;;;;;;;;;;;AAEH,2CAAiF;AACjF,2CAAgF;AAChF,uEAA0F;AAGnF,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAET;IAQA;IATnB,YACmB,OAAuB,EAQvB,WAAuC;QARvC,YAAO,GAAP,OAAO,CAAgB;QAQvB,gBAAW,GAAX,WAAW,CAA4B;IACvD,CAAC;IAEJ;;;;OAIG;IACK,KAAK,CAAC,QAAQ,CAAC,cAAsB;QAC3C,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;YACvE,MAAM,WAAW,GAAG,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC;YAC3C,OAAO,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QACxF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,WAAW,CAAC,WAAuC;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,KAAK,MAAM,MAAM,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,+EAA+E;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,aAAa,CAAC,QAAgB,EAAE,WAAmB;QACjD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE;YAC/C,MAAM,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE;SACrE,CAAC,CAAC;IACL,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,eAAe,CAAC,QAAgB;QACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpF,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,SAAS,CAAC,cAAsB,EAAE,QAAgB;QACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,cAAc,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,kFAAkF;YAClF,kCAAkC;YAClC,MAAM,IAAI,0BAAiB,CACzB,cAAc,cAAc,4BAA4B,QAAQ,EAAE,CACnE,CAAC;QACJ,CAAC;QAED,uFAAuF;QACvF,gFAAgF;QAChF,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAE3F,4EAA4E;QAC5E,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC1B,IAAI,CAAC,CAAC,EAAE,KAAK,cAAc;gBAAE,SAAS;YACtC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACvF,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;QAED,oFAAoF;QACpF,yFAAyF;QACzF,sFAAsF;QACtF,yFAAyF;QACzF,sFAAsF;QACtF,sFAAsF;QACtF,4CAA4C;QAC5C,MAAM,aAAa,GAAG,CAAC,CAAa,EAAiB,EAAE;YACrD,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC;YAChC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,CAAC,CAAC;QACF,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACrF,CAAC;IAED;;;;OAIG;IACH,gBAAgB,CAAC,cAAsB,EAAE,KAA0B;QACjE,8EAA8E;QAC9E,qFAAqF;QACrF,qFAAqF;QACrF,wFAAwF;QACxF,yFAAyF;QACzF,oFAAoF;QACpF,4CAA4C;QAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,0FAA0F;IAC1F,KAAK,CAAC,gBAAgB,CAAC,cAAsB;QAC3C,kFAAkF;QAClF,uFAAuF;QACvF,wFAAwF;QACxF,oFAAoF;QACpF,+DAA+D;QAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACnD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;QAChE,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACnC,CAAC;CACF,CAAA;AApJY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;IASR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,8CAAoB,CAAC,CAAA;qCAPH,uBAAc;GAF/B,iBAAiB,CAoJ7B"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"posting-version-bump.js","sourceRoot":"","sources":["../../../src/features/membership/posting-version-bump.ts"],"names":[],"mappings":";;;AASa,QAAA,oBAAoB,GAAG,MAAM,CAAC,sBAAsB,CAAC,CAAC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"posting.service.js","sourceRoot":"","sources":["../../../src/features/membership/posting.service.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;;;;;;;;;;;;;AAEH,2CAA8D;AAC9D,2CAAiE;AACjE,uEAA0F;AAgB1F,8FAA8F;AAC9F,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAEjE;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6FAA6F;AAC7F,SAAS,UAAU,CAAC,CAInB;IACC,OAAO,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,cAAc,IAAI,EAAE,IAAI,CAAC,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,UAAU,CAAC,KAAmB;IACrC,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,EAAE,KAAK,IAAI;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,oCAAoC;YAClE,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAGM,IAAM,cAAc,GAApB,MAAM,cAAc;IAEN;IAKA;IANnB,YACmB,OAAuB,EAKvB,WAAuC;QALvC,YAAO,GAAP,OAAO,CAAgB;QAKvB,gBAAW,GAAX,WAAW,CAA4B;IACvD,CAAC;IAEJ,gEAAgE;IAChE,KAAK,CAAC,YAAY,CAAC,cAAsB;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;QAC1F,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,eAAe,CAAC,cAAsB,EAAE,OAAgC;QAC5E,MAAM,OAAO,GAAG,CACd,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,EAAE,CAAC,CAC7E,CAAC,IAAI,CAAC;QAEP,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAChB,UAAU,CACR,CAAC,CAAC,MAA0F,CAC7F,CACF,CACF,CAAC;QAEF,sFAAsF;QACtF,sFAAsF;QACtF,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,sFAAsF;QACtF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,UAAU,CACpB,CAAC,CAAC,MAA0F,CAC7F,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBACtD,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QAED,oFAAoF;QACpF,0FAA0F;QAC1F,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE;oBAC9C,MAAM,EAAE,EAAE,cAAc,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE;iBAC7C,CAAC,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QAED,qFAAqF;QACrF,oFAAoF;QACpF,wFAAwF;QACxF,0FAA0F;QAC1F,wFAAwF;QACxF,uFAAuF;QACvF,wFAAwF;QACxF,kFAAkF;QAClF,IAAI,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAChC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,CAAC;YACtE,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBAChD,CAAC;gBAAC,MAAM,CAAC;oBACP,4EAA4E;gBAC9E,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,uBAAuB,CAAC,cAAsB;QAC1D,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;YACvE,MAAM,WAAW,GAAG,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC;YAC3C,OAAO,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QACxF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAA;AAlGY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;IAMR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,8CAAoB,CAAC,CAAA;qCAJH,uBAAc;GAF/B,cAAc,CAkG1B"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"org-catalog.controller.js","sourceRoot":"","sources":["../../../src/features/org-structure/org-catalog.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAwD;AACxD,yCAA2C;AAC3C,qEAA6D;AAE7D,kFAAkF;AAClF,EAAE;AACF,kFAAkF;AAClF,sFAAsF;AACtF,yEAAyE;AACzE,sFAAsF;AACtF,gDAAgD;AAGzC,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IACF;IAA7B,YAA6B,OAA0B;QAA1B,YAAO,GAAP,OAAO,CAAmB;IAAG,CAAC;IAE3D,kFAAkF;IAG5E,AAAN,KAAK,CAAC,sBAAsB,CAAuB,WAAmB;QACpE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;QACpE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAED,+EAA+E;IAGzE,AAAN,KAAK,CAAC,mBAAmB,CAAuB,WAAmB;QACjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACjE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;CACF,CAAA;AAlBY,oDAAoB;AAMzB;IAFL,IAAA,YAAG,EAAC,oCAAoC,CAAC;IACzC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAChC,WAAA,IAAA,cAAK,EAAC,aAAa,CAAC,CAAA;;;;kEAGjD;AAKK;IAFL,IAAA,YAAG,EAAC,iCAAiC,CAAC;IACtC,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC/B,WAAA,IAAA,cAAK,EAAC,aAAa,CAAC,CAAA;;;;+DAG9C;+BAjBU,oBAAoB;IADhC,IAAA,mBAAU,EAAC,UAAU,CAAC;qCAEiB,0CAAiB;GAD5C,oBAAoB,CAkBhC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"org-catalog.service.js","sourceRoot":"","sources":["../../../src/features/org-structure/org-catalog.service.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;AAEH,2CAA4C;AAC5C,2CAAgD;AAIzC,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IACC;IAA7B,YAA6B,OAAuB;QAAvB,YAAO,GAAP,OAAO,CAAgB;IAAG,CAAC;IAExD,kFAAkF;IAClF,sBAAsB,CAAC,WAAmB;QACxC,OAAO,IAAI,CAAC,kBAAkB,CAAC,oBAAoB,EAAE,gBAAgB,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;IACpG,CAAC;IAED,+EAA+E;IAC/E,mBAAmB,CAAC,WAAmB;QACrC,OAAO,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IACxF,CAAC;IAED,qFAAqF;IAC7E,KAAK,CAAC,kBAAkB,CAC9B,eAAuB,EACvB,WAAmB,EACnB,cAAsB,EACtB,WAAmB;QAEnB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAClF,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACxC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAClE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF,CAAA;AA/BY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAE2B,uBAAc;GADzC,iBAAiB,CA+B7B"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"policy.controller.js","sourceRoot":"","sources":["../../../src/features/policy/policy.