@atlashub/smartstack 3.39.0 → 3.40.0

package/dist/chunks/{groupsApi-DExOJZPF.js.map → groupsApi-C-FLWPCO.js.map}

@@ -1 +1 @@
-{"version":3,"file":"groupsApi-DExOJZPF.js","sources":["../../src/services/api/groupsApi.ts"],"sourcesContent":["import { api, apiClient } from './apiClient';\r\nimport type { UserApplicationAccessDto } from './adminApi';\r\n\r\n/**\r\n * Creates API methods with a specific tenant context.\r\n * Used when Super Admins view tenant-specific pages without \"switching\" to that tenant.\r\n */\r\nconst withTenantContext = (tenantSlug?: string) => ({\r\n  get: <T>(url: string, config?: Parameters<typeof apiClient.get>[1]) =>\r\n    apiClient.get<T>(url, {\r\n      ...config,\r\n      headers: tenantSlug ? { ...config?.headers, 'X-Tenant-Slug': tenantSlug } : config?.headers,\r\n    }).then(res => res.data),\r\n\r\n  post: <T>(url: string, data?: unknown, config?: Parameters<typeof apiClient.post>[2]) =>\r\n    apiClient.post<T>(url, data, {\r\n      ...config,\r\n      headers: tenantSlug ? { ...config?.headers, 'X-Tenant-Slug': tenantSlug } : config?.headers,\r\n    }).then(res => res.data),\r\n\r\n  put: <T>(url: string, data?: unknown, config?: Parameters<typeof apiClient.put>[2]) =>\r\n    apiClient.put<T>(url, data, {\r\n      ...config,\r\n      headers: tenantSlug ? { ...config?.headers, 'X-Tenant-Slug': tenantSlug } : config?.headers,\r\n    }).then(res => res.data),\r\n\r\n  patch: <T>(url: string, data?: unknown, config?: Parameters<typeof apiClient.patch>[2]) =>\r\n    apiClient.patch<T>(url, data, {\r\n      ...config,\r\n      headers: tenantSlug ? { ...config?.headers, 'X-Tenant-Slug': tenantSlug } : config?.headers,\r\n    }).then(res => res.data),\r\n\r\n  delete: <T>(url: string, config?: Parameters<typeof apiClient.delete>[1]) =>\r\n    apiClient.delete<T>(url, {\r\n      ...config,\r\n      headers: tenantSlug ? { ...config?.headers, 'X-Tenant-Slug': tenantSlug } : config?.headers,\r\n    }).then(res => res.data),\r\n});\r\n\r\n// Types\r\nexport interface GroupListDto {\r\n  id: string;\r\n  name: string;\r\n  description: string | null;\r\n  isActive: boolean;\r\n  isSecurityGroup: boolean;\r\n  isMailEnabled: boolean;\r\n  entraObjectId: string | null;\r\n  lastEntraSyncAt: string | null;\r\n  isSyncedFromEntra: boolean;\r\n  memberCount: number;\r\n  roles: string[];\r\n  createdAt: string;\r\n  parentGroupId: string | null;\r\n  parentGroupName: string | null;\r\n  childCount: number;\r\n}\r\n\r\nexport interface GroupDetailDto {\r\n  id: string;\r\n  name: string;\r\n  description: string | null;\r\n  isActive: boolean;\r\n  isSecurityGroup: boolean;\r\n  isMailEnabled: boolean;\r\n  mail: string | null;\r\n  mailNickname: string | null;\r\n  entraObjectId: string | null;\r\n  lastEntraSyncAt: string | null;\r\n  isSyncedFromEntra: boolean;\r\n  parentGroupId: string | null;\r\n  parentGroupName: string | null;\r\n  members: GroupMemberDto[];\r\n  roles: GroupRoleDto[];\r\n  childGroups: GroupChildDto[];\r\n  createdAt: string;\r\n  updatedAt: string | null;\r\n  createdBy: string | null;\r\n  updatedBy: string | null;\r\n}\r\n\r\nexport interface GroupMemberDto {\r\n  userId: string;\r\n  email: string;\r\n  fullName: string;\r\n  addedAt: string;\r\n  addedBy: string | null;\r\n}\r\n\r\nexport interface GroupRoleDto {\r\n  roleId: string;\r\n  roleName: string;\r\n  roleDescription: string | null;\r\n  assignedAt: string;\r\n  assignedBy: string;\r\n  isInheritable: boolean;\r\n  tenantId: string | null;\r\n  tenantName: string | null;\r\n  isGlobal: boolean;\r\n}\r\n\r\nexport interface GroupChildDto {\r\n  id: string;\r\n  name: string;\r\n  isActive: boolean;\r\n}\r\n\r\nexport interface CreateGroupRequest {\r\n  name: string;\r\n  description?: string;\r\n  isSecurityGroup?: boolean;\r\n  parentGroupId?: string;\r\n}\r\n\r\nexport interface UpdateGroupRequest {\r\n  name: string;\r\n  description?: string;\r\n}\r\n\r\nexport interface LinkEntraRequest {\r\n  entraObjectId: string;\r\n}\r\n\r\nexport interface AddMemberRequest {\r\n  userId: string;\r\n}\r\n\r\nexport interface AssignRoleRequest {\r\n  roleId: string;\r\n  isInheritable?: boolean;\r\n  tenantId?: string | null;\r\n}\r\n\r\nexport interface SetInheritableRequest {\r\n  isInheritable: boolean;\r\n}\r\n\r\nexport interface SetParentGroupRequest {\r\n  parentGroupId: string | null;\r\n}\r\n\r\nexport interface InheritedTenantDto {\r\n  tenantId: string;\r\n  tenantName: string;\r\n  tenantSlug: string;\r\n  tenantType: string;\r\n  inheritedFromGroupId: string;\r\n  inheritedFromGroupName: string;\r\n}\r\n\r\nexport interface InheritedMemberDto {\r\n  userId: string;\r\n  email: string;\r\n  fullName: string;\r\n  inheritedFromGroupId: string;\r\n  inheritedFromGroupName: string;\r\n  level: number;\r\n}\r\n\r\nexport interface InheritedGroupRoleDto {\r\n  roleId: string;\r\n  roleName: string;\r\n  roleDescription: string | null;\r\n  tenantId: string | null;\r\n  tenantName: string | null;\r\n  isGlobal: boolean;\r\n  inheritedFromGroupId: string;\r\n  inheritedFromGroupName: string;\r\n  level: number;\r\n}\r\n\r\nexport interface GroupTenantDto {\r\n  tenantId: string;\r\n  tenantName: string;\r\n  tenantSlug: string;\r\n  tenantType: string;\r\n  addedAt: string;\r\n  addedBy: string | null;\r\n}\r\n\r\nexport interface AddToTenantRequest {\r\n  tenantId: string;\r\n}\r\n\r\nexport interface CustomRoleDetailDto {\r\n  id: string;\r\n  name: string;\r\n  shortName: string;\r\n  category: string;\r\n  description: string | null;\r\n  isSystem: boolean;\r\n  permissions: CustomRolePermissionDto[];\r\n  createdAt: string;\r\n  updatedAt: string | null;\r\n}\r\n\r\nexport interface CustomRolePermissionDto {\r\n  id: string;\r\n  path: string;\r\n  description: string | null;\r\n}\r\n\r\nconst BASE_URL = '/api/administration/users/groups';\r\n\r\n/**\r\n * Factory function to create groups API with explicit tenant context.\r\n * @param tenantSlug - Optional tenant slug to use for all requests\r\n */\r\nconst _createGroupsApi = (tenantSlug?: string) => {\r\n  const apiContext = tenantSlug ? withTenantContext(tenantSlug) : api;\r\n\r\n  return {\r\n    // === CRUD OPERATIONS ===\r\n\r\n    getAll: async (\r\n      search?: string,\r\n      isActive?: boolean,\r\n      syncedFromEntra?: boolean\r\n    ): Promise<GroupListDto[]> => {\r\n      const params = new URLSearchParams();\r\n      if (search) params.append('search', search);\r\n      if (isActive !== undefined) params.append('isActive', String(isActive));\r\n      if (syncedFromEntra !== undefined) params.append('syncedFromEntra', String(syncedFromEntra));\r\n\r\n      const queryString = params.toString();\r\n      const url = queryString ? `${BASE_URL}?${queryString}` : BASE_URL;\r\n      const response = await apiContext.get<GroupListDto[]>(url);\r\n      return response;\r\n    },\r\n\r\n    getById: async (id: string): Promise<GroupDetailDto> => {\r\n      const response = await apiContext.get<GroupDetailDto>(`${BASE_URL}/${id}`);\r\n      return response;\r\n    },\r\n\r\n    create: async (data: CreateGroupRequest): Promise<GroupDetailDto> => {\r\n      const response = await apiContext.post<GroupDetailDto>(BASE_URL, data);\r\n      return response;\r\n    },\r\n\r\n    update: async (id: string, data: UpdateGroupRequest): Promise<GroupDetailDto> => {\r\n      const response = await apiContext.put<GroupDetailDto>(`${BASE_URL}/${id}`, data);\r\n      return response;\r\n    },\r\n\r\n    delete: async (id: string): Promise<void> => {\r\n      await apiContext.delete(`${BASE_URL}/${id}`);\r\n    },\r\n\r\n    activate: async (id: string): Promise<void> => {\r\n      await apiContext.patch(`${BASE_URL}/${id}/activate`);\r\n    },\r\n\r\n    deactivate: async (id: string): Promise<void> => {\r\n      await apiContext.patch(`${BASE_URL}/${id}/deactivate`);\r\n    },\r\n\r\n    // === ENTRA LINKING ===\r\n\r\n    linkToEntra: async (id: string, data: LinkEntraRequest): Promise<void> => {\r\n      await apiContext.post(`${BASE_URL}/${id}/link-entra`, data);\r\n    },\r\n\r\n    unlinkFromEntra: async (id: string): Promise<void> => {\r\n      await apiContext.post(`${BASE_URL}/${id}/unlink-entra`);\r\n    },\r\n\r\n    // === MEMBER MANAGEMENT ===\r\n\r\n    getMembers: async (id: string): Promise<GroupMemberDto[]> => {\r\n      const response = await apiContext.get<GroupMemberDto[]>(`${BASE_URL}/${id}/members`);\r\n      