@carlonicora/nestjs-neo4jsonapi 1.63.0 → 1.65.0

package/dist/foundations/rbac/rbac.tokens.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RBAC_MATRIX_TOKEN = void 0;
+/**
+ * DI token for the declarative RBAC matrix.
+ *
+ * Applications provide an `RbacMatrix` under this token; `RbacReconcilerService`
+ * reads it at bootstrap and reconciles Neo4j against it.
+ *
+ * Note: `MODULE_USER_PATHS_TOKEN` already lives in `rbac.constants.ts` — import
+ * it from there rather than duplicating it here.
+ */
+exports.RBAC_MATRIX_TOKEN = Symbol("RBAC_MATRIX_TOKEN");
+//# sourceMappingURL=rbac.tokens.js.map

package/dist/foundations/rbac/rbac.tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac.tokens.js","sourceRoot":"","sources":["../../../src/foundations/rbac/rbac.tokens.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;GAQG;AACU,QAAA,iBAAiB,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC"}

package/dist/foundations/rbac/serializer/matrix-to-ts.d.ts

@@ -0,0 +1,13 @@
+import type { RbacMatrix } from "../dsl/types";
+interface Options {
+    roleNames: Record<string, string>;
+    moduleNames: Record<string, string>;
+}
+/**
+ * Serialise an RbacMatrix to formatted TypeScript source.
+ * Deterministic: module and role keys are sorted by UUID; tokens are
+ * normalised per action.
+ */
+export declare function serializeMatrixToTs(matrix: RbacMatrix, opts: Options): Promise<string>;
+export {};
+//# sourceMappingURL=matrix-to-ts.d.ts.map

package/dist/foundations/rbac/serializer/matrix-to-ts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"matrix-to-ts.d.ts","sourceRoot":"","sources":["../../../../src/foundations/rbac/serializer/matrix-to-ts.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAa,MAAM,cAAc,CAAC;AAE1D,UAAU,OAAO;IACf,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAmC5F"}

package/dist/foundations/rbac/serializer/matrix-to-ts.js

@@ -0,0 +1,74 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.serializeMatrixToTs = serializeMatrixToTs;
+// packages/nestjs-neo4jsonapi/src/foundations/rbac/serializer/matrix-to-ts.ts
+const prettier_1 = __importDefault(require("prettier"));
+/**
+ * Serialise an RbacMatrix to formatted TypeScript source.
+ * Deterministic: module and role keys are sorted by UUID; tokens are
+ * normalised per action.
+ */
+async function serializeMatrixToTs(matrix, opts) {
+    const moduleIds = Object.keys(matrix).sort();
+    const lines = [];
+    lines.push(`// Auto-maintained by the RBAC UI. Edit via \`pnpm dev\` + UI, or by hand.`);
+    lines.push(``);
+    lines.push(`import { RoleId, ModuleId } from "@neural-erp/shared";`);
+    lines.push(`import { perm, defineRbac } from "@carlonicora/nestjs-neo4jsonapi";`);
+    lines.push(`import { MODULE_USER_PATHS } from "../features/rbac/module-relationships.map";`);
+    lines.push(``);
+    lines.push(`export const rbac = defineRbac<typeof MODULE_USER_PATHS>({`);
+    for (const moduleId of moduleIds) {
+        const block = matrix[moduleId];
+        if (!block)
+            continue;
+        const moduleName = opts.moduleNames[moduleId];
+        if (!moduleName) {
+            throw new Error(`Unknown module UUID: ${moduleId}. Check module-id.map.json.`);
+        }
+        lines.push(`  [ModuleId.${moduleName}]: {`);
+        lines.push(`    default: ${renderTokens(block.default)},`);
+        const roleIds = Object.keys(block)
+            .filter((k) => k !== "default")
+            .sort();
+        for (const roleId of roleIds) {
+            const roleName = opts.roleNames[roleId];
+            if (!roleName)
+                throw new Error(`Unknown role UUID: ${roleId}`);
+            lines.push(`    [RoleId.${roleName}]: ${renderTokens(block[roleId])},`);
+        }
+        lines.push(`  },`);
+    }
+    lines.push(`});`);
+    lines.push(``);
+    const raw = lines.join("\n");
+    return prettier_1.default.format(raw, { parser: "typescript" });
+}
+function renderTokens(tokens) {
+    // `scope === false` has no emission (absence of a token is the "deny"
+    // semantics). Drop defensively before any shape-checking so malformed state
+    // never leaks to disk as `perm.X("false")`.
+    const valid = tokens.filter((t) => t.scope === true || (typeof t.scope === "string" && t.scope.length > 0));
+    // perm.full collapse
+    const isFull = valid.length === 4 && valid.every((t) => t.scope === true) && new Set(valid.map((t) => t.action)).size === 4;
+    if (isFull)
+        return "perm.full";
+    if (valid.length === 0)
+        return "[]";
+    // Render each token
+    const parts = [...valid]
+        .sort((a, b) => {
+        const order = { read: 0, create: 1, update: 2, delete: 3 };
+        return order[a.action] - order[b.action];
+    })
+        .map((t) => {
+        if (t.scope === true)
+            return `perm.${t.action}`;
+        return `perm.${t.action}("${t.scope}")`;
+    });
+    return `[${parts.join(", ")}]`;
+}
+//# sourceMappingURL=matrix-to-ts.js.map

package/dist/foundations/rbac/serializer/matrix-to-ts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"matrix-to-ts.js","sourceRoot":"","sources":["../../../../src/foundations/rbac/serializer/matrix-to-ts.ts"],"names":[],"mappings":";;;;;AAcA,kDAmCC;AAjDD,8EAA8E;AAC9E,wDAAgC;AAQhC;;;;GAIG;AACI,KAAK,UAAU,mBAAmB,CAAC,MAAkB,EAAE,IAAa;IACzE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;IACzF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACrE,KAAK,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;IAClF,KAAK,CAAC,IAAI,CAAC,gFAAgF,CAAC,CAAC;IAC7F,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IAEzE,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,6BAA6B,CAAC,CAAC;QACjF,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,eAAe,UAAU,MAAM,CAAC,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,gBAAgB,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;aAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;aAC9B,IAAI,EAAE,CAAC;QACV,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,EAAE,CAAC,CAAC;YAC/D,KAAK,CAAC,IAAI,CAAC,eAAe,QAAQ,MAAM,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,kBAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,YAAY,CAAC,MAAmB;IACvC,sEAAsE;IACtE,4EAA4E;IAC5E,4CAA4C;IAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAE5G,qBAAqB;IACrB,MAAM,MAAM,GACV,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;IAC/G,IAAI,MAAM;QAAE,OAAO,WAAW,CAAC;IAE/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,oBAAoB;IACpB,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC;SACrB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACb,MAAM,KAAK,GAA2B,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACnF,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;QAChD,OAAO,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC;IAC1C,CAAC,CAAC,CAAC;IACL,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AACjC,CAAC"}