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,2CAYwB;AACxB,yCAA2C;AAE3C,2DAK6B;AAQtB,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IACE;IAA7B,YAA6B,QAAuB;QAAvB,aAAQ,GAAR,QAAQ,CAAe;IAAG,CAAC;IAExD;;;;;;;;OAQG;IAGG,AAAN,KAAK,CAAC,MAAM,CAAmB,OAAgB;QAC7C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,4BAAmB,CAAC,kBAAkB,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,uCAAmB;gBAAE,MAAM,IAAI,0BAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC7E,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IAED;;;OAGG;IAGG,AAAN,KAAK,CAAC,IAAI,CAAQ,GAAkB,EAAoB,OAAgB;QACtE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,4BAAmB,CAAC,kBAAkB,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAClE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACtB,CAAC;IAED;;;;;OAKG;IAGG,AAAN,KAAK,CAAC,MAAM,CAAQ,GAAkB,EAAU,IAAkB;QAChE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC/D,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,sCAAkB;gBAAE,MAAM,IAAI,4BAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC9E,IAAI,CAAC,YAAY,2CAAuB;gBAAE,MAAM,IAAI,2BAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAClF,MAAM,CAAC,CAAC,CAAC,wDAAwD;QACnE,CAAC;IACH,CAAC;IAED;;;;OAIG;IAGG,AAAN,KAAK,CAAC,MAAM,CAAQ,GAAkB,EAAe,EAAU;QAC7D,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,uCAAmB;gBAAE,MAAM,IAAI,0BAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC7E,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;CACF,CAAA;AA3EY,4CAAgB;AAcrB;IAFL,IAAA,YAAG,EAAC,wBAAwB,CAAC;IAC7B,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAClC,WAAA,IAAA,cAAK,EAAC,SAAS,CAAC,CAAA;;;;8CAU7B;AAQK;IAFL,IAAA,YAAG,EAAC,iBAAiB,CAAC;IACtB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACpC,WAAA,IAAA,YAAG,GAAE,CAAA;IAAsB,WAAA,IAAA,cAAK,EAAC,SAAS,CAAC,CAAA;;;;4CAMtD;AAUK;IAFL,IAAA,aAAI,EAAC,iBAAiB,CAAC;IACvB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACpC,WAAA,IAAA,YAAG,GAAE,CAAA;IAAsB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;8CAS9C;AASK;IAFL,IAAA,eAAM,EAAC,qBAAqB,CAAC;IAC7B,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACpC,WAAA,IAAA,YAAG,GAAE,CAAA;IAAsB,WAAA,IAAA,cAAK,EAAC,IAAI,CAAC,CAAA;;;;8CAQnD;2BA1EU,gBAAgB;IAD5B,IAAA,mBAAU,EAAC,UAAU,CAAC;qCAEkB,iCAAa;GADzC,gBAAgB,CA2E5B"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"policy.service.js","sourceRoot":"","sources":["../../../src/features/policy/policy.service.ts"],"names":[],"mappings":";;;AAoIA,gEAgBC;AAtHD,uCAAgD;AAGhD,wFAAwF;AACxF,MAAa,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAO,GAAG,wBAAwB;QAC5C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AALD,gDAKC;AAED,kGAAkG;AAClG,MAAa,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAO,GAAG,iCAAiC;QACrD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AALD,0DAKC;AAED,mGAAmG;AACnG,MAAa,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAO,GAAG,mBAAmB;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AALD,kDAKC;AA8DD,8FAA8F;AAC9F,8FAA8F;AAC9F,MAAM,OAAO,GAAkC,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AAC1E,MAAM,SAAS,GAAkC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAClE,MAAM,UAAU,GAAkC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAC7E,MAAM,IAAI,GAAkC,