@bevel-software/platform-core-backend 0.14.0 → 0.19.0

package/dist/modules/access/access-view.js

@@ -0,0 +1,211 @@
+import { canonicalRoleName, EVERYONE_CANONICAL, KNOWN_VERBS, ROLE_TOKEN_PREFIX, } from '../access-model/access-grammar.js';
+/**
+ * The resolved access view of one target, as the Manage access dialog reads it
+ * (`GET /api/workspace/:id/access`): the caller's four verdicts, the eligible
+ * principals per verb, and per-principal, per-verb grant sources. Shared by
+ * that route and by `file_stat`'s access roster, so both list the same people.
+ */
+export async function resolveAccessView(accessControl, workspaceId, repoRelTarget, userEmail, kind) {
+    const [canRead, canWrite, canDownload, canOwner, eligible, readers, owners, downloaders, deniedHere] = await Promise.all([
+        accessControl.canRead(workspaceId, userEmail, repoRelTarget),
+        accessControl.canWrite(workspaceId, userEmail, repoRelTarget),
+        accessControl.canDownload(workspaceId, userEmail, repoRelTarget),
+        accessControl.canOwner(workspaceId, userEmail, repoRelTarget),
+        accessControl.eligibleWriters(workspaceId, repoRelTarget),
+        accessControl.eligibleReaders(workspaceId, repoRelTarget),
+        accessControl.eligibleOwners(workspaceId, repoRelTarget),
+        accessControl.eligibleDownloaders(workspaceId, repoRelTarget),
+        // The principals this target RESTRICTS. They hold nothing through it, so
+        // no eligible list can carry them — yet the `deny` naming them is an entry
+        // ON this target, and the dialog's row for it is where the restriction is
+        // lifted. Unioned into the row set below alongside the holders.
+        accessControl.locallyDeniedPrincipals?.(workspaceId, kind, repoRelTarget) ??
+            Promise.resolve({ principals: [], users: [] }),
+    ]);
+    // Per-principal, per-verb origin (direct / ancestor — MECE over editable
+    // files). Keyed `u:<email>` / `r:<role>` / `g:<group>` to match the
+    // dialog's row keys, so each row can show where its access comes from and
+    // which verbs are removable here. Groups get their OWN `g:` namespace: a
+    // group and a role sharing a name are DIFFERENT principals (bare token vs
+    // `role/<name>`), and one shared `r:` entry could only describe one of
+    // them. Each kind resolves through the token spelling that IS that
+    // principal — a group through its bare token (group-first precedence), a
+    // role through its explicit `role/<name>` alias (correct whether or not a
+    // group shadows the name; the built-in `everyone` keeps its bare spelling,
+    // it has no alias). A row whose verbs resolve only via a
+    // group/everyone/rescue has no source (the verb is absent) and renders
+    // non-actionable. Built over the union of every principal in the four
+    // eligible lists (kinded `principals`, with the name-only `roles` list as
+    // the all-roles fallback) PLUS every principal this target DENIES — a
+    // restriction is an entry here too, and a principal denied every verb
+    // appears in no eligible list at all.
+    const collectives = new Map();
+    const addCollective = (p) => {
+        const key = rowKey(p);
+        if (!collectives.has(key))
+            collectives.set(key, p);
+    };
+    for (const list of [eligible, readers, owners, downloaders]) {
+        const kinded = list.principals ?? list.roles.map((name) => ({ name, kind: 'role' }));
+        for (const p of kinded)
+            addCollective(p);
+    }
+    for (const p of deniedHere.principals)
+        addCollective(p);
+    const userSet = new Map();
+    for (const u of [
+        ...eligible.users,
+        ...readers.users,
+        ...owners.users,
+        ...downloaders.users,
+        ...deniedHere.users,
+    ]) {
+        // First writer wins, and the eligible lists come first deliberately: they
+        // carry the roster's display name, while a deny line carries only whatever
+        // the file spelled.
+        if (!userSet.has(u.email.toLowerCase()))
+            userSet.set(u.email.toLowerCase(), u);
+    }
+    const sources = {};
+    // Denials ride in their OWN map, keyed the same way. A row reads both: the
+    // grants say where each held verb comes from, the denials say why each missing
+    // one is missing — "restricted here" as against never granted.
