@carlonicora/nestjs-neo4jsonapi 1.113.0 → 1.114.0

package/dist/foundations/membership/entities/membership.meta.d.ts

@@ -0,0 +1,3 @@
+import { DataMeta } from "../../../common/interfaces/datamodel.interface";
+export declare const membershipMeta: DataMeta;
+//# sourceMappingURL=membership.meta.d.ts.map

package/dist/foundations/membership/entities/membership.meta.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"membership.meta.d.ts","sourceRoot":"","sources":["../../../../src/foundations/membership/entities/membership.meta.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,gDAAgD,CAAC;AAE1E,eAAO,MAAM,cAAc,EAAE,QAK5B,CAAC"}

package/dist/foundations/membership/entities/membership.meta.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.membershipMeta = void 0;
+exports.membershipMeta = {
+    type: "memberships",
+    endpoint: "memberships",
+    nodeName: "membership",
+    labelName: "Membership",
+};
+//# sourceMappingURL=membership.meta.js.map

package/dist/foundations/membership/entities/membership.meta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"membership.meta.js","sourceRoot":"","sources":["../../../../src/foundations/membership/entities/membership.meta.ts"],"names":[],"mappings":";;;AAEa,QAAA,cAAc,GAAa;IACtC,IAAI,EAAE,aAAa;IACnB,QAAQ,EAAE,aAAa;IACvB,QAAQ,EAAE,YAAY;IACtB,SAAS,EAAE,YAAY;CACxB,CAAC"}

package/dist/foundations/membership/index.d.ts

@@ -0,0 +1,6 @@
+export { Membership, MembershipDescriptor, MembershipDescriptorType } from "./entities/membership";
+export { membershipMeta } from "./entities/membership.meta";
+export { membershipRoleMatch, membershipRoleMatchRequired, grantCompanyRoles, grantPlatformRole, } from "./queries/membership.query";
+export { MembershipRepository } from "./repositories/membership.repository";
+export { MembershipModule } from "./membership.module";
+//# sourceMappingURL=index.d.ts.map

package/dist/foundations/membership/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/foundations/membership/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACnG,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EACL,mBAAmB,EACnB,2BAA2B,EAC3B,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/foundations/membership/index.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MembershipModule = exports.MembershipRepository = exports.grantPlatformRole = exports.grantCompanyRoles = exports.membershipRoleMatchRequired = exports.membershipRoleMatch = exports.membershipMeta = exports.MembershipDescriptor = void 0;
+var membership_1 = require("./entities/membership");
+Object.defineProperty(exports, "MembershipDescriptor", { enumerable: true, get: function () { return membership_1.MembershipDescriptor; } });
+var membership_meta_1 = require("./entities/membership.meta");
+Object.defineProperty(exports, "membershipMeta", { enumerable: true, get: function () { return membership_meta_1.membershipMeta; } });
+var membership_query_1 = require("./queries/membership.query");
+Object.defineProperty(exports, "membershipRoleMatch", { enumerable: true, get: function () { return membership_query_1.membershipRoleMatch; } });
+Object.defineProperty(exports, "membershipRoleMatchRequired", { enumerable: true, get: function () { return membership_query_1.membershipRoleMatchRequired; } });
+Object.defineProperty(exports, "grantCompanyRoles", { enumerable: true, get: function () { return membership_query_1.grantCompanyRoles; } });
+Object.defineProperty(exports, "grantPlatformRole", { enumerable: true, get: function () { return membership_query_1.grantPlatformRole; } });
+var membership_repository_1 = require("./repositories/membership.repository");
+Object.defineProperty(exports, "MembershipRepository", { enumerable: true, get: function () { return membership_repository_1.MembershipRepository; } });
+var membership_module_1 = require("./membership.module");
+Object.defineProperty(exports, "MembershipModule", { enumerable: true, get: function () { return membership_module_1.MembershipModule; } });
+//# sourceMappingURL=index.js.map

package/dist/foundations/membership/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/foundations/membership/index.ts"],"names":[],"mappings":";;;AAAA,oDAAmG;AAA9E,kHAAA,oBAAoB,OAAA;AACzC,8DAA4D;AAAnD,iHAAA,cAAc,OAAA;AACvB,+DAKoC;AAJlC,uHAAA,mBAAmB,OAAA;AACnB,+HAAA,2BAA2B,OAAA;AAC3B,qHAAA,iBAAiB,OAAA;AACjB,qHAAA,iBAAiB,OAAA;AAEnB,8EAA4E;AAAnE,6HAAA,oBAAoB,OAAA;AAC7B,yDAAuD;AAA9C,qHAAA,gBAAgB,OAAA"}

package/dist/foundations/membership/membership.module.d.ts

@@ -0,0 +1,9 @@
+import { OnModuleInit } from "@nestjs/common";
+/**
+ * Membership is backend-internal: no controller, no endpoint.
+ * The repository exists only to bootstrap the uniqueness constraint.
+ */
+export declare class MembershipModule implements OnModuleInit {
+    onModuleInit(): void;
+}
+//# sourceMappingURL=membership.module.d.ts.map

package/dist/foundations/membership/membership.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"membership.module.d.ts","sourceRoot":"","sources":["../../../src/foundations/membership/membership.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAMtD;;;GAGG;AACH,qBAMa,gBAAiB,YAAW,YAAY;IACnD,YAAY;CAGb"}

package/dist/foundations/membership/membership.module.js

@@ -0,0 +1,32 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MembershipModule = void 0;
+const common_1 = require("@nestjs/common");
+const registry_1 = require("../../common/registries/registry");
+const membership_1 = require("./entities/membership");
+const membership_repository_1 = require("./repositories/membership.repository");
+/**
+ * Membership is backend-internal: no controller, no endpoint.
+ * The repository exists only to bootstrap the uniqueness constraint.
+ */
+let MembershipModule = class MembershipModule {
+    onModuleInit() {
+        registry_1.modelRegistry.register(membership_1.MembershipDescriptor.model);
+    }
+};
+exports.MembershipModule = MembershipModule;
+exports.MembershipModule = MembershipModule = __decorate([
+    (0, common_1.Module)({
+        controllers: [],
+        providers: [membership_repository_1.MembershipRepository, membership_1.MembershipDescriptor.model.serialiser],
+        exports: [membership_repository_1.MembershipRepository],
+        imports: [],
+    })
+], MembershipModule);
+//# sourceMappingURL=membership.module.js.map

package/dist/foundations/membership/membership.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"membership.module.js","sourceRoot":"","sources":["../../../src/foundations/membership/membership.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAsD;AAEtD,+DAAiE;AACjE,sDAA6D;AAC7D,gFAA4E;AAE5E;;;GAGG;AAOI,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAC3B,YAAY;QACV,wBAAa,CAAC,QAAQ,CAAC,iCAAoB,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC;CACF,CAAA;AAJY,4CAAgB;2BAAhB,gBAAgB;IAN5B,IAAA,eAAM,EAAC;QACN,WAAW,EAAE,EAAE;QACf,SAAS,EAAE,CAAC,4CAAoB,EAAE,iCAAoB,CAAC,KAAK,CAAC,UAAU,CAAC;QACxE,OAAO,EAAE,CAAC,4CAAoB,CAAC;QAC/B,OAAO,EAAE,EAAE;KACZ,CAAC;GACW,gBAAgB,CAI5B"}