package/dist/foundations/rbac/services/rbac-reconciler.service.d.ts

@@ -0,0 +1,30 @@
+import { OnApplicationBootstrap } from "@nestjs/common";
+import { Neo4jService } from "../../../core/neo4j/services/neo4j.service";
+import { AppLoggingService } from "../../../core/logging/services/logging.service";
+import type { RbacMatrix } from "../dsl/types";
+/**
+ * Applies the declared `RbacMatrix` to Neo4j at application bootstrap.
+ *
+ * Behaviour (per spec §6.3):
+ *  - Administrator role is never written as an HAS_PERMISSIONS edge — the
+ *    security layer short-circuits for it.
+ *  - Module defaults are stored on `Module.permissions`.
+ *  - Role-specific permissions are stored on `(Role)-[:HAS_PERMISSIONS]->(Module)`.
+ *  - Deletions are scoped to modules declared in the matrix: edges for
+ *    undeclared modules are left untouched.
+ *  - Preflight aborts with a clear error if any referenced role or module is
+ *    missing from the DB (seed migrations must run first).
+ */
+export declare class RbacReconcilerService implements OnApplicationBootstrap {
+    private readonly neo4j;
+    private readonly matrix;
+    private readonly logger;
+    constructor(neo4j: Neo4jService, matrix: RbacMatrix | null, logger: AppLoggingService);
+    onApplicationBootstrap(): Promise<void>;
+    private preflight;
+    private findMissing;
+    private readActualState;
+    private computeDiff;
+    private apply;
+}
+//# sourceMappingURL=rbac-reconciler.service.d.ts.map

package/dist/foundations/rbac/services/rbac-reconciler.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac-reconciler.service.d.ts","sourceRoot":"","sources":["../../../../src/foundations/rbac/services/rbac-reconciler.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgC,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACtF,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,gDAAgD,CAAC;AAGnF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAe/C;;;;;;;;;;;;GAYG;AACH,qBACa,qBAAsB,YAAW,sBAAsB;IAEhE,OAAO,CAAC,QAAQ,CAAC,KAAK;IACiB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAC9D,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAFN,KAAK,EAAE,YAAY,EACoB,MAAM,EAAE,UAAU,GAAG,IAAI,EAChE,MAAM,EAAE,iBAAiB;IAGtC,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC;YAsB/B,SAAS;YAyBT,WAAW;YAOX,eAAe;IAsB7B,OAAO,CAAC,WAAW;YAkEL,KAAK;CA4BpB"}