+    const denials = {};
+    await Promise.all([
+        ...[...collectives.entries()].map(async ([key, p]) => {
+            const token = p.kind === 'role' && canonicalRoleName(p.name) !== EVERYONE_CANONICAL
+                ? `${ROLE_TOKEN_PREFIX}${p.name}`
+                : p.name;
+            const principal = { kind: 'role', role: token };
+            const [grants, denied] = await Promise.all([
+                accessControl.grantSources(workspaceId, kind, repoRelTarget, principal),
+                accessControl.denialSources?.(workspaceId, kind, repoRelTarget, principal) ??
+                    Promise.resolve({}),
+            ]);
+            sources[key] = grants;
+            if (Object.keys(denied).length > 0)
+                denials[key] = denied;
+        }),
+        ...[...userSet.values()].map(async (u) => {
+            const principal = { kind: 'user', email: u.email };
+            const [grants, denied] = await Promise.all([
+                accessControl.grantSources(workspaceId, kind, repoRelTarget, principal),
+                accessControl.denialSources?.(workspaceId, kind, repoRelTarget, principal) ??
+                    Promise.resolve({}),
+            ]);
+            sources[`u:${u.email.toLowerCase()}`] = grants;
+            if (Object.keys(denied).length > 0)
+                denials[`u:${u.email.toLowerCase()}`] = denied;
+        }),
+    ]);
+    return {
+        canRead,
+        canWrite,
+        canDownload,
+        canOwner,
+        eligible,
+        readers,
+        owners,
+        downloaders,
+        sources,
+        denials,
+        deniedHere,
+    };
+}
+/** The dialog's row key for a collective principal. */
+function rowKey(p) {
+    return `${p.kind === 'group' ? 'g' : p.kind === 'plugin' ? 'p' : 'r'}:${p.name.toLowerCase()}`;
+}
+/**
+ * The principals holding one verb, in the roster's order — collectives as the
+ * resolver kinded them, then the directly granted people. An older resolver
+ * double omitting `principals` degrades to the name-only `roles` (all roles),
+ * exactly as `accessRoster` does, so the two never disagree about a name.
+ */
+export function holderPrincipals(list) {
+    const kinded = list.principals ?? list.roles.map((name) => ({ name, kind: 'role' }));
+    return [
+        ...kinded.map((p) => ({ kind: p.kind, name: p.name })),
+        ...list.users.map((u) => ({ kind: 'person', name: u.name, email: u.email })),
+    ];
+}
+/** A grant source in the folder / frontmatter terms `file_stat` reports. */
+function toDecisionSource(source, kind, repoRelTarget) {
+    if (source.kind === 'ancestor') {
+        const slash = source.path.lastIndexOf('/');
+        return { kind: 'folder', path: slash === -1 ? '' : source.path.slice(0, slash), inherited: true };
+    }
+    return kind === 'folder'
+        ? { kind: 'folder', path: repoRelTarget, inherited: false }
+        : { kind: 'frontmatter', path: repoRelTarget, inherited: false };
+}
+/**
+ * The principals per verb, as the Manage access dialog lists them — groups,
+ * roles, plugin principals, then directly granted people — each with where its
+ * grant comes from.
+ */
+export function accessRoster(view, kind, repoRelTarget) {
+    const lists = {
+        read: view.readers,
+        write: view.eligible,
+        download: view.downloaders,
+        owner: view.owners,
+    };
+    const sourcesFor = (key, verb) => (view.sources[key]?.[verb] ?? []).map((s) => toDecisionSource(s, kind, repoRelTarget));
+    const roster = {};
+    for (const verb of KNOWN_VERBS) {
+        const list = lists[verb];
+        const kinded = list.principals ?? list.roles.map((name) => ({ name, kind: 'role' }));
+        roster[verb] = [
+            ...kinded.map((p) => ({ kind: p.kind, name: p.name, sources: sourcesFor(rowKey(p), verb) })),
+            ...list.users.map((u) => ({
+                kind: 'person',
+                name: u.name,
+                email: u.email,
+                sources: sourcesFor(`u:${u.email.toLowerCase()}`, verb),
+            })),
+        ];
+    }
+    return roster;
+}
+/**
+ * Every distinct email the view names, canonical (trimmed + lowercased) — the
+ * exact set to look accounts up by, and no more: the lookup is scoped to the
+ * people this one view mentions rather than reading the whole users table.
+ */
+export function emailsInView(view) {
+    return [
+        ...new Set([
+            ...view.eligible.users,
+            ...view.readers.users,
+            ...view.owners.users,
+            ...view.downloaders.users,
+            ...view.deniedHere.users,
+        ]
+            .map((u) => u.email.trim().toLowerCase())
+            .filter((e) => e.length > 0)),
+    ];
+}
+/**
+ * Mark each person in the view against `accountEmails` (canonical forms, as
+ * {@link emailsInView} produces). Pure: the caller does the one database
+ * lookup, this decides nothing but the label.