package/dist/foundations/membership/queries/membership.query.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Canonical Cypher fragments for company-scoped role membership.
+ *
+ * These helpers are THE only sanctioned way to read/write role membership:
+ * (user)-[:HAS_MEMBERSHIP]->(:Membership)-[:IN_COMPANY]->(company)
+ * (membership)-[:HAS_ROLE]->(role)
+ *
+ * Rules for use:
+ * - `$companyId` is auto-injected from CLS by `Neo4jService.initQuery()`. Queries
+ *   that must scope to an EXPLICIT company (login, switch, migration) set
+ *   `query.queryParams.companyId` after `initQuery()`.
+ * - `$membershipId` is always `randomUUID()` generated in TypeScript and passed as
+ *   a param — never `randomUUID()` in Cypher (keeps writes deterministic/testable).
+ * - `Membership.createdAt`/`updatedAt` are always written with `datetime()` in
+ *   Cypher, never as a string param.
+ * - Invariant: every code path that deletes a `BELONGS_TO` edge, deletes a user, or
+ *   deletes a company MUST also `DETACH DELETE` the corresponding (user, company)
+ *   Membership node(s). An orphaned membership whose company vanished would read as
+ *   a PLATFORM membership — a privilege escalation.
+ */
+/**
+ * Effective-role read: roles of `userAlias` in the company bound to $companyId,
+ * PLUS platform-level roles (membership with no IN_COMPANY edge).
+ * Emits OPTIONAL MATCH lines; `roleAlias` is the Role node alias the caller's
+ * RETURN statement expects (e.g. "user_role", "auth_user_role").
+ */
+export declare const membershipRoleMatch: (params: {
+    userAlias: string;
+    roleAlias: string;
+}) => string;
+/**
+ * Required variant (MATCH, not OPTIONAL MATCH) for queries that filter BY role,
+ * with the role id bound to $roleParamName (default $roleId).
+ */
+export declare const membershipRoleMatchRequired: (params: {
+    userAlias: string;
+    roleAlias: string;
+    roleParamName?: string;
+}) => string;
+/**
+ * Write: ensure the (user, company) membership exists and grant roles.
+ * Expects $membershipId (fresh uuid) and $roleIds (string[]) params;
+ * `userAlias` and `companyAlias` must already be bound.
+ *
+ * The OPTIONAL MATCH + FOREACH shape deliberately avoids
+ * `MERGE (ms)-[:HAS_ROLE]->(:Role {id: roleId})`, which would CREATE a phantom
+ * Role node when the id does not exist (FOREACH cannot contain MATCH).
+ */
+export declare const grantCompanyRoles: (params: {
+    userAlias: string;
+    companyAlias: string;
+}) => string;
+/**
+ * Write: ensure the user's PLATFORM membership (no IN_COMPANY) exists and grant
+ * the role bound to $roleId. Expects $membershipId. `userAlias` must be bound.
+ */
+export declare const grantPlatformRole: (params: {
+    userAlias: string;
+}) => string;
+//# sourceMappingURL=membership.query.d.ts.map

package/dist/foundations/membership/queries/membership.query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"membership.query.d.ts","sourceRoot":"","sources":["../../../../src/foundations/membership/queries/membership.query.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,GAAI,QAAQ;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,KAAG,MAKtF,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,2BAA2B,GAAI,QAAQ;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,KAAG,MAKH,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,GAAI,QAAQ;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,KAAG,MAUvF,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,iBAAiB,GAAI,QAAQ;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,KAAG,MAWjE,CAAC"}

package/dist/foundations/membership/queries/membership.query.js

@@ -0,0 +1,86 @@
+"use strict";
+/**
+ * Canonical Cypher fragments for company-scoped role membership.
+ *
+ * These helpers are THE only sanctioned way to read/write role membership:
+ * (user)-[:HAS_MEMBERSHIP]->(:Membership)-[:IN_COMPANY]->(company)
+ * (membership)-[:HAS_ROLE]->(role)
+ *
+ * Rules for use:
+ * - `$companyId` is auto-injected from CLS by `Neo4jService.initQuery()`. Queries
+ *   that must scope to an EXPLICIT company (login, switch, migration) set
+ *   `query.queryParams.companyId` after `initQuery()`.
+ * - `$membershipId` is always `randomUUID()` generated in TypeScript and passed as
+ *   a param — never `randomUUID()` in Cypher (keeps writes deterministic/testable).
+ * - `Membership.createdAt`/`updatedAt` are always written with `datetime()` in
+ *   Cypher, never as a string param.
+ * - Invariant: every code path that deletes a `BELONGS_TO` edge, deletes a user, or
+ *   deletes a company MUST also `DETACH DELETE` the corresponding (user, company)
+ *   Membership node(s). An orphaned membership whose company vanished would read as
+ *   a PLATFORM membership — a privilege escalation.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.grantPlatformRole = exports.grantCompanyRoles = exports.membershipRoleMatchRequired = exports.membershipRoleMatch = void 0;
+/**
+ * Effective-role read: roles of `userAlias` in the company bound to $companyId,
+ * PLUS platform-level roles (membership with no IN_COMPANY edge).
+ * Emits OPTIONAL MATCH lines; `roleAlias` is the Role node alias the caller's
+ * RETURN statement expects (e.g. "user_role", "auth_user_role").
+ */
+const membershipRoleMatch = (params) => `
+  OPTIONAL MATCH (${params.userAlias})-[:HAS_MEMBERSHIP]->(${params.roleAlias}_ms:Membership)
+  WHERE (${params.roleAlias}_ms)-[:IN_COMPANY]->(:Company {id: $companyId})
+     OR NOT (${params.roleAlias}_ms)-[:IN_COMPANY]->(:Company)
+  OPTIONAL MATCH (${params.roleAlias}_ms)-[:HAS_ROLE]->(${params.roleAlias}:Role)
+`;
+exports.membershipRoleMatch = membershipRoleMatch;
+/**
+ * Required variant (MATCH, not OPTIONAL MATCH) for queries that filter BY role,
+ * with the role id bound to $roleParamName (default $roleId).
+ */
+const membershipRoleMatchRequired = (params) => `
+  MATCH (${params.userAlias})-[:HAS_MEMBERSHIP]->(${params.roleAlias}_ms:Membership)
+  WHERE (${params.roleAlias}_ms)-[:IN_COMPANY]->(:Company {id: $companyId})
+     OR NOT (${params.roleAlias}_ms)-[:IN_COMPANY]->(:Company)
+  MATCH (${params.roleAlias}_ms)-[:HAS_ROLE]->(${params.roleAlias}:Role {id: $${params.roleParamName ?? "roleId"}})
+`;
+exports.membershipRoleMatchRequired = membershipRoleMatchRequired;
+/**
+ * Write: ensure the (user, company) membership exists and grant roles.
+ * Expects $membershipId (fresh uuid) and $roleIds (string[]) params;
+ * `userAlias` and `companyAlias` must already be bound.
+ *
+ * The OPTIONAL MATCH + FOREACH shape deliberately avoids
+ * `MERGE (ms)-[:HAS_ROLE]->(:Role {id: roleId})`, which would CREATE a phantom
+ * Role node when the id does not exist (FOREACH cannot contain MATCH).
+ */
+const grantCompanyRoles = (params) => `
+  MERGE (${params.userAlias})-[:HAS_MEMBERSHIP]->(ms:Membership)-[:IN_COMPANY]->(${params.companyAlias})
+  ON CREATE SET ms.id = $membershipId, ms.createdAt = datetime(), ms.updatedAt = datetime()
+  SET ms.updatedAt = datetime()
+  WITH ms
+  UNWIND CASE WHEN size($roleIds) = 0 THEN [null] ELSE $roleIds END AS roleId
+  OPTIONAL MATCH (grant_role:Role {id: roleId})
+  FOREACH (_ IN CASE WHEN grant_role IS NULL THEN [] ELSE [1] END |
+    MERGE (ms)-[:HAS_ROLE]->(grant_role)
+  )
+`;
+exports.grantCompanyRoles = grantCompanyRoles;
+/**
+ * Write: ensure the user's PLATFORM membership (no IN_COMPANY) exists and grant
+ * the role bound to $roleId. Expects $membershipId. `userAlias` must be bound.
+ */
+const grantPlatformRole = (params) => `
+  OPTIONAL MATCH (${params.userAlias})-[:HAS_MEMBERSHIP]->(existing_ms:Membership)
+  WHERE NOT (existing_ms)-[:IN_COMPANY]->(:Company)
+  FOREACH (_ IN CASE WHEN existing_ms IS NULL THEN [1] ELSE [] END |
+    CREATE (${params.userAlias})-[:HAS_MEMBERSHIP]->(:Membership {id: $membershipId, createdAt: datetime(), updatedAt: datetime()})
+  )
+  WITH ${params.userAlias}
+  MATCH (${params.userAlias})-[:HAS_MEMBERSHIP]->(platform_ms:Membership)
+  WHERE NOT (platform_ms)-[:IN_COMPANY]->(:Company)
+  MATCH (platform_role:Role {id: $roleId})
+  MERGE (platform_ms)-[:HAS_ROLE]->(platform_role)
+`;
+exports.grantPlatformRole = grantPlatformRole;
+//# sourceMappingURL=membership.query.js.map