package/dist/foundations/rbac/services/rbac-reconciler.service.js

@@ -0,0 +1,192 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RbacReconcilerService = void 0;
+const common_1 = require("@nestjs/common");
+const neo4j_service_1 = require("../../../core/neo4j/services/neo4j.service");
+const logging_service_1 = require("../../../core/logging/services/logging.service");
+const system_roles_1 = require("../../../common/constants/system.roles");
+const rbac_tokens_1 = require("../rbac.tokens");
+const resolver_1 = require("../dsl/resolver");
+const ADMINISTRATOR_ID = system_roles_1.SystemRoles.Administrator;
+/**
+ * Applies the declared `RbacMatrix` to Neo4j at application bootstrap.
+ *
+ * Behaviour (per spec §6.3):
+ *  - Administrator role is never written as an HAS_PERMISSIONS edge — the
+ *    security layer short-circuits for it.
+ *  - Module defaults are stored on `Module.permissions`.
+ *  - Role-specific permissions are stored on `(Role)-[:HAS_PERMISSIONS]->(Module)`.
+ *  - Deletions are scoped to modules declared in the matrix: edges for
+ *    undeclared modules are left untouched.
+ *  - Preflight aborts with a clear error if any referenced role or module is
+ *    missing from the DB (seed migrations must run first).
+ */
+let RbacReconcilerService = class RbacReconcilerService {
+    constructor(neo4j, matrix, logger) {
+        this.neo4j = neo4j;
+        this.matrix = matrix;
+        this.logger = logger;
+    }
+    async onApplicationBootstrap() {
+        if (!this.matrix) {
+            this.logger.log("RBAC reconciler: no matrix configured, skipping");
+            return;
+        }
+        await this.preflight();
+        const actual = await this.readActualState();
+        const diff = this.computeDiff(actual);
+        if (diff.operations.length === 0) {
+            this.logger.log("RBAC reconcile: no changes");
+            return;
+        }
+        await this.apply(diff.operations);
+        this.logger.log(`RBAC reconcile: ${diff.defaultsChanged} defaults changed, ${diff.edgesUpserted} edges upserted, ${diff.edgesRemoved} edges removed`);
+    }
+    async preflight() {
+        const moduleIds = new Set();
+        const roleIds = new Set();
+        for (const moduleId of (0, resolver_1.iterateDeclaredModules)(this.matrix)) {
+            moduleIds.add(moduleId);
+        }
+        for (const { roleId } of (0, resolver_1.iterateDeclaredEdges)(this.matrix)) {
+            if (roleId === ADMINISTRATOR_ID)
+                continue;
+            roleIds.add(roleId);
+        }
+        const missingRoles = await this.findMissing("Role", Array.from(roleIds));
+        const missingModules = await this.findMissing("Module", Array.from(moduleIds));
+        if (missingRoles.length > 0 || missingModules.length > 0) {
+            throw new Error(`RBAC reconcile aborted - referenced entities not found in DB. ` +
+                `Roles missing: ${missingRoles.join(", ") || "none"}. ` +
+                `Modules missing: ${missingModules.join(", ") || "none"}. ` +
+                `Apply seed migrations before declaring these in the matrix.`);
+        }
+    }
+    async findMissing(label, ids) {
+        if (ids.length === 0)
+            return [];
+        const result = await this.neo4j.read(`MATCH (n:${label}) WHERE n.id IN $ids RETURN n.id AS id`, { ids });
+        const found = new Set(result.records.map((r) => r.get("id")));
+        return ids.filter((id) => !found.has(id));
+    }
+    async readActualState() {
+        const modulesResult = await this.neo4j.read(`MATCH (m:Module) RETURN m.id AS id, m.permissions AS permissions`, {});
+        const edgesResult = await this.neo4j.read(`MATCH (r:Role)-[p:HAS_PERMISSIONS]->(m:Module) RETURN r.id AS roleId, m.id AS moduleId, p.permissions AS permissions`, {});
+        const moduleDefaults = {};
+        for (const rec of modulesResult.records) {
+            moduleDefaults[rec.get("id")] = rec.get("permissions");
+        }
+        const edges = [];
+        for (const rec of edgesResult.records) {
+            edges.push({
+                roleId: rec.get("roleId"),
+                moduleId: rec.get("moduleId"),
+                permissions: rec.get("permissions"),
+            });
+        }
+        return { moduleDefaults, edges };
+    }
+    computeDiff(actual) {
+        const operations = [];
+        let defaultsChanged = 0;
+        let edgesUpserted = 0;
+        let edgesRemoved = 0;
+        const declaredModules = new Set(Array.from((0, resolver_1.iterateDeclaredModules)(this.matrix)));
+        const sortedModules = Array.from(declaredModules).sort();
+        // Defaults
+        for (const moduleId of sortedModules) {
+            const expected = (0, resolver_1.resolveDefault)(this.matrix, moduleId);
+            if (expected === undefined)
+                continue;
+            if (actual.moduleDefaults[moduleId] !== expected) {
+                operations.push({ kind: "setDefault", params: { moduleId, permissions: expected } });
+                defaultsChanged++;
+            }
+        }
+        // Edges — expected (Administrator excluded)
+        const expectedEdgeKeys = new Set();
+        const sortedEdges = Array.from((0, resolver_1.iterateDeclaredEdges)(this.matrix))
+            .filter((e) => e.roleId !== ADMINISTRATOR_ID)
+            .sort((a, b) => (a.moduleId + a.roleId).localeCompare(b.moduleId + b.roleId));
+        const actualByKey = new Map();
+        for (const edge of actual.edges) {
+            actualByKey.set(`${edge.roleId}|${edge.moduleId}`, edge.permissions);
+        }
+        for (const { roleId, moduleId } of sortedEdges) {
+            const expected = (0, resolver_1.resolveForRole)(this.matrix, roleId, moduleId);
+            if (expected === undefined)
+                continue;
+            const key = `${roleId}|${moduleId}`;
+            expectedEdgeKeys.add(key);
+            if (actualByKey.get(key) !== expected) {
+                operations.push({
+                    kind: "upsertEdge",
+                    params: { roleId, moduleId, permissions: expected },
+                });
+                edgesUpserted++;
+            }
+        }
+        // Edges — to delete (scoped to declared modules only; Administrator never managed)
+        for (const edge of actual.edges) {
+            if (!declaredModules.has(edge.moduleId))
+                continue;
+            if (edge.roleId === ADMINISTRATOR_ID)
+                continue;
+            const key = `${edge.roleId}|${edge.moduleId}`;
+            if (!expectedEdgeKeys.has(key)) {
+                operations.push({
+                    kind: "deleteEdge",
+                    params: { roleId: edge.roleId, moduleId: edge.moduleId },
+                });
+                edgesRemoved++;
+            }
+        }
+        return { operations, defaultsChanged, edgesUpserted, edgesRemoved };
+    }
+    async apply(operations) {
+        const queries = operations.map((op) => {
+            if (op.kind === "setDefault") {
+                return {
+                    query: `MATCH (m:Module {id: $moduleId}) SET m.permissions = $permissions`,
+                    params: op.params,
+                };
+            }
+            if (op.kind === "upsertEdge") {
+                return {
+                    query: `MATCH (role:Role {id: $roleId}) ` +
+                        `MATCH (module:Module {id: $moduleId}) ` +
+                        `MERGE (role)-[permissions:HAS_PERMISSIONS]->(module) ` +
+                        `ON CREATE SET permissions.permissions = $permissions ` +
+                        `ON MATCH SET permissions.permissions = $permissions`,
+                    params: op.params,
+                };
+            }
+            // deleteEdge
+            return {
+                query: `MATCH (role:Role {id: $roleId})-[p:HAS_PERMISSIONS]->(module:Module {id: $moduleId}) DELETE p`,
+                params: op.params,
+            };
+        });
+        await this.neo4j.executeInTransaction(queries);
+    }
+};
+exports.RbacReconcilerService = RbacReconcilerService;
+exports.RbacReconcilerService = RbacReconcilerService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, common_1.Optional)()),
+    __param(1, (0, common_1.Inject)(rbac_tokens_1.RBAC_MATRIX_TOKEN)),
+    __metadata("design:paramtypes", [neo4j_service_1.Neo4jService, Object, logging_service_1.AppLoggingService])
+], RbacReconcilerService);
+//# sourceMappingURL=rbac-reconciler.service.js.map