+ */
+export function labelAccountHolders(view, accountEmails) {
+    const mark = (list) => ({
+        ...list,
+        users: list.users.map((u) => ({
+            ...u,
+            hasAccount: accountEmails.has(u.email.trim().toLowerCase()),
+        })),
+    });
+    return {
+        ...view,
+        eligible: mark(view.eligible),
+        readers: mark(view.readers),
+        owners: mark(view.owners),
+        downloaders: mark(view.downloaders),
+        deniedHere: mark(view.deniedHere),
+    };
+}
+//# sourceMappingURL=access-view.js.map

package/dist/modules/access/access-view.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-view.js","sourceRoot":"","sources":["../../../src/modules/access/access-view.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACX,iBAAiB,GAElB,MAAM,mCAAmC,CAAC;AAE3C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,aAA6B,EAC7B,WAAmB,EACnB,aAAqB,EACrB,SAAiB,EACjB,IAAsB;IAEtB,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,GAClG,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,aAAa,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,aAAa,CAAC;QAC5D,aAAa,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,EAAE,aAAa,CAAC;QAC7D,aAAa,CAAC,WAAW,CAAC,WAAW,EAAE,SAAS,EAAE,aAAa,CAAC;QAChE,aAAa,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,EAAE,aAAa,CAAC;QAC7D,aAAa,CAAC,eAAe,CAAC,WAAW,EAAE,aAAa,CAAC;QACzD,aAAa,CAAC,eAAe,CAAC,WAAW,EAAE,aAAa,CAAC;QACzD,aAAa,CAAC,cAAc,CAAC,WAAW,EAAE,aAAa,CAAC;QACxD,aAAa,CAAC,mBAAmB,CAAC,WAAW,EAAE,aAAa,CAAC;QAC7D,yEAAyE;QACzE,2EAA2E;QAC3E,0EAA0E;QAC1E,gEAAgE;QAChE,aAAa,CAAC,uBAAuB,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC;YACvE,OAAO,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;KACjD,CAAC,CAAC;IAEL,yEAAyE;IACzE,oEAAoE;IACpE,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,mEAAmE;IACnE,yEAAyE;IACzE,0EAA0E;IAC1E,2EAA2E;IAC3E,yDAAyD;IACzD,uEAAuE;IACvE,sEAAsE;IACtE,0EAA0E;IAC1E,sEAAsE;IACtE,sEAAsE;IACtE,sCAAsC;IACtC,MAAM,WAAW,GAAG,IAAI,GAAG,EAA6B,CAAC;IACzD,MAAM,aAAa,GAAG,CAAC,CAAoB,EAAE,EAAE;QAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;QAC5D,MAAM,MAAM,GACV,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC;QACjF,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,aAAa,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,UAAU;QAAE,aAAa,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2C,CAAC;IACnE,KAAK,MAAM,CAAC,IAAI;QACd,GAAG,QAAQ,CAAC,KAAK;QACjB,GAAG,OAAO,CAAC,KAAK;QAChB,GAAG,MAAM,CAAC,KAAK;QACf,GAAG,WAAW,CAAC,KAAK;QACpB,GAAG,UAAU,CAAC,KAAK;KACpB,EAAE,CAAC;QACF,0EAA0E;QAC1E,2EAA2E;QAC3E,oBAAoB;QACpB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,OAAO,GAAiC,EAAE,CAAC;IACjD,2EAA2E;IAC3E,+EAA+E;IAC/E,+DAA+D;IAC/D,MAAM,OAAO,GAAkC,EAAE,CAAC;IAClD,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,GAAG,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;YACnD,MAAM,KAAK,GACT,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,kBAAkB;gBACnE,CAAC,CAAC,GAAG,iBAAiB,GAAG,CAAC,CAAC,IAAI,EAAE;gBACjC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACb,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YACzD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACzC,aAAa,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,CAAC;gBACvE,aAAa,CAAC,aAAa,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,CAAC;oBACxE,OAAO,CAAC,OAAO,CAAC,EAAmB,CAAC;aACvC,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;YACtB,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;QAC5D,CAAC,CAAC;QACF,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YACvC,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,MAAe,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;YAC5D,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACzC,aAAa,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,CAAC;gBACvE,aAAa,CAAC,aAAa,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,CAAC;oBACxE,OAAO,CAAC,OAAO,CAAC,EAAmB,CAAC;aACvC,CAAC,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC;YAC/C,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC;QACrF,CAAC,CAAC;KACH,CAAC,CAAC;IAEH,OAAO;QACL,OAAO;QACP,QAAQ;QACR,WAAW;QACX,QAAQ;QACR,QAAQ;