package/dist/foundations/membership/queries/membership.query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"membership.query.js","sourceRoot":"","sources":["../../../../src/foundations/membership/queries/membership.query.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;AAEH;;;;;GAKG;AACI,MAAM,mBAAmB,GAAG,CAAC,MAAgD,EAAU,EAAE,CAAC;oBAC7E,MAAM,CAAC,SAAS,yBAAyB,MAAM,CAAC,SAAS;WAClE,MAAM,CAAC,SAAS;eACZ,MAAM,CAAC,SAAS;oBACX,MAAM,CAAC,SAAS,sBAAsB,MAAM,CAAC,SAAS;CACzE,CAAC;AALW,QAAA,mBAAmB,uBAK9B;AAEF;;;GAGG;AACI,MAAM,2BAA2B,GAAG,CAAC,MAI3C,EAAU,EAAE,CAAC;WACH,MAAM,CAAC,SAAS,yBAAyB,MAAM,CAAC,SAAS;WACzD,MAAM,CAAC,SAAS;eACZ,MAAM,CAAC,SAAS;WACpB,MAAM,CAAC,SAAS,sBAAsB,MAAM,CAAC,SAAS,eAAe,MAAM,CAAC,aAAa,IAAI,QAAQ;CAC/G,CAAC;AATW,QAAA,2BAA2B,+BAStC;AAEF;;;;;;;;GAQG;AACI,MAAM,iBAAiB,GAAG,CAAC,MAAmD,EAAU,EAAE,CAAC;WACvF,MAAM,CAAC,SAAS,wDAAwD,MAAM,CAAC,YAAY;;;;;;;;;CASrG,CAAC;AAVW,QAAA,iBAAiB,qBAU5B;AAEF;;;GAGG;AACI,MAAM,iBAAiB,GAAG,CAAC,MAA6B,EAAU,EAAE,CAAC;oBACxD,MAAM,CAAC,SAAS;;;cAGtB,MAAM,CAAC,SAAS;;SAErB,MAAM,CAAC,SAAS;WACd,MAAM,CAAC,SAAS;;;;CAI1B,CAAC;AAXW,QAAA,iBAAiB,qBAW5B"}

package/dist/foundations/membership/repositories/membership.repository.d.ts

@@ -0,0 +1,8 @@
+import { OnModuleInit } from "@nestjs/common";
+import { Neo4jService } from "../../../core/neo4j/services/neo4j.service";
+export declare class MembershipRepository implements OnModuleInit {
+    private readonly neo4j;
+    constructor(neo4j: Neo4jService);
+    onModuleInit(): Promise<void>;
+}
+//# sourceMappingURL=membership.repository.d.ts.map

package/dist/foundations/membership/repositories/membership.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"membership.repository.d.ts","sourceRoot":"","sources":["../../../../src/foundations/membership/repositories/membership.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAE1E,qBACa,oBAAqB,YAAW,YAAY;IAC3C,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,YAAY;IAE1C,YAAY;CAKnB"}

package/dist/foundations/membership/repositories/membership.repository.js

@@ -0,0 +1,30 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MembershipRepository = void 0;
+const common_1 = require("@nestjs/common");
+const neo4j_service_1 = require("../../../core/neo4j/services/neo4j.service");
+let MembershipRepository = class MembershipRepository {
+    constructor(neo4j) {
+        this.neo4j = neo4j;
+    }
+    async onModuleInit() {
+        await this.neo4j.writeOne({
+            query: `CREATE CONSTRAINT membership_id IF NOT EXISTS FOR (membership:Membership) REQUIRE membership.id IS UNIQUE`,
+        });
+    }
+};
+exports.MembershipRepository = MembershipRepository;
+exports.MembershipRepository = MembershipRepository = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [neo4j_service_1.Neo4jService])
+], MembershipRepository);
+//# sourceMappingURL=membership.repository.js.map

package/dist/foundations/membership/repositories/membership.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"membership.repository.js","sourceRoot":"","sources":["../../../../src/foundations/membership/repositories/membership.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA0D;AAC1D,8EAA0E;AAGnE,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAC/B,YAA6B,KAAmB;QAAnB,UAAK,GAAL,KAAK,CAAc;IAAG,CAAC;IAEpD,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YACxB,KAAK,EAAE,2GAA2G;SACnH,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AARY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;qCAEyB,4BAAY;GADrC,oBAAoB,CAQhC"}

