@carlonicora/nestjs-neo4jsonapi 1.62.7 → 1.64.0

package/dist/foundations/assistant-message/repositories/assistant-message.repository.js

@@ -0,0 +1,119 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var AssistantMessageRepository_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AssistantMessageRepository = void 0;
+const common_1 = require("@nestjs/common");
+const nestjs_cls_1 = require("nestjs-cls");
+const abstract_repository_1 = require("../../../core/neo4j/abstracts/abstract.repository");
+const neo4j_service_1 = require("../../../core/neo4j/services/neo4j.service");
+const security_service_1 = require("../../../core/security/services/security.service");
+const registry_1 = require("../../../common/registries/registry");
+const assistant_message_1 = require("../entities/assistant-message");
+/**
+ * AssistantMessageRepository
+ *
+ * Owner-RBAC is inherited from the parent Assistant (a user may only see the
+ * messages that belong to their own assistants). Company scope is applied
+ * automatically via `buildDefaultMatch()` (`isCompanyScoped: true`).
+ */
+let AssistantMessageRepository = AssistantMessageRepository_1 = class AssistantMessageRepository extends abstract_repository_1.AbstractRepository {
+    constructor(neo4j, securityService, clsService) {
+        super(neo4j, securityService, clsService);
+        this.descriptor = assistant_message_1.AssistantMessageDescriptor;
+        this.refLogger = new common_1.Logger(AssistantMessageRepository_1.name);
+    }
+    buildUserHasAccess() {
+        const { nodeName } = this.descriptor.model;
+        return `WITH ${nodeName}
+            WHERE EXISTS {
+              MATCH (${nodeName})<-[:HAS_MESSAGE]-(:Assistant)-[:CREATED_BY]->(:User {id: $currentUserId})
+            }
+            WITH ${nodeName}`;
+    }
+    /**
+     * Resolve the next position to assign to a new AssistantMessage under the
+     * given Assistant. Returns 0 for an empty thread, otherwise max(position)+1.
+     */
+    async getNextPosition(params) {
+        const result = await this.neo4j.read(`
+        MATCH (:Assistant {id: $assistantId})-[:HAS_MESSAGE]->(m:AssistantMessage)
+        RETURN coalesce(max(m.position), -1) + 1 AS next
+      `, { assistantId: params.assistantId });
+        const rec = result.records[0];
+        if (!rec)
+            return 0;
+        const value = rec.get("next");
+        return typeof value?.toNumber === "function" ? value.toNumber() : Number(value ?? 0);
+    }
+    /**
+     * Materialise one (:AssistantMessage)-[:REFERENCES { reason, createdAt }]->(target)
+     * edge per reference. JSON:API type → Neo4j label is resolved through the
+     * pre-seeded modelRegistry. Unknown types are logged and skipped.
+     *
+     * Idempotent via MERGE.
+     */
+    async linkReferences(params) {
+        for (const ref of params.references) {
+            const model = registry_1.modelRegistry.getByType(ref.type);
+            if (!model) {
+                this.refLogger.warn(`linkReferences: unknown JSON:API type "${ref.type}" for ref id=${ref.id} — skipping edge (message id=${params.messageId})`);
+                continue;
+            }
+            const label = model.labelName;
+            await this.neo4j.writeOne({
+                query: `
+          MATCH (m:AssistantMessage {id: $messageId})
+          MATCH (e:${label} {id: $refId})
+          MERGE (m)-[r:REFERENCES]->(e)
+          SET r.reason = $reason, r.createdAt = coalesce(r.createdAt, datetime())
+        `,
+                queryParams: {
+                    messageId: params.messageId,
+                    refId: ref.id,
+                    reason: ref.reason,
+                },
+            });
+        }
+    }
+    /**
+     * For the given message IDs, return every (messageId, targetType, targetId) triple
+     * for the outgoing :REFERENCES edges. Label is mapped to JSON:API type via modelRegistry.
+     */
+    async findReferencedTypeIdPairs(params) {
+        if (params.messageIds.length === 0)
+            return [];
+        const result = await this.neo4j.read(`
+        MATCH (m:AssistantMessage)-[:REFERENCES]->(e)
+        WHERE m.id IN $messageIds
+        RETURN m.id AS messageId, labels(e)[0] AS label, e.id AS id
+      `, { messageIds: params.messageIds });
+        const pairs = [];
+        for (const rec of result.records) {
+            const label = rec.get("label");
+            const model = registry_1.modelRegistry.getByLabelName(label);
+            if (!model)
+                continue; // unknown label — skip silently
+            pairs.push({
+                messageId: rec.get("messageId"),
+                type: model.type,
+                id: rec.get("id"),
+            });
+        }
+        return pairs;
+    }
+};
+exports.AssistantMessageRepository = AssistantMessageRepository;
+exports.AssistantMessageRepository = AssistantMessageRepository = AssistantMessageRepository_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [neo4j_service_1.Neo4jService, security_service_1.SecurityService, nestjs_cls_1.ClsService])
+], AssistantMessageRepository);
+//# sourceMappingURL=assistant-message.repository.js.map