return response;\r\n    },\r\n\r\n    addMember: async (id: string, data: AddMemberRequest): Promise<void> => {\r\n      await apiContext.post(`${BASE_URL}/${id}/members`, data);\r\n    },\r\n\r\n    removeMember: async (groupId: string, userId: string): Promise<void> => {\r\n      await apiContext.delete(`${BASE_URL}/${groupId}/members/${userId}`);\r\n    },\r\n\r\n    // === ROLE MANAGEMENT ===\r\n\r\n    getRoles: async (id: string): Promise<GroupRoleDto[]> => {\r\n      const response = await apiContext.get<GroupRoleDto[]>(`${BASE_URL}/${id}/roles`);\r\n      return response;\r\n    },\r\n\r\n    assignRole: async (id: string, data: AssignRoleRequest): Promise<void> => {\r\n      await apiContext.post(`${BASE_URL}/${id}/roles`, data);\r\n    },\r\n\r\n    removeRole: async (groupId: string, roleId: string, tenantId?: string | null): Promise<void> => {\r\n      const params = tenantId ? `?tenantId=${tenantId}` : '';\r\n      await apiContext.delete(`${BASE_URL}/${groupId}/roles/${roleId}${params}`);\r\n    },\r\n\r\n    setRoleInheritable: async (\r\n      groupId: string,\r\n      roleId: string,\r\n      data: SetInheritableRequest\r\n    ): Promise<void> => {\r\n      await apiContext.patch(`${BASE_URL}/${groupId}/roles/${roleId}/inheritable`, data);\r\n    },\r\n\r\n    // === HIERARCHY ===\r\n\r\n    getChildGroups: async (id: string): Promise<GroupChildDto[]> => {\r\n      const response = await apiContext.get<GroupChildDto[]>(`${BASE_URL}/${id}/children`);\r\n      return response;\r\n    },\r\n\r\n    setParentGroup: async (id: string, data: SetParentGroupRequest): Promise<void> => {\r\n      await apiContext.patch(`${BASE_URL}/${id}/parent`, data);\r\n    },\r\n\r\n    // === TENANT MANAGEMENT ===\r\n\r\n    getTenants: async (id: string): Promise<GroupTenantDto[]> => {\r\n      const response = await apiContext.get<GroupTenantDto[]>(`${BASE_URL}/${id}/tenants`);\r\n      return response;\r\n    },\r\n\r\n    getInheritedTenants: async (id: string): Promise<InheritedTenantDto[]> => {\r\n      const response = await apiContext.get<InheritedTenantDto[]>(`${BASE_URL}/${id}/inherited-tenants`);\r\n      return response;\r\n    },\r\n\r\n    getInheritedMembers: async (id: string): Promise<InheritedMemberDto[]> => {\r\n      const response = await apiContext.get<InheritedMemberDto[]>(`${BASE_URL}/${id}/inherited-members`);\r\n      return response;\r\n    },\r\n\r\n    getInheritedRoles: async (id: string): Promise<InheritedGroupRoleDto[]> => {\r\n      const response = await apiContext.get<InheritedGroupRoleDto[]>(`${BASE_URL}/${id}/inherited-roles`);\r\n      return response;\r\n    },\r\n\r\n    addToTenant: async (id: string, data: AddToTenantRequest): Promise<void> => {\r\n      await apiContext.post(`${BASE_URL}/${id}/tenants`, data);\r\n    },\r\n\r\n    removeFromTenant: async (groupId: string, tenantId: string): Promise<void> => {\r\n      await apiContext.delete(`${BASE_URL}/${groupId}/tenants/${tenantId}`);\r\n    },\r\n\r\n    // === APPLICATION ACCESS ===\r\n\r\n    getApplicationAccess: async (id: string, tenantId?: string): Promise<UserApplicationAccessDto[]> => {\r\n      const url = tenantId\r\n        ? `${BASE_URL}/${id}/application-access?tenantId=${tenantId}`\r\n        : `${BASE_URL}/${id}/application-access`;\r\n      const response = await apiContext.get<UserApplicationAccessDto[]>(url);\r\n      return response;\r\n    },\r\n\r\n    // === CUSTOM ROLE ===\r\n\r\n    getCustomRole: async (id: string): Promise<CustomRoleDetailDto | null> => {\r\n      const response = await apiContext.get<CustomRoleDetailDto | null>(`${BASE_URL}/${id}/custom-role`);\r\n      return response;\r\n    },\r\n\r\n    createCustomRole: async (id: string): Promise<CustomRoleDetailDto> => {\r\n      const response = await apiContext.post<CustomRoleDetailDto>(`${BASE_URL}/${id}/custom-role`);\r\n      return response;\r\n    },\r\n\r\n    deleteCustomRole: async (id: string): Promise<void> => {\r\n      await apiContext.delete(`${BASE_URL}/${id}/custom-role`);\r\n    },\r\n  };\r\n};\r\nexport type GroupsApi = ReturnType<typeof _createGroupsApi>;\r\nexport const createGroupsApi: (tenantSlug?: string) => GroupsApi = _createGroupsApi;\r\n\r\n// Default export uses localStorage tenant slug (backward compatible)\r\nexport const groupsApi = createGroupsApi();\r\n"],"names":["withTenantContext","tenantSlug","url","config","apiClient","res","data","BASE_URL","_createGroupsApi","apiContext","api","search","isActive","syncedFromEntra","params","queryString","id","groupId","userId","roleId","tenantId","createGroupsApi","groupsApi"],"mappings":"oDAOMA,EAAqBC,IAAyB,CAClD,IAAK,CAAIC,EAAaC,IACpBC,EAAAA,UAAU,IAAOF,EAAK,CACpB,GAAGC,EACH,QAASF,EAAa,CAAE,GAAGE,GAAQ,QAAS,gBAAiBF,CAAA,EAAeE,GAAQ,OAAA,CACrF,EAAE,KAAKE,GAAOA,EAAI,IAAI,EAEzB,KAAM,CAAIH,EAAaI,EAAgBH,IACrCC,EAAAA,UAAU,KAAQF,EAAKI,EAAM,CAC3B,GAAGH,EACH,QAASF,EAAa,CAAE,GAAGE,GAAQ,QAAS,gBAAiBF,CAAA,EAAeE,GAAQ,OAAA,CACrF,EAAE,KAAKE,GAAOA,EAAI,IAAI,EAEzB,IAAK,CAAIH,EAAaI,EAAgBH,IACpCC,EAAAA,UAAU,IAAOF,EAAKI,EAAM,CAC1B,GAAGH,EACH,QAASF,EAAa,CAAE,GAAGE,GAAQ,QAAS,gBAAiBF,CAAA,EAAeE,GAAQ,OAAA,CACrF,EAAE,KAAKE,GAAOA,EAAI,IAAI,EAEzB,MAAO,CAAIH,EAAaI,EAAgBH,IACtCC,EAAAA,UAAU,MAASF,EAAKI,EAAM,CAC5B,GAAGH,EACH,QAASF,EAAa,CAAE,GAAGE,GAAQ,QAAS,gBAAiBF,CAAA,EAAeE,GAAQ,OAAA,CACrF,EAAE,KAAKE,GAAOA,EAAI,IAAI,EAEzB,OAAQ,CAAIH,EAAaC,IACvBC,EAAAA,UAAU,OAAUF,EAAK,CACvB,GAAGC,EACH,QAASF,EAAa,CAAE,GAAGE,GAAQ,QAAS,gBAAiBF,CAAA,EAAeE,GAAQ,OAAA,CACrF,EAAE,KAAKE,GAAOA,EAAI,IAAI,CAC3B,GAqKME,EAAW,mCAMXC,EAAoBP,GAAwB,CAChD,MAAMQ,EAAaR,EAAaD,EAAkBC,CAAU,EAAIS,EAAAA,IAEhE,MAAO,CAGL,OAAQ,MACNC,EACAC,EACAC,IAC4B,CAC5B,MAAMC,EAAS,IAAI,gBACfH,GAAQG,EAAO,OAAO,SAAUH,CAAM,EACtCC,IAAa,QAAWE,EAAO,OAAO,WAAY,OAAOF,CAAQ,CAAC,EAClEC,IAAoB,QAAWC,EAAO,OAAO,kBAAmB,OAAOD,CAAe,CAAC,EAE3F,MAAME,EAAcD,EAAO,SAAA,EACrBZ,EAAMa,EAAc,GAAGR,CAAQ,IAAIQ,CAAW,GAAKR,EAEzD,OADiB,MAAME,EAAW,IAAoBP,CAAG,CAE3D,EAEA,QAAS,MAAOc,GACG,MAAMP,EAAW,IAAoB,GAAGF,CAAQ,IAAIS,CAAE,EAAE,EAI3E,OAAQ,MAAOV,GACI,MAAMG,EAAW,KAAqBF,EAAUD,CAAI,EAIvE,OAAQ,MAAOU,EAAYV,IACR,MAAMG,EAAW,IAAoB,GAAGF,CAAQ,IAAIS,CAAE,GAAIV,CAAI,EAIjF,OAAQ,MAAOU,GAA8B,CAC3C,MAAMP,EAAW,OAAO,GAAGF,CAAQ,IAAIS,CAAE,EAAE,CAC7C,EAEA,SAAU,MAAOA,GAA8B,CAC7C,MAAMP,EAAW,MAAM,GAAGF,CAAQ,IAAIS,CAAE,WAAW,CACrD,EAEA,WAAY,MAAOA,GAA8B,CAC/C,MAAMP,EAAW,MAAM,GAAGF,CAAQ,IAAIS,CAAE,aAAa,CACvD,EAIA,YAAa,MAAOA,EAAYV,IAA0C,CACxE,MAAMG,EAAW,KAAK,GAAGF,CAAQ,IAAIS,CAAE,cAAeV,CAAI,CAC5D,EAEA,gBAAiB,MAAOU,GAA8B,CACpD,MAAMP,EAAW,KAAK,GAAGF,CAAQ,IAAIS,CAAE,eAAe,CACxD,EAIA,WAAY,MAAOA,GACA,MAAMP,EAAW,IAAsB,GAAGF,CAAQ,IAAIS,CAAE,UAAU,EAIrF,UAAW,MAAOA,EAAYV,IAA0C,CACtE,MAAMG,EAAW,KAAK,GAAGF,CAAQ,IAAIS,CAAE,WAAYV,CAAI,CACzD,EAEA,aAAc,MAAOW,EAAiBC,IAAkC,CACtE,MAAMT,EAAW,OAAO,GAAGF,CAAQ,IAAIU,CAAO,YAAYC,CAAM,EAAE,CACpE,EAIA,SAAU,MAAOF,GACE,MAAMP,EAAW,IAAoB,GAAGF,CAAQ,IAAIS,CAAE,QAAQ,EAIjF,WAAY,MAAOA,EAAYV,IAA2C,CACxE,MAAMG,EAAW,KAAK,GAAGF,CAAQ,IAAIS,CAAE,SAAUV,CAAI,CACvD,EAEA,WAAY,MAAOW,EAAiBE,EAAgBC,IAA4C,CAC9F,MAAMN,EAASM,EAAW,aAAaA,CAAQ,GAAK,GACpD,MAAMX,EAAW,OAAO,GAAGF,CAAQ,IAAIU,CAAO,UAAUE,CAAM,GAAGL,CAAM,EAAE,CAC3E,EAEA,mBAAoB,MAClBG,EACAE,EACAb,IACkB,CAClB,MAAMG,EAAW,MAAM,GAAGF,CAAQ,IAAIU,CAAO,UAAUE,CAAM,eAAgBb,CAAI,CACnF,EAIA,eAAgB,MAAOU,GACJ,MAAMP,EAAW,IAAqB,GAAGF,CAAQ,IAAIS,CAAE,WAAW,EAIrF,eAAgB,MAAOA,EAAYV,IAA+C,CAChF,MAAMG,EAAW,MAAM,GAAGF,CAAQ,IAAIS,CAAE,UAAWV,CAAI,CACzD,EAIA,WAAY,MAAOU,GACA,MAAMP,EAAW,IAAsB,GAAGF,CAAQ,IAAIS,CAAE,UAAU,EAIrF,oBAAqB,MAAOA,GACT,MAAMP,EAAW,IAA0B,GAAGF,CAAQ,IAAIS,CAAE,oBAAoB,EAInG,oBAAqB,MAAOA,GACT,MAAMP,EAAW,IAA0B,GAAGF,CAAQ,IAAIS,CAAE,oBAAoB,EAInG,kBAAmB,MAAOA,GACP,MAAMP,EAAW,IAA6B,GAAGF,CAAQ,IAAIS,CAAE,kBAAkB,EAIpG,YAAa,MAAOA,EAAYV,IAA4C,CAC1E,MAAMG,EAAW,KAAK,GAAGF,CAAQ,IAAIS,CAAE,WAAYV,CAAI,CACzD,EAEA,iBAAkB,MAAOW,EAAiBG,IAAoC,CAC5E,MAAMX,EAAW,OAAO,GAAGF,CAAQ,IAAIU,CAAO,YAAYG,CAAQ,EAAE,CACtE,EAIA,qBAAsB,MAAOJ,EAAYI,IAA2D,CAClG,MAAMlB,EAAMkB,EACR,GAAGb,CAAQ,IAAIS,CAAE,gCAAgCI,CAAQ,GACzD,GAAGb,CAAQ,IAAIS,CAAE,sBAErB,OADiB,MAAMP,EAAW,IAAgCP,CAAG,CAEvE,EAIA,cAAe,MAAOc,GACH,MAAMP,EAAW,IAAgC,GAAGF,CAAQ,IAAIS,CAAE,cAAc,EAInG,iBAAkB,MAAOA,GACN,MAAMP,EAAW,KAA0B,GAAGF,CAAQ,IAAIS,CAAE,cAAc,EAI7F,iBAAkB,MAAOA,GAA8B,CACrD,MAAMP,EAAW,OAAO,GAAGF,CAAQ,IAAIS,CAAE,cAAc,CACzD,CAAA,CAEJ,EAEaK,EAAsDb,EAGtDc,EAAYD,EAAA"}
