@carlonicora/nestjs-neo4jsonapi 6.6.2 → 6.7.0

package/dist/foundations/rbac/services/module-permission.gate.js

@@ -0,0 +1,108 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ModulePermissionGate = void 0;
+exports.rbacActionForHttpMethod = rbacActionForHttpMethod;
+exports.resolveRouteAcl = resolveRouteAcl;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const nestjs_cls_1 = require("nestjs-cls");
+const module_decorator_1 = require("../../../common/decorators/module.decorator");
+const rbac_tokens_1 = require("../rbac.tokens");
+const module_permission_service_1 = require("./module-permission.service");
+/**
+ * HTTP method → permission action. GET/HEAD/OPTIONS read, POST create, PUT/PATCH
+ * update, DELETE delete. Anything else is treated as a write (update), so an
+ * unexpected verb never slips through as a read.
+ */
+function rbacActionForHttpMethod(method) {
+    switch ((method ?? "").toUpperCase()) {
+        case "GET":
+        case "HEAD":
+        case "OPTIONS":
+            return "read";
+        case "POST":
+            return "create";
+        case "DELETE":
+            return "delete";
+        default:
+            return "update";
+    }
+}
+/**
+ * Section and action of a route: the handler `@ModuleACL` wins over the class
+ * one, field by field; the action falls back to the HTTP-method mapping.
+ */
+function resolveRouteAcl(params) {
+    const module = params.handlerDefinition?.module ?? params.classDefinition?.module;
+    const action = params.handlerDefinition?.action ?? params.classDefinition?.action ?? rbacActionForHttpMethod(params.method);
+    return { module: module || undefined, action };
+}
+/**
+ * Request-level permission check, run by the session guards (`JwtAuthGuard`,
+ * `AdminJwtAuthGuard`, `OptionalJwtAuthGuard`) right after authentication.
+ *
+ * Off unless the app bootstraps with `permissions: { enforce: true }`: with it
+ * off, `assert` returns before reading metadata or touching the database.
+ *
+ * Rules:
+ * - A read with no section is allowed (company scoping still applies).
+ * - A write with no section is refused (the boot audit makes this unreachable).
+ * - Otherwise the caller's effective permission in the token's company decides:
+ *   `true` or a record path allows, `false` or absent refuses with 403.
+ * - No administrator bypass.
+ */
+let ModulePermissionGate = class ModulePermissionGate {
+    constructor(reflector, cls, permissions, enforce) {
+        this.reflector = reflector;
+        this.cls = cls;
+        this.permissions = permissions;
+        this.enforce = enforce;
+    }
+    get enabled() {
+        return this.enforce === true;
+    }
+    async assert(params) {
+        if (!this.enabled)
+            return;
+        const userId = params.request?.user?.userId;
+        // No authenticated session (optional guard, anonymous caller): nothing to evaluate.
+        if (!userId)
+            return;
+        const { module, action } = resolveRouteAcl({
+            classDefinition: this.reflector.get(module_decorator_1.MODULE_ACL_METADATA, params.context.getClass()),
+            handlerDefinition: this.reflector.get(module_decorator_1.MODULE_ACL_METADATA, params.context.getHandler()),
+            method: params.request?.method,
+        });
+        if (!module) {
+            if (action === "read")
+                return;
+            throw new common_1.ForbiddenException();
+        }
+        const companyId = (this.cls.isActive() ? this.cls.get("companyId") : undefined) ?? undefined;
+        const allowed = await this.permissions.allows({ userId, companyId, moduleId: module, action });
+        if (!allowed)
+            throw new common_1.ForbiddenException();
+    }
+};
+exports.ModulePermissionGate = ModulePermissionGate;
+exports.ModulePermissionGate = ModulePermissionGate = __decorate([
+    (0, common_1.Injectable)(),
+    __param(3, (0, common_1.Optional)()),
+    __param(3, (0, common_1.Inject)(rbac_tokens_1.PERMISSIONS_ENFORCE)),
+    __metadata("design:paramtypes", [core_1.Reflector,
+        nestjs_cls_1.ClsService,
+        module_permission_service_1.ModulePermissionService, Boolean])
+], ModulePermissionGate);
+//# sourceMappingURL=module-permission.gate.js.map

package/dist/foundations/rbac/services/module-permission.gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-permission.gate.js","sourceRoot":"","sources":["../../../../src/foundations/rbac/services/module-permission.gate.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAcA,0DAaC;AAMD,0CASC;AA1CD,2CAAoG;AACpG,uCAAyC;AACzC,2CAAwC;AACxC,kFAAkF;AAElF,gDAAqD;AACrD,2EAAsE;AAGtE;;;;GAIG;AACH,SAAgB,uBAAuB,CAAC,MAA0B;IAChE,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACrC,KAAK,KAAK,CAAC;QACX,KAAK,MAAM,CAAC;QACZ,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC;QAChB,KAAK,MAAM;YACT,OAAO,QAAQ,CAAC;QAClB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,eAAe,CAAC,MAI/B;IACC,MAAM,MAAM,GAAG,MAAM,CAAC,iBAAiB,EAAE,MAAM,IAAI,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC;IAClF,MAAM,MAAM,GACV,MAAM,CAAC,iBAAiB,EAAE,MAAM,IAAI,MAAM,CAAC,eAAe,EAAE,MAAM,IAAI,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/G,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,EAAE,CAAC;AACjD,CAAC;AAED;;;;;;;;;;;;;GAaG;AAEI,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAC/B,YACmB,SAAoB,EACpB,GAAe,EACf,WAAoC,EAGpC,OAAiB;QALjB,cAAS,GAAT,SAAS,CAAW;QACpB,QAAG,GAAH,GAAG,CAAY;QACf,gBAAW,GAAX,WAAW,CAAyB;QAGpC,YAAO,GAAP,OAAO,CAAU;IACjC,CAAC;IAEJ,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAmD;QAC9D,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,MAAM,MAAM,GAAuB,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC;QAChE,oFAAoF;QACpF,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC;YACzC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAmB,sCAAmB,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrG,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAmB,sCAAmB,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACzG,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM;SAC/B,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,MAAM,KAAK,MAAM;gBAAE,OAAO;YAC9B,MAAM,IAAI,2BAAkB,EAAE,CAAC;QACjC,CAAC;QAED,MAAM,SAAS,GAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC;QAEjH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/F,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,2BAAkB,EAAE,CAAC;IAC/C,CAAC;CACF,CAAA;AArCY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;IAMR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IACV,WAAA,IAAA,eAAM,EAAC,iCAAmB,CAAC,CAAA;qCAJA,gBAAS;QACf,uBAAU;QACF,mDAAuB;GAJ5C,oBAAoB,CAqChC"}