package/dist/foundations/rbac/services/rbac-reconciler.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac-reconciler.service.js","sourceRoot":"","sources":["../../../../src/foundations/rbac/services/rbac-reconciler.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAsF;AACtF,8EAA0E;AAC1E,oFAAmF;AACnF,yEAAqE;AACrE,gDAAmD;AAEnD,8CAA+G;AAE/G,MAAM,gBAAgB,GAAW,0BAAW,CAAC,aAAa,CAAC;AAY3D;;;;;;;;;;;;GAYG;AAEI,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC,YACmB,KAAmB,EACoB,MAAyB,EAChE,MAAyB;QAFzB,UAAK,GAAL,KAAK,CAAc;QACoB,WAAM,GAAN,MAAM,CAAmB;QAChE,WAAM,GAAN,MAAM,CAAmB;IACzC,CAAC;IAEJ,KAAK,CAAC,sBAAsB;QAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QAEvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAEtC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,mBAAmB,IAAI,CAAC,eAAe,sBAAsB,IAAI,CAAC,aAAa,oBAAoB,IAAI,CAAC,YAAY,gBAAgB,CACrI,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAElC,KAAK,MAAM,QAAQ,IAAI,IAAA,iCAAsB,EAAC,IAAI,CAAC,MAAO,CAAC,EAAE,CAAC;YAC5D,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QACD,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,IAAA,+BAAoB,EAAC,IAAI,CAAC,MAAO,CAAC,EAAE,CAAC;YAC5D,IAAI,MAAM,KAAK,gBAAgB;gBAAE,SAAS;YAC1C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACzE,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAE/E,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,gEAAgE;gBAC9D,kBAAkB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,IAAI;gBACvD,oBAAoB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,IAAI;gBAC3D,6DAA6D,CAChE,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,KAAwB,EAAE,GAAa;QAC/D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,wCAAwC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACzG,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAW,CAAC,CAAC,CAAC;QACrF,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,kEAAkE,EAAE,EAAE,CAAC,CAAC;QACpH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CACvC,sHAAsH,EACtH,EAAE,CACH,CAAC;QAEF,MAAM,cAAc,GAAkC,EAAE,CAAC;QACzD,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;YACxC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAW,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,aAAa,CAAkB,CAAC;QACpF,CAAC;QACD,MAAM,KAAK,GAAqE,EAAE,CAAC;QACnF,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAW;gBACnC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAW;gBACvC,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,aAAa,CAAW;aAC9C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IACnC,CAAC;IAEO,WAAW,CAAC,MAAmB;QAMrC,MAAM,UAAU,GAAyB,EAAE,CAAC;QAC5C,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS,KAAK,CAAC,IAAI,CAAC,IAAA,iCAAsB,EAAC,IAAI,CAAC,MAAO,CAAC,CAAC,CAAC,CAAC;QAC1F,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC;QAEzD,WAAW;QACX,KAAK,MAAM,QAAQ,IAAI,aAAa,EAAE,CAAC;YACrC,MAAM,QAAQ,GAAG,IAAA,yBAAc,EAAC,IAAI,CAAC,MAAO,EAAE,QAAQ,CAAC,CAAC;YACxD,IAAI,QAAQ,KAAK,SAAS;gBAAE,SAAS;YACrC,IAAI,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACjD,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACrF,eAAe,EAAE,CAAC;YACpB,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,IAAA,+BAAoB,EAAC,IAAI,CAAC,MAAO,CAAC,CAAC;aAC/D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,gBAAgB,CAAC;aAC5C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAEhF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC9C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACvE,CAAC;QAED,KAAK,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC;YAC/C,MAAM,QAAQ,GAAG,IAAA,yBAAc,EAAC,IAAI,CAAC,MAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YAChE,IAAI,QAAQ,KAAK,SAAS;gBAAE,SAAS;YACrC,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAC;YACpC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACtC,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,YAAY;oBAClB,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE;iBACpD,CAAC,CAAC;gBACH,aAAa,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;QAED,mFAAmF;QACnF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAClD,IAAI,IAAI,CAAC,MAAM,KAAK,gBAAgB;gBAAE,SAAS;YAC/C,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,YAAY;oBAClB,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;iBACzD,CAAC,CAAC;gBACH,YAAY,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,UAAgC;QAClD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC7B,OAAO;oBACL,KAAK,EAAE,mEAAmE;oBAC1E,MAAM,EAAE,EAAE,CAAC,MAAM;iBAClB,CAAC;YACJ,CAAC;YACD,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC7B,OAAO;oBACL,KAAK,EACH,kCAAkC;wBAClC,wCAAwC;wBACxC,uDAAuD;wBACvD,uDAAuD;wBACvD,qDAAqD;oBACvD,MAAM,EAAE,EAAE,CAAC,MAAM;iBAClB,CAAC;YACJ,CAAC;YACD,aAAa;YACb,OAAO;gBACL,KAAK,EAAE,+FAA+F;gBACtG,MAAM,EAAE,EAAE,CAAC,MAAM;aAClB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;CACF,CAAA;AAjLY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;IAIR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,+BAAiB,CAAC,CAAA;qCADd,4BAAY,UAEX,mCAAiB;GAJjC,qBAAqB,CAiLjC"}