package/dist/foundations/assistant-message/repositories/assistant-message.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assistant-message.repository.js","sourceRoot":"","sources":["../../../../src/foundations/assistant-message/repositories/assistant-message.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAoD;AACpD,2CAAwC;AACxC,2FAAuF;AACvF,8EAA0E;AAC1E,uFAAmF;AACnF,kEAAoE;AAEpE,qEAA6F;AAE7F;;;;;;GAMG;AAEI,IAAM,0BAA0B,kCAAhC,MAAM,0BAA2B,SAAQ,wCAG/C;IAGC,YAAY,KAAmB,EAAE,eAAgC,EAAE,UAAsB;QACvF,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;QAHzB,eAAU,GAAG,8CAA0B,CAAC;QAe1C,cAAS,GAAG,IAAI,eAAM,CAAC,4BAA0B,CAAC,IAAI,CAAC,CAAC;IAXzE,CAAC;IAES,kBAAkB;QAC1B,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAC3C,OAAO,QAAQ,QAAQ;;uBAEJ,QAAQ;;mBAEZ,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAID;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,MAA+B;QACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAClC;;;OAGC,EACD,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CACpC,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG;YAAE,OAAO,CAAC,CAAC;QACnB,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9B,OAAO,OAAO,KAAK,EAAE,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;IACvF,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,cAAc,CAAC,MAA6D;QAChF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,wBAAa,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,IAAI,CAAC,SAAS,CAAC,IAAI,CACjB,0CAA0C,GAAG,CAAC,IAAI,gBAAgB,GAAG,CAAC,EAAE,gCAAgC,MAAM,CAAC,SAAS,GAAG,CAC5H,CAAC;gBACF,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC;YAC9B,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACxB,KAAK,EAAE;;qBAEM,KAAK;;;SAGjB;gBACD,WAAW,EAAE;oBACX,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,KAAK,EAAE,GAAG,CAAC,EAAE;oBACb,MAAM,EAAE,GAAG,CAAC,MAAM;iBACnB;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,yBAAyB,CAAC,MAE/B;QACC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAClC;;;;OAIC,EACD,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAClC,CAAC;QACF,MAAM,KAAK,GAAsD,EAAE,CAAC;QACpE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAW,CAAC;YACzC,MAAM,KAAK,GAAG,wBAAa,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAClD,IAAI,CAAC,KAAK;gBAAE,SAAS,CAAC,gCAAgC;YACtD,KAAK,CAAC,IAAI,CAAC;gBACT,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAW;gBACzC,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAW;aAC5B,CAAC,CAAC;QACL,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAA;AArGY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,mBAAU,GAAE;qCAOQ,4BAAY,EAAmB,kCAAe,EAAc,uBAAU;GAN9E,0BAA0B,CAqGtC"}

package/dist/foundations/assistant-message/services/assistant-message.service.d.ts

@@ -0,0 +1,31 @@
+import { ClsService } from "nestjs-cls";
+import { JsonApiService } from "../../../core/jsonapi/services/jsonapi.service";
+import { AbstractService } from "../../../core/neo4j/abstracts/abstract.service";
+import { AssistantMessage, AssistantMessageDescriptor } from "../entities/assistant-message";
+import { AssistantMessageRepository } from "../repositories/assistant-message.repository";
+export declare class AssistantMessageService extends AbstractService<AssistantMessage, typeof AssistantMessageDescriptor.relationships> {
+    protected readonly descriptor: import("../../..").EntityDescriptor<AssistantMessage, {
+        assistant: {
+            model: import("../../..").DataMeta;
+            direction: "in";
+            relationship: string;
+            cardinality: "one";
+            dtoKey: string;
+            required: true;
+            immutable: true;
+        };
+        references: {
+            model: import("../../..").DataMeta;
+            direction: "out";
+            relationship: string;
+            cardinality: "many";
+            dtoKey: string;
+            polymorphic: {
+                candidates: any[];
+                discriminator: (data: import("../../..").PolymorphicDiscriminatorData) => import("../../..").DataModelInterface<any>;
+            };
+        };
+    }>;
+    constructor(jsonApiService: JsonApiService, assistantMessageRepository: AssistantMessageRepository, clsService: ClsService);
+}
+//# sourceMappingURL=assistant-message.service.d.ts.map

package/dist/foundations/assistant-message/services/assistant-message.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assistant-message.service.d.ts","sourceRoot":"","sources":["../../../../src/foundations/assistant-message/services/assistant-message.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,gDAAgD,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,gDAAgD,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAE1F,qBACa,uBAAwB,SAAQ,eAAe,CAC1D,gBAAgB,EAChB,OAAO,0BAA0B,CAAC,aAAa,CAChD;IACC,SAAS,CAAC,QAAQ,CAAC,UAAU;;;;;;;;;;;;;;;;;;;;;OAA8B;gBAGzD,cAAc,EAAE,cAAc,EAC9B,0BAA0B,EAAE,0BAA0B,EACtD,UAAU,EAAE,UAAU;CAIzB"}