package/dist/foundations/rbac/services/module-permission.service.d.ts

@@ -0,0 +1,34 @@
+import { ClsService } from "nestjs-cls";
+import { RbacPermissionRepository } from "../repositories/rbac-permission.repository";
+import type { EffectivePermissions } from "../repositories/rbac-permission.repository";
+import type { RbacAction } from "./rbac-permission.service";
+export type { EffectivePermissions } from "../repositories/rbac-permission.repository";
+/**
+ * Resolves a caller's effective permissions in the token's company, for the
+ * request-level permission gate (`ModulePermissionGate`).
+ *
+ * Mirrors `RbacPermissionService` (same `featureModuleQuery` resolution) with
+ * three differences: it binds the token's company instead of the legacy
+ * `BELONGS_TO` edge, it keeps record-path values (a string allows at the
+ * section level), and it resolves once per request (cached in CLS).
+ *
+ * No administrator bypass: the platform Administrator is resolved like any
+ * role, so its grants must exist in the app's permission table.
+ */
+export declare class ModulePermissionService {
+    private readonly repository;
+    private readonly cls;
+    constructor(repository: RbacPermissionRepository, cls: ClsService);
+    resolve(params: {
+        userId: string;
+        companyId: string | undefined;
+    }): Promise<EffectivePermissions>;
+    /** True when the effective value is `true` or a non-empty record path. */
+    allows(params: {
+        userId: string;
+        companyId: string | undefined;
+        moduleId: string;
+        action: RbacAction;
+    }): Promise<boolean>;
+}
+//# sourceMappingURL=module-permission.service.d.ts.map

package/dist/foundations/rbac/services/module-permission.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-permission.service.d.ts","sourceRoot":"","sources":["../../../../src/foundations/rbac/services/module-permission.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AACtF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAE5D,YAAY,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AAUvF;;;;;;;;;;;GAWG;AACH,qBACa,uBAAuB;IAEhC,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,GAAG;gBADH,UAAU,EAAE,wBAAwB,EACpC,GAAG,EAAE,UAAU;IAG5B,OAAO,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAmBvG,0EAA0E;IACpE,MAAM,CAAC,MAAM,EAAE;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,UAAU,CAAC;KACpB,GAAG,OAAO,CAAC,OAAO,CAAC;CAKrB"}

package/dist/foundations/rbac/services/module-permission.service.js

@@ -0,0 +1,64 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ModulePermissionService = void 0;
+const common_1 = require("@nestjs/common");
+const nestjs_cls_1 = require("nestjs-cls");
+const rbac_permission_repository_1 = require("../repositories/rbac-permission.repository");
+/** CLS key holding the permissions resolved for the current request. */
+const CLS_KEY = "effectivePermissions";
+/**
+ * Resolves a caller's effective permissions in the token's company, for the
+ * request-level permission gate (`ModulePermissionGate`).
+ *
+ * Mirrors `RbacPermissionService` (same `featureModuleQuery` resolution) with
+ * three differences: it binds the token's company instead of the legacy
+ * `BELONGS_TO` edge, it keeps record-path values (a string allows at the
+ * section level), and it resolves once per request (cached in CLS).
+ *
+ * No administrator bypass: the platform Administrator is resolved like any
+ * role, so its grants must exist in the app's permission table.
+ */
+let ModulePermissionService = class ModulePermissionService {
+    constructor(repository, cls) {
+        this.repository = repository;
+        this.cls = cls;
+    }
+    async resolve(params) {
+        const key = `${params.userId}|${params.companyId ?? ""}`;
+        const clsActive = this.cls.isActive();
+        if (clsActive) {
+            const cached = this.cls.get(CLS_KEY);
+            if (cached && cached.key === key)
+                return cached.permissions;
+        }
+        const permissions = await this.repository.findEffectivePermissions({
+            userId: params.userId,
+            companyId: params.companyId || undefined,
+        });
+        if (clsActive)
+            this.cls.set(CLS_KEY, { key, permissions });
+        return permissions;
+    }
+    /** True when the effective value is `true` or a non-empty record path. */
+    async allows(params) {
+        const permissions = await this.resolve({ userId: params.userId, companyId: params.companyId });
+        const value = permissions.get(params.moduleId)?.[params.action];
+        return value === true || (typeof value === "string" && value.length > 0);
+    }
+};
+exports.ModulePermissionService = ModulePermissionService;
+exports.ModulePermissionService = ModulePermissionService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [rbac_permission_repository_1.RbacPermissionRepository,
+        nestjs_cls_1.ClsService])
+], ModulePermissionService);
+//# sourceMappingURL=module-permission.service.js.map

package/dist/foundations/rbac/services/module-permission.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-permission.service.js","sourceRoot":"","sources":["../../../../src/foundations/rbac/services/module-permission.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,2CAAwC;AACxC,2FAAsF;AAMtF,wEAAwE;AACxE,MAAM,OAAO,GAAG,sBAAsB,CAAC;AAOvC;;;;;;;;;;;GAWG;AAEI,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAClC,YACmB,UAAoC,EACpC,GAAe;QADf,eAAU,GAAV,UAAU,CAA0B;QACpC,QAAG,GAAH,GAAG,CAAY;IAC/B,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,MAAyD;QACrE,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;QACzD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAEtC,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAgC,OAAO,CAAC,CAAC;YACpE,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG;gBAAE,OAAO,MAAM,CAAC,WAAW,CAAC;QAC9D,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC;YACjE,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,SAAS;SACzC,CAAC,CAAC;QAEH,IAAI,SAAS;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAoB,OAAO,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;QAE9E,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,MAAM,CAAC,MAKZ;QACC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAC/F,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChE,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3E,CAAC;CACF,CAAA;AApCY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,mBAAU,GAAE;qCAGoB,qDAAwB;QAC/B,uBAAU;GAHvB,uBAAuB,CAoCnC"}