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;AACzE,MAAM,QAAQ,GAAkC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;AAE7E;;;;;;GAMG;AACH,SAAgB,0BAA0B,CAAC,IAAmB;IAC5D,MAAM,IAAI,GAAyB,CAAC,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC,CAAC;IAC7D,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ,CAAC;QACd,KAAK,WAAW;YACd,OAAO,CAAC,GAAG,IAAI,EAAE,GAAG,UAAU,CAAC,CAAC;QAClC,KAAK,QAAQ;YACX,OAAO,CAAC,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;QAC5B,KAAK,SAAS;YACZ,sFAAsF;YACtF,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,CAAC;QAClC,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC;QACZ;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAiBD,MAAa,aAAa;IACP,KAAK,CAAkB;IACvB,YAAY,CAAsC;IAClD,YAAY,CAAwC;IAErE,YAAY,IAAuB;QACjC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,WAA8B,CAAC;QACjD,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,YAAY,GAAG,IAAA,uBAAgB,EAAC;YACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,yFAAyF;YACzF,WAAW,EAAE,IAAI,CAAC,WAA4D;YAC9E,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrD,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,OAAe;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,mBAAmB,CAAC,kCAAkC,OAAO,IAAI,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,MAAM,GAAwB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACvD,MAAM,KAAK,GAAG,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACjD,OAAO;gBACL,GAAG,EAAE,CAAC,CAAC,GAAG;gBACV,KAAK,EAAE,CAAC,CAAC,GAAG;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,cAAc,EAAE,KAAK;gBACrB,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC1D,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;aAC3D,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClF,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,KAAgB,EAAE,MAAoB;QACjD,MAAM,QAAQ,GAAkB;YAC9B,IAAI,EAAE,eAAe;YACrB,KAAK,EAAE,KAAK;YACZ,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE,mCAAmC;SACpE,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;QACD,yFAAyF;QACzF,yFAAyF;QACzF,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;YACvC,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,IAAI,uBAAuB,CAAC,yBAAyB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/E,CAAC;IAED,+FAA+F;IAC/F,KAAK,CAAC,IAAI,CAAC,KAAgB,EAAE,OAAe;QAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,KAAgB,EAAE,QAAgB;QAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjF,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YAClB,MAAM,IAAI,mBAAmB,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;CACF;AArFD,sCAqFC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"role.controller.js","sourceRoot":"","sources":["../../../src/features/role/role.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAwF;AACxF,yCAA2C;AAC3C,uDAAgD;AAChD,2DAA4E;AAE5E,uFAAuF;AACvF,uFAAuF;AACvF,4EAA4E;AAErE,IAAM,cAAc,GAApB,MAAM,cAAc;IACI;IAA7B,YAA6B,KAAkB;QAAlB,UAAK,GAAL,KAAK,CAAa;IAAG,CAAC;IAEnD;;;;OAIG;IAGG,AAAN,KAAK,CAAC,SAAS,CAAU,KAAmB;QAC1C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAA,8BAAc,EAAC,KAAK,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACjE,CAAC;IAED,uDAAuD;IAGjD,AAAN,KAAK,CAAC,UAAU,CAAS,IAAuB;QAC9C,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,IAAI,UAAU,CAAC,CAAC;QACjE,OAAO,EAAE,EAAE,EAAE,CAAC;IAChB,CAAC;IAED;0CACsC;IAGtC,OAAO,CAAgB,IAAY;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,uDAAuD;IAGjD,AAAN,KAAK,CAAC,UAAU,CAAgB,IAAY,EAAU,IAAuB;QAC3E,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,uDAAuD;IAGjD,AAAN,KAAK,CAAC,UAAU,CAAgB,IAAY;QAC1C,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;CACF,CAAA;AA/CY,wCAAc;AAUnB;IAFL,IAAA,YAAG,EAAC,OAAO,CAAC;IACZ,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC/B,WAAA,IAAA,cAAK,GAAE,CAAA;;;;+CAIvB;AAKK;IAFL,IAAA,aAAI,EAAC,OAAO,CAAC;IACb,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChC,WAAA,IAAA,aAAI,GAAE,CAAA;;;;gDAGvB;AAMD;IAFC,IAAA,YAAG,EAAC,aAAa,CAAC;IAClB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACvC,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;;;;6CAErB;AAKK;IAFL,IAAA,YAAG,EAAC,aAAa,CAAC;IAClB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChC,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;IAAgB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;gDAGpD;AAKK;IAFL,IAAA,eAAM,EAAC,aAAa,CAAC;IACrB,IAAA,kBAAU,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChC,WAAA,IAAA,cAAK,EAAC,MAAM,CAAC,CAAA;;;;gDAG9B;yBA9CU,cAAc;IAD1B,IAAA,mBAAU,EAAC,UAAU,CAAC;qCAEe,6BAAW;GADpC,cAAc,CA+C1B"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"role.service.js","sourceRoot":"","sources":["../../../src/features/role/role.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,2CAA+D;AAC/D,2DAA0E;AAE1E,MAAM,kBAAkB,GAAG,CAAC,MAAM,CAAU,CAAC;AAC7C,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,WAAW,CAAU,CAAC;AAExD;;;;GAIG;AAEI,IAAM,WAAW,GAAjB,MAAM,WAAW;IACO;IAA7B,YAA6B,OAAuB;QAAvB,YAAO,GAAP,OAAO,CAAgB;IAAG,CAAC;IAExD,qBAAqB;IACrB,UAAU,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,uEAAuE;IACvE,SAAS,CAAC,MAAmB;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAA,8BAAc,EAAC,MAAM,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACjG,CAAC;IAED,0BAA0B;IAC1B,OAAO,CAAC,IAAY;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,qBAAqB;IACrB,UAAU,CAAC,IAAY,EAAE,KAAwB;QAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,qBAAqB;IACrB,UAAU,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;CACF,CAAA;AA3BY,kCAAW;sBAAX,WAAW;IADvB,IAAA,mBAAU,GAAE;qCAE2B,uBAAc;GADzC,WAAW,CA2BvB"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"scope-closure.service.js","sourceRoot":"","sources":["../../../src/features/scope/scope-closure.service.ts"],"names":[],"mappings":";;;AAAA,iFAAiF;AACjF;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,yCAAkF;AAElF,mDAAmD;AACnD,MAAM,GAAG,GAAG,YAAY,CAAC;AACzB,+DAA+D;AAC/D,MAAM,KAAK,GAAG,cAAc,CAAC;AA6B7B,MAAa,mBAAmB;IAEX;IACA;IAFnB,YACmB,IAAe,EACf,MAA0B;QAD1B,SAAI,GAAJ,IAAI,CAAW;QACf,WAAM,GAAN,MAAM,CAAoB;IAC1C,CAAC;IAEJ;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB;QACpB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAA,wBAAgB,EAAC,KAAK,CAAC,CAAC,CAAC,wDAAwD;QAE9F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACtC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,CAAC,MAAM,WAAW,IAAI,CAAC,MAAM,OAAO,CAAC,CAAC;QAC3E,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IACpD,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,QAAQ,CAAC,QAAgB,EAAE,aAA4B;QAC3D,IAAI,aAAa,KAAK,QAAQ,EAAE,CAAC;YAC/B,uDAAuD;YACvD,MAAM,IAAI,uBAAe,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC3B,uFAAuF;YACvF,qFAAqF;YACrF,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACnC,mBAAmB,KAAK;kEACkC,EAC1D,CAAC,QAAQ,EAAE,aAAa,CAAC,CAC1B,CAAc,CAAC;YAChB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,uBAAe,CAAC,QAAQ,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAED,sFAAsF;QACtF,iFAAiF;QACjF,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACxC,iCAAiC,KAAK,8CAA8C,EACpF,CAAC,QAAQ,CAAC,CACX,CAAuC,CAAC;QACzC,sFAAsF;QACtF,6FAA6F;QAC7F,6FAA6F;QAC7F,4FAA4F;QAC5F,2FAA2F;QAC3F,4DAA4D;QAC5D,MAAM,kBAAkB,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAC/C,+BAA+B,KAAK;yDACe,EACnD,CAAC,QAAQ,EAAE,QAAQ,CAAC,CACrB,CAAqC,CAAC;QACvC,yFAAyF;QACzF,MAAM,YAAY,GAChB,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAClF,6FAA6F;QAC7F,mDAAmD;QACnD,MAAM,QAAQ,GAAG;YACf,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