+{"version":3,"file":"groupsApi-C-FLWPCO.js","sources":["../../src/services/api/groupsApi.ts"],"sourcesContent":["import { api, apiClient } from './apiClient';\r\nimport type { UserApplicationAccessDto } from './adminApi';\r\n\r\n/**\r\n * Creates API methods with a specific tenant context.\r\n * Used when Super Admins view tenant-specific pages without \"switching\" to that tenant.\r\n */\r\nconst withTenantContext = (tenantSlug?: string) => ({\r\n  get: <T>(url: string, config?: Parameters<typeof apiClient.get>[1]) =>\r\n    apiClient.get<T>(url, {\r\n      ...config,\r\n      headers: tenantSlug ? { ...config?.headers, 'X-Tenant-Slug': tenantSlug } : config?.headers,\r\n    }).then(res => res.data),\r\n\r\n  post: <T>(url: string, data?: unknown, config?: Parameters<typeof apiClient.post>[2]) =>\r\n    apiClient.post<T>(url, data, {\r\n      ...config,\r\n      headers: tenantSlug ? { ...config?.headers, 'X-Tenant-Slug': tenantSlug } : config?.headers,\r\n    }).then(res => res.data),\r\n\r\n  put: <T>(url: string, data?: unknown, config?: Parameters<typeof apiClient.put>[2]) =>\r\n    apiClient.put<T>(url, data, {\r\n      ...config,\r\n      headers: tenantSlug ? { ...config?.headers, 'X-Tenant-Slug': tenantSlug } : config?.headers,\r\n    }).then(res => res.data),\r\n\r\n  patch: <T>(url: string, data?: unknown, config?: Parameters<typeof apiClient.patch>[2]) =>\r\n    apiClient.patch<T>(url, data, {\r\n      ...config,\r\n      headers: tenantSlug ? { ...config?.headers, 'X-Tenant-Slug': tenantSlug } : config?.headers,\r\n    }).then(res => res.data),\r\n\r\n  delete: <T>(url: string, config?: Parameters<typeof apiClient.delete>[1]) =>\r\n    apiClient.delete<T>(url, {\r\n      ...config,\r\n      headers: tenantSlug ? { ...config?.headers, 'X-Tenant-Slug': tenantSlug } : config?.headers,\r\n    }).then(res => res.data),\r\n});\r\n\r\n// Types\r\nexport interface GroupListDto {\r\n  id: string;\r\n  name: string;\r\n  description: string | null;\r\n  isActive: boolean;\r\n  isSecurityGroup: boolean;\r\n  isMailEnabled: boolean;\r\n  entraObjectId: string | null;\r\n  lastEntraSyncAt: string | null;\r\n  isSyncedFromEntra: boolean;\r\n  memberCount: number;\r\n  roles: string[];\r\n  createdAt: string;\r\n  parentGroupId: string | null;\r\n  parentGroupName: string | null;\r\n  childCount: number;\r\n}\r\n\r\nexport interface GroupDetailDto {\r\n  id: string;\r\n  name: string;\r\n  description: string | null;\r\n  isActive: boolean;\r\n  isSecurityGroup: boolean;\r\n  isMailEnabled: boolean;\r\n  mail: string | null;\r\n  mailNickname: string | null;\r\n  entraObjectId: string | null;\r\n  lastEntraSyncAt: string | null;\r\n  isSyncedFromEntra: boolean;\r\n  parentGroupId: string | null;\r\n  parentGroupName: string | null;\r\n  members: GroupMemberDto[];\r\n  roles: GroupRoleDto[];\r\n  childGroups: GroupChildDto[];\r\n  createdAt: string;\r\n  updatedAt: string | null;\r\n  createdBy: string | null;\r\n  updatedBy: string | null;\r\n}\r\n\r\nexport interface GroupMemberDto {\r\n  userId: string;\r\n  email: string;\r\n  fullName: string;\r\n  addedAt: string;\r\n  addedBy: string | null;\r\n}\r\n\r\nexport interface GroupRoleDto {\r\n  roleId: string;\r\n  roleName: string;\r\n  roleDescription: string | null;\r\n  assignedAt: string;\r\n  assignedBy: string;\r\n  isInheritable: boolean;\r\n  tenantId: string | null;\r\n  tenantName: string | null;\r\n  isGlobal: boolean;\r\n}\r\n\r\nexport interface GroupChildDto {\r\n  id: string;\r\n  name: string;\r\n  isActive: boolean;\r\n}\r\n\r\nexport interface CreateGroupRequest {\r\n  name: string;\r\n  description?: string;\r\n  isSecurityGroup?: boolean;\r\n  parentGroupId?: string;\r\n}\r\n\r\nexport interface UpdateGroupRequest {\r\n  name: string;\r\n  description?: string;\r\n}\r\n\r\nexport interface LinkEntraRequest {\r\n  entraObjectId: string;\r\n}\r\n\r\nexport interface AddMemberRequest {\r\n  userId: string;\r\n}\r\n\r\nexport interface AssignRoleRequest {\r\n  roleId: string;\r\n  isInheritable?: boolean;\r\n  tenantId?: string | null;\r\n}\r\n\r\nexport interface SetInheritableRequest {\r\n  isInheritable: boolean;\r\n}\r\n\r\nexport interface SetParentGroupRequest {\r\n  parentGroupId: string | null;\r\n}\r\n\r\nexport interface InheritedTenantDto {\r\n  tenantId: string;\r\n  tenantName: string;\r\n  tenantSlug: string;\r\n  tenantType: string;\r\n  inheritedFromGroupId: string;\r\n  inheritedFromGroupName: string;\r\n}\r\n\r\nexport interface InheritedMemberDto {\r\n  userId: string;\r\n  email: string;\r\n  fullName: string;\r\n  inheritedFromGroupId: string;\r\n  inheritedFromGroupName: string;\r\n  level: number;\r\n}\r\n\r\nexport interface InheritedGroupRoleDto {\r\n  roleId: string;\r\n  roleName: string;\r\n  roleDescription: string | null;\r\n  tenantId: string | null;\r\n  tenantName: string | null;\r\n  isGlobal: boolean;\r\n  inheritedFromGroupId: string;\r\n  inheritedFromGroupName: string;\r\n  level: number;\r\n}\r\n\r\nexport interface GroupTenantDto {\r\n  tenantId: string;\r\n  tenantName: string;\r\n  tenantSlug: string;\r\n  tenantType: string;\r\n  addedAt: string;\r\n  addedBy: string | null;\r\n}\r\n\r\nexport interface AddToTenantRequest {\r\n  tenantId: string;\r\n}\r\n\r\nexport interface CustomRoleDetailDto {\r\n  id: string;\r\n  name: string;\r\n  shortName: string;\r\n  category: string;\r\n  description: string | null;\r\n  isSystem: boolean;\r\n  permissions: CustomRolePermissionDto[];\r\n  createdAt: string;\r\n  updatedAt: string | null;\r\n}\r\n\r\nexport interface CustomRolePermissionDto {\r\n  id: string;\r\n  path: string;\r\n  description: string | null;\r\n}\r\n\r\nconst BASE_URL = '/api/administration/users/groups';\r\n\r\n/**\r\n * Factory function to create groups API with explicit tenant context.\r\n * @param tenantSlug - Optional tenant slug to use for all requests\r\n */\r\nconst _createGroupsApi = (tenantSlug?: string) => {\r\n  const apiContext = tenantSlug ? withTenantContext(tenantSlug) : api;\r\n\r\n  return {\r\n    // === CRUD OPERATIONS ===\r\n\r\n    getAll: async (\r\n      search?: string,\r\n      isActive?: boolean,\r\n      syncedFromEntra?: boolean\r\n    ): Promise<GroupListDto[]> => {\r\n      const params = new URLSearchParams();\r\n      if (search) params.append('search', search);\r\n      if (isActive !== undefined) params.append('isActive', String(isActive));\r\n      if (syncedFromEntra !== undefined) params.append('syncedFromEntra', String(syncedFromEntra));\r\n\r\n      const queryString = params.toString();\r\n      const url = queryString ? `${BASE_URL}?${queryString}` : BASE_URL;\r\n      const response = await apiContext.get<GroupListDto[]>(url);\r\n      return response;\r\n    },\r\n\r\n    getById: async (id: string): Promise<GroupDetailDto> => {\r\n      const response = await apiContext.get<GroupDetailDto>(`${BASE_URL}/${id}`);\r\n      return response;\r\n    },\r\n\r\n    create: async (data: CreateGroupRequest): Promise<GroupDetailDto> => {\r\n      const response = await apiContext.post<GroupDetailDto>(BASE_URL, data);\r\n      return response;\r\n    },\r\n\r\n    update: async (id: string, data: UpdateGroupRequest): Promise<GroupDetailDto> => {\r\n      const response = await apiContext.put<GroupDetailDto>(`${BASE_URL}/${id}`, data);\r\n      return response;\r\n    },\r\n\r\n    delete: async (id: string): Promise<void> => {\r\n      await apiContext.delete(`${BASE_URL}/${id}`);\r\n    },\r\n\r\n    activate: async (id: string): Promise<void> => {\r\n      await apiContext.patch(`${BASE_URL}/${id}/activate`);\r\n    },\r\n\r\n    deactivate: async (id: string): Promise<void> => {\r\n      await apiContext.patch(`${BASE_URL}/${id}/deactivate`);\r\n    },\r\n\r\n    // === ENTRA LINKING ===\r\n\r\n    linkToEntra: async (id: string, data: LinkEntraRequest): Promise<void> => {\r\n      await apiContext.post(`${BASE_URL}/${id}/link-entra`, data);\r\n    },\r\n\r\n    unlinkFromEntra: async (id: string): Promise<void> => {\r\n      await apiContext.post(`${BASE_URL}/${id}/unlink-entra`);\r\n    },\r\n\r\n    // === MEMBER MANAGEMENT ===\r\n\r\n    getMembers: async (id: string): Promise<GroupMemberDto[]> => {\r\n      const response = await apiContext.get<GroupMemberDto[]>(`${BASE_URL}/${id}/members`);\r\n      return response;\r\n    },\r\n\r\n    addMember: async (id: string, data: AddMemberRequest): Promise<void> => {\r\n      await apiContext.post(`${BASE_URL}/${id}/members`, data);\r\n    },\r\n\r\n    removeMember: async (groupId: string, userId: string): Promise<void> => {\r\n      await apiContext.delete(`${BASE_URL}/${groupId}/members/${userId}`);\r\n    },\r\n\r\n    // === ROLE MANAGEMENT ===\r\n\r\n    getRoles: async (id: string): Promise<GroupRoleDto[]> => {\r\n      const response = await apiContext.get<GroupRoleDto[]>(`${BASE_URL}/${id}/roles`);\r\n      return response;\r\n    },\r\n\r\n    assignRole: async (id: string, data: AssignRoleRequest): Promise<void> => {\r\n      await apiContext.post(`${BASE_URL}/${id}/roles`, data);\r\n    },\r\n\r\n    removeRole: async (groupId: string, roleId: string, tenantId?: string | null): Promise<void> => {\r\n      const params = tenantId ? `?tenantId=${tenantId}` : '';\r\n      await apiContext.delete(`${BASE_URL}/${groupId}/roles/${roleId}${params}`);\r\n    },\r\n\r\n    setRoleInheritable: async (\r\n      groupId: string,\r\n      roleId: string,\r\n      data: SetInheritableRequest\r\n    ): Promise<void> => {\r\n      await apiContext.patch(`${BASE_URL}/${groupId}/roles/${roleId}/inheritable`, data);\r\n    },\r\n\r\n    // === HIERARCHY ===\r\n\r\n    getChildGroups: async (id: string): Promise<GroupChildDto[]> => {\r\n      const response = await apiContext.get<GroupChildDto[]>(`${BASE_URL}/${id}/children`);\r\n      return response;\r\n    },\r\n\r\n    setParentGroup: async (id: string, data: SetParentGroupRequest): Promise<void> => {\r\n      await apiContext.patch(`${BASE_URL}/${id}/parent`, data);\r\n    },\r\n\r\n    // === TENANT MANAGEMENT ===\r\n\r\n    getTenants: async (id: string): Promise<GroupTenantDto[]> => {\r\n      const response = await apiContext.get<GroupTenantDto[]>(`${BASE_URL}/${id}/tenants`);\r\n      return response;\r\n    },\r\n\r\n    getInheritedTenants: async (id: string): Promise<InheritedTenantDto[]> => {\r\n      const response = await apiContext.get<InheritedTenantDto[]>(`${BASE_URL}/${id}/inherited-tenants`);\r\n      return response;\r\n    },\r\n\r\n    getInheritedMembers: async (id: string): Promise<InheritedMemberDto[]> => {\r\n      const response = await apiContext.get<InheritedMemberDto[]>(`${BASE_URL}/${id}/inherited-members`);\r\n      return response;\r\n    },\r\n\r\n    getInheritedRoles: async (id: string): Promise<InheritedGroupRoleDto[]> => {\r\n      const response = await apiContext.get<InheritedGroupRoleDto[]>(`${BASE_URL}/${id}/inherited-roles`);\r\n      return response;\r\n    },\r\n\r\n    addToTenant: async (id: string, data: AddToTenantRequest): Promise<void> => {\r\n      await apiContext.post(`${BASE_URL}/${id}/tenants`, data);\r\n    },\r\n\r\n    removeFromTenant: async (groupId: string, tenantId: string): Promise<void> => {\r\n      await apiContext.delete(`${BASE_URL}/${groupId}/tenants/${tenantId}`);\r\n    },\r\n\r\n    // === APPLICATION ACCESS ===\r\n\r\n    getApplicationAccess: async (id: string, tenantId?: string): Promise<UserApplicationAccessDto[]> => {\r\n      const url = tenantId\r\n        ? `${BASE_URL}/${id}/application-access?tenantId=${tenantId}`\r\n        : `${BASE_URL}/${id}/application-access`;\r\n      const response = await apiContext.get<UserApplicationAccessDto[]>(url);\r\n      return response;\r\n    },\r\n\r\n    // === CUSTOM ROLE ===\r\n\r\n    getCustomRole: async (id: string): Promise<CustomRoleDetailDto | null> => {\r\n      const response = await apiContext.get<CustomRoleDetailDto | null>(`${BASE_URL}/${id}/custom-role`);\r\n      return response;\r\n    },\r\n\r\n    createCustomRole: async (id: string): Promise<CustomRoleDetailDto> => {\r\n      const response = await apiContext.post<CustomRoleDetailDto>(`${BASE_URL}/${id}/custom-role`);\r\n      return response;\r\n    },\r\n\r\n    deleteCustomRole: async (id: string): Promise<void> => {\r\n      await apiContext.delete(`${BASE_URL}/${id}/custom-role`);\r\n    },\r\n  };\r\n};\r\nexport type GroupsApi = ReturnType<typeof _createGroupsApi>;\r\nexport const createGroupsApi: (tenantSlug?: string) => GroupsApi = _createGroupsApi;\r\n\r\n// Default export uses localStorage tenant slug (backward compatible)\r\nexport const groupsApi = createGroupsApi();\r\n"],"names":["withTenantContext","tenantSlug","url","config","apiClient","res","data","BASE_URL","_createGroupsApi","apiContext","api","search","isActive","syncedFromEntra","params","queryString","id","groupId","userId","roleId","tenantId","createGroupsApi","groupsApi"],"mappings":"oDAOMA,EAAqBC,IAAyB,CAClD,IAAK,CAAIC,EAAaC,IACpBC,EAAAA,UAAU,IAAOF,EAAK,CACpB,GAAGC,EACH,QAASF,EAAa,CAAE,GAAGE,GAAQ,QAAS,gBAAiBF,CAAA,EAAeE,GAAQ,OAAA,CACrF,EAAE,KAAKE,GAAOA,EAAI,IAAI,EAEzB,KAAM,CAAIH,EAAaI,EAAgBH,IACrCC,EAAAA,UAAU,KAAQF,EAAKI,EAAM,CAC3B,GAAGH,EACH,QAASF,EAAa,CAAE,GAAGE,GAAQ,QAAS,gBAAiBF,CAAA,EAAeE,GAAQ,OAAA,CACrF,EAAE,KAAKE,GAAOA,EAAI,IAAI,EAEzB,IAAK,CAAIH,EAAaI,EAAgBH,IACpCC,EAAAA,UAAU,IAAOF,EAAKI,EAAM,CAC1B,GAAGH,EACH,QAASF,EAAa,CAAE,GAAGE,GAAQ,QAAS,gBAAiBF,CAAA,EAAeE,GAAQ,OAAA,CACrF,EAAE,KAAKE,GAAOA,EAAI,IAAI,EAEzB,MAAO,CAAIH,EAAaI,EAAgBH,IACtCC,EAAAA,UAAU,MAASF,EAAKI,EAAM,CAC5B,GAAGH,EACH,QAASF,EAAa,CAAE,GAAGE,GAAQ,QAAS,gBAAiBF,CAAA,EAAeE,GAAQ,OAAA,CACrF,EAAE,KAAKE,GAAOA,EAAI,IAAI,EAEzB,OAAQ,CAAIH,EAAaC,IACvBC,EAAAA,UAAU,OAAUF,EAAK,CACvB,GAAGC,EACH,QAASF,EAAa,CAAE,GAAGE,GAAQ,QAAS,gBAAiBF,CAAA,EAAeE,GAAQ,OAAA,CACrF,EAAE,KAAKE,GAAOA,EAAI,IAAI,CAC3B,GAqKME,EAAW,mCAMXC,EAAoBP,GAAwB,CAChD,MAAMQ,EAAaR,EAAaD,EAAkBC,CAAU,EAAIS,EAAAA,IAEhE,MAAO,CAGL,OAAQ,MACNC,EACAC,EACAC,IAC4B,CAC5B,MAAMC,EAAS,IAAI,gBACfH,GAAQG,EAAO,OAAO,SAAUH,CAAM,EACtCC,IAAa,QAAWE,EAAO,OAAO,WAAY,OAAOF,CAAQ,CAAC,EAClEC,IAAoB,QAAWC,EAAO,OAAO,kBAAmB,OAAOD,CAAe,CAAC,EAE3F,MAAME,EAAcD,EAAO,SAAA,EACrBZ,EAAMa,EAAc,GAAGR,CAAQ,IAAIQ,CAAW,GAAKR,EAEzD,OADiB,MAAME,EAAW,IAAoBP,CAAG,CAE3D,EAEA,QAAS,MAAOc,GACG,MAAMP,EAAW,IAAoB,GAAGF,CAAQ,IAAIS,CAAE,EAAE,EAI3E,OAAQ,MAAOV,GACI,MAAMG,EAAW,KAAqBF,EAAUD,CAAI,EAIvE,OAAQ,MAAOU,EAAYV,IACR,MAAMG,EAAW,IAAoB,GAAGF,CAAQ,IAAIS,CAAE,GAAIV,CAAI,EAIjF,OAAQ,MAAOU,GAA8B,CAC3C,MAAMP,EAAW,OAAO,GAAGF,CAAQ,IAAIS,CAAE,EAAE,CAC7C,EAEA,SAAU,MAAOA,GAA8B,CAC7C,MAAMP,EAAW,MAAM,GAAGF,CAAQ,IAAIS,CAAE,WAAW,CACrD,EAEA,WAAY,MAAOA,GAA8B,CAC/C,MAAMP,EAAW,MAAM,GAAGF,CAAQ,IAAIS,CAAE,aAAa,CACvD,EAIA,YAAa,MAAOA,EAAYV,IAA0C,CACxE,MAAMG,EAAW,KAAK,GAAGF,CAAQ,IAAIS,CAAE,cAAeV,CAAI,CAC5D,EAEA,gBAAiB,MAAOU,GAA8B,CACpD,MAAMP,EAAW,KAAK,GAAGF,CAAQ,IAAIS,CAAE,eAAe,CACxD,EAIA,WAAY,MAAOA,GACA,MAAMP,EAAW,IAAsB,GAAGF,CAAQ,IAAIS,CAAE,UAAU,EAIrF,UAAW,MAAOA,EAAYV,IAA0C,CACtE,MAAMG,EAAW,KAAK,GAAGF,CAAQ,IAAIS,CAAE,WAAYV,CAAI,CACzD,EAEA,aAAc,MAAOW,EAAiBC,IAAkC,CACtE,MAAMT,EAAW,OAAO,GAAGF,CAAQ,IAAIU,CAAO,YAAYC,CAAM,EAAE,CACpE,EAIA,SAAU,MAAOF,GACE,MAAMP,EAAW,IAAoB,GAAGF,CAAQ,IAAIS,CAAE,QAAQ,EAIjF,WAAY,MAAOA,EAAYV,IAA2C,CACxE,MAAMG,EAAW,KAAK,GAAGF,CAAQ,IAAIS,CAAE,SAAUV,CAAI,CACvD,EAEA,WAAY,MAAOW,EAAiBE,EAAgBC,IAA4C,CAC9F,MAAMN,EAASM,EAAW,aAAaA,CAAQ,GAAK,GACpD,MAAMX,EAAW,OAAO,GAAGF,CAAQ,IAAIU,CAAO,UAAUE,CAAM,GAAGL,CAAM,EAAE,CAC3E,EAEA,mBAAoB,MAClBG,EACAE,EACAb,IACkB,CAClB,MAAMG,EAAW,MAAM,GAAGF,CAAQ,IAAIU,CAAO,UAAUE,CAAM,eAAgBb,CAAI,CACnF,EAIA,eAAgB,MAAOU,GACJ,MAAMP,EAAW,IAAqB,GAAGF,CAAQ,IAAIS,CAAE,WAAW,EAIrF,eAAgB,MAAOA,EAAYV,IAA+C,CAChF,MAAMG,EAAW,MAAM,GAAGF,CAAQ,IAAIS,CAAE,UAAWV,CAAI,CACzD,EAIA,WAAY,MAAOU,GACA,MAAMP,EAAW,IAAsB,GAAGF,CAAQ,IAAIS,CAAE,UAAU,EAIrF,oBAAqB,MAAOA,GACT,MAAMP,EAAW,IAA0B,GAAGF,CAAQ,IAAIS,CAAE,oBAAoB,EAInG,oBAAqB,MAAOA,GACT,MAAMP,EAAW,IAA0B,GAAGF,CAAQ,IAAIS,CAAE,oBAAoB,EAInG,kBAAmB,MAAOA,GACP,MAAMP,EAAW,IAA6B,GAAGF,CAAQ,IAAIS,CAAE,kBAAkB,EAIpG,YAAa,MAAOA,EAAYV,IAA4C,CAC1E,MAAMG,EAAW,KAAK,GAAGF,CAAQ,IAAIS,CAAE,WAAYV,CAAI,CACzD,EAEA,iBAAkB,MAAOW,EAAiBG,IAAoC,CAC5E,MAAMX,EAAW,OAAO,GAAGF,CAAQ,IAAIU,CAAO,YAAYG,CAAQ,EAAE,CACtE,EAIA,qBAAsB,MAAOJ,EAAYI,IAA2D,CAClG,MAAMlB,EAAMkB,EACR,GAAGb,CAAQ,IAAIS,CAAE,gCAAgCI,CAAQ,GACzD,GAAGb,CAAQ,IAAIS,CAAE,sBAErB,OADiB,MAAMP,EAAW,IAAgCP,CAAG,CAEvE,EAIA,cAAe,MAAOc,GACH,MAAMP,EAAW,IAAgC,GAAGF,CAAQ,IAAIS,CAAE,cAAc,EAInG,iBAAkB,MAAOA,GACN,MAAMP,EAAW,KAA0B,GAAGF,CAAQ,IAAIS,CAAE,cAAc,EAI7F,iBAAkB,MAAOA,GAA8B,CACrD,MAAMP,EAAW,OAAO,GAAGF,CAAQ,IAAIS,CAAE,cAAc,CACzD,CAAA,CAEJ,EAEaK,EAAsDb,EAGtDc,EAAYD,EAAA"}

package/dist/chunks/{groupsApi-CyqyYsmi.js → groupsApi-CBI5vMLa.js}

@@ -1,4 +1,4 @@
-import { j as p, i as $ } from "./index-Cq80YBne.js";
+import { j as p, i as $ } from "./index-CBtjGPod.js";
 const d = (r) => ({
   get: (t, e) => p.get(t, {
     ...e,
@@ -102,4 +102,4 @@ export {
   l as c,
   y as g
 };
-//# sourceMappingURL=groupsApi-CyqyYsmi.js.map
+//# sourceMappingURL=groupsApi-CBI5vMLa.js.map

package/dist/chunks/{groupsApi-CyqyYsmi.js.map → groupsApi-CBI5vMLa.js.map}

@@ -1 +1 @@