package/dist/foundations/rbac/services/rbac-permission.service.d.ts

@@ -1,4 +1,6 @@
+import { ClsService } from "nestjs-cls";
 import { RbacPermissionRepository } from "../repositories/rbac-permission.repository";
+import { ModulePermissionService } from "./module-permission.service";
 /**
  * The four permission flags resolved per module by the RBAC permission model.
  *
@@ -13,10 +15,17 @@ export type RbacAction = "read" | "create" | "update" | "delete";
  * UserModulesRepository for the chatbot catalog).
  *
  * Consumed by the MCP layer to gate reads and writes per tool call.
+ *
+ * With `permissions.enforce` on, it delegates to `ModulePermissionService`
+ * (token company from CLS, record paths allow) so tool calls and HTTP routes
+ * never disagree. With it off, it behaves exactly as before.
  */
 export declare class RbacPermissionService {
     private readonly repository;
-    constructor(repository: RbacPermissionRepository);
+    private readonly modulePermissions?;
+    private readonly cls?;
+    private readonly enforce?;
+    constructor(repository: RbacPermissionRepository, modulePermissions?: ModulePermissionService, cls?: ClsService, enforce?: boolean);
     /**
      * True iff the user's effective permission flag for `action` on the module
      * resolves to `true`. Unknown modules (not in the user's effective set)

package/dist/foundations/rbac/services/rbac-permission.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rbac-permission.service.d.ts","sourceRoot":"","sources":["../../../../src/foundations/rbac/services/rbac-permission.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AAEtF;;;;;;GAMG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEjE;;;;;;GAMG;AACH,qBACa,qBAAqB;IACpB,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,wBAAwB;IAEjE;;;;OAIG;IACG,GAAG,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC;CAI9F"}
+{"version":3,"file":"rbac-permission.service.d.ts","sourceRoot":"","sources":["../../../../src/foundations/rbac/services/rbac-permission.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AAEtF,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAEtE;;;;;;GAMG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEjE;;;;;;;;;;GAUG;AACH,qBACa,qBAAqB;IAE9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IACkB,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IAChD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;IACZ,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAHjD,UAAU,EAAE,wBAAwB,EACS,iBAAiB,CAAC,EAAE,uBAAuB,EACxD,GAAG,CAAC,EAAE,UAAU,EACP,OAAO,CAAC,EAAE,OAAO;IAG7E;;;;OAIG;IACG,GAAG,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC;CAc9F"}

package/dist/foundations/rbac/services/rbac-permission.service.js

@@ -8,20 +8,33 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RbacPermissionService = void 0;
 const common_1 = require("@nestjs/common");
+const nestjs_cls_1 = require("nestjs-cls");
 const rbac_permission_repository_1 = require("../repositories/rbac-permission.repository");
+const rbac_tokens_1 = require("../rbac.tokens");
+const module_permission_service_1 = require("./module-permission.service");
 /**
  * Answers `can(userId, moduleId, action)` using the same `featureModuleQuery`
  * permission resolution as the rest of the app (AuthRepository at login,
  * UserModulesRepository for the chatbot catalog).
  *
  * Consumed by the MCP layer to gate reads and writes per tool call.
+ *
+ * With `permissions.enforce` on, it delegates to `ModulePermissionService`
+ * (token company from CLS, record paths allow) so tool calls and HTTP routes
+ * never disagree. With it off, it behaves exactly as before.
  */
 let RbacPermissionService = class RbacPermissionService {
-    constructor(repository) {
+    constructor(repository, modulePermissions, cls, enforce) {
         this.repository = repository;
+        this.modulePermissions = modulePermissions;
+        this.cls = cls;
+        this.enforce = enforce;
     }
     /**
      * True iff the user's effective permission flag for `action` on the module
@@ -29,6 +42,15 @@ let RbacPermissionService = class RbacPermissionService {
      * always deny.
      */
     async can(params) {
+        if (this.enforce === true && this.modulePermissions) {
+            const companyId = this.cls?.isActive() ? (this.cls.get("companyId") ?? undefined) : undefined;
+            return this.modulePermissions.allows({
+                userId: params.userId,
+                companyId,
+                moduleId: params.moduleId,
+                action: params.action,
+            });
+        }
         const perms = await this.repository.findEffectivePermissionsForUser(params.userId);
         return perms.get(params.moduleId)?.[params.action] === true;
     }
@@ -36,6 +58,14 @@ let RbacPermissionService = class RbacPermissionService {
 exports.RbacPermissionService = RbacPermissionService;
 exports.RbacPermissionService = RbacPermissionService = __decorate([
     (0, common_1.Injectable)(),
-    __metadata("design:paramtypes", [rbac_permission_repository_1.RbacPermissionRepository])
+    __param(1, (0, common_1.Optional)()),
+    __param(1, (0, common_1.Inject)(module_permission_service_1.ModulePermissionService)),
+    __param(2, (0, common_1.Optional)()),
+    __param(2, (0, common_1.Inject)(nestjs_cls_1.ClsService)),
+    __param(3, (0, common_1.Optional)()),
+    __param(3, (0, common_1.Inject)(rbac_tokens_1.PERMISSIONS_ENFORCE)),
+    __metadata("design:paramtypes", [rbac_permission_repository_1.RbacPermissionRepository,
+        module_permission_service_1.ModulePermissionService,
+        nestjs_cls_1.ClsService, Boolean])
 ], RbacPermissionService);
 //# sourceMappingURL=rbac-permission.service.js.map

package/dist/foundations/rbac/services/rbac-permission.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"rbac-permission.service.js","sourceRoot":"","sources":["../../../../src/foundations/rbac/services/rbac-permission.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,2FAAsF;AAWtF;;;;;;GAMG;AAEI,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC,YAA6B,UAAoC;QAApC,eAAU,GAAV,UAAU,CAA0B;IAAG,CAAC;IAErE;;;;OAIG;IACH,KAAK,CAAC,GAAG,CAAC,MAAgE;QACxE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,+BAA+B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnF,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;IAC9D,CAAC;CACF,CAAA;AAZY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;qCAE8B,qDAAwB;GADtD,qBAAqB,CAYjC"}
+{"version":3,"file":"rbac-permission.service.js","sourceRoot":"","sources":["../../../../src/foundations/rbac/services/rbac-permission.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA8D;AAC9D,2CAAwC;AACxC,2FAAsF;AACtF,gDAAqD;AACrD,2EAAsE;AAWtE;;;;;;;;;;GAUG;AAEI,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC,YACmB,UAAoC,EACS,iBAA2C,EACxD,GAAgB,EACP,OAAiB;QAH1D,eAAU,GAAV,UAAU,CAA0B;QACS,sBAAiB,GAAjB,iBAAiB,CAA0B;QACxD,QAAG,GAAH,GAAG,CAAa;QACP,YAAO,GAAP,OAAO,CAAU;IAC1E,CAAC;IAEJ;;;;OAIG;IACH,KAAK,CAAC,GAAG,CAAC,MAAgE;QACxE,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACpD,MAAM,SAAS,GAAuB,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAClH,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBACnC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,SAAS;gBACT,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,+BAA+B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnF,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;IAC9D,CAAC;CACF,CAAA;AA3BY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;IAIR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,mDAAuB,CAAC,CAAA;IAC3C,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,uBAAU,CAAC,CAAA;IAC9B,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,iCAAmB,CAAC,CAAA;qCAHX,qDAAwB;QAC6B,mDAAuB;QAClD,uBAAU;GAJxD,qBAAqB,CA2BjC"}