;SACjF,CAAC;QAEF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAE9B,yBAAyB;YACzB,MAAM,IAAI,CAAC,KAAK,CACd,YAAY,GAAG,yDAAyD,EACxE,CAAC,aAAa,EAAE,QAAQ,CAAC,CAC1B,CAAC;YAEF,yFAAyF;YACzF,0FAA0F;YAC1F,yFAAyF;YACzF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,IAAI,GAAG,IAAA,wBAAgB,EAAC,KAAK,CAAC,CAAC;YACrC,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAEtC,4FAA4F;YAC5F,KAAK,MAAM,UAAU,IAAI,QAAQ,EAAE,CAAC;gBAClC,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YACpD,CAAC;YAED,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,UAAU,CAAC,QAAgB;QAC/B,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACrC,mBAAmB,GAAG,kDAAkD,EACxE,CAAC,QAAQ,CAAC,CACX,CAAc,CAAC;QAChB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAED,4FAA4F;QAC5F,oFAAoF;QACpF,MAAM,kBAAkB,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAC/C,+BAA+B,KAAK;yDACe,EACnD,CAAC,QAAQ,EAAE,QAAQ,CAAC,CACrB,CAAqC,CAAC;QAEvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC9B,wFAAwF;YACxF,MAAM,IAAI,CAAC,KAAK,CACd,iBAAiB,KAAK;yDAC2B,EACjD,CAAC,QAAQ,EAAE,QAAQ,CAAC,CACrB,CAAC;YACF,iCAAiC;YACjC,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,GAAG,mCAAmC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YACtF,sFAAsF;YACtF,KAAK,MAAM,EAAE,aAAa,EAAE,IAAI,kBAAkB,EAAE,CAAC;gBACnD,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,yFAAyF;IACjF,KAAK,CAAC,SAAS,CAAC,CAAY;QAClC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CACzB,uCAAuC,GAAG,kBAAkB,CAC7D,CAA4D,CAAC;QAC9D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IAChF,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,cAAc,CAC1B,IAAe,EACf,IAAwE;QAExE,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,KAAK,sBAAsB,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CACd,iBAAiB,KAAK;kBACV,YAAY,EAAE,EAC1B,MAAM,CACP,CAAC;IACJ,CAAC;CACF;AAhND,kDAgNC;AAED,kGAAkG;AAClG,MAAa,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,QAAgB;QAC1B,KAAK,CACH,mCAAmC,QAAQ,6CAA6C;YACtF,kFAAkF;YAClF,sBAAsB,CACzB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AATD,oDASC"}
@@ -0,0 +1 @@
1
+ {"version":3,"file":"scope-subtree.resolver.js","sourceRoot":"","sources":["../../../src/features/scope/scope-subtree.resolver.ts"],"names":[],"mappings":";;;AAoCA,+DAA+D;AAC/D,MAAM,KAAK,GAAG,cAAc,CAAC;AAE7B,MAAa,sBAAsB;IACJ;IAA7B,YAA6B,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;IAAG,CAAC;IAE3C;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACjC,iCAAiC,KAAK,8CAA8C,EACpF,CAAC,MAAM,CAAC,CACT,CAAuC,CAAC;QACzC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,kDAAkD;QAC1F,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IAC5C,CAAC;CACF;AAjBD,wDAiBC"}
@@ -0,0 +1,62 @@
1
+ import type { Principal } from '@astram/core';
2
+ import { ServiceAccountService } from './service-account.service.js';
3
+ /** The request shape after the enforcement guard attaches the resolved principal. */
4
+ interface AuthedRequest {
5
+ principal: Principal;
6
+ }
7
+ export declare class ServiceAccountController {
8
+ private readonly svc;
9
+ constructor(svc: ServiceAccountService);
10
+ /** List the caller's own-tenant service accounts (by label). Gated `service_account:read`. */
11
+ list(req: AuthedRequest): Promise<{
12
+ accounts: import("./service-account.service.js").ServiceAccountView[];
13
+ }>;
14
+ /**
15
+ * What the caller may grant an agent — the create/edit picker source (Phase 4). Gated
16
+ * `service_account:create` (only someone who can create agents needs the list). Computed from the
17
+ * SAME ceiling the create/update write check enforces: `{ roles: [{id,name}], scopeNodes:
18
+ * [{id,name,parentId|null}] }`. ⚠ Declared BEFORE `service-accounts/:id` so the static path wins.