-{"version":3,"file":"groupsApi-CyqyYsmi.js","sources":["../../src/services/api/groupsApi.ts"],"sourcesContent":["import { api, apiClient } from './apiClient';\r\nimport type { UserApplicationAccessDto } from './adminApi';\r\n\r\n/**\r\n * Creates API methods with a specific tenant context.\r\n * Used when Super Admins view tenant-specific pages without \"switching\" to that tenant.\r\n */\r\nconst withTenantContext = (tenantSlug?: string) => ({\r\n  get: <T>(url: string, config?: Parameters<typeof apiClient.get>[1]) =>\r\n    apiClient.get<T>(url, {\r\n      ...config,\r\n      headers: tenantSlug ? { ...config?.headers, 'X-Tenant-Slug': tenantSlug } : config?.headers,\r\n    }).then(res => res.data),\r\n\r\n  post: <T>(url: string, data?: unknown, config?: Parameters<typeof apiClient.post>[2]) =>\r\n    apiClient.post<T>(url, data, {\r\n      ...config,\r\n      headers: tenantSlug ? { ...config?.headers, 'X-Tenant-Slug': tenantSlug } : config?.headers,\r\n    }).then(res => res.data),\r\n\r\n  put: <T>(url: string, data?: unknown, config?: Parameters<typeof apiClient.put>[2]) =>\r\n    apiClient.put<T>(url, data, {\r\n      ...config,\r\n      headers: tenantSlug ? { ...config?.headers, 'X-Tenant-Slug': tenantSlug } : config?.headers,\r\n    }).then(res => res.data),\r\n\r\n  patch: <T>(url: string, data?: unknown, config?: Parameters<typeof apiClient.patch>[2]) =>\r\n    apiClient.patch<T>(url, data, {\r\n      ...config,\r\n      headers: tenantSlug ? { ...config?.headers, 'X-Tenant-Slug': tenantSlug } : config?.headers,\r\n    }).then(res => res.data),\r\n\r\n  delete: <T>(url: string, config?: Parameters<typeof apiClient.delete>[1]) =>\r\n    apiClient.delete<T>(url, {\r\n      ...config,\r\n      headers: tenantSlug ? { ...config?.headers, 'X-Tenant-Slug': tenantSlug } : config?.headers,\r\n    }).then(res => res.data),\r\n});\r\n\r\n// Types\r\nexport interface GroupListDto {\r\n  id: string;\r\n  name: string;\r\n  description: string | null;\r\n  isActive: boolean;\r\n  isSecurityGroup: boolean;\r\n  isMailEnabled: boolean;\r\n  entraObjectId: string | null;\r\n  lastEntraSyncAt: string | null;\r\n  isSyncedFromEntra: boolean;\r\n  memberCount: number;\r\n  roles: string[];\r\n  createdAt: string;\r\n  parentGroupId: string | null;\r\n  parentGroupName: string | null;\r\n  childCount: number;\r\n}\r\n\r\nexport interface GroupDetailDto {\r\n  id: string;\r\n  name: string;\r\n  description: string | null;\r\n  isActive: boolean;\r\n  isSecurityGroup: boolean;\r\n  isMailEnabled: boolean;\r\n  mail: string | null;\r\n  mailNickname: string | null;\r\n  entraObjectId: string | null;\r\n  lastEntraSyncAt: string | null;\r\n  isSyncedFromEntra: boolean;\r\n  parentGroupId: string | null;\r\n  parentGroupName: string | null;\r\n  members: GroupMemberDto[];\r\n  roles: GroupRoleDto[];\r\n  childGroups: GroupChildDto[];\r\n  createdAt: string;\r\n  updatedAt: string | null;\r\n  createdBy: string | null;\r\n  updatedBy: string | null;\r\n}\r\n\r\nexport interface GroupMemberDto {\r\n  userId: string;\r\n  email: string;\r\n  fullName: string;\r\n  addedAt: string;\r\n  addedBy: string | null;\r\n}\r\n\r\nexport interface GroupRoleDto {\r\n  roleId: string;\r\n  roleName: string;\r\n  roleDescription: string | null;\r\n  assignedAt: string;\r\n  assignedBy: string;\r\n  isInheritable: boolean;\r\n  tenantId: string | null;\r\n  tenantName: string | null;\r\n  isGlobal: boolean;\r\n}\r\n\r\nexport interface GroupChildDto {\r\n  id: string;\r\n  name: string;\r\n  isActive: boolean;\r\n}\r\n\r\nexport interface CreateGroupRequest {\r\n  name: string;\r\n  description?: string;\r\n  isSecurityGroup?: boolean;\r\n  parentGroupId?: string;\r\n}\r\n\r\nexport interface UpdateGroupRequest {\r\n  name: string;\r\n  description?: string;\r\n}\r\n\r\nexport interface LinkEntraRequest {\r\n  entraObjectId: string;\r\n}\r\n\r\nexport interface AddMemberRequest {\r\n  userId: string;\r\n}\r\n\r\nexport interface AssignRoleRequest {\r\n  roleId: string;\r\n  isInheritable?: boolean;\r\n  tenantId?: string | null;\r\n}\r\n\r\nexport interface SetInheritableRequest {\r\n  isInheritable: boolean;\r\n}\r\n\r\nexport interface SetParentGroupRequest {\r\n  parentGroupId: string | null;\r\n}\r\n\r\nexport interface InheritedTenantDto {\r\n  tenantId: string;\r\n  tenantName: string;\r\n  tenantSlug: string;\r\n  tenantType: string;\r\n  inheritedFromGroupId: string;\r\n  inheritedFromGroupName: string;\r\n}\r\n\r\nexport interface InheritedMemberDto {\r\n  userId: string;\r\n  email: string;\r\n  fullName: string;\r\n  inheritedFromGroupId: string;\r\n  inheritedFromGroupName: string;\r\n  level: number;\r\n}\r\n\r\nexport interface InheritedGroupRoleDto {\r\n  roleId: string;\r\n  roleName: string;\r\n  roleDescription: string | null;\r\n  tenantId: string | null;\r\n  tenantName: string | null;\r\n  isGlobal: boolean;\r\n  inheritedFromGroupId: string;\r\n  inheritedFromGroupName: string;\r\n  level: number;\r\n}\r\n\r\nexport interface GroupTenantDto {\r\n  tenantId: string;\r\n  tenantName: string;\r\n  tenantSlug: string;\r\n  tenantType: string;\r\n  addedAt: string;\r\n  addedBy: string | null;\r\n}\r\n\r\nexport interface AddToTenantRequest {\r\n  tenantId: string;\r\n}\r\n\r\nexport interface CustomRoleDetailDto {\r\n  id: string;\r\n  name: string;\r\n  shortName: string;\r\n  category: string;\r\n  description: string | null;\r\n  isSystem: boolean;\r\n  permissions: CustomRolePermissionDto[];\r\n  createdAt: string;\r\n  updatedAt: string | null;\r\n}\r\n\r\nexport interface CustomRolePermissionDto {\r\n  id: string;\r\n  path: string;\r\n  description: string | null;\r\n}\r\n\r\nconst BASE_URL = '/api/administration/users/groups';\r\n\r\n/**\r\n * Factory function to create groups API with explicit tenant context.\r\n * @param tenantSlug - Optional tenant slug to use for all requests\r\n */\r\nconst _createGroupsApi = (tenantSlug?: string) => {\r\n  const apiContext = tenantSlug ? withTenantContext(tenantSlug) : api;\r\n\r\n  return {\r\n    // === CRUD OPERATIONS ===\r\n\r\n    getAll: async (\r\n      search?: string,\r\n      isActive?: boolean,\r\n      syncedFromEntra?: boolean\r\n    ): Promise<GroupListDto[]> => {\r\n      const params = new URLSearchParams();\r\n      if (search) params.append('search', search);\r\n      if (isActive !== undefined) params.append('isActive', String(isActive));\r\n      if (syncedFromEntra !== undefined) params.append('syncedFromEntra', String(syncedFromEntra));\r\n\r\n      const queryString = params.toString();\r\n      const url = queryString ? `${BASE_URL}?${queryString}` : BASE_URL;\r\n      const response = await apiContext.get<GroupListDto[]>(url);\r\n      return response;\r\n    },\r\n\r\n    getById: async (id: string): Promise<GroupDetailDto> => {\r\n      const response = await apiContext.get<GroupDetailDto>(`${BASE_URL}/${id}`);\r\n      return response;\r\n    },\r\n\r\n    create: async (data: CreateGroupRequest): Promise<GroupDetailDto> => {\r\n      const response = await apiContext.post<GroupDetailDto>(BASE_URL, data);\r\n      return response;\r\n    },\r\n\r\n    update: async (id: string, data: UpdateGroupRequest): Promise<GroupDetailDto> => {\r\n      const response = await apiContext.put<GroupDetailDto>(`${BASE_URL}/${id}`, data);\r\n      return response;\r\n    },\r\n\r\n    delete: async (id: string): Promise<void> => {\r\n      await apiContext.delete(`${BASE_URL}/${id}`);\r\n    },\r\n\r\n    activate: async (id: string): Promise<void> => {\r\n      await apiContext.patch(`${BASE_URL}/${id}/activate`);\r\n    },\r\n\r\n    deactivate: async (id: string): Promise<void> => {\r\n      await apiContext.patch(`${BASE_URL}/${id}/deactivate`);\r\n    },\r\n\r\n    // === ENTRA LINKING ===\r\n\r\n    linkToEntra: async (id: string, data: LinkEntraRequest): Promise<void> => {\r\n      await apiContext.post(`${BASE_URL}/${id}/link-entra`, data);\r\n    },\r\n\r\n    unlinkFromEntra: async (id: string): Promise<void> => {\r\n      await apiContext.post(`${BASE_URL}/${id}/unlink-entra`);\r\n    },\r\n\r\n    // === MEMBER MANAGEMENT ===\r\n\r\n    getMembers: async (id: string): Promise<GroupMemberDto[]> => {\r\n      const response = await apiContext.get<GroupMemberDto[]>(`${BASE_URL}/${id}/members`);\r\n      return response;\r\n    },\r\n\r\n    addMember: async (id: string, data: AddMemberRequest): Promise<void> => {\r\n      await apiContext.post(`${BASE_URL}/${id}/members`, data);\r\n    },\r\n\r\n    removeMember: async (groupId: string, userId: string): Promise<void> => {\r\n      await apiContext.delete(`${BASE_URL}/${groupId}/members/${userId}`);\r\n    },\r\n\r\n    // === ROLE MANAGEMENT ===\r\n\r\n    getRoles: async (id: string): Promise<GroupRoleDto[]> => {\r\n      const response = await apiContext.get<GroupRoleDto[]>(`${BASE_URL}/${id}/roles`);\r\n      return response;\r\n    },\r\n\r\n    assignRole: async (id: string, data: AssignRoleRequest): Promise<void> => {\r\n      await apiContext.post(`${BASE_URL}/${id}/roles`, data);\r\n    },\r\n\r\n    removeRole: async (groupId: string, roleId: string, tenantId?: string | null): Promise<void> => {\r\n      const params = tenantId ? `?tenantId=${tenantId}` : '';\r\n      await apiContext.delete(`${BASE_URL}/${groupId}/roles/${roleId}${params}`);\r\n    },\r\n\r\n    setRoleInheritable: async (\r\n      groupId: string,\r\n      roleId: string,\r\n      data: SetInheritableRequest\r\n    ): Promise<void> => {\r\n      await apiContext.patch(`${BASE_URL}/${groupId}/roles/${roleId}/inheritable`, data);\r\n    },\r\n\r\n    // === HIERARCHY ===\r\n\r\n    getChildGroups: async (id: string): Promise<GroupChildDto[]> => {\r\n      const response = await apiContext.get<GroupChildDto[]>(`${BASE_URL}/${id}/children`);\r\n      return response;\r\n    },\r\n\r\n    setParentGroup: async (id: string, data: SetParentGroupRequest): Promise<void> => {\r\n      await apiContext.patch(`${BASE_URL}/${id}/parent`, data);\r\n    },\r\n\r\n    // === TENANT MANAGEMENT ===\r\n\r\n    getTenants: async (id: string): Promise<GroupTenantDto[]> => {\r\n      const response = await apiContext.get<GroupTenantDto[]>(`${BASE_URL}/${id}/tenants`);\r\n      return response;\r\n    },\r\n\r\n    getInheritedTenants: async (id: string): Promise<InheritedTenantDto[]> => {\r\n      const response = await apiContext.get<InheritedTenantDto[]>(`${BASE_URL}/${id}/inherited-tenants`);\r\n      return response;\r\n    },\r\n\r\n    getInheritedMembers: async (id: string): Promise<InheritedMemberDto[]> => {\r\n      const response = await apiContext.get<InheritedMemberDto[]>(`${BASE_URL}/${id}/inherited-members`);\r\n      return response;\r\n    },\r\n\r\n    getInheritedRoles: async (id: string): Promise<InheritedGroupRoleDto[]> => {\r\n      const response = await apiContext.get<InheritedGroupRoleDto[]>(`${BASE_URL}/${id}/inherited-roles`);\r\n      return response;\r\n    },\r\n\r\n    addToTenant: async (id: string, data: AddToTenantRequest): Promise<void> => {\r\n      await apiContext.post(`${BASE_URL}/${id}/tenants`, data);\r\n    },\r\n\r\n    removeFromTenant: async (groupId: string, tenantId: string): Promise<void> => {\r\n      await apiContext.delete(`${BASE_URL}/${groupId}/tenants/${tenantId}`);\r\n    },\r\n\r\n    // === APPLICATION ACCESS ===\r\n\r\n    getApplicationAccess: async (id: string, tenantId?: string): Promise<UserApplicationAccessDto[]> => {\r\n      const url = tenantId\r\n        ? `${BASE_URL}/${id}/application-access?tenantId=${tenantId}`\r\n        : `${BASE_URL}/${id}/application-access`;\r\n      const response = await apiContext.get<UserApplicationAccessDto[]>(url);\r\n      return response;\r\n    },\r\n\r\n    // === CUSTOM ROLE ===\r\n\r\n    getCustomRole: async (id: string): Promise<CustomRoleDetailDto | null> => {\r\n      const response = await apiContext.get<CustomRoleDetailDto | null>(`${BASE_URL}/${id}/custom-role`);\r\n      return response;\r\n    },\r\n\r\n    createCustomRole: async (id: string): Promise<CustomRoleDetailDto> => {\r\n      const response = await apiContext.post<CustomRoleDetailDto>(`${BASE_URL}/${id}/custom-role`);\r\n      return response;\r\n    },\r\n\r\n    deleteCustomRole: async (id: string): Promise<void> => {\r\n      await apiContext.delete(`${BASE_URL}/${id}/custom-role`);\r\n    },\r\n  };\r\n};\r\nexport type GroupsApi = ReturnType<typeof _createGroupsApi>;\r\nexport const createGroupsApi: (tenantSlug?: string) => GroupsApi = _createGroupsApi;\r\n\r\n// Default export uses localStorage tenant slug (backward compatible)\r\nexport const groupsApi = createGroupsApi();\r\n"],"names":["withTenantContext","tenantSlug","url","config","apiClient","res","data","BASE_URL","_createGroupsApi","apiContext","api","search","isActive","syncedFromEntra","params","queryString","id","groupId","userId","roleId","tenantId","createGroupsApi","groupsApi"],"mappings":";AAOA,MAAMA,IAAoB,CAACC,OAAyB;AAAA,EAClD,KAAK,CAAIC,GAAaC,MACpBC,EAAU,IAAOF,GAAK;AAAA,IACpB,GAAGC;AAAA,IACH,SAASF,IAAa,EAAE,GAAGE,GAAQ,SAAS,iBAAiBF,EAAA,IAAeE,GAAQ;AAAA,EAAA,CACrF,EAAE,KAAK,CAAAE,MAAOA,EAAI,IAAI;AAAA,EAEzB,MAAM,CAAIH,GAAaI,GAAgBH,MACrCC,EAAU,KAAQF,GAAKI,GAAM;AAAA,IAC3B,GAAGH;AAAA,IACH,SAASF,IAAa,EAAE,GAAGE,GAAQ,SAAS,iBAAiBF,EAAA,IAAeE,GAAQ;AAAA,EAAA,CACrF,EAAE,KAAK,CAAAE,MAAOA,EAAI,IAAI;AAAA,EAEzB,KAAK,CAAIH,GAAaI,GAAgBH,MACpCC,EAAU,IAAOF,GAAKI,GAAM;AAAA,IAC1B,GAAGH;AAAA,IACH,SAASF,IAAa,EAAE,GAAGE,GAAQ,SAAS,iBAAiBF,EAAA,IAAeE,GAAQ;AAAA,EAAA,CACrF,EAAE,KAAK,CAAAE,MAAOA,EAAI,IAAI;AAAA,EAEzB,OAAO,CAAIH,GAAaI,GAAgBH,MACtCC,EAAU,MAASF,GAAKI,GAAM;AAAA,IAC5B,GAAGH;AAAA,IACH,SAASF,IAAa,EAAE,GAAGE,GAAQ,SAAS,iBAAiBF,EAAA,IAAeE,GAAQ;AAAA,EAAA,CACrF,EAAE,KAAK,CAAAE,MAAOA,EAAI,IAAI;AAAA,EAEzB,QAAQ,CAAIH,GAAaC,MACvBC,EAAU,OAAUF,GAAK;AAAA,IACvB,GAAGC;AAAA,IACH,SAASF,IAAa,EAAE,GAAGE,GAAQ,SAAS,iBAAiBF,EAAA,IAAeE,GAAQ;AAAA,EAAA,CACrF,EAAE,KAAK,CAAAE,MAAOA,EAAI,IAAI;AAC3B,IAqKME,IAAW,oCAMXC,IAAmB,CAACP,MAAwB;AAChD,QAAMQ,IAAaR,IAAaD,EAAkBC,CAAU,IAAIS;AAEhE,SAAO;AAAA;AAAA,IAGL,QAAQ,OACNC,GACAC,GACAC,MAC4B;AAC5B,YAAMC,IAAS,IAAI,gBAAA;AACnB,MAAIH,KAAQG,EAAO,OAAO,UAAUH,CAAM,GACtCC,MAAa,UAAWE,EAAO,OAAO,YAAY,OAAOF,CAAQ,CAAC,GAClEC,MAAoB,UAAWC,EAAO,OAAO,mBAAmB,OAAOD,CAAe,CAAC;AAE3F,YAAME,IAAcD,EAAO,SAAA,GACrBZ,IAAMa,IAAc,GAAGR,CAAQ,IAAIQ,CAAW,KAAKR;AAEzD,aADiB,MAAME,EAAW,IAAoBP,CAAG;AAAA,IAE3D;AAAA,IAEA,SAAS,OAAOc,MACG,MAAMP,EAAW,IAAoB,GAAGF,CAAQ,IAAIS,CAAE,EAAE;AAAA,IAI3E,QAAQ,OAAOV,MACI,MAAMG,EAAW,KAAqBF,GAAUD,CAAI;AAAA,IAIvE,QAAQ,OAAOU,GAAYV,MACR,MAAMG,EAAW,IAAoB,GAAGF,CAAQ,IAAIS,CAAE,IAAIV,CAAI;AAAA,IAIjF,QAAQ,OAAOU,MAA8B;AAC3C,YAAMP,EAAW,OAAO,GAAGF,CAAQ,IAAIS,CAAE,EAAE;AAAA,IAC7C;AAAA,IAEA,UAAU,OAAOA,MAA8B;AAC7C,YAAMP,EAAW,MAAM,GAAGF,CAAQ,IAAIS,CAAE,WAAW;AAAA,IACrD;AAAA,IAEA,YAAY,OAAOA,MAA8B;AAC/C,YAAMP,EAAW,MAAM,GAAGF,CAAQ,IAAIS,CAAE,aAAa;AAAA,IACvD;AAAA;AAAA,IAIA,aAAa,OAAOA,GAAYV,MAA0C;AACxE,YAAMG,EAAW,KAAK,GAAGF,CAAQ,IAAIS,CAAE,eAAeV,CAAI;AAAA,IAC5D;AAAA,IAEA,iBAAiB,OAAOU,MAA8B;AACpD,YAAMP,EAAW,KAAK,GAAGF,CAAQ,IAAIS,CAAE,eAAe;AAAA,IACxD;AAAA;AAAA,IAIA,YAAY,OAAOA,MACA,MAAMP,EAAW,IAAsB,GAAGF,CAAQ,IAAIS,CAAE,UAAU;AAAA,IAIrF,WAAW,OAAOA,GAAYV,MAA0C;AACtE,YAAMG,EAAW,KAAK,GAAGF,CAAQ,IAAIS,CAAE,YAAYV,CAAI;AAAA,IACzD;AAAA,IAEA,cAAc,OAAOW,GAAiBC,MAAkC;AACtE,YAAMT,EAAW,OAAO,GAAGF,CAAQ,IAAIU,CAAO,YAAYC,CAAM,EAAE;AAAA,IACpE;AAAA;AAAA,IAIA,UAAU,OAAOF,MACE,MAAMP,EAAW,IAAoB,GAAGF,CAAQ,IAAIS,CAAE,QAAQ;AAAA,IAIjF,YAAY,OAAOA,GAAYV,MAA2C;AACxE,YAAMG,EAAW,KAAK,GAAGF,CAAQ,IAAIS,CAAE,UAAUV,CAAI;AAAA,IACvD;AAAA,IAEA,YAAY,OAAOW,GAAiBE,GAAgBC,MAA4C;AAC9F,YAAMN,IAASM,IAAW,aAAaA,CAAQ,KAAK;AACpD,YAAMX,EAAW,OAAO,GAAGF,CAAQ,IAAIU,CAAO,UAAUE,CAAM,GAAGL,CAAM,EAAE;AAAA,IAC3E;AAAA,IAEA,oBAAoB,OAClBG,GACAE,GACAb,MACkB;AAClB,YAAMG,EAAW,MAAM,GAAGF,CAAQ,IAAIU,CAAO,UAAUE,CAAM,gBAAgBb,CAAI;AAAA,IACnF;AAAA;AAAA,IAIA,gBAAgB,OAAOU,MACJ,MAAMP,EAAW,IAAqB,GAAGF,CAAQ,IAAIS,CAAE,WAAW;AAAA,IAIrF,gBAAgB,OAAOA,GAAYV,MAA+C;AAChF,YAAMG,EAAW,MAAM,GAAGF,CAAQ,IAAIS,CAAE,WAAWV,CAAI;AAAA,IACzD;AAAA;AAAA,IAIA,YAAY,OAAOU,MACA,MAAMP,EAAW,IAAsB,GAAGF,CAAQ,IAAIS,CAAE,UAAU;AAAA,IAIrF,qBAAqB,OAAOA,MACT,MAAMP,EAAW,IAA0B,GAAGF,CAAQ,IAAIS,CAAE,oBAAoB;AAAA,IAInG,qBAAqB,OAAOA,MACT,MAAMP,EAAW,IAA0B,GAAGF,CAAQ,IAAIS,CAAE,oBAAoB;AAAA,IAInG,mBAAmB,OAAOA,MACP,MAAMP,EAAW,IAA6B,GAAGF,CAAQ,IAAIS,CAAE,kBAAkB;AAAA,IAIpG,aAAa,OAAOA,GAAYV,MAA4C;AAC1E,YAAMG,EAAW,KAAK,GAAGF,CAAQ,IAAIS,CAAE,YAAYV,CAAI;AAAA,IACzD;AAAA,IAEA,kBAAkB,OAAOW,GAAiBG,MAAoC;AAC5E,YAAMX,EAAW,OAAO,GAAGF,CAAQ,IAAIU,CAAO,YAAYG,CAAQ,EAAE;AAAA,IACtE;AAAA;AAAA,IAIA,sBAAsB,OAAOJ,GAAYI,MAA2D;AAClG,YAAMlB,IAAMkB,IACR,GAAGb,CAAQ,IAAIS,CAAE,gCAAgCI,CAAQ,KACzD,GAAGb,CAAQ,IAAIS,CAAE;AAErB,aADiB,MAAMP,EAAW,IAAgCP,CAAG;AAAA,IAEvE;AAAA;AAAA,IAIA,eAAe,OAAOc,MACH,MAAMP,EAAW,IAAgC,GAAGF,CAAQ,IAAIS,CAAE,cAAc;AAAA,IAInG,kBAAkB,OAAOA,MACN,MAAMP,EAAW,KAA0B,GAAGF,CAAQ,IAAIS,CAAE,cAAc;AAAA,IAI7F,kBAAkB,OAAOA,MAA8B;AACrD,YAAMP,EAAW,OAAO,GAAGF,CAAQ,IAAIS,CAAE,cAAc;AAAA,IACzD;AAAA,EAAA;AAEJ,GAEaK,IAAsDb,GAGtDc,IAAYD,EAAA;"}