package/dist/foundations/assistant-message/services/assistant-message.service.js

@@ -0,0 +1,32 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AssistantMessageService = void 0;
+const common_1 = require("@nestjs/common");
+const nestjs_cls_1 = require("nestjs-cls");
+const jsonapi_service_1 = require("../../../core/jsonapi/services/jsonapi.service");
+const abstract_service_1 = require("../../../core/neo4j/abstracts/abstract.service");
+const assistant_message_1 = require("../entities/assistant-message");
+const assistant_message_repository_1 = require("../repositories/assistant-message.repository");
+let AssistantMessageService = class AssistantMessageService extends abstract_service_1.AbstractService {
+    constructor(jsonApiService, assistantMessageRepository, clsService) {
+        super(jsonApiService, assistantMessageRepository, clsService, assistant_message_1.AssistantMessageDescriptor.model);
+        this.descriptor = assistant_message_1.AssistantMessageDescriptor;
+    }
+};
+exports.AssistantMessageService = AssistantMessageService;
+exports.AssistantMessageService = AssistantMessageService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [jsonapi_service_1.JsonApiService,
+        assistant_message_repository_1.AssistantMessageRepository,
+        nestjs_cls_1.ClsService])
+], AssistantMessageService);
+//# sourceMappingURL=assistant-message.service.js.map

package/dist/foundations/assistant-message/services/assistant-message.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assistant-message.service.js","sourceRoot":"","sources":["../../../../src/foundations/assistant-message/services/assistant-message.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,2CAAwC;AACxC,oFAAgF;AAChF,qFAAiF;AACjF,qEAA6F;AAC7F,+FAA0F;AAGnF,IAAM,uBAAuB,GAA7B,MAAM,uBAAwB,SAAQ,kCAG5C;IAGC,YACE,cAA8B,EAC9B,0BAAsD,EACtD,UAAsB;QAEtB,KAAK,CAAC,cAAc,EAAE,0BAA0B,EAAE,UAAU,EAAE,8CAA0B,CAAC,KAAK,CAAC,CAAC;QAP/E,eAAU,GAAG,8CAA0B,CAAC;IAQ3D,CAAC;CACF,CAAA;AAbY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,mBAAU,GAAE;qCAQO,gCAAc;QACF,yDAA0B;QAC1C,uBAAU;GATb,uBAAuB,CAanC"}

package/dist/foundations/foundations.modules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"foundations.modules.d.ts","sourceRoot":"","sources":["../../src/foundations/foundations.modules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAU,MAAM,gBAAgB,CAAC;AAQvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,kDAAkD,CAAC;AAE1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAC;AA0BvF;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,oBAAoB,CAAC;CACjC;AAuCD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBACa,iBAAiB;IAC5B;;;;;OAKG;IACH,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,uBAAuB,GAAG,aAAa;CAWhE"}
+{"version":3,"file":"foundations.modules.d.ts","sourceRoot":"","sources":["../../src/foundations/foundations.modules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAU,MAAM,gBAAgB,CAAC;AASvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,kDAAkD,CAAC;AAE1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAC;AA0BvF;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAC1C,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,oBAAoB,CAAC;CACjC;AAwCD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBACa,iBAAiB;IAC5B;;;;;OAKG;IACH,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,uBAAuB,GAAG,aAAa;CAWhE"}

package/dist/foundations/foundations.modules.js

@@ -9,6 +9,7 @@ var FoundationsModule_1;
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.FoundationsModule = void 0;
 const common_1 = require("@nestjs/common");
+const assistant_module_1 = require("./assistant/assistant.module");
 const atomicfact_module_1 = require("./atomicfact/atomicfact.module");
 const audit_module_1 = require("./audit/audit.module");
 const auth_module_1 = require("./auth/auth.module");
@@ -46,6 +47,7 @@ const waitlist_module_1 = require("./waitlist/waitlist.module");
  * Queue registration is handled centrally by QueueModule (via baseConfig.chunkQueues).
  */
 const STATIC_FOUNDATION_MODULES = [
+    assistant_module_1.AssistantModule,
     atomicfact_module_1.AtomicFactModule,
     audit_module_1.AuditModule,
     auth_module_1.AuthModule,