package/dist/foundations/module/queries/feature.module.query.d.ts

@@ -1,4 +1,4 @@
 export declare const modulePermissionResolutionQuery = "\n    WITH m,\n        coalesce(apoc.convert.fromJsonList(m.permissions), []) AS defaultPermissions,\n        collect(perm) AS perms\n    WITH m, defaultPermissions,\n        apoc.coll.flatten([p IN perms | coalesce(apoc.convert.fromJsonList(p.permissions), [])]) AS rolePerms\n    WITH m,\n        head([x IN defaultPermissions WHERE x.type = 'create' | x.value]) AS defaultCreate,\n        head([x IN defaultPermissions WHERE x.type = 'read'   | x.value]) AS defaultRead,\n        head([x IN defaultPermissions WHERE x.type = 'update' | x.value]) AS defaultUpdate,\n        head([x IN defaultPermissions WHERE x.type = 'delete' | x.value]) AS defaultDelete,\n        rolePerms\n    WITH m,\n        [defaultCreate] + [x IN rolePerms WHERE x.type = 'create' | x.value] AS createValues,\n        [defaultRead]   + [x IN rolePerms WHERE x.type = 'read'   | x.value] AS readValues,\n        [defaultUpdate] + [x IN rolePerms WHERE x.type = 'update' | x.value] AS updateValues,\n        [defaultDelete] + [x IN rolePerms WHERE x.type = 'delete' | x.value] AS deleteValues\n    WITH m,\n        CASE\n        WHEN any(x IN createValues WHERE x = true) THEN true\n        WHEN any(x IN createValues WHERE x IS NOT NULL AND x <> false AND x <> true)\n            THEN head([x IN createValues WHERE x IS NOT NULL AND x <> false AND x <> true])\n        ELSE coalesce(head(createValues), false)\n        END AS effectiveCreate,\n        CASE\n        WHEN any(x IN readValues WHERE x = true) THEN true\n        WHEN any(x IN readValues WHERE x IS NOT NULL AND x <> false AND x <> true)\n            THEN head([x IN readValues WHERE x IS NOT NULL AND x <> false AND x <> true])\n        ELSE coalesce(head(readValues), false)\n        END AS effectiveRead,\n        CASE\n        WHEN any(x IN updateValues WHERE x = true) THEN true\n        WHEN any(x IN updateValues WHERE x IS NOT NULL AND x <> false AND x <> true)\n            THEN head([x IN updateValues WHERE x IS NOT NULL AND x <> false AND x <> true])\n        ELSE coalesce(head(updateValues), false)\n        END AS effectiveUpdate,\n        CASE\n        WHEN any(x IN deleteValues WHERE x = true) THEN true\n        WHEN any(x IN deleteValues WHERE x IS NOT NULL AND x <> false AND x <> true)\n            THEN head([x IN deleteValues WHERE x IS NOT NULL AND x <> false AND x <> true])\n        ELSE coalesce(head(deleteValues), false)\n        END AS effectiveDelete\n    WITH m, apoc.convert.toJson([\n            { type: \"create\", value: effectiveCreate },\n            { type: \"read\",   value: effectiveRead },\n            { type: \"update\", value: effectiveUpdate },\n            { type: \"delete\", value: effectiveDelete }\n        ]) AS newPermissions\n    CALL apoc.create.vNode(\n    labels(m),\n    apoc.map.merge(properties(m), { permissions: newPermissions })\n    ) YIELD node AS module\n\n    RETURN module\n";
-export declare const featureModuleQuery = "\n    OPTIONAL MATCH (user)-[:MEMBER_OF]->(role:Role)\n    OPTIONAL MATCH (feature:Feature)\n      WHERE exists((company)-[:HAS_FEATURE]->(feature))\n         OR feature.isCore = true\n    MATCH (m:Module)-[:IN_FEATURE]->(feature)\n    OPTIONAL MATCH (role)-[perm:HAS_PERMISSIONS]->(m)\n    \n    WITH m,\n        coalesce(apoc.convert.fromJsonList(m.permissions), []) AS defaultPermissions,\n        collect(perm) AS perms\n    WITH m, defaultPermissions,\n        apoc.coll.flatten([p IN perms | coalesce(apoc.convert.fromJsonList(p.permissions), [])]) AS rolePerms\n    WITH m,\n        head([x IN defaultPermissions WHERE x.type = 'create' | x.value]) AS defaultCreate,\n        head([x IN defaultPermissions WHERE x.type = 'read'   | x.value]) AS defaultRead,\n        head([x IN defaultPermissions WHERE x.type = 'update' | x.value]) AS defaultUpdate,\n        head([x IN defaultPermissions WHERE x.type = 'delete' | x.value]) AS defaultDelete,\n        rolePerms\n    WITH m,\n        [defaultCreate] + [x IN rolePerms WHERE x.type = 'create' | x.value] AS createValues,\n        [defaultRead]   + [x IN rolePerms WHERE x.type = 'read'   | x.value] AS readValues,\n        [defaultUpdate] + [x IN rolePerms WHERE x.type = 'update' | x.value] AS updateValues,\n        [defaultDelete] + [x IN rolePerms WHERE x.type = 'delete' | x.value] AS deleteValues\n    WITH m,\n        CASE\n        WHEN any(x IN createValues WHERE x = true) THEN true\n        WHEN any(x IN createValues WHERE x IS NOT NULL AND x <> false AND x <> true)\n            THEN head([x IN createValues WHERE x IS NOT NULL AND x <> false AND x <> true])\n        ELSE coalesce(head(createValues), false)\n        END AS effectiveCreate,\n        CASE\n        WHEN any(x IN readValues WHERE x = true) THEN true\n        WHEN any(x IN readValues WHERE x IS NOT NULL AND x <> false AND x <> true)\n            THEN head([x IN readValues WHERE x IS NOT NULL AND x <> false AND x <> true])\n        ELSE coalesce(head(readValues), false)\n        END AS effectiveRead,\n        CASE\n        WHEN any(x IN updateValues WHERE x = true) THEN true\n        WHEN any(x IN updateValues WHERE x IS NOT NULL AND x <> false AND x <> true)\n            THEN head([x IN updateValues WHERE x IS NOT NULL AND x <> false AND x <> true])\n        ELSE coalesce(head(updateValues), false)\n        END AS effectiveUpdate,\n        CASE\n        WHEN any(x IN deleteValues WHERE x = true) THEN true\n        WHEN any(x IN deleteValues WHERE x IS NOT NULL AND x <> false AND x <> true)\n            THEN head([x IN deleteValues WHERE x IS NOT NULL AND x <> false AND x <> true])\n        ELSE coalesce(head(deleteValues), false)\n        END AS effectiveDelete\n    WITH m, apoc.convert.toJson([\n            { type: \"create\", value: effectiveCreate },\n            { type: \"read\",   value: effectiveRead },\n            { type: \"update\", value: effectiveUpdate },\n            { type: \"delete\", value: effectiveDelete }\n        ]) AS newPermissions\n    CALL apoc.create.vNode(\n    labels(m),\n    apoc.map.merge(properties(m), { permissions: newPermissions })\n    ) YIELD node AS module\n\n    RETURN module\n\n";
-export declare const adminModuleQuery = "\n    MATCH (user:User {id: $searchValue})-[:MEMBER_OF]->(role:Role)\n    MATCH (role)-[perm:HAS_PERMISSIONS]->(m:Module)\n    \n    WITH m,\n        coalesce(apoc.convert.fromJsonList(m.permissions), []) AS defaultPermissions,\n        collect(perm) AS perms\n    WITH m, defaultPermissions,\n        apoc.coll.flatten([p IN perms | coalesce(apoc.convert.fromJsonList(p.permissions), [])]) AS rolePerms\n    WITH m,\n        head([x IN defaultPermissions WHERE x.type = 'create' | x.value]) AS defaultCreate,\n        head([x IN defaultPermissions WHERE x.type = 'read'   | x.value]) AS defaultRead,\n        head([x IN defaultPermissions WHERE x.type = 'update' | x.value]) AS defaultUpdate,\n        head([x IN defaultPermissions WHERE x.type = 'delete' | x.value]) AS defaultDelete,\n        rolePerms\n    WITH m,\n        [defaultCreate] + [x IN rolePerms WHERE x.type = 'create' | x.value] AS createValues,\n        [defaultRead]   + [x IN rolePerms WHERE x.type = 'read'   | x.value] AS readValues,\n        [defaultUpdate] + [x IN rolePerms WHERE x.type = 'update' | x.value] AS updateValues,\n        [defaultDelete] + [x IN rolePerms WHERE x.type = 'delete' | x.value] AS deleteValues\n    WITH m,\n        CASE\n        WHEN any(x IN createValues WHERE x = true) THEN true\n        WHEN any(x IN createValues WHERE x IS NOT NULL AND x <> false AND x <> true)\n            THEN head([x IN createValues WHERE x IS NOT NULL AND x <> false AND x <> true])\n        ELSE coalesce(head(createValues), false)\n        END AS effectiveCreate,\n        CASE\n        WHEN any(x IN readValues WHERE x = true) THEN true\n        WHEN any(x IN readValues WHERE x IS NOT NULL AND x <> false AND x <> true)\n            THEN head([x IN readValues WHERE x IS NOT NULL AND x <> false AND x <> true])\n        ELSE coalesce(head(readValues), false)\n        END AS effectiveRead,\n        CASE\n        WHEN any(x IN updateValues WHERE x = true) THEN true\n        WHEN any(x IN updateValues WHERE x IS NOT NULL AND x <> false AND x <> true)\n            THEN head([x IN updateValues WHERE x IS NOT NULL AND x <> false AND x <> true])\n        ELSE coalesce(head(updateValues), false)\n        END AS effectiveUpdate,\n        CASE\n        WHEN any(x IN deleteValues WHERE x = true) THEN true\n        WHEN any(x IN deleteValues WHERE x IS NOT NULL AND x <> false AND x <> true)\n            THEN head([x IN deleteValues WHERE x IS NOT NULL AND x <> false AND x <> true])\n        ELSE coalesce(head(deleteValues), false)\n        END AS effectiveDelete\n    WITH m, apoc.convert.toJson([\n            { type: \"create\", value: effectiveCreate },\n            { type: \"read\",   value: effectiveRead },\n            { type: \"update\", value: effectiveUpdate },\n            { type: \"delete\", value: effectiveDelete }\n        ]) AS newPermissions\n    CALL apoc.create.vNode(\n    labels(m),\n    apoc.map.merge(properties(m), { permissions: newPermissions })\n    ) YIELD node AS module\n\n    RETURN module\n\n";
+export declare const featureModuleQuery = "\n    OPTIONAL MATCH (user)-[:HAS_MEMBERSHIP]->(fm_ms:Membership)\n    WHERE (fm_ms)-[:IN_COMPANY]->(company) OR NOT (fm_ms)-[:IN_COMPANY]->(:Company)\n    OPTIONAL MATCH (fm_ms)-[:HAS_ROLE]->(role:Role)\n    OPTIONAL MATCH (feature:Feature)\n      WHERE exists((company)-[:HAS_FEATURE]->(feature))\n         OR feature.isCore = true\n    MATCH (m:Module)-[:IN_FEATURE]->(feature)\n    OPTIONAL MATCH (role)-[perm:HAS_PERMISSIONS]->(m)\n    \n    WITH m,\n        coalesce(apoc.convert.fromJsonList(m.permissions), []) AS defaultPermissions,\n        collect(perm) AS perms\n    WITH m, defaultPermissions,\n        apoc.coll.flatten([p IN perms | coalesce(apoc.convert.fromJsonList(p.permissions), [])]) AS rolePerms\n    WITH m,\n        head([x IN defaultPermissions WHERE x.type = 'create' | x.value]) AS defaultCreate,\n        head([x IN defaultPermissions WHERE x.type = 'read'   | x.value]) AS defaultRead,\n        head([x IN defaultPermissions WHERE x.type = 'update' | x.value]) AS defaultUpdate,\n        head([x IN defaultPermissions WHERE x.type = 'delete' | x.value]) AS defaultDelete,\n        rolePerms\n    WITH m,\n        [defaultCreate] + [x IN rolePerms WHERE x.type = 'create' | x.value] AS createValues,\n        [defaultRead]   + [x IN rolePerms WHERE x.type = 'read'   | x.value] AS readValues,\n        [defaultUpdate] + [x IN rolePerms WHERE x.type = 'update' | x.value] AS updateValues,\n        [defaultDelete] + [x IN rolePerms WHERE x.type = 'delete' | x.value] AS deleteValues\n    WITH m,\n        CASE\n        WHEN any(x IN createValues WHERE x = true) THEN true\n        WHEN any(x IN createValues WHERE x IS NOT NULL AND x <> false AND x <> true)\n            THEN head([x IN createValues WHERE x IS NOT NULL AND x <> false AND x <> true])\n        ELSE coalesce(head(createValues), false)\n        END AS effectiveCreate,\n        CASE\n        WHEN any(x IN readValues WHERE x = true) THEN true\n        WHEN any(x IN readValues WHERE x IS NOT NULL AND x <> false AND x <> true)\n            THEN head([x IN readValues WHERE x IS NOT NULL AND x <> false AND x <> true])\n        ELSE coalesce(head(readValues), false)\n        END AS effectiveRead,\n        CASE\n        WHEN any(x IN updateValues WHERE x = true) THEN true\n        WHEN any(x IN updateValues WHERE x IS NOT NULL AND x <> false AND x <> true)\n            THEN head([x IN updateValues WHERE x IS NOT NULL AND x <> false AND x <> true])\n        ELSE coalesce(head(updateValues), false)\n        END AS effectiveUpdate,\n        CASE\n        WHEN any(x IN deleteValues WHERE x = true) THEN true\n        WHEN any(x IN deleteValues WHERE x IS NOT NULL AND x <> false AND x <> true)\n            THEN head([x IN deleteValues WHERE x IS NOT NULL AND x <> false AND x <> true])\n        ELSE coalesce(head(deleteValues), false)\n        END AS effectiveDelete\n    WITH m, apoc.convert.toJson([\n            { type: \"create\", value: effectiveCreate },\n            { type: \"read\",   value: effectiveRead },\n            { type: \"update\", value: effectiveUpdate },\n            { type: \"delete\", value: effectiveDelete }\n        ]) AS newPermissions\n    CALL apoc.create.vNode(\n    labels(m),\n    apoc.map.merge(properties(m), { permissions: newPermissions })\n    ) YIELD node AS module\n\n    RETURN module\n\n";
+export declare const adminModuleQuery = "\n    MATCH (user:User {id: $searchValue})-[:HAS_MEMBERSHIP]->(am_ms:Membership)\n    WHERE NOT (am_ms)-[:IN_COMPANY]->(:Company)\n    MATCH (am_ms)-[:HAS_ROLE]->(role:Role)\n    MATCH (role)-[perm:HAS_PERMISSIONS]->(m:Module)\n    \n    WITH m,\n        coalesce(apoc.convert.fromJsonList(m.permissions), []) AS defaultPermissions,\n        collect(perm) AS perms\n    WITH m, defaultPermissions,\n        apoc.coll.flatten([p IN perms | coalesce(apoc.convert.fromJsonList(p.permissions), [])]) AS rolePerms\n    WITH m,\n        head([x IN defaultPermissions WHERE x.type = 'create' | x.value]) AS defaultCreate,\n        head([x IN defaultPermissions WHERE x.type = 'read'   | x.value]) AS defaultRead,\n        head([x IN defaultPermissions WHERE x.type = 'update' | x.value]) AS defaultUpdate,\n        head([x IN defaultPermissions WHERE x.type = 'delete' | x.value]) AS defaultDelete,\n        rolePerms\n    WITH m,\n        [defaultCreate] + [x IN rolePerms WHERE x.type = 'create' | x.value] AS createValues,\n        [defaultRead]   + [x IN rolePerms WHERE x.type = 'read'   | x.value] AS readValues,\n        [defaultUpdate] + [x IN rolePerms WHERE x.type = 'update' | x.value] AS updateValues,\n        [defaultDelete] + [x IN rolePerms WHERE x.type = 'delete' | x.value] AS deleteValues\n    WITH m,\n        CASE\n        WHEN any(x IN createValues WHERE x = true) THEN true\n        WHEN any(x IN createValues WHERE x IS NOT NULL AND x <> false AND x <> true)\n            THEN head([x IN createValues WHERE x IS NOT NULL AND x <> false AND x <> true])\n        ELSE coalesce(head(createValues), false)\n        END AS effectiveCreate,\n        CASE\n        WHEN any(x IN readValues WHERE x = true) THEN true\n        WHEN any(x IN readValues WHERE x IS NOT NULL AND x <> false AND x <> true)\n            THEN head([x IN readValues WHERE x IS NOT NULL AND x <> false AND x <> true])\n        ELSE coalesce(head(readValues), false)\n        END AS effectiveRead,\n        CASE\n        WHEN any(x IN updateValues WHERE x = true) THEN true\n        WHEN any(x IN updateValues WHERE x IS NOT NULL AND x <> false AND x <> true)\n            THEN head([x IN updateValues WHERE x IS NOT NULL AND x <> false AND x <> true])\n        ELSE coalesce(head(updateValues), false)\n        END AS effectiveUpdate,\n        CASE\n        WHEN any(x IN deleteValues WHERE x = true) THEN true\n        WHEN any(x IN deleteValues WHERE x IS NOT NULL AND x <> false AND x <> true)\n            THEN head([x IN deleteValues WHERE x IS NOT NULL AND x <> false AND x <> true])\n        ELSE coalesce(head(deleteValues), false)\n        END AS effectiveDelete\n    WITH m, apoc.convert.toJson([\n            { type: \"create\", value: effectiveCreate },\n            { type: \"read\",   value: effectiveRead },\n            { type: \"update\", value: effectiveUpdate },\n            { type: \"delete\", value: effectiveDelete }\n        ]) AS newPermissions\n    CALL apoc.create.vNode(\n    labels(m),\n    apoc.map.merge(properties(m), { permissions: newPermissions })\n    ) YIELD node AS module\n\n    RETURN module\n\n";
 //# sourceMappingURL=feature.module.query.d.ts.map