package/dist/tools/generate-rbac-paths/index.js

@@ -50,6 +50,7 @@ program
     .option("--output <path>", "Output file path", "src/features/rbac/module-relationships.map.ts")
     .option("--skip <names>", "Comma-separated entity names to skip", "")
     .option("--max-depth <n>", "BFS max depth", "4")
+    .option("--module-id-map <path>", "Path to labelName→UUID JSON map (required for UUID-keyed output)", "")
     .parse();
 function scanDescriptors(dir, skipEntities) {
     const entities = [];
@@ -141,19 +142,6 @@ function bfsToUser(graph, startEntity, maxDepth) {
     }
     return paths;
 }
-function generateOutput(moduleUserPaths) {
-    const entries = Object.entries(moduleUserPaths)
-        .sort(([a], [b]) => a.localeCompare(b))
-        .map(([key, paths]) => `  ${JSON.stringify(key)}: ${JSON.stringify(paths)}`)
-        .join(",\n");
-    return `// Auto-generated by generate-rbac-paths CLI tool
-// Do not edit manually - regenerate with: pnpm generate:rbac-paths
-
-export const MODULE_USER_PATHS: Record<string, string[]> = {
-${entries}
-};
-`;
-}
 async function main() {
     const options = program.opts();
     const dir = options.dir;
@@ -164,31 +152,48 @@ async function main() {
         .map((s) => s.trim())
         .filter(Boolean);
     const skipEntities = [...DEFAULT_SKIP_ENTITIES, ...extraSkip];
+    const moduleIdMapPath = options.moduleIdMap;
+    if (!moduleIdMapPath) {
+        console.error("--module-id-map is required. See apps/api/scripts/build-module-id-map.ts.");
+        process.exit(1);
+    }
+    const moduleIdMap = JSON.parse(fs.readFileSync(moduleIdMapPath, "utf8"));
     console.info("\nRBAC Path Generation CLI");
     console.info("========================\n");
     console.info(`Scanning: ${dir}`);
     console.info(`Output: ${output}`);
     console.info(`Max depth: ${maxDepth}`);
+    console.info(`Module id map: ${moduleIdMapPath}`);
     console.info(`Skip entities: ${skipEntities.join(", ")}\n`);
     const entities = scanDescriptors(dir, skipEntities);
     console.info(`Found ${entities.length} entities\n`);
     const graph = buildGraph(entities);
-    const moduleUserPaths = {};
+    const entitiesByLabel = new Map();
+    const pathsByEntity = new Map();
     for (const entity of entities) {
-        const normalizedName = entity.labelName.charAt(0).toLowerCase() + entity.labelName.slice(1);
+        entitiesByLabel.set(entity.labelName, entity);
         const paths = bfsToUser(graph, entity.labelName, maxDepth);
+        pathsByEntity.set(entity.labelName, paths);
         if (paths.length > 0) {
-            moduleUserPaths[normalizedName] = paths;
-            console.info(`  ${normalizedName}: [${paths.join(", ")}]`);
+            console.info(`  ${entity.labelName}: [${paths.join(", ")}]`);
         }
     }
-    const content = generateOutput(moduleUserPaths);
+    // Ensure every mapped module has an entry (possibly empty)
+    const finalMap = {};
+    for (const [labelName, uuid] of Object.entries(moduleIdMap)) {
+        const entity = entitiesByLabel.get(labelName);
+        finalMap[uuid] = entity ? Array.from(pathsByEntity.get(labelName) ?? []) : [];
+    }
+    const content = `// Auto-generated by generate-rbac-paths CLI tool\n` +
+        `// Do not edit manually - regenerate with: pnpm generate:rbac-paths\n\n` +
+        `export const MODULE_USER_PATHS = ${JSON.stringify(finalMap, null, 2)} as const;\n\n` +
+        `export type ModuleUserPathsType = typeof MODULE_USER_PATHS;\n`;
     const outputDir = path.dirname(output);
     if (!fs.existsSync(outputDir)) {
         fs.mkdirSync(outputDir, { recursive: true });
     }
     fs.writeFileSync(output, content, "utf-8");
-    console.info(`\nGenerated ${output} with ${Object.keys(moduleUserPaths).length} entity paths\n`);
+    console.info(`\nGenerated ${output} with ${Object.keys(finalMap).length} module entries\n`);
 }
 main().catch((error) => {
     console.error("\nGeneration failed:", error.message);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@carlonicora/nestjs-neo4jsonapi",
-  "version": "1.63.0",
+  "version": "1.65.0",
   "description": "NestJS foundation package with JSON:API, Neo4j, Redis, LangChain agents, and common utilities",
   "author": "Carlo Nicora",
   "license": "GPL-3.0-or-later",

package/dist/agents/chatbot/chatbot.module.d.ts

@@ -1,3 +0,0 @@
-export declare class ChatbotModule {
-}
-//# sourceMappingURL=chatbot.module.d.ts.map

package/dist/agents/chatbot/chatbot.module.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"chatbot.module.d.ts","sourceRoot":"","sources":["../../../src/agents/chatbot/chatbot.module.ts"],"names":[],"mappings":"AAeA,qBAsCa,aAAa;CAAG"}

package/dist/agents/chatbot/chatbot.module.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"chatbot.module.js","sourceRoot":"","sources":["../../../src/agents/chatbot/chatbot.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,0DAAsD;AACtD,oFAA+E;AAC/E,4EAAuE;AACvE,8EAAyE;AACzE,gEAA4D;AAC5D,oEAAuE;AACvE,4EAAuE;AACvE,uEAAkE;AAClE,+DAA0D;AAC1D,qEAAgE;AAChE,uEAAkE;AAClE,uDAAmD;AACnD,yDAAqD;AAwC9C,IAAM,aAAa,GAAnB,MAAM,aAAa;CAAG,CAAA;AAAhB,sCAAa;wBAAb,aAAa;IAtCzB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE,CAAC,sBAAS,CAAC;QACpB,SAAS,EAAE;YACT,2CAAuB;YACvB;gBACE,OAAO,EAAE,2CAAmB;gBAC5B,UAAU,EAAE,CAAC,GAA4B,EAAE,EAAE,CAAC,IAAI,2CAAmB,CAAC,GAAG,CAAC;gBAC1E,MAAM,EAAE,CAAC,2CAAuB,CAAC;aAClC;YACD,0BAAW;YACX,uCAAiB;YACjB,yCAAkB;YAClB,yCAAkB;YAClB,iCAAc;YACd,4BAAY;YACZ,+CAAqB;YACrB,gCAAc;YAEd,wEAAwE;YACxE,2CAAmB;YAEnB,wEAAwE;YACxE,6CAAoB;SACrB;QACD,OAAO,EAAE;YACP,gCAAc;YACd,2CAAuB;YACvB,2CAAmB;YACnB,+CAAqB;YACrB,0BAAW;YACX,uCAAiB;YACjB,yCAAkB;YAClB,yCAAkB;YAClB,iCAAc;YACd,4BAAY;YACZ,6CAAoB;SACrB;KACF,CAAC;GACW,aAAa,CAAG"}

package/dist/agents/chatbot/interfaces/chatbot.response.interface.d.ts

@@ -1,25 +0,0 @@
-import { AgentMessageType } from "../../../common/enums/agentmessage.type";
-export interface ChatbotReference {
-    type: string;
-    id: string;
-    reason: string;
-}
-export interface ChatbotToolCall {
-    tool: string;
-    input: Record<string, unknown>;
-    durationMs: number;
-    error?: string;
-}
-export interface ChatbotResponseInterface {
-    type: AgentMessageType.Assistant;
-    answer: string;
-    references: ChatbotReference[];
-    needsClarification: boolean;
-    suggestedQuestions: string[];
-    tokens: {
-        input: number;
-        output: number;
-    };
-    toolCalls: ChatbotToolCall[];
-}
-//# sourceMappingURL=chatbot.response.interface.d.ts.map

package/dist/agents/chatbot/interfaces/chatbot.response.interface.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"chatbot.response.interface.d.ts","sourceRoot":"","sources":["../../../../src/agents/chatbot/interfaces/chatbot.response.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAE3E,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,gBAAgB,CAAC,SAAS,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAC/B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,SAAS,EAAE,eAAe,EAAE,CAAC;CAC9B"}

package/dist/agents/chatbot/interfaces/chatbot.response.interface.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"chatbot.response.interface.js","sourceRoot":"","sources":["../../../../src/agents/chatbot/interfaces/chatbot.response.interface.ts"],"names":[],"mappings":""}