package/dist/foundations/foundations.modules.js.map

@@ -1 +1 @@
-{"version":3,"file":"foundations.modules.js","sourceRoot":"","sources":["../../src/foundations/foundations.modules.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAuD;AACvD,sEAAkE;AAClE,uDAAmD;AACnD,oDAAgD;AAChD,uDAAmD;AACnD,6DAAyD;AACzD,6DAAyD;AACzD,6DAAyD;AAEzD,gEAA4D;AAE5D,4EAAuE;AACvE,6DAAyD;AACzD,0DAAqD;AACrD,sEAAkE;AAClE,0DAAsD;AACtD,4EAAwE;AACxE,uDAAmD;AACnD,oDAAgD;AAChD,mEAA+D;AAC/D,oDAAgD;AAChD,8CAA0C;AAC1C,kFAA6E;AAC7E,iDAAmD;AACnD,qDAAuD;AACvD,mEAAoE;AACpE,+DAAiE;AACjE,4EAAuE;AACvE,kFAA6E;AAC7E,0DAAsD;AACtD,4EAAuE;AACvE,sEAAkE;AAClE,sEAAiE;AACjE,oDAAgD;AAChD,gEAA4D;AAY5D;;;GAGG;AACH,MAAM,yBAAyB,GAAG;IAChC,oCAAgB;IAChB,0BAAW;IACX,wBAAU;IACV,0BAAW;IACX,8BAAa;IACb,8BAAa;IACb,uCAAiB;IACjB,8BAAa;IACb,2BAAW;IACX,oCAAgB;IAChB,4BAAY;IACZ,wCAAkB;IAClB,0BAAW;IACX,wBAAU;IACV,kCAAe;IACf,wBAAU;IACV,oBAAQ;IACR,oCAAgB;IAChB,mCAAe;IACf,wBAAU;IACV,gCAAc;IACd,4BAAY;IACZ,iDAAyB;IACzB,8CAAwB;IACxB,gCAAiB;IACjB,oCAAmB;IACnB,2CAAmB;IACnB,uCAAiB;IACjB,2CAAmB;IACnB,uCAAiB;CAClB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEI,IAAM,iBAAiB,yBAAvB,MAAM,iBAAiB;IAC5B;;;;;OAKG;IACH,MAAM,CAAC,OAAO,CAAC,MAAgC;QAC7C,OAAO;YACL,MAAM,EAAE,mBAAiB;YACzB,OAAO,EAAE;gBACP,GAAG,yBAAyB;gBAC5B,8BAAa,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC;gBAC/C,gCAAc,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;aACzC;YACD,OAAO,EAAE,CAAC,GAAG,yBAAyB,EAAE,8BAAa,EAAE,gCAAc,CAAC;SACvE,CAAC;IACJ,CAAC;CACF,CAAA;AAlBY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,iBAAiB,CAkB7B"}
+{"version":3,"file":"foundations.modules.js","sourceRoot":"","sources":["../../src/foundations/foundations.modules.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAuD;AACvD,mEAA+D;AAC/D,sEAAkE;AAClE,uDAAmD;AACnD,oDAAgD;AAChD,uDAAmD;AACnD,6DAAyD;AACzD,6DAAyD;AACzD,6DAAyD;AAEzD,gEAA4D;AAE5D,4EAAuE;AACvE,6DAAyD;AACzD,0DAAqD;AACrD,sEAAkE;AAClE,0DAAsD;AACtD,4EAAwE;AACxE,uDAAmD;AACnD,oDAAgD;AAChD,mEAA+D;AAC/D,oDAAgD;AAChD,8CAA0C;AAC1C,kFAA6E;AAC7E,iDAAmD;AACnD,qDAAuD;AACvD,mEAAoE;AACpE,+DAAiE;AACjE,4EAAuE;AACvE,kFAA6E;AAC7E,0DAAsD;AACtD,4EAAuE;AACvE,sEAAkE;AAClE,sEAAiE;AACjE,oDAAgD;AAChD,gEAA4D;AAY5D;;;GAGG;AACH,MAAM,yBAAyB,GAAG;IAChC,kCAAe;IACf,oCAAgB;IAChB,0BAAW;IACX,wBAAU;IACV,0BAAW;IACX,8BAAa;IACb,8BAAa;IACb,uCAAiB;IACjB,8BAAa;IACb,2BAAW;IACX,oCAAgB;IAChB,4BAAY;IACZ,wCAAkB;IAClB,0BAAW;IACX,wBAAU;IACV,kCAAe;IACf,wBAAU;IACV,oBAAQ;IACR,oCAAgB;IAChB,mCAAe;IACf,wBAAU;IACV,gCAAc;IACd,4BAAY;IACZ,iDAAyB;IACzB,8CAAwB;IACxB,gCAAiB;IACjB,oCAAmB;IACnB,2CAAmB;IACnB,uCAAiB;IACjB,2CAAmB;IACnB,uCAAiB;CAClB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEI,IAAM,iBAAiB,yBAAvB,MAAM,iBAAiB;IAC5B;;;;;OAKG;IACH,MAAM,CAAC,OAAO,CAAC,MAAgC;QAC7C,OAAO;YACL,MAAM,EAAE,mBAAiB;YACzB,OAAO,EAAE;gBACP,GAAG,yBAAyB;gBAC5B,8BAAa,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC;gBAC/C,gCAAc,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;aACzC;YACD,OAAO,EAAE,CAAC,GAAG,yBAAyB,EAAE,8BAAa,EAAE,gCAAc,CAAC;SACvE,CAAC;IACJ,CAAC;CACF,CAAA;AAlBY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,iBAAiB,CAkB7B"}

package/dist/foundations/index.d.ts

@@ -2,6 +2,8 @@
  * Foundation modules - domain-specific business logic modules
  */
 export * from "./foundations.modules";
+export * from "./assistant";
+export * from "./assistant-message";
 export * from "./atomicfact";
 export * from "./audit";
 export * from "./auth";