+{"version":3,"file":"groupsApi-CBI5vMLa.js","sources":["../../src/services/api/groupsApi.ts"],"sourcesContent":["import { api, apiClient } from './apiClient';\r\nimport type { UserApplicationAccessDto } from './adminApi';\r\n\r\n/**\r\n * Creates API methods with a specific tenant context.\r\n * Used when Super Admins view tenant-specific pages without \"switching\" to that tenant.\r\n */\r\nconst withTenantContext = (tenantSlug?: string) => ({\r\n  get: <T>(url: string, config?: Parameters<typeof apiClient.get>[1]) =>\r\n    apiClient.get<T>(url, {\r\n      ...config,\r\n      headers: tenantSlug ? { ...config?.headers, 'X-Tenant-Slug': tenantSlug } : config?.headers,\r\n    }).then(res => res.data),\r\n\r\n  post: <T>(url: string, data?: unknown, config?: Parameters<typeof apiClient.post>[2]) =>\r\n    apiClient.post<T>(url, data, {\r\n      ...config,\r\n      headers: tenantSlug ? { ...config?.headers, 'X-Tenant-Slug': tenantSlug } : config?.headers,\r\n    }).then(res => res.data),\r\n\r\n  put: <T>(url: string, data?: unknown, config?: Parameters<typeof apiClient.put>[2]) =>\r\n    apiClient.put<T>(url, data, {\r\n      ...config,\r\n      headers: tenantSlug ? { ...config?.headers, 'X-Tenant-Slug': tenantSlug } : config?.headers,\r\n    }).then(res => res.data),\r\n\r\n  patch: <T>(url: string, data?: unknown, config?: Parameters<typeof apiClient.patch>[2]) =>\r\n    apiClient.patch<T>(url, data, {\r\n      ...config,\r\n      headers: tenantSlug ? { ...config?.headers, 'X-Tenant-Slug': tenantSlug } : config?.headers,\r\n    }).then(res => res.data),\r\n\r\n  delete: <T>(url: string, config?: Parameters<typeof apiClient.delete>[1]) =>\r\n    apiClient.delete<T>(url, {\r\n      ...config,\r\n      headers: tenantSlug ? { ...config?.headers, 'X-Tenant-Slug': tenantSlug } : config?.headers,\r\n    }).then(res => res.data),\r\n});\r\n\r\n// Types\r\nexport interface GroupListDto {\r\n  id: string;\r\n  name: string;\r\n  description: string | null;\r\n  isActive: boolean;\r\n  isSecurityGroup: boolean;\r\n  isMailEnabled: boolean;\r\n  entraObjectId: string | null;\r\n  lastEntraSyncAt: string | null;\r\n  isSyncedFromEntra: boolean;\r\n  memberCount: number;\r\n  roles: string[];\r\n  createdAt: string;\r\n  parentGroupId: string | null;\r\n  parentGroupName: string | null;\r\n  childCount: number;\r\n}\r\n\r\nexport interface GroupDetailDto {\r\n  id: string;\r\n  name: string;\r\n  description: string | null;\r\n  isActive: boolean;\r\n  isSecurityGroup: boolean;\r\n  isMailEnabled: boolean;\r\n  mail: string | null;\r\n  mailNickname: string | null;\r\n  entraObjectId: string | null;\r\n  lastEntraSyncAt: string | null;\r\n  isSyncedFromEntra: boolean;\r\n  parentGroupId: string | null;\r\n  parentGroupName: string | null;\r\n  members: GroupMemberDto[];\r\n  roles: GroupRoleDto[];\r\n  childGroups: GroupChildDto[];\r\n  createdAt: string;\r\n  updatedAt: string | null;\r\n  createdBy: string | null;\r\n  updatedBy: string | null;\r\n}\r\n\r\nexport interface GroupMemberDto {\r\n  userId: string;\r\n  email: string;\r\n  fullName: string;\r\n  addedAt: string;\r\n  addedBy: string | null;\r\n}\r\n\r\nexport interface GroupRoleDto {\r\n  roleId: string;\r\n  roleName: string;\r\n  roleDescription: string | null;\r\n  assignedAt: string;\r\n  assignedBy: string;\r\n  isInheritable: boolean;\r\n  tenantId: string | null;\r\n  tenantName: string | null;\r\n  isGlobal: boolean;\r\n}\r\n\r\nexport interface GroupChildDto {\r\n  id: string;\r\n  name: string;\r\n  isActive: boolean;\r\n}\r\n\r\nexport interface CreateGroupRequest {\r\n  name: string;\r\n  description?: string;\r\n  isSecurityGroup?: boolean;\r\n  parentGroupId?: string;\r\n}\r\n\r\nexport interface UpdateGroupRequest {\r\n  name: string;\r\n  description?: string;\r\n}\r\n\r\nexport interface LinkEntraRequest {\r\n  entraObjectId: string;\r\n}\r\n\r\nexport interface AddMemberRequest {\r\n  userId: string;\r\n}\r\n\r\nexport interface AssignRoleRequest {\r\n  roleId: string;\r\n  isInheritable?: boolean;\r\n  tenantId?: string | null;\r\n}\r\n\r\nexport interface SetInheritableRequest {\r\n  isInheritable: boolean;\r\n}\r\n\r\nexport interface SetParentGroupRequest {\r\n  parentGroupId: string | null;\r\n}\r\n\r\nexport interface InheritedTenantDto {\r\n  tenantId: string;\r\n  tenantName: string;\r\n  tenantSlug: string;\r\n  tenantType: string;\r\n  inheritedFromGroupId: string;\r\n  inheritedFromGroupName: string;\r\n}\r\n\r\nexport interface InheritedMemberDto {\r\n  userId: string;\r\n  email: string;\r\n  fullName: string;\r\n  inheritedFromGroupId: string;\r\n  inheritedFromGroupName: string;\r\n  level: number;\r\n}\r\n\r\nexport interface InheritedGroupRoleDto {\r\n  roleId: string;\r\n  roleName: string;\r\n  roleDescription: string | null;\r\n  tenantId: string | null;\r\n  tenantName: string | null;\r\n  isGlobal: boolean;\r\n  inheritedFromGroupId: string;\r\n  inheritedFromGroupName: string;\r\n  level: number;\r\n}\r\n\r\nexport interface GroupTenantDto {\r\n  tenantId: string;\r\n  tenantName: string;\r\n  tenantSlug: string;\r\n  tenantType: string;\r\n  addedAt: string;\r\n  addedBy: string | null;\r\n}\r\n\r\nexport interface AddToTenantRequest {\r\n  tenantId: string;\r\n}\r\n\r\nexport interface CustomRoleDetailDto {\r\n  id: string;\r\n  name: string;\r\n  shortName: string;\r\n  category: string;\r\n  description: string | null;\r\n  isSystem: boolean;\r\n  permissions: CustomRolePermissionDto[];\r\n  createdAt: string;\r\n  updatedAt: string | null;\r\n}\r\n\r\nexport interface CustomRolePermissionDto {\r\n  id: string;\r\n  path: string;\r\n  description: string | null;\r\n}\r\n\r\nconst BASE_URL = '/api/administration/users/groups';\r\n\r\n/**\r\n * Factory function to create groups API with explicit tenant context.\r\n * @param tenantSlug - Optional tenant slug to use for all requests\r\n */\r\nconst _createGroupsApi = (tenantSlug?: string) => {\r\n  const apiContext = tenantSlug ? withTenantContext(tenantSlug) : api;\r\n\r\n  return {\r\n    // === CRUD OPERATIONS ===\r\n\r\n    getAll: async (\r\n      search?: string,\r\n      isActive?: boolean,\r\n      syncedFromEntra?: boolean\r\n    ): Promise<GroupListDto[]> => {\r\n      const params = new URLSearchParams();\r\n      if (search) params.append('search', search);\r\n      if (isActive !== undefined) params.append('isActive', String(isActive));\r\n      if (syncedFromEntra !== undefined) params.append('syncedFromEntra', String(syncedFromEntra));\r\n\r\n      const queryString = params.toString();\r\n      const url = queryString ? `${BASE_URL}?${queryString}` : BASE_URL;\r\n      const response = await apiContext.get<GroupListDto[]>(url);\r\n      return response;\r\n    },\r\n\r\n    getById: async (id: string): Promise<GroupDetailDto> => {\r\n      const response = await apiContext.get<GroupDetailDto>(`${BASE_URL}/${id}`);\r\n      return response;\r\n    },\r\n\r\n    create: async (data: CreateGroupRequest): Promise<GroupDetailDto> => {\r\n      const response = await apiContext.post<GroupDetailDto>(BASE_URL, data);\r\n      return response;\r\n    },\r\n\r\n    update: async (id: string, data: UpdateGroupRequest): Promise<GroupDetailDto> => {\r\n      const response = await apiContext.put<GroupDetailDto>(`${BASE_URL}/${id}`, data);\r\n      return response;\r\n    },\r\n\r\n    delete: async (id: string): Promise<void> => {\r\n      await apiContext.delete(`${BASE_URL}/${id}`);\r\n    },\r\n\r\n    activate: async (id: string): Promise<void> => {\r\n      await apiContext.patch(`${BASE_URL}/${id}/activate`);\r\n    },\r\n\r\n    deactivate: async (id: string): Promise<void> => {\r\n      await apiContext.patch(`${BASE_URL}/${id}/deactivate`);\r\n    },\r\n\r\n    // === ENTRA LINKING ===\r\n\r\n    linkToEntra: async (id: string, data: LinkEntraRequest): Promise<void> => {\r\n      await apiContext.post(`${BASE_URL}/${id}/link-entra`, data);\r\n    },\r\n\r\n    unlinkFromEntra: async (id: string): Promise<void> => {\r\n      await apiContext.post(`${BASE_URL}/${id}/unlink-entra`);\r\n    },\r\n\r\n    // === MEMBER MANAGEMENT ===\r\n\r\n    getMembers: async (id: string): Promise<GroupMemberDto[]> => {\r\n      const response = await apiContext.get<GroupMemberDto[]>(`${BASE_URL}/${id}/members`);\r\n      return response;\r\n    },\r\n\r\n    addMember: async (id: string, data: AddMemberRequest): Promise<void> => {\r\n      await