package/dist/foundations/rbac/services/rbac-reconciler.service.d.ts

@@ -7,7 +7,9 @@ import type { RbacMatrix } from "../dsl/types";
  *
  * Behaviour (per spec §6.3):
  *  - Administrator role is never written as an HAS_PERMISSIONS edge — the
- *    security layer short-circuits for it.
+ *    security layer short-circuits for it. Exception: with
+ *    `permissions.enforce` on (no administrator bypass in the request gate)
+ *    its edges are reconciled like any other role's.
  *  - Module defaults are stored on `Module.permissions`.
  *  - Role-specific permissions are stored on `(Role)-[:HAS_PERMISSIONS]->(Module)`.
  *  - Deletions are scoped to modules declared in the matrix: edges for
@@ -19,7 +21,14 @@ export declare class RbacReconcilerService implements OnApplicationBootstrap {
     private readonly neo4j;
     private readonly matrix;
     private readonly logger;
-    constructor(neo4j: Neo4jService, matrix: RbacMatrix | null, logger: AppLoggingService);
+    private readonly enforce?;
+    constructor(neo4j: Neo4jService, matrix: RbacMatrix | null, logger: AppLoggingService, enforce?: boolean);
+    /**
+     * The Administrator role is skipped (never written, never deleted) unless the
+     * request permission gate is on: the gate has no administrator bypass, so the
+     * Administrator's grants must then be reconciled like any other role's.
+     */
+    private skipsRole;
     onApplicationBootstrap(): Promise<void>;
     private preflight;
     private findMissing;

package/dist/foundations/rbac/services/rbac-reconciler.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rbac-reconciler.service.d.ts","sourceRoot":"","sources":["../../../../src/foundations/rbac/services/rbac-reconciler.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgC,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACtF,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,gDAAgD,CAAC;AAGnF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAe/C;;;;;;;;;;;;GAYG;AACH,qBACa,qBAAsB,YAAW,sBAAsB;IAEhE,OAAO,CAAC,QAAQ,CAAC,KAAK;IACiB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAC9D,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAFN,KAAK,EAAE,YAAY,EACoB,MAAM,EAAE,UAAU,GAAG,IAAI,EAChE,MAAM,EAAE,iBAAiB;IAGtC,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC;YAsB/B,SAAS;YAyBT,WAAW;YAOX,eAAe;IAsB7B,OAAO,CAAC,WAAW;YAkEL,KAAK;CA4BpB"}
+{"version":3,"file":"rbac-reconciler.service.d.ts","sourceRoot":"","sources":["../../../../src/foundations/rbac/services/rbac-reconciler.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgC,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACtF,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,gDAAgD,CAAC;AAGnF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAe/C;;;;;;;;;;;;;;GAcG;AACH,qBACa,qBAAsB,YAAW,sBAAsB;IAEhE,OAAO,CAAC,QAAQ,CAAC,KAAK;IACiB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAC9D,OAAO,CAAC,QAAQ,CAAC,MAAM;IACkB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAHjD,KAAK,EAAE,YAAY,EACoB,MAAM,EAAE,UAAU,GAAG,IAAI,EAChE,MAAM,EAAE,iBAAiB,EACgB,OAAO,CAAC,EAAE,OAAO;IAG7E;;;;OAIG;IACH,OAAO,CAAC,SAAS;IAIX,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC;YAsB/B,SAAS;YAyBT,WAAW;YAOX,eAAe;IAsB7B,OAAO,CAAC,WAAW;YAkEL,KAAK;CA4BpB"}