package/dist/foundations/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/foundations/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,cAAc,uBAAuB,CAAC;AAGtC,cAAc,cAAc,CAAC;AAC7B,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AACzB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,QAAQ,CAAC;AACvB,cAAc,MAAM,CAAC;AACrB,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,QAAQ,CAAC;AACvB,cAAc,QAAQ,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/foundations/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,cAAc,uBAAuB,CAAC;AAGtC,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC;AAC7B,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AACzB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,QAAQ,CAAC;AACvB,cAAc,MAAM,CAAC;AACrB,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,QAAQ,CAAC;AACvB,cAAc,QAAQ,CAAC"}

package/dist/foundations/index.js

@@ -20,6 +20,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 // Centralized FoundationsModule - import all foundation modules with single forRoot()
 __exportStar(require("./foundations.modules"), exports);
 // Individual foundation modules with entities, metas, repositories, and services
+__exportStar(require("./assistant"), exports);
+__exportStar(require("./assistant-message"), exports);
 __exportStar(require("./atomicfact"), exports);
 __exportStar(require("./audit"), exports);
 __exportStar(require("./auth"), exports);

package/dist/foundations/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/foundations/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;AAEH,sFAAsF;AACtF,wDAAsC;AAEtC,iFAAiF;AACjF,+CAA6B;AAC7B,0CAAwB;AACxB,yCAAuB;AACvB,0CAAwB;AACxB,4CAA0B;AAC1B,4CAA0B;AAC1B,4CAA0B;AAC1B,4CAA0B;AAC1B,iDAA+B;AAC/B,4CAA0B;AAC1B,2CAAyB;AACzB,+CAA6B;AAC7B,2CAAyB;AACzB,iDAA+B;AAC/B,0CAAwB;AACxB,yCAAuB;AACvB,6CAA2B;AAC3B,8CAA4B;AAC5B,yCAAuB;AACvB,uCAAqB;AACrB,2CAAyB;AACzB,+CAA6B;AAC7B,+CAA6B;AAC7B,yCAAuB;AACvB,yCAAuB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/foundations/index.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;AAEH,sFAAsF;AACtF,wDAAsC;AAEtC,iFAAiF;AACjF,8CAA4B;AAC5B,sDAAoC;AACpC,+CAA6B;AAC7B,0CAAwB;AACxB,yCAAuB;AACvB,0CAAwB;AACxB,4CAA0B;AAC1B,4CAA0B;AAC1B,4CAA0B;AAC1B,4CAA0B;AAC1B,iDAA+B;AAC/B,4CAA0B;AAC1B,2CAAyB;AACzB,+CAA6B;AAC7B,2CAAyB;AACzB,iDAA+B;AAC/B,0CAAwB;AACxB,yCAAuB;AACvB,6CAA2B;AAC3B,8CAA4B;AAC5B,yCAAuB;AACvB,uCAAqB;AACrB,2CAAyB;AACzB,+CAA6B;AAC7B,+CAA6B;AAC7B,yCAAuB;AACvB,yCAAuB"}

package/dist/foundations/rbac/controllers/rbac-dev.controller.d.ts

@@ -0,0 +1,50 @@
+import type { RbacMatrix } from "../dsl/types";
+interface RbacMatrixPutBody {
+    data: {
+        type: string;
+        id?: string;
+        attributes: {
+            matrix: RbacMatrix;
+            roleNames: Record<string, string>;
+            moduleNames: Record<string, string>;
+            outputPath: string;
+        };
+    };
+}
+/**
+ * Dev-only endpoints for editing the rbac matrix.
+ *
+ * Registered ONLY when `devMode` is enabled on RbacModule.register (see
+ * `apps/api/src/features/features.modules.ts`).
+ *
+ * Both endpoints speak JSON:API (single-resource envelopes) so the frontend
+ * can consume them via the standard `callApi()` pipeline instead of a
+ * bespoke raw-fetch escape hatch.
+ */
+export declare class RbacDevController {
+    private readonly matrix;
+    private readonly moduleUserPaths;
+    constructor(matrix: RbacMatrix | null, moduleUserPaths: Record<string, readonly string[]> | null);
+    getMatrix(): {
+        data: {
+            type: string;
+            id: string;
+            attributes: {
+                matrix: RbacMatrix<Record<string, readonly string[]>>;
+                modulePaths: Record<string, readonly string[]>;
+            };
+        };
+    };
+    putMatrix(body: RbacMatrixPutBody): Promise<{
+        data: {
+            type: string;
+            id: string;
+            attributes: {
+                bytesWritten: number;
+                path: string;
+            };
+        };
+    }>;
+}
+export {};
+//# sourceMappingURL=rbac-dev.controller.d.ts.map