package/dist/agents/chatbot/interfaces/graph.catalog.interface.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"graph.catalog.interface.d.ts","sourceRoot":"","sources":["../../../../src/agents/chatbot/interfaces/graph.catalog.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oDAAoD,CAAC;AAE/E,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,UAAU,EAAE,OAAO,CAAC;IACpB,6CAA6C;IAC7C,QAAQ,EAAE,OAAO,CAAC;IAClB;;;;OAIG;IACH,IAAI,CAAC,EAAE,SAAS,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,KAAK,GAAG,MAAM,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,wFAAwF;IACxF,eAAe,EAAE,KAAK,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,+FAA+F;IAC/F,SAAS,EAAE,OAAO,CAAC;IACnB;;;yFAGqF;IACrF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,aAAa,EAAE,mBAAmB,EAAE,CAAC;IACrC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,MAAM,CAAC;IAChC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,iEAAiE;IACjE,QAAQ,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/agents/chatbot/interfaces/graph.catalog.interface.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"graph.catalog.interface.js","sourceRoot":"","sources":["../../../../src/agents/chatbot/interfaces/graph.catalog.interface.ts"],"names":[],"mappings":""}

package/dist/agents/chatbot/prompts/chatbot.system.prompt.d.ts

@@ -1,3 +0,0 @@
-export declare const CHATBOT_SYSTEM_PROMPT_BASE = "# Role\n\nYou help a user explore their company's ERP data. The data is stored as a graph \u2014 entities are nodes, and the connections between them are edges.\n\nYou answer the user's questions by traversing this graph: find the entities the question is about, read their fields, and walk the relationships between them to reach related entities, continuing until you have enough information to answer. Nearly every useful answer requires following at least one edge \u2014 a single search is rarely the whole story.\n\nEvery fact in your answer must come from a tool call that returned it. Do not invent field names, relationship names, entity types, or record contents.\n\n## Your data\n\n{GRAPH_MAP}\n\nThe catalogue above is the complete list of entity types, fields, and relationships available to you. Anything not listed does not exist.\n\n**Every currency value in this system is stored as an integer number of cents \u2014 never as a decimal amount.** A stored value of `600` means 6.00, `500` means 5.00, and `1234567` means 12,345.67. Fields that carry money are marked `money` in the catalogue above (e.g. `total_amount (number, money [integer stored in minor units (2 decimals); divide by 10^2 to display], ...)`). For these fields, every record returned by `read_entity`, `search_entities`, or `traverse` also carries a sibling `<name>_formatted` string \u2014 quote that string when narrating the amount in your answer, and never quote the raw integer as if it were euros. Filters and sort still target the raw field (pass cents, e.g. `{ field: \"total_amount\", op: \"gt\", value: 10000 }` to mean \"over 100.00\").\n\n## Tools\n\nYou have five tools. Call them in sequence \u2014 a typical question needs two or three.\n\nBefore choosing a tool, check the \"Entities already in this conversation\" block that may be provided below. If the user's phrase refers to an entity listed there \u2014 by its exact name, by a partial name, or implicitly (\"them\", \"their\", \"other\", \"these\") \u2014 treat that entity as resolved. Use its `type` and `id` directly with `read_entity` or `traverse`. Do not call `resolve_entity` for a name that is already resolved in context.\n\nOtherwise, if the user names an entity \u2014 a customer, a person, a product, a project, anything that could correspond to a record in the graph \u2014 your first tool call is `resolve_entity` with the user's literal phrase. Do not guess a type. `resolve_entity` returns candidates across every entity type in one shot; you then pick a candidate and proceed with `describe_entity` + the typed tools.\n\n- `resolve_entity(text)` \u2014 look up nodes by name across every entity type in one call. Pass the user's literal phrase verbatim, including words like \"and\", \"&\", or other punctuation that may be part of a name. The response carries a `matchMode` and `items` sorted by `score` descending:\n  - `exact` or `fuzzy` \u2192 if `items.length === 1` or `items[0].score - items[1].score \u2265 0.15`, pick `items[0]`. Otherwise set `needsClarification: true` and list the top candidates to the user.\n  - `semantic` \u2192 same rule, margin \u2265 0.08. Also warn the user that the match is approximate.\n  - `none` \u2192 no record exists; tell the user and suggest rephrasing.\n\n- `describe_entity(type)` \u2014 inspect one entity type in full: every field with its type, and every relationship with its target type and description. Call this for every type you intend to touch, BEFORE searching, reading, or traversing it. The next three tools will refuse to run on a type that has not been described in this turn.\n\n- `search_entities(type, filters?, sort?, limit?)` \u2014 find records of a known type by filter and sort. Use this when you already have the type (from `resolve_entity` or because the user referred to a kind of record without naming a specific one, e.g. \"all orders over 10,000\"). `search_entities` does not search by name \u2014 to find a record by name, call `resolve_entity` first.\n\n- `read_entity(type, id, include?)` \u2014 fetch the full fields of a single node by id. Tool outputs from other tools are summaries; call this to get the complete record before reporting on it.\n\n- `traverse(fromType, fromId, relationship, filters?, sort?, limit?)` \u2014 walk one edge from a known node to its connected nodes. The `relationship` must be one listed under the source type in the catalogue. `filters` and `sort` apply to the target node's fields. This is the only way to cross from one entity type to another.\n\nIf a tool returns `{ error: \"\u2026\" }`, read the message \u2014 it usually lists valid fields or relationships. Pick one of those and call the tool again. Recover within the same turn; do not apologise to the user for a tool error.\n\n## Output\n\nReturn these fields:\n\n- `answer` \u2014 a concise prose reply (2\u20134 sentences) built from the actual field values and traversal results. When you report on a record, use its real field values, not its type name.\n\n- `references` \u2014 every entity that contributes to the meaning of your `answer`, as `{ type, id, reason }`. An entity contributes when it is the subject the user asked about, or a record the answer reports a fact about. `reason` is one short clause explaining that role (for example \"the account the user asked about\", \"one of the orders listed in the answer\"). Do not include entities you retrieved, inspected, and discarded: a `resolve_entity` call that returned three candidates of which you only used one \u2014 the other two are not references; a `traverse` that walked an edge whose target you did not mention \u2014 not a reference. These references are persisted and re-loaded as context on the next turn, so polluting them with irrelevant records will cause the next turn to confuse them with the actual subject \u2014 be strict.\n\n- `suggestedQuestions` \u2014 3 to 5 concrete next questions. Each should name an entity from the answer and point to a relationship in the catalogue that you did not walk this turn.\n\n- `needsClarification` \u2014 `true` when (a) `resolve_entity` returned multiple candidates in the winning tier and the top score did not exceed the runner-up by the tier's margin threshold, or (b) a `search_entities` filter query returned multiple records with no way for you to pick between them. Do not set this without evidence from a tool call.\n";
-export declare function renderChatbotSystemPrompt(graphMap: string): string;
-//# sourceMappingURL=chatbot.system.prompt.d.ts.map