QACR,OAAO;QACP,MAAM;QACN,WAAW;QACX,OAAO;QACP,OAAO;QACP,UAAU;KACX,CAAC;AACJ,CAAC;AAID,uDAAuD;AACvD,SAAS,MAAM,CAAC,CAAoB;IAClC,OAAO,GAAG,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;AACjG,CAAC;AAcD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAgB;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC;IAC9F,OAAO;QACL,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAsB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1E,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAsB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;KACjG,CAAC;AACJ,CAAC;AAiBD,4EAA4E;AAC5E,SAAS,gBAAgB,CACvB,MAAmB,EACnB,IAAsB,EACtB,aAAqB;IAErB,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC3C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACpG,CAAC;IACD,OAAO,IAAI,KAAK,QAAQ;QACtB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;QAC3D,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACrE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAgB,EAAE,IAAsB,EAAE,aAAqB;IAC1F,MAAM,KAAK,GAAyC;QAClD,IAAI,EAAE,IAAI,CAAC,OAAO;QAClB,KAAK,EAAE,IAAI,CAAC,QAAQ;QACpB,QAAQ,EAAE,IAAI,CAAC,WAAW;QAC1B,KAAK,EAAE,IAAI,CAAC,MAAM;KACnB,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,IAAU,EAAE,EAAE,CAC7C,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,EAAkB,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC;QAC9F,MAAM,CAAC,IAAI,CAAC,GAAG;YACb,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YACzG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC;gBACrC,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,CAAC;aACxD,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAyCD;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAgB;IAC3C,OAAO;QACL,GAAG,IAAI,GAAG,CACR;YACE,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK;YACtB,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK;YACrB,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK;YACpB,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK;YACzB,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK;SACzB;aACE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aACxC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAC/B;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAgB,EAChB,aAAkC;IAElC,MAAM,IAAI,GAAG,CAAyD,IAAO,EAAe,EAAE,CAAC,CAAC;QAC9F,GAAG,IAAI;QACP,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5B,GAAG,CAAC;YACJ,UAAU,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAC5D,CAAC,CAAC;KACJ,CAAC,CAAC;IACH,OAAO;QACL,GAAG,IAAI;QACP,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC7B,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QAC3B,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QACzB,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;QACnC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;KAClC,CAAC;AACJ,CAAC"}

package/dist/modules/access/access.routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"access.routes.d.ts","sourceRoot":"","sources":["../../../src/modules/access/access.routes.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAG9B,OAAO,KAAK,EACV,cAAc,EAGf,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAE1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAmBjE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAE1D,OAAO,4BAA4B,CAAC;AAiBpC,wBAAgB,kBAAkB,CAChC,aAAa,EAAE,cAAc,EAC7B,gBAAgB,EAAE,gBAAgB,EAClC,WAAW,EAAE,WAAW,EACxB,eAAe,EAAE,eAAe,EAChC,QAAQ,EAAE,gBAAgB,EAC1B,EAAE,EAAE,QAAQ,EACZ,SAAS,EAAE,MAAM;AACjB,6EAA6E;AAC7E,cAAc,GAAE,SAAS,MAAM,EAAO,GACrC,OAAO,CAAC,MAAM,CAq/BhB"}
+{"version":3,"file":"access.routes.d.ts","sourceRoot":"","sources":["../../../src/modules/access/access.routes.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAgB9B,OAAO,KAAK,EACV,cAAc,EAGf,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAE1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AA2BjE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAC;AAE1D,OAAO,4BAA4B,CAAC;AA8BpC,wBAAgB,kBAAkB,CAChC,aAAa,EAAE,cAAc,EAC7B,gBAAgB,EAAE,gBAAgB,EAClC,WAAW,EAAE,WAAW,EACxB,eAAe,EAAE,eAAe,EAChC,QAAQ,EAAE,gBAAgB,EAC1B,EAAE,EAAE,QAAQ,EACZ,SAAS,EAAE,MAAM;AACjB,6EAA6E;AAC7E,cAAc,GAAE,SAAS,MAAM,EAAO,GACrC,OAAO,CAAC,MAAM,CA2uChB"}