package/dist/foundations/rbac/services/rbac-reconciler.service.js

@@ -25,7 +25,9 @@ const ADMINISTRATOR_ID = system_roles_1.SystemRoles.Administrator;
  *
  * Behaviour (per spec §6.3):
  *  - Administrator role is never written as an HAS_PERMISSIONS edge — the
- *    security layer short-circuits for it.
+ *    security layer short-circuits for it. Exception: with
+ *    `permissions.enforce` on (no administrator bypass in the request gate)
+ *    its edges are reconciled like any other role's.
  *  - Module defaults are stored on `Module.permissions`.
  *  - Role-specific permissions are stored on `(Role)-[:HAS_PERMISSIONS]->(Module)`.
  *  - Deletions are scoped to modules declared in the matrix: edges for
@@ -34,10 +36,19 @@ const ADMINISTRATOR_ID = system_roles_1.SystemRoles.Administrator;
  *    missing from the DB (seed migrations must run first).
  */
 let RbacReconcilerService = class RbacReconcilerService {
-    constructor(neo4j, matrix, logger) {
+    constructor(neo4j, matrix, logger, enforce) {
         this.neo4j = neo4j;
         this.matrix = matrix;
         this.logger = logger;
+        this.enforce = enforce;
+    }
+    /**
+     * The Administrator role is skipped (never written, never deleted) unless the
+     * request permission gate is on: the gate has no administrator bypass, so the
+     * Administrator's grants must then be reconciled like any other role's.
+     */
+    skipsRole(roleId) {
+        return this.enforce !== true && roleId === ADMINISTRATOR_ID;
     }
     async onApplicationBootstrap() {
         if (!this.matrix) {
@@ -61,7 +72,7 @@ let RbacReconcilerService = class RbacReconcilerService {
             moduleIds.add(moduleId);
         }
         for (const { roleId } of (0, resolver_1.iterateDeclaredEdges)(this.matrix)) {
-            if (roleId === ADMINISTRATOR_ID)
+            if (this.skipsRole(roleId))
                 continue;
             roleIds.add(roleId);
         }
@@ -118,7 +129,7 @@ let RbacReconcilerService = class RbacReconcilerService {
         // Edges — expected (Administrator excluded)
         const expectedEdgeKeys = new Set();
         const sortedEdges = Array.from((0, resolver_1.iterateDeclaredEdges)(this.matrix))
-            .filter((e) => e.roleId !== ADMINISTRATOR_ID)
+            .filter((e) => !this.skipsRole(e.roleId))
             .sort((a, b) => (a.moduleId + a.roleId).localeCompare(b.moduleId + b.roleId));
         const actualByKey = new Map();
         for (const edge of actual.edges) {
@@ -142,7 +153,7 @@ let RbacReconcilerService = class RbacReconcilerService {
         for (const edge of actual.edges) {
             if (!declaredModules.has(edge.moduleId))
                 continue;
-            if (edge.roleId === ADMINISTRATOR_ID)
+            if (this.skipsRole(edge.roleId))
                 continue;
             const key = `${edge.roleId}|${edge.moduleId}`;
             if (!expectedEdgeKeys.has(key)) {
@@ -187,6 +198,8 @@ exports.RbacReconcilerService = RbacReconcilerService = __decorate([
     (0, common_1.Injectable)(),
     __param(1, (0, common_1.Optional)()),
     __param(1, (0, common_1.Inject)(rbac_tokens_1.RBAC_MATRIX_TOKEN)),
-    __metadata("design:paramtypes", [neo4j_service_1.Neo4jService, Object, logging_service_1.AppLoggingService])
+    __param(3, (0, common_1.Optional)()),
+    __param(3, (0, common_1.Inject)(rbac_tokens_1.PERMISSIONS_ENFORCE)),
+    __metadata("design:paramtypes", [neo4j_service_1.Neo4jService, Object, logging_service_1.AppLoggingService, Boolean])
 ], RbacReconcilerService);
 //# sourceMappingURL=rbac-reconciler.service.js.map