package/dist/agents/chatbot/prompts/chatbot.system.prompt.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"chatbot.system.prompt.d.ts","sourceRoot":"","sources":["../../../../src/agents/chatbot/prompts/chatbot.system.prompt.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,0BAA0B,qwMAkDtC,CAAC;AAEF,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAMlE"}

package/dist/agents/chatbot/prompts/chatbot.system.prompt.js

@@ -1,60 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.CHATBOT_SYSTEM_PROMPT_BASE = void 0;
-exports.renderChatbotSystemPrompt = renderChatbotSystemPrompt;
-exports.CHATBOT_SYSTEM_PROMPT_BASE = `# Role
-
-You help a user explore their company's ERP data. The data is stored as a graph — entities are nodes, and the connections between them are edges.
-
-You answer the user's questions by traversing this graph: find the entities the question is about, read their fields, and walk the relationships between them to reach related entities, continuing until you have enough information to answer. Nearly every useful answer requires following at least one edge — a single search is rarely the whole story.
-
-Every fact in your answer must come from a tool call that returned it. Do not invent field names, relationship names, entity types, or record contents.
-
-## Your data
-
-{GRAPH_MAP}
-
-The catalogue above is the complete list of entity types, fields, and relationships available to you. Anything not listed does not exist.
-
-**Every currency value in this system is stored as an integer number of cents — never as a decimal amount.** A stored value of \`600\` means 6.00, \`500\` means 5.00, and \`1234567\` means 12,345.67. Fields that carry money are marked \`money\` in the catalogue above (e.g. \`total_amount (number, money [integer stored in minor units (2 decimals); divide by 10^2 to display], ...)\`). For these fields, every record returned by \`read_entity\`, \`search_entities\`, or \`traverse\` also carries a sibling \`<name>_formatted\` string — quote that string when narrating the amount in your answer, and never quote the raw integer as if it were euros. Filters and sort still target the raw field (pass cents, e.g. \`{ field: "total_amount", op: "gt", value: 10000 }\` to mean "over 100.00").
-
-## Tools
-
-You have five tools. Call them in sequence — a typical question needs two or three.
-
-Before choosing a tool, check the "Entities already in this conversation" block that may be provided below. If the user's phrase refers to an entity listed there — by its exact name, by a partial name, or implicitly ("them", "their", "other", "these") — treat that entity as resolved. Use its \`type\` and \`id\` directly with \`read_entity\` or \`traverse\`. Do not call \`resolve_entity\` for a name that is already resolved in context.
-
-Otherwise, if the user names an entity — a customer, a person, a product, a project, anything that could correspond to a record in the graph — your first tool call is \`resolve_entity\` with the user's literal phrase. Do not guess a type. \`resolve_entity\` returns candidates across every entity type in one shot; you then pick a candidate and proceed with \`describe_entity\` + the typed tools.
-
-- \`resolve_entity(text)\` — look up nodes by name across every entity type in one call. Pass the user's literal phrase verbatim, including words like "and", "&", or other punctuation that may be part of a name. The response carries a \`matchMode\` and \`items\` sorted by \`score\` descending:
-  - \`exact\` or \`fuzzy\` → if \`items.length === 1\` or \`items[0].score - items[1].score ≥ 0.15\`, pick \`items[0]\`. Otherwise set \`needsClarification: true\` and list the top candidates to the user.
-  - \`semantic\` → same rule, margin ≥ 0.08. Also warn the user that the match is approximate.
-  - \`none\` → no record exists; tell the user and suggest rephrasing.
-
-- \`describe_entity(type)\` — inspect one entity type in full: every field with its type, and every relationship with its target type and description. Call this for every type you intend to touch, BEFORE searching, reading, or traversing it. The next three tools will refuse to run on a type that has not been described in this turn.
-
-- \`search_entities(type, filters?, sort?, limit?)\` — find records of a known type by filter and sort. Use this when you already have the type (from \`resolve_entity\` or because the user referred to a kind of record without naming a specific one, e.g. "all orders over 10,000"). \`search_entities\` does not search by name — to find a record by name, call \`resolve_entity\` first.
-
-- \`read_entity(type, id, include?)\` — fetch the full fields of a single node by id. Tool outputs from other tools are summaries; call this to get the complete record before reporting on it.
-
-- \`traverse(fromType, fromId, relationship, filters?, sort?, limit?)\` — walk one edge from a known node to its connected nodes. The \`relationship\` must be one listed under the source type in the catalogue. \`filters\` and \`sort\` apply to the target node's fields. This is the only way to cross from one entity type to another.
-
-If a tool returns \`{ error: "…" }\`, read the message — it usually lists valid fields or relationships. Pick one of those and call the tool again. Recover within the same turn; do not apologise to the user for a tool error.
-
-## Output
-
-Return these fields:
-
-- \`answer\` — a concise prose reply (2–4 sentences) built from the actual field values and traversal results. When you report on a record, use its real field values, not its type name.
-
-- \`references\` — every entity that contributes to the meaning of your \`answer\`, as \`{ type, id, reason }\`. An entity contributes when it is the subject the user asked about, or a record the answer reports a fact about. \`reason\` is one short clause explaining that role (for example "the account the user asked about", "one of the orders listed in the answer"). Do not include entities you retrieved, inspected, and discarded: a \`resolve_entity\` call that returned three candidates of which you only used one — the other two are not references; a \`traverse\` that walked an edge whose target you did not mention — not a reference. These references are persisted and re-loaded as context on the next turn, so polluting them with irrelevant records will cause the next turn to confuse them with the actual subject — be strict.
-
-- \`suggestedQuestions\` — 3 to 5 concrete next questions. Each should name an entity from the answer and point to a relationship in the catalogue that you did not walk this turn.
-
-- \`needsClarification\` — \`true\` when (a) \`resolve_entity\` returned multiple candidates in the winning tier and the top score did not exceed the runner-up by the tier's margin threshold, or (b) a \`search_entities\` filter query returned multiple records with no way for you to pick between them. Do not set this without evidence from a tool call.
-`;
-function renderChatbotSystemPrompt(graphMap) {
-    return exports.CHATBOT_SYSTEM_PROMPT_BASE.replace("{GRAPH_MAP}", graphMap ||
-        "(No accessible data — the user has no enabled modules with described entities. DO NOT attempt any tool calls. Respond politely explaining that you have no data to query.)");
-}
-//# sourceMappingURL=chatbot.system.prompt.js.map