package/dist/foundations/module/queries/feature.module.query.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"feature.module.query.d.ts","sourceRoot":"","sources":["../../../../src/foundations/module/queries/feature.module.query.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,+BAA+B,y0FAsD3C,CAAC;AAGF,eAAO,MAAM,kBAAkB,8mGAQ9B,CAAC;AAGF,eAAO,MAAM,gBAAgB,08FAI5B,CAAC"}
+{"version":3,"file":"feature.module.query.d.ts","sourceRoot":"","sources":["../../../../src/foundations/module/queries/feature.module.query.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,+BAA+B,y0FAsD3C,CAAC;AAMF,eAAO,MAAM,kBAAkB,owGAU9B,CAAC;AAIF,eAAO,MAAM,gBAAgB,mjGAM5B,CAAC"}

package/dist/foundations/module/queries/feature.module.query.js

@@ -59,8 +59,13 @@ exports.modulePermissionResolutionQuery = `
     RETURN module
 `;
 // For regular users: modules via Company → Features → Modules
+// The role read is the membershipRoleMatch expansion bound to the `company` alias the
+// caller already binds (this file exports plain strings, so the helper cannot be used
+// verbatim — see foundations/membership/queries/membership.query.ts).
 exports.featureModuleQuery = `
-    OPTIONAL MATCH (user)-[:MEMBER_OF]->(role:Role)
+    OPTIONAL MATCH (user)-[:HAS_MEMBERSHIP]->(fm_ms:Membership)
+    WHERE (fm_ms)-[:IN_COMPANY]->(company) OR NOT (fm_ms)-[:IN_COMPANY]->(:Company)
+    OPTIONAL MATCH (fm_ms)-[:HAS_ROLE]->(role:Role)
     OPTIONAL MATCH (feature:Feature)
       WHERE exists((company)-[:HAS_FEATURE]->(feature))
          OR feature.isCore = true
@@ -68,9 +73,12 @@ exports.featureModuleQuery = `
     OPTIONAL MATCH (role)-[perm:HAS_PERMISSIONS]->(m)
     ${exports.modulePermissionResolutionQuery}
 `;
-// For Administrator users: modules via Role → HAS_PERMISSIONS → Module
+// For Administrator users: modules via the PLATFORM membership (no IN_COMPANY edge)
+// → Role → HAS_PERMISSIONS → Module
 exports.adminModuleQuery = `
-    MATCH (user:User {id: $searchValue})-[:MEMBER_OF]->(role:Role)
+    MATCH (user:User {id: $searchValue})-[:HAS_MEMBERSHIP]->(am_ms:Membership)
+    WHERE NOT (am_ms)-[:IN_COMPANY]->(:Company)
+    MATCH (am_ms)-[:HAS_ROLE]->(role:Role)
     MATCH (role)-[perm:HAS_PERMISSIONS]->(m:Module)
     ${exports.modulePermissionResolutionQuery}
 `;