19
+ */
20
+ assignable(req: AuthedRequest): Promise<import("./service-account.service.js").AssignableAccess>;
21
+ /** Fetch one own-tenant account. Gated `service_account:read`. Cross-tenant/unknown → 404. */
22
+ get(req: AuthedRequest, id: string): Promise<{
23
+ account: import("./service-account.service.js").ServiceAccountView;
24
+ }>;
25
+ /**
26
+ * Create an account in the caller's own tenant. Gated `service_account:create`.
27
+ * Body: `{ label, scopeSubtreeNodeIds?, roleIds? }`. Scope/roles must pass the ADR-0029 ceiling.
28
+ */
29
+ create(req: AuthedRequest, body: unknown): Promise<{
30
+ account: import("./service-account.service.js").ServiceAccountView;
31
+ }>;
32
+ /**
33
+ * Edit an account (label/scope/roles/status). Gated `service_account:update`. Own-tenant only;
34
+ * scope/roles re-checked against the ceiling (an edit cannot escalate).
35
+ */
36
+ update(req: AuthedRequest, id: string, body: unknown): Promise<{
37
+ account: import("./service-account.service.js").ServiceAccountView;
38
+ }>;
39
+ /**
40
+ * Issue a NEW key for an account. Gated `service_account:manage_keys`. Body: `{ expiresAtMs? }`.
41
+ * Returns the raw `ask_…` key EXACTLY ONCE — copy it now, it is never retrievable again.
42
+ */
43
+ issueKey(req: AuthedRequest, id: string, body: unknown): Promise<{
44
+ key: import("./service-account.service.js").IssuedKey;
45
+ }>;
46
+ /**
47
+ * Rotate an account's key. Gated `service_account:manage_keys`. The previous key stops
48
+ * authenticating; the new raw key is returned EXACTLY ONCE.
49
+ */
50
+ rotateKey(req: AuthedRequest, id: string, body: unknown): Promise<{
51
+ key: import("./service-account.service.js").IssuedKey;
52
+ }>;
53
+ /**
54
+ * Revoke ALL of an account's keys. Gated `service_account:manage_keys`. Fail-closed on the next
55
+ * request; idempotent.
56
+ */
57
+ revokeKeys(req: AuthedRequest, id: string): Promise<{
58
+ success: boolean;
59
+ }>;
60
+ }
61
+ export {};
62
+ //# sourceMappingURL=service-account.controller.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"service-account.controller.d.ts","sourceRoot":"","sources":["../../../src/features/service-account/service-account.controller.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EACL,qBAAqB,EAMtB,MAAM,8BAA8B,CAAC;AAEtC,qFAAqF;AACrF,UAAU,aAAa;IACrB,SAAS,EAAE,SAAS,CAAC;CACtB;AA0CD,qBACa,wBAAwB;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,qBAAqB;IAEvD,8FAA8F;IAGxF,IAAI,CAAQ,GAAG,EAAE,aAAa;;;IAQpC;;;;;OAKG;IAGG,UAAU,CAAQ,GAAG,EAAE,aAAa;IAQ1C,8FAA8F;IAGxF,GAAG,CAAQ,GAAG,EAAE,aAAa,EAAe,EAAE,EAAE,MAAM;;;IAQ5D;;;OAGG;IAGG,MAAM,CAAQ,GAAG,EAAE,aAAa,EAAU,IAAI,EAAE,OAAO;;;IAiB7D;;;OAGG;IAGG,MAAM,CAAQ,GAAG,EAAE,aAAa,EAAe,EAAE,EAAE,MAAM,EAAU,IAAI,EAAE,OAAO;;;IAuBtF;;;OAGG;IAGG,QAAQ,CAAQ,GAAG,EAAE,aAAa,EAAe,EAAE,EAAE,MAAM,EAAU,IAAI,EAAE,OAAO;;;IAWxF;;;OAGG;IAGG,SAAS,CAAQ,GAAG,EAAE,aAAa,EAAe,EAAE,EAAE,MAAM,EAAU,IAAI,EAAE,OAAO;;;IAWzF;;;OAGG;IAGG,UAAU,CAAQ,GAAG,EAAE,aAAa,EAAe,EAAE,EAAE,MAAM;;;CAQpE"}