package/dist/foundations/rbac/controllers/rbac-dev.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac-dev.controller.d.ts","sourceRoot":"","sources":["../../../../src/foundations/rbac/controllers/rbac-dev.controller.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAa,UAAU,EAAE,MAAM,cAAc,CAAC;AA8C1D,UAAU,iBAAiB;IACzB,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,UAAU,EAAE;YACV,MAAM,EAAE,UAAU,CAAC;YACnB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAClC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACpC,UAAU,EAAE,MAAM,CAAC;SACpB,CAAC;KACH,CAAC;CACH;AAED;;;;;;;;;GASG;AACH,qBACa,iBAAiB;IAEa,OAAO,CAAC,QAAQ,CAAC,MAAM;IAG9D,OAAO,CAAC,QAAQ,CAAC,eAAe;gBAHwB,MAAM,EAAE,UAAU,GAAG,IAAI,EAGhE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,GAAG,IAAI;IAI5E,SAAS;;;;;;;;;;IAcH,SAAS,CAAS,IAAI,EAAE,iBAAiB;;;;;;;;;;CA8BhD"}

package/dist/foundations/rbac/controllers/rbac-dev.controller.js

@@ -0,0 +1,172 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RbacDevController = void 0;
+const common_1 = require("@nestjs/common");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const rbac_tokens_1 = require("../rbac.tokens");
+const rbac_constants_1 = require("../rbac.constants");
+const matrix_to_ts_1 = require("../serializer/matrix-to-ts");
+/**
+ * Walk up from `startDir` looking for `pnpm-workspace.yaml`. Returns that
+ * directory, or `startDir` as a fallback. Used to resolve relative
+ * `outputPath` arguments from the frontend consistently regardless of where
+ * the API process was started from (its `cwd` is `apps/api` in dev).
+ */
+function findMonorepoRoot(startDir) {
+    let current = startDir;
+    while (true) {
+        if (fs.existsSync(path.join(current, "pnpm-workspace.yaml"))) {
+            return current;
+        }
+        const parent = path.dirname(current);
+        if (parent === current)
+            return startDir;
+        current = parent;
+    }
+}
+/**
+ * perm.* tokens are callable hybrids (function + attached `action`/`scope` own
+ * properties). JSON.stringify drops functions, producing `null` inside arrays.
+ * Normalise to plain `{ action, scope }` objects before envelope wrapping.
+ */
+function normaliseMatrix(matrix) {
+    const out = {};
+    for (const [moduleId, block] of Object.entries(matrix)) {
+        if (!block)
+            continue;
+        const newBlock = { default: [] };
+        for (const [key, tokens] of Object.entries(block)) {
+            newBlock[key] = tokens.map((t) => ({ action: t.action, scope: t.scope }));
+        }
+        out[moduleId] = newBlock;
+    }
+    return out;
+}
+/**
+ * JSON:API type emitted / expected by the dev RBAC matrix endpoints.
+ * Kebab-case to match the rest of the codebase (e.g. "permission-mappings").
+ */
+const RBAC_MATRIX_TYPE = "rbac-matrix";
+const RBAC_MATRIX_ID = "singleton";
+/**
+ * Dev-only endpoints for editing the rbac matrix.
+ *
+ * Registered ONLY when `devMode` is enabled on RbacModule.register (see
+ * `apps/api/src/features/features.modules.ts`).
+ *
+ * Both endpoints speak JSON:API (single-resource envelopes) so the frontend
+ * can consume them via the standard `callApi()` pipeline instead of a
+ * bespoke raw-fetch escape hatch.
+ */
+let RbacDevController = class RbacDevController {
+    constructor(matrix, moduleUserPaths) {
+        this.matrix = matrix;
+        this.moduleUserPaths = moduleUserPaths;
+    }
+    getMatrix() {
+        return {
+            data: {
+                type: RBAC_MATRIX_TYPE,
+                id: RBAC_MATRIX_ID,
+                attributes: {
+                    matrix: this.matrix ? normaliseMatrix(this.matrix) : {},
+                    modulePaths: this.moduleUserPaths ?? {},
+                },
+            },
+        };
+    }
+    async putMatrix(body) {
+        const attributes = body?.data?.attributes;
+        if (!attributes) {
+            throw new Error("Invalid JSON:API body: missing data.attributes");
+        }
+        const { matrix, roleNames, moduleNames, outputPath } = attributes;
+        const source = await (0, matrix_to_ts_1.serializeMatrixToTs)(matrix, {
+            roleNames,
+            moduleNames,
+        });
+        const outPath = path.isAbsolute(outputPath)
+            ? outputPath
+            : path.resolve(findMonorepoRoot(process.cwd()), outputPath);
+        fs.writeFileSync(outPath, source);
+        return {
+            data: {
+                type: RBAC_MATRIX_TYPE,
+                id: RBAC_MATRIX_ID,
+                attributes: {
+                    bytesWritten: Buffer.byteLength(source),
+                    path: outPath,
+                },
+            },
+        };
+    }
+};
+exports.RbacDevController = RbacDevController;
+__decorate([
+    (0, common_1.Get)("matrix"),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], RbacDevController.prototype, "getMatrix", null);
+__decorate([
+    (0, common_1.Put)("matrix"),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], RbacDevController.prototype, "putMatrix", null);
+exports.RbacDevController = RbacDevController = __decorate([
+    (0, common_1.Controller)("_dev/rbac"),
+    __param(0, (0, common_1.Optional)()),
+    __param(0, (0, common_1.Inject)(rbac_tokens_1.RBAC_MATRIX_TOKEN)),
+    __param(1, (0, common_1.Optional)()),
+    __param(1, (0, common_1.Inject)(rbac_constants_1.MODULE_USER_PATHS_TOKEN)),
+    __metadata("design:paramtypes", [Object, Object])
+], RbacDevController);
+//# sourceMappingURL=rbac-dev.controller.js.map