package/dist/foundations/module/queries/feature.module.query.js.map

@@ -1 +1 @@
-{"version":3,"file":"feature.module.query.js","sourceRoot":"","sources":["../../../../src/foundations/module/queries/feature.module.query.ts"],"names":[],"mappings":";;;AAAA,mFAAmF;AACnF,wEAAwE;AAC3D,QAAA,+BAA+B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsD9C,CAAC;AAEF,8DAA8D;AACjD,QAAA,kBAAkB,GAAG;;;;;;;MAO5B,uCAA+B;CACpC,CAAC;AAEF,uEAAuE;AAC1D,QAAA,gBAAgB,GAAG;;;MAG1B,uCAA+B;CACpC,CAAC"}
+{"version":3,"file":"feature.module.query.js","sourceRoot":"","sources":["../../../../src/foundations/module/queries/feature.module.query.ts"],"names":[],"mappings":";;;AAAA,mFAAmF;AACnF,wEAAwE;AAC3D,QAAA,+BAA+B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsD9C,CAAC;AAEF,8DAA8D;AAC9D,sFAAsF;AACtF,sFAAsF;AACtF,sEAAsE;AACzD,QAAA,kBAAkB,GAAG;;;;;;;;;MAS5B,uCAA+B;CACpC,CAAC;AAEF,oFAAoF;AACpF,oCAAoC;AACvB,QAAA,gBAAgB,GAAG;;;;;MAK1B,uCAA+B;CACpC,CAAC"}

package/dist/foundations/role/repositories/role.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"role.repository.d.ts","sourceRoot":"","sources":["../../../../src/foundations/role/repositories/role.repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAc,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,2DAA2D,CAAC;AACnG,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAkB,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAEhE,qBACa,cAAe,YAAW,YAAY;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,YAAY;IAE1C,YAAY;IAMZ,eAAe,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBxE,UAAU,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAenD,QAAQ,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAenD,IAAI,CAAC,MAAM,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,sBAAsB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAuBhF,WAAW,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,sBAAsB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IA0BvG,aAAa,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,sBAAsB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IA2BzG,MAAM,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBjF,MAAM,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBjF,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAaxD"}
+{"version":3,"file":"role.repository.d.ts","sourceRoot":"","sources":["../../../../src/foundations/role/repositories/role.repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAc,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,2DAA2D,CAAC;AACnG,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAkB,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAEhE,qBACa,cAAe,YAAW,YAAY;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,YAAY;IAE1C,YAAY;IAMZ,eAAe,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBxE,UAAU,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAenD,QAAQ,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAenD,IAAI,CAAC,MAAM,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,sBAAsB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAuBhF,WAAW,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,sBAAsB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IA+BvG,aAAa,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,sBAAsB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAiCzG,MAAM,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBjF,MAAM,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBjF,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAaxD"}

package/dist/foundations/role/repositories/role.repository.js

@@ -87,11 +87,16 @@ let RoleRepository = class RoleRepository {
         };
         query.query += `
       MATCH (user:User {id: $userId})-[:BELONGS_TO]->(company)
-      MATCH (user)-[:MEMBER_OF]->(role:Role)
+      // Required (MATCH) variant of membershipRoleMatch bound to the company alias
+      // already matched above — see membership.query.ts. Company roles + platform roles.
+      MATCH (user)-[:HAS_MEMBERSHIP]->(role_ms:Membership)
+      WHERE (role_ms)-[:IN_COMPANY]->(company)
+         OR NOT (role_ms)-[:IN_COMPANY]->(:Company)
+      MATCH (role_ms)-[:HAS_ROLE]->(role:Role)
       WHERE role.id <> $administratorsId
       ${params.term ? "AND toLower(role.name) CONTAINS toLower($term)" : ""}
-      
-      WITH role
+
+      WITH DISTINCT role
       ORDER BY role.name ASC
       {CURSOR}
       
@@ -110,7 +115,13 @@ let RoleRepository = class RoleRepository {
         query.query += `
       MATCH (user:User {id: $userId})-[:BELONGS_TO]->(company)
       MATCH (role:Role)
-      WHERE NOT (role)<-[:MEMBER_OF]-(user)
+      // Negated membership read (see membership.query.ts): the role must not be held
+      // through the company membership NOR through the platform membership.
+      WHERE NOT EXISTS {
+        MATCH (user)-[:HAS_MEMBERSHIP]->(nu_ms:Membership)-[:HAS_ROLE]->(role)
+        WHERE (nu_ms)-[:IN_COMPANY]->(company)
+           OR NOT (nu_ms)-[:IN_COMPANY]->(:Company)
+      }
       ${params.term ? "AND toLower(role.name) CONTAINS toLower($term)" : ""}
       AND role.id <> $administratorsId
       