package/dist/foundations/rbac/services/rbac-reconciler.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"rbac-reconciler.service.js","sourceRoot":"","sources":["../../../../src/foundations/rbac/services/rbac-reconciler.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAsF;AACtF,8EAA0E;AAC1E,oFAAmF;AACnF,yEAAqE;AACrE,gDAAmD;AAEnD,8CAA+G;AAE/G,MAAM,gBAAgB,GAAW,0BAAW,CAAC,aAAa,CAAC;AAY3D;;;;;;;;;;;;GAYG;AAEI,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC,YACmB,KAAmB,EACoB,MAAyB,EAChE,MAAyB;QAFzB,UAAK,GAAL,KAAK,CAAc;QACoB,WAAM,GAAN,MAAM,CAAmB;QAChE,WAAM,GAAN,MAAM,CAAmB;IACzC,CAAC;IAEJ,KAAK,CAAC,sBAAsB;QAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QAEvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAEtC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,mBAAmB,IAAI,CAAC,eAAe,sBAAsB,IAAI,CAAC,aAAa,oBAAoB,IAAI,CAAC,YAAY,gBAAgB,CACrI,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAElC,KAAK,MAAM,QAAQ,IAAI,IAAA,iCAAsB,EAAC,IAAI,CAAC,MAAO,CAAC,EAAE,CAAC;YAC5D,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QACD,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,IAAA,+BAAoB,EAAC,IAAI,CAAC,MAAO,CAAC,EAAE,CAAC;YAC5D,IAAI,MAAM,KAAK,gBAAgB;gBAAE,SAAS;YAC1C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACzE,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAE/E,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,gEAAgE;gBAC9D,kBAAkB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,IAAI;gBACvD,oBAAoB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,IAAI;gBAC3D,6DAA6D,CAChE,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,KAAwB,EAAE,GAAa;QAC/D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,wCAAwC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACzG,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAW,CAAC,CAAC,CAAC;QACrF,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,kEAAkE,EAAE,EAAE,CAAC,CAAC;QACpH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CACvC,sHAAsH,EACtH,EAAE,CACH,CAAC;QAEF,MAAM,cAAc,GAAkC,EAAE,CAAC;QACzD,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;YACxC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAW,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,aAAa,CAAkB,CAAC;QACpF,CAAC;QACD,MAAM,KAAK,GAAqE,EAAE,CAAC;QACnF,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAW;gBACnC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAW;gBACvC,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,aAAa,CAAW;aAC9C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IACnC,CAAC;IAEO,WAAW,CAAC,MAAmB;QAMrC,MAAM,UAAU,GAAyB,EAAE,CAAC;QAC5C,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS,KAAK,CAAC,IAAI,CAAC,IAAA,iCAAsB,EAAC,IAAI,CAAC,MAAO,CAAC,CAAC,CAAC,CAAC;QAC1F,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC;QAEzD,WAAW;QACX,KAAK,MAAM,QAAQ,IAAI,aAAa,EAAE,CAAC;YACrC,MAAM,QAAQ,GAAG,IAAA,yBAAc,EAAC,IAAI,CAAC,MAAO,EAAE,QAAQ,CAAC,CAAC;YACxD,IAAI,QAAQ,KAAK,SAAS;gBAAE,SAAS;YACrC,IAAI,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACjD,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACrF,eAAe,EAAE,CAAC;YACpB,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,IAAA,+BAAoB,EAAC,IAAI,CAAC,MAAO,CAAC,CAAC;aAC/D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,gBAAgB,CAAC;aAC5C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAEhF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC9C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACvE,CAAC;QAED,KAAK,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC;YAC/C,MAAM,QAAQ,GAAG,IAAA,yBAAc,EAAC,IAAI,CAAC,MAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YAChE,IAAI,QAAQ,KAAK,SAAS;gBAAE,SAAS;YACrC,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAC;YACpC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACtC,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,YAAY;oBAClB,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE;iBACpD,CAAC,CAAC;gBACH,aAAa,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;QAED,mFAAmF;QACnF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAClD,IAAI,IAAI,CAAC,MAAM,KAAK,gBAAgB;gBAAE,SAAS;YAC/C,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,YAAY;oBAClB,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;iBACzD,CAAC,CAAC;gBACH,YAAY,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,UAAgC;QAClD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC7B,OAAO;oBACL,KAAK,EAAE,mEAAmE;oBAC1E,MAAM,EAAE,EAAE,CAAC,MAAM;iBAClB,CAAC;YACJ,CAAC;YACD,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC7B,OAAO;oBACL,KAAK,EACH,kCAAkC;wBAClC,wCAAwC;wBACxC,uDAAuD;wBACvD,uDAAuD;wBACvD,qDAAqD;oBACvD,MAAM,EAAE,EAAE,CAAC,MAAM;iBAClB,CAAC;YACJ,CAAC;YACD,aAAa;YACb,OAAO;gBACL,KAAK,EAAE,+FAA+F;gBACtG,MAAM,EAAE,EAAE,CAAC,MAAM;aAClB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;CACF,CAAA;AAjLY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;IAIR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,+BAAiB,CAAC,CAAA;qCADd,4BAAY,UAEX,mCAAiB;GAJjC,qBAAqB,CAiLjC"}
+{"version":3,"file":"rbac-reconciler.service.js","sourceRoot":"","sources":["../../../../src/foundations/rbac/services/rbac-reconciler.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAsF;AACtF,8EAA0E;AAC1E,oFAAmF;AACnF,yEAAqE;AACrE,gDAAwE;AAExE,8CAA+G;AAE/G,MAAM,gBAAgB,GAAW,0BAAW,CAAC,aAAa,CAAC;AAY3D;;;;;;;;;;;;;;GAcG;AAEI,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC,YACmB,KAAmB,EACoB,MAAyB,EAChE,MAAyB,EACgB,OAAiB;QAH1D,UAAK,GAAL,KAAK,CAAc;QACoB,WAAM,GAAN,MAAM,CAAmB;QAChE,WAAM,GAAN,MAAM,CAAmB;QACgB,YAAO,GAAP,OAAO,CAAU;IAC1E,CAAC;IAEJ;;;;OAIG;IACK,SAAS,CAAC,MAAc;QAC9B,OAAO,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,MAAM,KAAK,gBAAgB,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,sBAAsB;QAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QAEvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAEtC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QAED,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,mBAAmB,IAAI,CAAC,eAAe,sBAAsB,IAAI,CAAC,aAAa,oBAAoB,IAAI,CAAC,YAAY,gBAAgB,CACrI,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAElC,KAAK,MAAM,QAAQ,IAAI,IAAA,iCAAsB,EAAC,IAAI,CAAC,MAAO,CAAC,EAAE,CAAC;YAC5D,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QACD,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,IAAA,+BAAoB,EAAC,IAAI,CAAC,MAAO,CAAC,EAAE,CAAC;YAC5D,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;gBAAE,SAAS;YACrC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACzE,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAE/E,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,gEAAgE;gBAC9D,kBAAkB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,IAAI;gBACvD,oBAAoB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,IAAI;gBAC3D,6DAA6D,CAChE,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,KAAwB,EAAE,GAAa;QAC/D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,wCAAwC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACzG,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAW,CAAC,CAAC,CAAC;QACrF,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,kEAAkE,EAAE,EAAE,CAAC,CAAC;QACpH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CACvC,sHAAsH,EACtH,EAAE,CACH,CAAC;QAEF,MAAM,cAAc,GAAkC,EAAE,CAAC;QACzD,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;YACxC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAW,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,aAAa,CAAkB,CAAC;QACpF,CAAC;QACD,MAAM,KAAK,GAAqE,EAAE,CAAC;QACnF,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAW;gBACnC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAW;gBACvC,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,aAAa,CAAW;aAC9C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IACnC,CAAC;IAEO,WAAW,CAAC,MAAmB;QAMrC,MAAM,UAAU,GAAyB,EAAE,CAAC;QAC5C,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS,KAAK,CAAC,IAAI,CAAC,IAAA,iCAAsB,EAAC,IAAI,CAAC,MAAO,CAAC,CAAC,CAAC,CAAC;QAC1F,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC;QAEzD,WAAW;QACX,KAAK,MAAM,QAAQ,IAAI,aAAa,EAAE,CAAC;YACrC,MAAM,QAAQ,GAAG,IAAA,yBAAc,EAAC,IAAI,CAAC,MAAO,EAAE,QAAQ,CAAC,CAAC;YACxD,IAAI,QAAQ,KAAK,SAAS;gBAAE,SAAS;YACrC,IAAI,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACjD,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACrF,eAAe,EAAE,CAAC;YACpB,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,IAAA,+BAAoB,EAAC,IAAI,CAAC,MAAO,CAAC,CAAC;aAC/D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;aACxC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAEhF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC9C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACvE,CAAC;QAED,KAAK,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,WAAW,EAAE,CAAC;YAC/C,MAAM,QAAQ,GAAG,IAAA,yBAAc,EAAC,IAAI,CAAC,MAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;YAChE,IAAI,QAAQ,KAAK,SAAS;gBAAE,SAAS;YACrC,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,QAAQ,EAAE,CAAC;YACpC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACtC,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,YAAY;oBAClB,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE;iBACpD,CAAC,CAAC;gBACH,aAAa,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;QAED,mFAAmF;QACnF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAClD,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC1C,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,YAAY;oBAClB,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;iBACzD,CAAC,CAAC;gBACH,YAAY,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,UAAgC;QAClD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YACpC,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC7B,OAAO;oBACL,KAAK,EAAE,mEAAmE;oBAC1E,MAAM,EAAE,EAAE,CAAC,MAAM;iBAClB,CAAC;YACJ,CAAC;YACD,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC7B,OAAO;oBACL,KAAK,EACH,kCAAkC;wBAClC,wCAAwC;wBACxC,uDAAuD;wBACvD,uDAAuD;wBACvD,qDAAqD;oBACvD,MAAM,EAAE,EAAE,CAAC,MAAM;iBAClB,CAAC;YACJ,CAAC;YACD,aAAa;YACb,OAAO;gBACL,KAAK,EAAE,+FAA+F;gBACtG,MAAM,EAAE,EAAE,CAAC,MAAM;aAClB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;CACF,CAAA;AA3LY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;IAIR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,+BAAiB,CAAC,CAAA;IAErC,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,iCAAmB,CAAC,CAAA;qCAHhB,4BAAY,UAEX,mCAAiB;GAJjC,qBAAqB,CA2LjC"}