package/dist/agents/chatbot/prompts/chatbot.system.prompt.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"chatbot.system.prompt.js","sourceRoot":"","sources":["../../../../src/agents/chatbot/prompts/chatbot.system.prompt.ts"],"names":[],"mappings":";;;AAoDA,8DAMC;AA1DY,QAAA,0BAA0B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkDzC,CAAC;AAEF,SAAgB,yBAAyB,CAAC,QAAgB;IACxD,OAAO,kCAA0B,CAAC,OAAO,CACvC,aAAa,EACb,QAAQ;QACN,4KAA4K,CAC/K,CAAC;AACJ,CAAC"}

package/dist/agents/chatbot/repositories/user-modules.repository.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"user-modules.repository.d.ts","sourceRoot":"","sources":["../../../../src/agents/chatbot/repositories/user-modules.repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAQ1E;;;;;;;;;GASG;AACH,qBACa,qBAAqB;IAGpB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAFlC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0C;gBAEpC,KAAK,EAAE,YAAY;IAEhD;;;;;;;;;OASG;IACG,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;CA4B9D"}

package/dist/agents/chatbot/repositories/user-modules.repository.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"user-modules.repository.js","sourceRoot":"","sources":["../../../../src/agents/chatbot/repositories/user-modules.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAoD;AACpD,8EAA0E;AAC1E,mGAA8F;AAO9F;;;;;;;;;GASG;AAEI,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IAGhC,YAA6B,KAAmB;QAAnB,UAAK,GAAL,KAAK,CAAc;QAF/B,WAAM,GAAG,IAAI,eAAM,CAAC,uBAAqB,CAAC,IAAI,CAAC,CAAC;IAEd,CAAC;IAEpD;;;;;;;;;OASG;IACH,KAAK,CAAC,oBAAoB,CAAC,MAAc;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAClC;;QAEE,yCAAkB;OACnB,EACD,EAAE,MAAM,EAAE,CACX,CAAC;QAEF,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,UAAU,GAAQ,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,UAAU,EAAE,UAAU,CAAC;YACrC,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;YACpB,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC;YACpC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,MAAM,IAAI,OAAO,SAAS,KAAK,QAAQ;gBAAE,SAAS;YACpF,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAsB,CAAC;gBACzD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;gBAClD,IAAI,IAAI,EAAE,KAAK,KAAK,IAAI;oBAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8DAA8D,EAAE,EAAE,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,gCAAgC,MAAM,sBAAsB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACzG,OAAO,SAAS,CAAC;IACnB,CAAC;CACF,CAAA;AA3CY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;qCAIyB,4BAAY;GAHrC,qBAAqB,CA2CjC"}

package/dist/agents/chatbot/services/chatbot.index.manager.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"chatbot.index.manager.d.ts","sourceRoot":"","sources":["../../../../src/agents/chatbot/services/chatbot.index.manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAE1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE9D,qBACa,mBAAoB,YAAW,sBAAsB;IAI9D,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IALzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;gBAG5C,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,mBAAmB,EAC5B,MAAM,EAAE,YAAY;IAOjC,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC;YAY/B,cAAc;YAed,YAAY;IAkB1B,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAIxC,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;CAGvC"}

package/dist/agents/chatbot/services/chatbot.index.manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"chatbot.index.manager.js","sourceRoot":"","sources":["../../../../src/agents/chatbot/services/chatbot.index.manager.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAA4E;AAC5E,4EAAwE;AACxE,8EAA0E;AAE1E,mEAA8D;AAGvD,IAAM,mBAAmB,2BAAzB,MAAM,mBAAmB;IAG9B,YACmB,KAAmB,EACnB,OAA4B,EAC5B,MAAoB;QAFpB,UAAK,GAAL,KAAK,CAAc;QACnB,YAAO,GAAP,OAAO,CAAqB;QAC5B,WAAM,GAAN,MAAM,CAAc;QALtB,WAAM,GAAG,IAAI,eAAM,CAAC,qBAAmB,CAAC,IAAI,CAAC,CAAC;IAM5D,CAAC;IAEJ,gFAAgF;IAChF,8EAA8E;IAC9E,6EAA6E;IAC7E,oDAAoD;IACpD,KAAK,CAAC,sBAAsB;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,yBAAyB,EAAE,CAAC;QAC1D,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,OAAO;QAE7B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;QAEjD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,CAAgB;QAC3C,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9E,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YACxB,KAAK,EAAE;kCACqB,SAAS;mBACxB,CAAC,CAAC,SAAS;mBACX,MAAM;OAClB;SACF,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,SAAS,QAAQ,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9E,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,CAAgB,EAAE,IAAY;QACvD,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE,MAAM;YAAE,OAAO;QAExC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YACxB,KAAK,EAAE;gCACmB,SAAS;mBACtB,CAAC,CAAC,SAAS;;;mCAGK,IAAI;;;OAGhC;SACF,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,SAAS,QAAQ,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,iBAAiB,CAAC,KAAa;QAC7B,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,gBAAgB,CAAC;IAChD,CAAC;IAED,eAAe,CAAC,KAAa;QAC3B,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACjD,CAAC;CACF,CAAA;AAjEY,kDAAmB;8BAAnB,mBAAmB;IAD/B,IAAA,mBAAU,GAAE;qCAKe,4BAAY;QACV,2CAAmB;QACpB,4BAAY;GAN5B,mBAAmB,CAiE/B"}