package/dist/foundations/role/repositories/role.repository.js.map

@@ -1 +1 @@
-{"version":3,"file":"role.repository.js","sourceRoot":"","sources":["../../../../src/foundations/role/repositories/role.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yEAAgE;AAChE,2CAA0D;AAE1D,8EAA0E;AAC1E,mDAAgE;AAGzD,IAAM,cAAc,GAApB,MAAM,cAAc;IACzB,YAA6B,KAAmB;QAAnB,UAAK,GAAL,KAAK,CAAc;IAAG,CAAC;IAEpD,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YACxB,KAAK,EAAE,mFAAmF;SAC3F,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAwC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,qBAAc,CAAC,KAAK,EAAE,CAAC,CAAC;QAEzE,KAAK,CAAC,WAAW,GAAG;YAClB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;QAEF,KAAK,CAAC,KAAK,GAAG;;;;KAIb,CAAC;QAEF,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAwB;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,qBAAc,CAAC,KAAK,EAAE,CAAC,CAAC;QAEzE,KAAK,CAAC,WAAW,GAAG;YAClB,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;QAEF,KAAK,CAAC,KAAK,GAAG;;;KAGb,CAAC;QAEF,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAA0B;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,qBAAc,CAAC,KAAK,EAAE,CAAC,CAAC;QAEzE,KAAK,CAAC,WAAW,GAAG;YAClB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;QAEF,KAAK,CAAC,KAAK,GAAG;;;KAGb,CAAC;QAEF,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAyD;QAClE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,qBAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAEhG,KAAK,CAAC,WAAW,GAAG;YAClB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,gBAAgB,EAAE,qBAAM,CAAC,aAAa;SACvC,CAAC;QAEF,KAAK,CAAC,KAAK,GAAG;;;QAGV,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC,CAAC,EAAE;;;;;;;KAOtE,CAAC;QAEF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAyE;QACzF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,qBAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAEhG,KAAK,CAAC,WAAW,GAAG;YAClB,GAAG,KAAK,CAAC,WAAW;YACpB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,gBAAgB,EAAE,qBAAM,CAAC,aAAa;SACvC,CAAC;QAEF,KAAK,CAAC,KAAK,IAAI;;;;QAIX,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC,CAAC,EAAE;;;;;;;KAOtE,CAAC;QAEF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAyE;QAC3F,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,qBAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAEhH,KAAK,CAAC,WAAW,GAAG;YAClB,GAAG,KAAK,CAAC,WAAW;YACpB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,gBAAgB,EAAE,qBAAM,CAAC,aAAa;SACvC,CAAC;QAEF,KAAK,CAAC,KAAK,IAAI;;;;QAIX,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC,CAAC,EAAE;;;;;;;;KAQtE,CAAC;QAEF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA0D;QACrE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QAErC,KAAK,CAAC,WAAW,GAAG;YAClB,GAAG,KAAK,CAAC,WAAW;YACpB,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC;QAEF,KAAK,CAAC,KAAK,GAAG;;;;;;;KAOb,CAAC;QAEF,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA0D;QACrE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QAErC,KAAK,CAAC,WAAW,GAAG;YAClB,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC;QAEF,KAAK,CAAC,KAAK,GAAG;;;;;KAKb,CAAC;QAEF,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA0B;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QAErC,KAAK,CAAC,WAAW,GAAG;YAClB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;QAEF,KAAK,CAAC,KAAK,GAAG;;;KAGb,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;CACF,CAAA;AA1LY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;qCAEyB,4BAAY;GADrC,cAAc,CA0L1B"}
+{"version":3,"file":"role.repository.js","sourceRoot":"","sources":["../../../../src/foundations/role/repositories/role.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yEAAgE;AAChE,2CAA0D;AAE1D,8EAA0E;AAC1E,mDAAgE;AAGzD,IAAM,cAAc,GAApB,MAAM,cAAc;IACzB,YAA6B,KAAmB;QAAnB,UAAK,GAAL,KAAK,CAAc;IAAG,CAAC;IAEpD,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YACxB,KAAK,EAAE,mFAAmF;SAC3F,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAwC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,qBAAc,CAAC,KAAK,EAAE,CAAC,CAAC;QAEzE,KAAK,CAAC,WAAW,GAAG;YAClB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;QAEF,KAAK,CAAC,KAAK,GAAG;;;;KAIb,CAAC;QAEF,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAwB;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,qBAAc,CAAC,KAAK,EAAE,CAAC,CAAC;QAEzE,KAAK,CAAC,WAAW,GAAG;YAClB,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;QAEF,KAAK,CAAC,KAAK,GAAG;;;KAGb,CAAC;QAEF,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAA0B;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,qBAAc,CAAC,KAAK,EAAE,CAAC,CAAC;QAEzE,KAAK,CAAC,WAAW,GAAG;YAClB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;QAEF,KAAK,CAAC,KAAK,GAAG;;;KAGb,CAAC;QAEF,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAyD;QAClE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,qBAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAEhG,KAAK,CAAC,WAAW,GAAG;YAClB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,gBAAgB,EAAE,qBAAM,CAAC,aAAa;SACvC,CAAC;QAEF,KAAK,CAAC,KAAK,GAAG;;;QAGV,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC,CAAC,EAAE;;;;;;;KAOtE,CAAC;QAEF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAyE;QACzF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,qBAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAEhG,KAAK,CAAC,WAAW,GAAG;YAClB,GAAG,KAAK,CAAC,WAAW;YACpB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,gBAAgB,EAAE,qBAAM,CAAC,aAAa;SACvC,CAAC;QAEF,KAAK,CAAC,KAAK,IAAI;;;;;;;;;QASX,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC,CAAC,EAAE;;;;;;;KAOtE,CAAC;QAEF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAyE;QAC3F,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,qBAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAEhH,KAAK,CAAC,WAAW,GAAG;YAClB,GAAG,KAAK,CAAC,WAAW;YACpB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,gBAAgB,EAAE,qBAAM,CAAC,aAAa;SACvC,CAAC;QAEF,KAAK,CAAC,KAAK,IAAI;;;;;;;;;;QAUX,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC,CAAC,EAAE;;;;;;;;KAQtE,CAAC;QAEF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA0D;QACrE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QAErC,KAAK,CAAC,WAAW,GAAG;YAClB,GAAG,KAAK,CAAC,WAAW;YACpB,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC;QAEF,KAAK,CAAC,KAAK,GAAG;;;;;;;KAOb,CAAC;QAEF,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA0D;QACrE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QAErC,KAAK,CAAC,WAAW,GAAG;YAClB,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC;QAEF,KAAK,CAAC,KAAK,GAAG;;;;;KAKb,CAAC;QAEF,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA0B;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QAErC,KAAK,CAAC,WAAW,GAAG;YAClB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;QAEF,KAAK,CAAC,KAAK,GAAG;;;KAGb,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;CACF,CAAA;AArMY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;qCAEyB,4BAAY;GADrC,cAAc,CAqM1B"}

package/dist/foundations/user/entities/user.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../../src/foundations/user/entities/user.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAmC,MAAM,iBAAiB,CAAC;AAC1E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gCAAgC,CAAC;AAE9D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qCAAqC,CAAC;AAElE,OAAO,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAKhD;;GAEG;AACH,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,IAAI,CAAC;IACtB,eAAe,CAAC,EAAE,IAAI,CAAC;IACvB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,kBAAkB,CAAC,EAAE,IAAI,CAAC;IAE1B,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;EA8DzB,CAAC;AAGH,MAAM,MAAM,kBAAkB,GAAG,OAAO,cAAc,CAAC;AAGvD,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;EAA+C,CAAC;AAC5E,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;EAAkD,CAAC;AAClF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;EAAgD,CAAC"}
+{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../../src/foundations/user/entities/user.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAmC,MAAM,iBAAiB,CAAC;AAC1E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gCAAgC,CAAC;AAE9D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qCAAqC,CAAC;AAElE,OAAO,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAKhD;;GAEG;AACH,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,IAAI,CAAC;IACtB,eAAe,CAAC,EAAE,IAAI,CAAC;IACvB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,kBAAkB,CAAC,EAAE,IAAI,CAAC;IAE1B,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;EAmEzB,CAAC;AAGH,MAAM,MAAM,kBAAkB,GAAG,OAAO,cAAc,CAAC;AAGvD,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;EAA+C,CAAC;AAC5E,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;EAAkD,CAAC;AAClF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;EAAgD,CAAC"}

package/dist/foundations/user/entities/user.js

@@ -52,10 +52,15 @@ exports.UserDescriptor = (0, common_1.defineEntity)()({
     },
     // Relationship definitions
     relationships: {
+        // Serialisation-only: roles are hydrated through the Membership path
+        // (see foundations/membership/queries/membership.query.ts) — no single-hop
+        // (user)-[:HAS_MEMBERSHIP]->(role) edge exists. The serialiser maps by key +
+        // model, and no generic descriptor-driven writer touches this relationship
+        // (UserRepository/UserService do not extend AbstractRepository/AbstractService).
         role: {
             model: role_meta_1.roleMeta,
             direction: "out",
-            relationship: "MEMBER_OF",
+            relationship: "HAS_MEMBERSHIP",
             cardinality: "many",
             dtoKey: "roles",
         },