package/dist/foundations/referral/controllers/referral.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"referral.controller.d.ts","sourceRoot":"","sources":["../../../../src/foundations/referral/controllers/referral.controller.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAEhE,OAAO,EAAmB,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAChG,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE/D,qBAEa,kBAAkB;IAE3B,OAAO,CAAC,QAAQ,CAAC,eAAe;IACP,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAD/B,eAAe,EAAE,eAAe,EACP,MAAM,EAAE,QAAQ,CAAC,oBAAoB,CAAC;IAGlF;;;OAGG;IACH,OAAO,CAAC,YAAY;IAMpB;;;OAGG;IAEG,SAAS,CAAQ,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAM1D;;;OAGG;IAGG,UAAU,CAAQ,KAAK,EAAE,YAAY,EAAU,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAM5F;;;OAGG;IAEG,QAAQ,CAAQ,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;CAK1D"}
+{"version":3,"file":"referral.controller.d.ts","sourceRoot":"","sources":["../../../../src/foundations/referral/controllers/referral.controller.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAEhE,OAAO,EAAmB,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAChG,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAI/D,qBAGa,kBAAkB;IAE3B,OAAO,CAAC,QAAQ,CAAC,eAAe;IACP,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAD/B,eAAe,EAAE,eAAe,EACP,MAAM,EAAE,QAAQ,CAAC,oBAAoB,CAAC;IAGlF;;;OAGG;IACH,OAAO,CAAC,YAAY;IAMpB;;;OAGG;IAEG,SAAS,CAAQ,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAM1D;;;OAGG;IAGG,UAAU,CAAQ,KAAK,EAAE,YAAY,EAAU,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAM5F;;;OAGG;IAEG,QAAQ,CAAQ,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;CAK1D"}

package/dist/foundations/referral/controllers/referral.controller.js

@@ -19,6 +19,8 @@ const referral_invite_dto_1 = require("../dtos/referral-invite.dto");
 const referral_meta_1 = require("../entities/referral.meta");
 const referral_config_interface_1 = require("../interfaces/referral.config.interface");
 const referral_service_1 = require("../services/referral.service");
+const module_decorator_1 = require("../../../common/decorators/module.decorator");
+const core_module_ids_1 = require("../../../common/constants/core-module.ids");
 let ReferralController = class ReferralController {
     constructor(referralService, config) {
         this.referralService = referralService;
@@ -87,6 +89,7 @@ __decorate([
 ], ReferralController.prototype, "getStats", null);
 exports.ReferralController = ReferralController = __decorate([
     (0, common_1.UseGuards)(jwt_auth_guard_1.JwtAuthGuard),
+    (0, module_decorator_1.ModuleACL)({ module: core_module_ids_1.CoreModuleId.Referral }),
     (0, common_1.Controller)(),
     __param(1, (0, common_1.Inject)(referral_config_interface_1.REFERRAL_CONFIG)),
     __metadata("design:paramtypes", [referral_service_1.ReferralService, Object])

package/dist/foundations/referral/controllers/referral.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"referral.controller.js","sourceRoot":"","sources":["../../../../src/foundations/referral/controllers/referral.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAWwB;AAGxB,0EAAqE;AACrE,qEAAgE;AAChE,6DAAyD;AACzD,uFAAgG;AAChG,mEAA+D;AAIxD,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC7B,YACmB,eAAgC,EACP,MAAsC;QAD/D,oBAAe,GAAf,eAAe,CAAiB;QACP,WAAM,GAAN,MAAM,CAAgC;IAC/E,CAAC;IAEJ;;;OAGG;IACK,YAAY;QAClB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,0BAAiB,CAAC,iCAAiC,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED;;;OAGG;IAEG,AAAN,KAAK,CAAC,SAAS,CAAQ,KAAmB;QACxC,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,gBAAgB,EAAE,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;IAED;;;OAGG;IAGG,AAAN,KAAK,CAAC,UAAU,CAAQ,KAAmB,EAAU,IAAuB;QAC1E,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACrE,KAAK,CAAC,IAAI,EAAE,CAAC;IACf,CAAC;IAED;;;OAGG;IAEG,AAAN,KAAK,CAAC,QAAQ,CAAQ,KAAmB;QACvC,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,eAAe,EAAE,CAAC;QAC9D,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;CACF,CAAA;AAjDY,gDAAkB;AAqBvB;IADL,IAAA,YAAG,EAAC,GAAG,4BAAY,CAAC,QAAQ,UAAU,CAAC;IACvB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;mDAIrB;AAQK;IAFL,IAAA,aAAI,EAAC,GAAG,4BAAY,CAAC,QAAQ,SAAS,CAAC;IACvC,IAAA,iBAAQ,EAAC,mBAAU,CAAC,UAAU,CAAC;IACd,WAAA,IAAA,YAAG,GAAE,CAAA;IAAuB,WAAA,IAAA,aAAI,GAAE,CAAA;;6CAAO,uCAAiB;;oDAI3E;AAOK;IADL,IAAA,YAAG,EAAC,GAAG,4BAAY,CAAC,QAAQ,QAAQ,CAAC;IACtB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;kDAIpB;6BAhDU,kBAAkB;IAF9B,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,mBAAU,GAAE;IAIR,WAAA,IAAA,eAAM,EAAC,2CAAe,CAAC,CAAA;qCADU,kCAAe;GAFxC,kBAAkB,CAiD9B"}
+{"version":3,"file":"referral.controller.js","sourceRoot":"","sources":["../../../../src/foundations/referral/controllers/referral.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAWwB;AAGxB,0EAAqE;AACrE,qEAAgE;AAChE,6DAAyD;AACzD,uFAAgG;AAChG,mEAA+D;AAC/D,kFAAwE;AACxE,+EAAyE;AAKlE,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC7B,YACmB,eAAgC,EACP,MAAsC;QAD/D,oBAAe,GAAf,eAAe,CAAiB;QACP,WAAM,GAAN,MAAM,CAAgC;IAC/E,CAAC;IAEJ;;;OAGG;IACK,YAAY;QAClB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,0BAAiB,CAAC,iCAAiC,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED;;;OAGG;IAEG,AAAN,KAAK,CAAC,SAAS,CAAQ,KAAmB;QACxC,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,gBAAgB,EAAE,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;IAED;;;OAGG;IAGG,AAAN,KAAK,CAAC,UAAU,CAAQ,KAAmB,EAAU,IAAuB;QAC1E,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACrE,KAAK,CAAC,IAAI,EAAE,CAAC;IACf,CAAC;IAED;;;OAGG;IAEG,AAAN,KAAK,CAAC,QAAQ,CAAQ,KAAmB;QACvC,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,eAAe,EAAE,CAAC;QAC9D,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;CACF,CAAA;AAjDY,gDAAkB;AAqBvB;IADL,IAAA,YAAG,EAAC,GAAG,4BAAY,CAAC,QAAQ,UAAU,CAAC;IACvB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;mDAIrB;AAQK;IAFL,IAAA,aAAI,EAAC,GAAG,4BAAY,CAAC,QAAQ,SAAS,CAAC;IACvC,IAAA,iBAAQ,EAAC,mBAAU,CAAC,UAAU,CAAC;IACd,WAAA,IAAA,YAAG,GAAE,CAAA;IAAuB,WAAA,IAAA,aAAI,GAAE,CAAA;;6CAAO,uCAAiB;;oDAI3E;AAOK;IADL,IAAA,YAAG,EAAC,GAAG,4BAAY,CAAC,QAAQ,QAAQ,CAAC;IACtB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;kDAIpB;6BAhDU,kBAAkB;IAH9B,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,4BAAS,EAAC,EAAE,MAAM,EAAE,8BAAY,CAAC,QAAQ,EAAE,CAAC;IAC5C,IAAA,mBAAU,GAAE;IAIR,WAAA,IAAA,eAAM,EAAC,2CAAe,CAAC,CAAA;qCADU,kCAAe;GAFxC,kBAAkB,CAiD9B"}