package/dist/foundations/rbac/controllers/rbac-dev.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac-dev.controller.js","sourceRoot":"","sources":["../../../../src/foundations/rbac/controllers/rbac-dev.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA8E;AAC9E,uCAAyB;AACzB,2CAA6B;AAC7B,gDAAmD;AACnD,sDAA4D;AAE5D,6DAAiE;AAEjE;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,QAAgB;IACxC,IAAI,OAAO,GAAG,QAAQ,CAAC;IACvB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC,EAAE,CAAC;YAC7D,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,QAAQ,CAAC;QACxC,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,MAAkB;IACzC,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,QAAQ,GAAgC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC9D,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,QAAQ,CAAC,GAAG,CAAC,GAAI,MAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7F,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC,GAAG,QAA8B,CAAC;IACjD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,gBAAgB,GAAG,aAAa,CAAC;AACvC,MAAM,cAAc,GAAG,WAAW,CAAC;AAenC;;;;;;;;;GASG;AAEI,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAC5B,YAC0D,MAAyB,EAGhE,eAAyD;QAHlB,WAAM,GAAN,MAAM,CAAmB;QAGhE,oBAAe,GAAf,eAAe,CAA0C;IACzE,CAAC;IAGJ,SAAS;QACP,OAAO;YACL,IAAI,EAAE;gBACJ,IAAI,EAAE,gBAAgB;gBACtB,EAAE,EAAE,cAAc;gBAClB,UAAU,EAAE;oBACV,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;oBACvD,WAAW,EAAE,IAAI,CAAC,eAAe,IAAI,EAAE;iBACxC;aACF;SACF,CAAC;IACJ,CAAC;IAGK,AAAN,KAAK,CAAC,SAAS,CAAS,IAAuB;QAC7C,MAAM,UAAU,GAAG,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC;QAC1C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,IAAA,kCAAmB,EAAC,MAAM,EAAE;YAC/C,SAAS;YACT,WAAW;SACZ,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YACzC,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;QAE9D,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAElC,OAAO;YACL,IAAI,EAAE;gBACJ,IAAI,EAAE,gBAAgB;gBACtB,EAAE,EAAE,cAAc;gBAClB,UAAU,EAAE;oBACV,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;oBACvC,IAAI,EAAE,OAAO;iBACd;aACF;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AArDY,8CAAiB;AAS5B;IADC,IAAA,YAAG,EAAC,QAAQ,CAAC;;;;kDAYb;AAGK;IADL,IAAA,YAAG,EAAC,QAAQ,CAAC;IACG,WAAA,IAAA,aAAI,GAAE,CAAA;;;;kDA6BtB;4BApDU,iBAAiB;IAD7B,IAAA,mBAAU,EAAC,WAAW,CAAC;IAGnB,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,+BAAiB,CAAC,CAAA;IACrC,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,wCAAuB,CAAC,CAAA;;GAJvB,iBAAiB,CAqD7B"}

package/dist/foundations/rbac/dsl/define-rbac.d.ts

@@ -0,0 +1,15 @@
+import type { RbacMatrix } from "./types";
+/**
+ * Identity function used to attach typing to an rbac matrix literal.
+ *
+ * The generic parameter binds the matrix to a concrete `MODULE_USER_PATHS`
+ * shape so that scoped-path arguments in `perm.update("...")` etc. are
+ * type-checked against the module they are declared under.
+ *
+ * Usage:
+ *   export const rbac = defineRbac<typeof MODULE_USER_PATHS>({
+ *     [ModuleId.Part]: { default: [perm.read], ... },
+ *   });
+ */
+export declare function defineRbac<ModuleUserPaths extends Record<string, readonly string[]>>(matrix: RbacMatrix<ModuleUserPaths>): RbacMatrix<ModuleUserPaths>;
+//# sourceMappingURL=define-rbac.d.ts.map

package/dist/foundations/rbac/dsl/define-rbac.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"define-rbac.d.ts","sourceRoot":"","sources":["../../../../src/foundations/rbac/dsl/define-rbac.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C;;;;;;;;;;;GAWG;AACH,wBAAgB,UAAU,CAAC,eAAe,SAAS,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,EAClF,MAAM,EAAE,UAAU,CAAC,eAAe,CAAC,GAClC,UAAU,CAAC,eAAe,CAAC,CAE7B"}

package/dist/foundations/rbac/dsl/define-rbac.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defineRbac = defineRbac;
+/**
+ * Identity function used to attach typing to an rbac matrix literal.
+ *
+ * The generic parameter binds the matrix to a concrete `MODULE_USER_PATHS`
+ * shape so that scoped-path arguments in `perm.update("...")` etc. are
+ * type-checked against the module they are declared under.
+ *
+ * Usage:
+ *   export const rbac = defineRbac<typeof MODULE_USER_PATHS>({
+ *     [ModuleId.Part]: { default: [perm.read], ... },
+ *   });
+ */
+function defineRbac(matrix) {
+    return matrix;
+}
+//# sourceMappingURL=define-rbac.js.map

package/dist/foundations/rbac/dsl/define-rbac.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"define-rbac.js","sourceRoot":"","sources":["../../../../src/foundations/rbac/dsl/define-rbac.ts"],"names":[],"mappings":";;AAeA,gCAIC;AAhBD;;;;;;;;;;;GAWG;AACH,SAAgB,UAAU,CACxB,MAAmC;IAEnC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/foundations/rbac/dsl/index.d.ts