apiContext.post(`${BASE_URL}/${id}/members`, data);\r\n    },\r\n\r\n    removeMember: async (groupId: string, userId: string): Promise<void> => {\r\n      await apiContext.delete(`${BASE_URL}/${groupId}/members/${userId}`);\r\n    },\r\n\r\n    // === ROLE MANAGEMENT ===\r\n\r\n    getRoles: async (id: string): Promise<GroupRoleDto[]> => {\r\n      const response = await apiContext.get<GroupRoleDto[]>(`${BASE_URL}/${id}/roles`);\r\n      return response;\r\n    },\r\n\r\n    assignRole: async (id: string, data: AssignRoleRequest): Promise<void> => {\r\n      await apiContext.post(`${BASE_URL}/${id}/roles`, data);\r\n    },\r\n\r\n    removeRole: async (groupId: string, roleId: string, tenantId?: string | null): Promise<void> => {\r\n      const params = tenantId ? `?tenantId=${tenantId}` : '';\r\n      await apiContext.delete(`${BASE_URL}/${groupId}/roles/${roleId}${params}`);\r\n    },\r\n\r\n    setRoleInheritable: async (\r\n      groupId: string,\r\n      roleId: string,\r\n      data: SetInheritableRequest\r\n    ): Promise<void> => {\r\n      await apiContext.patch(`${BASE_URL}/${groupId}/roles/${roleId}/inheritable`, data);\r\n    },\r\n\r\n    // === HIERARCHY ===\r\n\r\n    getChildGroups: async (id: string): Promise<GroupChildDto[]> => {\r\n      const response = await apiContext.get<GroupChildDto[]>(`${BASE_URL}/${id}/children`);\r\n      return response;\r\n    },\r\n\r\n    setParentGroup: async (id: string, data: SetParentGroupRequest): Promise<void> => {\r\n      await apiContext.patch(`${BASE_URL}/${id}/parent`, data);\r\n    },\r\n\r\n    // === TENANT MANAGEMENT ===\r\n\r\n    getTenants: async (id: string): Promise<GroupTenantDto[]> => {\r\n      const response = await apiContext.get<GroupTenantDto[]>(`${BASE_URL}/${id}/tenants`);\r\n      return response;\r\n    },\r\n\r\n    getInheritedTenants: async (id: string): Promise<InheritedTenantDto[]> => {\r\n      const response = await apiContext.get<InheritedTenantDto[]>(`${BASE_URL}/${id}/inherited-tenants`);\r\n      return response;\r\n    },\r\n\r\n    getInheritedMembers: async (id: string): Promise<InheritedMemberDto[]> => {\r\n      const response = await apiContext.get<InheritedMemberDto[]>(`${BASE_URL}/${id}/inherited-members`);\r\n      return response;\r\n    },\r\n\r\n    getInheritedRoles: async (id: string): Promise<InheritedGroupRoleDto[]> => {\r\n      const response = await apiContext.get<InheritedGroupRoleDto[]>(`${BASE_URL}/${id}/inherited-roles`);\r\n      return response;\r\n    },\r\n\r\n    addToTenant: async (id: string, data: AddToTenantRequest): Promise<void> => {\r\n      await apiContext.post(`${BASE_URL}/${id}/tenants`, data);\r\n    },\r\n\r\n    removeFromTenant: async (groupId: string, tenantId: string): Promise<void> => {\r\n      await apiContext.delete(`${BASE_URL}/${groupId}/tenants/${tenantId}`);\r\n    },\r\n\r\n    // === APPLICATION ACCESS ===\r\n\r\n    getApplicationAccess: async (id: string, tenantId?: string): Promise<UserApplicationAccessDto[]> => {\r\n      const url = tenantId\r\n        ? `${BASE_URL}/${id}/application-access?tenantId=${tenantId}`\r\n        : `${BASE_URL}/${id}/application-access`;\r\n      const response = await apiContext.get<UserApplicationAccessDto[]>(url);\r\n      return response;\r\n    },\r\n\r\n    // === CUSTOM ROLE ===\r\n\r\n    getCustomRole: async (id: string): Promise<CustomRoleDetailDto | null> => {\r\n      const response = await apiContext.get<CustomRoleDetailDto | null>(`${BASE_URL}/${id}/custom-role`);\r\n      return response;\r\n    },\r\n\r\n    createCustomRole: async (id: string): Promise<CustomRoleDetailDto> => {\r\n      const response = await apiContext.post<CustomRoleDetailDto>(`${BASE_URL}/${id}/custom-role`);\r\n      return response;\r\n    },\r\n\r\n    deleteCustomRole: async (id: string): Promise<void> => {\r\n      await apiContext.delete(`${BASE_URL}/${id}/custom-role`);\r\n    },\r\n  };\r\n};\r\nexport type GroupsApi = ReturnType<typeof _createGroupsApi>;\r\nexport const createGroupsApi: (tenantSlug?: string) => GroupsApi = _createGroupsApi;\r\n\r\n// Default export uses localStorage tenant slug (backward compatible)\r\nexport const groupsApi = createGroupsApi();\r\n"],"names":["withTenantContext","tenantSlug","url","config","apiClient","res","data","BASE_URL","_createGroupsApi","apiContext","api","search","isActive","syncedFromEntra","params","queryString","id","groupId","userId","roleId","tenantId","createGroupsApi","groupsApi"],"mappings":";AAOA,MAAMA,IAAoB,CAACC,OAAyB;AAAA,EAClD,KAAK,CAAIC,GAAaC,MACpBC,EAAU,IAAOF,GAAK;AAAA,IACpB,GAAGC;AAAA,IACH,SAASF,IAAa,EAAE,GAAGE,GAAQ,SAAS,iBAAiBF,EAAA,IAAeE,GAAQ;AAAA,EAAA,CACrF,EAAE,KAAK,CAAAE,MAAOA,EAAI,IAAI;AAAA,EAEzB,MAAM,CAAIH,GAAaI,GAAgBH,MACrCC,EAAU,KAAQF,GAAKI,GAAM;AAAA,IAC3B,GAAGH;AAAA,IACH,SAASF,IAAa,EAAE,GAAGE,GAAQ,SAAS,iBAAiBF,EAAA,IAAeE,GAAQ;AAAA,EAAA,CACrF,EAAE,KAAK,CAAAE,MAAOA,EAAI,IAAI;AAAA,EAEzB,KAAK,CAAIH,GAAaI,GAAgBH,MACpCC,EAAU,IAAOF,GAAKI,GAAM;AAAA,IAC1B,GAAGH;AAAA,IACH,SAASF,IAAa,EAAE,GAAGE,GAAQ,SAAS,iBAAiBF,EAAA,IAAeE,GAAQ;AAAA,EAAA,CACrF,EAAE,KAAK,CAAAE,MAAOA,EAAI,IAAI;AAAA,EAEzB,OAAO,CAAIH,GAAaI,GAAgBH,MACtCC,EAAU,MAASF,GAAKI,GAAM;AAAA,IAC5B,GAAGH;AAAA,IACH,SAASF,IAAa,EAAE,GAAGE,GAAQ,SAAS,iBAAiBF,EAAA,IAAeE,GAAQ;AAAA,EAAA,CACrF,EAAE,KAAK,CAAAE,MAAOA,EAAI,IAAI;AAAA,EAEzB,QAAQ,CAAIH,GAAaC,MACvBC,EAAU,OAAUF,GAAK;AAAA,IACvB,GAAGC;AAAA,IACH,SAASF,IAAa,EAAE,GAAGE,GAAQ,SAAS,iBAAiBF,EAAA,IAAeE,GAAQ;AAAA,EAAA,CACrF,EAAE,KAAK,CAAAE,MAAOA,EAAI,IAAI;AAC3B,IAqKME,IAAW,oCAMXC,IAAmB,CAACP,MAAwB;AAChD,QAAMQ,IAAaR,IAAaD,EAAkBC,CAAU,IAAIS;AAEhE,SAAO;AAAA;AAAA,IAGL,QAAQ,OACNC,GACAC,GACAC,MAC4B;AAC5B,YAAMC,IAAS,IAAI,gBAAA;AACnB,MAAIH,KAAQG,EAAO,OAAO,UAAUH,CAAM,GACtCC,MAAa,UAAWE,EAAO,OAAO,YAAY,OAAOF,CAAQ,CAAC,GAClEC,MAAoB,UAAWC,EAAO,OAAO,mBAAmB,OAAOD,CAAe,CAAC;AAE3F,YAAME,IAAcD,EAAO,SAAA,GACrBZ,IAAMa,IAAc,GAAGR,CAAQ,IAAIQ,CAAW,KAAKR;AAEzD,aADiB,MAAME,EAAW,IAAoBP,CAAG;AAAA,IAE3D;AAAA,IAEA,SAAS,OAAOc,MACG,MAAMP,EAAW,IAAoB,GAAGF,CAAQ,IAAIS,CAAE,EAAE;AAAA,IAI3E,QAAQ,OAAOV,MACI,MAAMG,EAAW,KAAqBF,GAAUD,CAAI;AAAA,IAIvE,QAAQ,OAAOU,GAAYV,MACR,MAAMG,EAAW,IAAoB,GAAGF,CAAQ,IAAIS,CAAE,IAAIV,CAAI;AAAA,IAIjF,QAAQ,OAAOU,MAA8B;AAC3C,YAAMP,EAAW,OAAO,GAAGF,CAAQ,IAAIS,CAAE,EAAE;AAAA,IAC7C;AAAA,IAEA,UAAU,OAAOA,MAA8B;AAC7C,YAAMP,EAAW,MAAM,GAAGF,CAAQ,IAAIS,CAAE,WAAW;AAAA,IACrD;AAAA,IAEA,YAAY,OAAOA,MAA8B;AAC/C,YAAMP,EAAW,MAAM,GAAGF,CAAQ,IAAIS,CAAE,aAAa;AAAA,IACvD;AAAA;AAAA,IAIA,aAAa,OAAOA,GAAYV,MAA0C;AACxE,YAAMG,EAAW,KAAK,GAAGF,CAAQ,IAAIS,CAAE,eAAeV,CAAI;AAAA,IAC5D;AAAA,IAEA,iBAAiB,OAAOU,MAA8B;AACpD,YAAMP,EAAW,KAAK,GAAGF,CAAQ,IAAIS,CAAE,eAAe;AAAA,IACxD;AAAA;AAAA,IAIA,YAAY,OAAOA,MACA,MAAMP,EAAW,IAAsB,GAAGF,CAAQ,IAAIS,CAAE,UAAU;AAAA,IAIrF,WAAW,OAAOA,GAAYV,MAA0C;AACtE,YAAMG,EAAW,KAAK,GAAGF,CAAQ,IAAIS,CAAE,YAAYV,CAAI;AAAA,IACzD;AAAA,IAEA,cAAc,OAAOW,GAAiBC,MAAkC;AACtE,YAAMT,EAAW,OAAO,GAAGF,CAAQ,IAAIU,CAAO,YAAYC,CAAM,EAAE;AAAA,IACpE;AAAA;AAAA,IAIA,UAAU,OAAOF,MACE,MAAMP,EAAW,IAAoB,GAAGF,CAAQ,IAAIS,CAAE,QAAQ;AAAA,IAIjF,YAAY,OAAOA,GAAYV,MAA2C;AACxE,YAAMG,EAAW,KAAK,GAAGF,CAAQ,IAAIS,CAAE,UAAUV,CAAI;AAAA,IACvD;AAAA,IAEA,YAAY,OAAOW,GAAiBE,GAAgBC,MAA4C;AAC9F,YAAMN,IAASM,IAAW,aAAaA,CAAQ,KAAK;AACpD,YAAMX,EAAW,OAAO,GAAGF,CAAQ,IAAIU,CAAO,UAAUE,CAAM,GAAGL,CAAM,EAAE;AAAA,IAC3E;AAAA,IAEA,oBAAoB,OAClBG,GACAE,GACAb,MACkB;AAClB,YAAMG,EAAW,MAAM,GAAGF,CAAQ,IAAIU,CAAO,UAAUE,CAAM,gBAAgBb,CAAI;AAAA,IACnF;AAAA;AAAA,IAIA,gBAAgB,OAAOU,MACJ,MAAMP,EAAW,IAAqB,GAAGF,CAAQ,IAAIS,CAAE,WAAW;AAAA,IAIrF,gBAAgB,OAAOA,GAAYV,MAA+C;AAChF,YAAMG,EAAW,MAAM,GAAGF,CAAQ,IAAIS,CAAE,WAAWV,CAAI;AAAA,IACzD;AAAA;AAAA,IAIA,YAAY,OAAOU,MACA,MAAMP,EAAW,IAAsB,GAAGF,CAAQ,IAAIS,CAAE,UAAU;AAAA,IAIrF,qBAAqB,OAAOA,MACT,MAAMP,EAAW,IAA0B,GAAGF,CAAQ,IAAIS,CAAE,oBAAoB;AAAA,IAInG,qBAAqB,OAAOA,MACT,MAAMP,EAAW,IAA0B,GAAGF,CAAQ,IAAIS,CAAE,oBAAoB;AAAA,IAInG,mBAAmB,OAAOA,MACP,MAAMP,EAAW,IAA6B,GAAGF,CAAQ,IAAIS,CAAE,kBAAkB;AAAA,IAIpG,aAAa,OAAOA,GAAYV,MAA4C;AAC1E,YAAMG,EAAW,KAAK,GAAGF,CAAQ,IAAIS,CAAE,YAAYV,CAAI;AAAA,IACzD;AAAA,IAEA,kBAAkB,OAAOW,GAAiBG,MAAoC;AAC5E,YAAMX,EAAW,OAAO,GAAGF,CAAQ,IAAIU,CAAO,YAAYG,CAAQ,EAAE;AAAA,IACtE;AAAA;AAAA,IAIA,sBAAsB,OAAOJ,GAAYI,MAA2D;AAClG,YAAMlB,IAAMkB,IACR,GAAGb,CAAQ,IAAIS,CAAE,gCAAgCI,CAAQ,KACzD,GAAGb,CAAQ,IAAIS,CAAE;AAErB,aADiB,MAAMP,EAAW,IAAgCP,CAAG;AAAA,IAEvE;AAAA;AAAA,IAIA,eAAe,OAAOc,MACH,MAAMP,EAAW,IAAgC,GAAGF,CAAQ,IAAIS,CAAE,cAAc;AAAA,IAInG,kBAAkB,OAAOA,MACN,MAAMP,EAAW,KAA0B,GAAGF,CAAQ,IAAIS,CAAE,cAAc;AAAA,IAI7F,kBAAkB,OAAOA,MAA8B;AACrD,YAAMP,EAAW,OAAO,GAAGF,CAAQ,IAAIS,CAAE,cAAc;AAAA,IACzD;AAAA,EAAA;AAEJ,GAEaK,IAAsDb,GAGtDc,IAAYD,EAAA;"}