package/dist/foundations/user/entities/user.js.map

@@ -1 +1 @@
-{"version":3,"file":"user.js","sourceRoot":"","sources":["../../../../src/foundations/user/entities/user.ts"],"names":[],"mappings":";;;AAAA,4CAA0E;AAE1E,4DAAmE;AAEnE,mEAA+D;AAE/D,6DAAyD;AACzD,iCAAqC;AACrC,2CAA4E;AA4B5E;;;;;GAKG;AACU,QAAA,cAAc,GAAG,IAAA,qBAAY,GAAQ,CAAC;IACjD,GAAG,oBAAQ;IAEX,cAAc,EAAE,CAAC,cAAS,CAAC;IAE3B,oBAAoB;IACpB,MAAM,EAAE;QACN,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QACzC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACvB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE;QACtD,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;gBAClC,IAAI,CAAC,IAAI,CAAC,MAAM;oBAAE,OAAO,SAAS,CAAC;gBACnC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBACjE,OAAO,MAAM,QAAQ,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1F,CAAC;SACF;QACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE;QACzC,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE;QAC3C,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE;QAC1C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,cAAc,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE;QAC9D,eAAe,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE;QAC/D,gBAAgB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,kBAAkB,EAAE,IAAI,EAAE;QAC/D,kBAAkB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE;KACnE;IAED,mDAAmD;IACnD,aAAa,EAAE;QACb,SAAS,EAAE;YACT,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM;SACxC;KACF;IAED,2BAA2B;IAC3B,aAAa,EAAE;QACb,IAAI,EAAE;YACJ,KAAK,EAAE,oBAAQ;YACf,SAAS,EAAE,KAAK;YAChB,YAAY,EAAE,WAAW;YACzB,WAAW,EAAE,MAAM;YACnB,MAAM,EAAE,OAAO;SAChB;QACD,OAAO,EAAE;YACP,KAAK,EAAE,2BAAiB,CAAC,KAAK;YAC9B,SAAS,EAAE,KAAK;YAChB,YAAY,EAAE,YAAY;YAC1B,WAAW,EAAE,KAAK;SACnB;QACD,MAAM,EAAE;YACN,KAAK,EAAE,wBAAU;YACjB,SAAS,EAAE,KAAK;YAChB,YAAY,EAAE,YAAY;YAC1B,WAAW,EAAE,MAAM;YACnB,MAAM,EAAE,SAAS;SAClB;KACF;CACF,CAAC,CAAC;AAKH,+CAA+C;AAClC,QAAA,eAAe,GAAG,IAAA,0BAAiB,EAAC,sBAAc,EAAE,qBAAS,CAAC,CAAC;AAC/D,QAAA,kBAAkB,GAAG,IAAA,0BAAiB,EAAC,sBAAc,EAAE,wBAAY,CAAC,CAAC;AACrE,QAAA,gBAAgB,GAAG,IAAA,0BAAiB,EAAC,sBAAc,EAAE,sBAAU,CAAC,CAAC"}
+{"version":3,"file":"user.js","sourceRoot":"","sources":["../../../../src/foundations/user/entities/user.ts"],"names":[],"mappings":";;;AAAA,4CAA0E;AAE1E,4DAAmE;AAEnE,mEAA+D;AAE/D,6DAAyD;AACzD,iCAAqC;AACrC,2CAA4E;AA4B5E;;;;;GAKG;AACU,QAAA,cAAc,GAAG,IAAA,qBAAY,GAAQ,CAAC;IACjD,GAAG,oBAAQ;IAEX,cAAc,EAAE,CAAC,cAAS,CAAC;IAE3B,oBAAoB;IACpB,MAAM,EAAE;QACN,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QACzC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACvB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE;QACtD,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;gBAClC,IAAI,CAAC,IAAI,CAAC,MAAM;oBAAE,OAAO,SAAS,CAAC;gBACnC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBACjE,OAAO,MAAM,QAAQ,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1F,CAAC;SACF;QACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE;QACzC,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE;QAC3C,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE;QAC1C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,cAAc,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE;QAC9D,eAAe,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE;QAC/D,gBAAgB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,kBAAkB,EAAE,IAAI,EAAE;QAC/D,kBAAkB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE;KACnE;IAED,mDAAmD;IACnD,aAAa,EAAE;QACb,SAAS,EAAE;YACT,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM;SACxC;KACF;IAED,2BAA2B;IAC3B,aAAa,EAAE;QACb,qEAAqE;QACrE,2EAA2E;QAC3E,6EAA6E;QAC7E,2EAA2E;QAC3E,iFAAiF;QACjF,IAAI,EAAE;YACJ,KAAK,EAAE,oBAAQ;YACf,SAAS,EAAE,KAAK;YAChB,YAAY,EAAE,gBAAgB;YAC9B,WAAW,EAAE,MAAM;YACnB,MAAM,EAAE,OAAO;SAChB;QACD,OAAO,EAAE;YACP,KAAK,EAAE,2BAAiB,CAAC,KAAK;YAC9B,SAAS,EAAE,KAAK;YAChB,YAAY,EAAE,YAAY;YAC1B,WAAW,EAAE,KAAK;SACnB;QACD,MAAM,EAAE;YACN,KAAK,EAAE,wBAAU;YACjB,SAAS,EAAE,KAAK;YAChB,YAAY,EAAE,YAAY;YAC1B,WAAW,EAAE,MAAM;YACnB,MAAM,EAAE,SAAS;SAClB;KACF;CACF,CAAC,CAAC;AAKH,+CAA+C;AAClC,QAAA,eAAe,GAAG,IAAA,0BAAiB,EAAC,sBAAc,EAAE,qBAAS,CAAC,CAAC;AAC/D,QAAA,kBAAkB,GAAG,IAAA,0BAAiB,EAAC,sBAAc,EAAE,wBAAY,CAAC,CAAC;AACrE,QAAA,gBAAgB,GAAG,IAAA,0BAAiB,EAAC,sBAAc,EAAE,sBAAU,CAAC,CAAC"}

package/dist/foundations/user/repositories/user.repository.d.ts

@@ -12,6 +12,7 @@ export declare class UserRepository implements OnModuleInit {
     onModuleInit(): Promise<void>;
     makeCompanyAdmin(params: {
         userId: string;
+        companyId: string;
     }): Promise<void>;
     findOneForAdmin(params: {
         userId: string;

package/dist/foundations/user/repositories/user.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.repository.d.ts","sourceRoot":"","sources":["../../../../src/foundations/user/repositories/user.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE1D,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,OAAO,EAAE,sBAAsB,EAAE,MAAM,2DAA2D,CAAC;AACnG,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAM1E,OAAO,EAAE,IAAI,EAAkB,MAAM,0BAA0B,CAAC;AAEhE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAE5E,qBACa,cAAe,YAAW,YAAY;IAE/C,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBAFjB,KAAK,EAAE,YAAY,EACnB,GAAG,EAAE,UAAU,EACf,iBAAiB,EAAE,iBAAiB;IAGjD,YAAY;IAkBZ,gBAAgB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE;IAiB3C,eAAe,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBhE;;;;OAIG;IACG,qBAAqB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BhE,YAAY,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAsDvD,YAAY,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA0B3E,WAAW,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA2B/E,UAAU,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBnD,QAAQ,CAAC,MAAM,EAAE;QACrB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,MAAM,CAAC,EAAE,sBAAsB,CAAC;KACjC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAkCb,oBAAoB,CAAC,MAAM,EAAE;QACjC,UAAU,EAAE,MAAM,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,cAAc,CAAC,EAAE,OAAO,CAAC;KAC1B,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAuBb,iBAAiB,CAAC,MAAM,EAAE;QAC9B,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,MAAM,CAAC,EAAE,sBAAsB,CAAC;KACjC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAoBb,UAAU,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,sBAAsB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IA0BtG,aAAa,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,sBAAsB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IA2BzG,MAAM,CAAC,MAAM,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC7B,GAAG,OAAO,CAAC,IAAI,CAAC;IA6DX,SAAS,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBpD,GAAG,CAAC,MAAM,EAAE;QAChB,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,cAAc,CAAC,EAAE,OAAO,CAAC;KAC1B,GAAG,OAAO,CAAC,IAAI,CAAC;IAyDX,YAAY,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBxE,UAAU,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBrD,SAAS,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBlE,WAAW,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBtE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBjD,aAAa,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBxE,kBAAkB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBnF;;;OAGG;IACG,0BAA0B,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAenD;;;OAGG;IACG,mCAAmC,CAAC,MAAM,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAoBhG;;;OAGG;IACG,qBAAqB,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;CAkB5E"}
+{"version":3,"file":"user.repository.d.ts","sourceRoot":"","sources":["../../../../src/foundations/user/repositories/user.repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE1D,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,OAAO,EAAE,sBAAsB,EAAE,MAAM,2DAA2D,CAAC;AACnG,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAY1E,OAAO,EAAE,IAAI,EAAkB,MAAM,0BAA0B,CAAC;AAEhE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAE5E,qBACa,cAAe,YAAW,YAAY;IAE/C,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;gBAFjB,KAAK,EAAE,YAAY,EACnB,GAAG,EAAE,UAAU,EACf,iBAAiB,EAAE,iBAAiB;IAGjD,YAAY;IAkBZ,gBAAgB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;IAmB9D,eAAe,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBhE;;;;OAIG;IACG,qBAAqB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BhE,YAAY,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAsDvD,YAAY,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA0B3E,WAAW,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAgC/E,UAAU,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBnD,QAAQ,CAAC,MAAM,EAAE;QACrB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,MAAM,CAAC,EAAE,sBAAsB,CAAC;KACjC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAkCb,oBAAoB,CAAC,MAAM,EAAE;QACjC,UAAU,EAAE,MAAM,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,cAAc,CAAC,EAAE,OAAO,CAAC;KAC1B,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAuBb,iBAAiB,CAAC,MAAM,EAAE;QAC9B,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,MAAM,CAAC,EAAE,sBAAsB,CAAC;KACjC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAoBb,UAAU,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,sBAAsB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IA0BtG,aAAa,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,sBAAsB,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IA+BzG,MAAM,CAAC,MAAM,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC7B,GAAG,OAAO,CAAC,IAAI,CAAC;IAyDX,SAAS,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBpD,GAAG,CAAC,MAAM,EAAE;QAChB,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,cAAc,CAAC,EAAE,OAAO,CAAC;KAC1B,GAAG,OAAO,CAAC,IAAI,CAAC;IAyDX,YAAY,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBxE,UAAU,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBrD,SAAS,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBlE,WAAW,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBtE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBjD,aAAa,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IA4BxE,kBAAkB,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBnF;;;OAGG;IACG,0BAA0B,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAiBnD;;;OAGG;IACG,mCAAmC,CAAC,MAAM,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IA0BhG;;;OAGG;IACG,qBAAqB,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;CAmB5E"}