@@ -0,0 +1,6 @@
+export * from "./types";
+export { perm } from "./perm";
+export { defineRbac } from "./define-rbac";
+export { toPermissionsJson } from "./to-permissions-json";
+export { resolveForRole, resolveDefault, iterateDeclaredEdges, iterateDeclaredModules } from "./resolver";
+//# sourceMappingURL=index.d.ts.map

package/dist/foundations/rbac/dsl/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/foundations/rbac/dsl/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC"}

package/dist/foundations/rbac/dsl/index.js

@@ -0,0 +1,30 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.iterateDeclaredModules = exports.iterateDeclaredEdges = exports.resolveDefault = exports.resolveForRole = exports.toPermissionsJson = exports.defineRbac = exports.perm = void 0;
+__exportStar(require("./types"), exports);
+var perm_1 = require("./perm");
+Object.defineProperty(exports, "perm", { enumerable: true, get: function () { return perm_1.perm; } });
+var define_rbac_1 = require("./define-rbac");
+Object.defineProperty(exports, "defineRbac", { enumerable: true, get: function () { return define_rbac_1.defineRbac; } });
+var to_permissions_json_1 = require("./to-permissions-json");
+Object.defineProperty(exports, "toPermissionsJson", { enumerable: true, get: function () { return to_permissions_json_1.toPermissionsJson; } });
+var resolver_1 = require("./resolver");
+Object.defineProperty(exports, "resolveForRole", { enumerable: true, get: function () { return resolver_1.resolveForRole; } });
+Object.defineProperty(exports, "resolveDefault", { enumerable: true, get: function () { return resolver_1.resolveDefault; } });
+Object.defineProperty(exports, "iterateDeclaredEdges", { enumerable: true, get: function () { return resolver_1.iterateDeclaredEdges; } });
+Object.defineProperty(exports, "iterateDeclaredModules", { enumerable: true, get: function () { return resolver_1.iterateDeclaredModules; } });
+//# sourceMappingURL=index.js.map

package/dist/foundations/rbac/dsl/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/foundations/rbac/dsl/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,0CAAwB;AACxB,+BAA8B;AAArB,4FAAA,IAAI,OAAA;AACb,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,6DAA0D;AAAjD,wHAAA,iBAAiB,OAAA;AAC1B,uCAA0G;AAAjG,0GAAA,cAAc,OAAA;AAAE,0GAAA,cAAc,OAAA;AAAE,gHAAA,oBAAoB,OAAA;AAAE,kHAAA,sBAAsB,OAAA"}

package/dist/foundations/rbac/dsl/perm.d.ts

@@ -0,0 +1,15 @@
+import { Action, PermToken } from "./types";
+type Scoped<A extends Action> = (path: string) => PermToken;
+type PermFn<A extends Action> = {
+    action: A;
+    scope: true;
+} & Scoped<A>;
+export declare const perm: {
+    read: PermFn<"read">;
+    create: PermFn<"create">;
+    update: PermFn<"update">;
+    delete: PermFn<"delete">;
+    full: PermToken<never>[];
+};
+export {};
+//# sourceMappingURL=perm.d.ts.map

package/dist/foundations/rbac/dsl/perm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"perm.d.ts","sourceRoot":"","sources":["../../../../src/foundations/rbac/dsl/perm.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAE5C,KAAK,MAAM,CAAC,CAAC,SAAS,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC;AAE5D,KAAK,MAAM,CAAC,CAAC,SAAS,MAAM,IAAI;IAAE,MAAM,EAAE,CAAC,CAAC;IAAC,KAAK,EAAE,IAAI,CAAA;CAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;AAYvE,eAAO,MAAM,IAAI;;;;;UAUV,SAAS,CAAC,KAAK,CAAC,EAAE;CACxB,CAAC"}

package/dist/foundations/rbac/dsl/perm.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.perm = void 0;
+function build(action) {
+    const fn = (path) => ({ action, scope: path });
+    return Object.assign(fn, { action, scope: true });
+}
+const readT = build("read");
+const createT = build("create");
+const updateT = build("update");
+const deleteT = build("delete");
+exports.perm = {
+    read: readT,
+    create: createT,
+    update: updateT,
+    delete: deleteT,
+    full: [
+        { action: "read", scope: true },
+        { action: "create", scope: true },
+        { action: "update", scope: true },
+        { action: "delete", scope: true },
+    ],
+};
+//# sourceMappingURL=perm.js.map