package/dist/foundations/role/controllers/role.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"role.controller.d.ts","sourceRoot":"","sources":["../../../../src/foundations/role/controllers/role.controller.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAE5D,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD,qBACa,cAAc;IAEvB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAFZ,WAAW,EAAE,WAAW,EACxB,YAAY,EAAE,YAAY,EAC1B,YAAY,EAAE,YAAY;IAMvC,IAAI,CAAU,KAAK,EAAE,GAAG,EAAmB,MAAM,CAAC,EAAE,MAAM;IAQ1D,QAAQ,CAAkB,MAAM,EAAE,MAAM;IAWxC,MAAM,CAAS,IAAI,EAAE,WAAW;IAchC,MAAM,CAAS,IAAI,EAAE,WAAW,EAAmB,MAAM,EAAE,MAAM;IAcjE,MAAM,CAAkB,MAAM,EAAE,MAAM;CAK7C"}
+{"version":3,"file":"role.controller.d.ts","sourceRoot":"","sources":["../../../../src/foundations/role/controllers/role.controller.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,YAAY,EAAE,MAAM,4CAA4C,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAE5D,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAIvD,qBAEa,cAAc;IAEvB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAFZ,WAAW,EAAE,WAAW,EACxB,YAAY,EAAE,YAAY,EAC1B,YAAY,EAAE,YAAY;IAMvC,IAAI,CAAU,KAAK,EAAE,GAAG,EAAmB,MAAM,CAAC,EAAE,MAAM;IAQ1D,QAAQ,CAAkB,MAAM,EAAE,MAAM;IAWxC,MAAM,CAAS,IAAI,EAAE,WAAW;IAchC,MAAM,CAAS,IAAI,EAAE,WAAW,EAAmB,MAAM,EAAE,MAAM;IAcjE,MAAM,CAAkB,MAAM,EAAE,MAAM;CAK7C"}

package/dist/foundations/role/controllers/role.controller.js

@@ -23,6 +23,8 @@ const audit_service_1 = require("../../audit/services/audit.service");
 const role_post_dto_1 = require("../../role/dtos/role.post.dto");
 const role_meta_1 = require("../../role/entities/role.meta");
 const role_service_1 = require("../services/role.service");
+const module_decorator_1 = require("../../../common/decorators/module.decorator");
+const core_module_ids_1 = require("../../../common/constants/core-module.ids");
 let RoleController = class RoleController {
     constructor(roleService, auditService, cacheService) {
         this.roleService = roleService;
@@ -115,6 +117,7 @@ __decorate([
     __metadata("design:returntype", Promise)
 ], RoleController.prototype, "delete", null);
 exports.RoleController = RoleController = __decorate([
+    (0, module_decorator_1.ModuleACL)({ module: core_module_ids_1.CoreModuleId.Role }),
     (0, common_1.Controller)(role_meta_1.roleMeta.endpoint),
     __metadata("design:paramtypes", [role_service_1.RoleService,
         audit_service_1.AuditService,

package/dist/foundations/role/controllers/role.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"role.controller.js","sourceRoot":"","sources":["../../../../src/foundations/role/controllers/role.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAawB;AAExB,yEAAgE;AAChE,2DAAoE;AACpE,gFAAmE;AACnE,0EAAqE;AACrE,8EAA0E;AAC1E,sEAAkE;AAClE,iEAA4D;AAC5D,6DAAyD;AACzD,2DAAuD;AAGhD,IAAM,cAAc,GAApB,MAAM,cAAc;IACzB,YACmB,WAAwB,EACxB,YAA0B,EAC1B,YAA0B;QAF1B,gBAAW,GAAX,WAAW,CAAa;QACxB,iBAAY,GAAZ,YAAY,CAAc;QAC1B,iBAAY,GAAZ,YAAY,CAAc;IAC1C,CAAC;IAKE,AAAN,KAAK,CAAC,IAAI,CAAU,KAAU,EAAmB,MAAe;QAC9D,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IAMK,AAAN,KAAK,CAAC,QAAQ,CAAkB,MAAc;QAC5C,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,+EAA+E;IAC/E,8EAA8E;IAC9E,uEAAuE;IAKjE,AAAN,KAAK,CAAC,MAAM,CAAS,IAAiB;QACpC,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC;YACrC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI;SAChC,CAAC,CAAC;QAEH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YACnC,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IAMK,AAAN,KAAK,CAAC,MAAM,CAAS,IAAiB,EAAmB,MAAc;QACrE,IAAI,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE;YACzB,MAAM,IAAI,sBAAa,CAAC,0CAA0C,EAAE,mBAAU,CAAC,mBAAmB,CAAC,CAAC;QAEtG,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YACnC,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IAOK,AAAN,KAAK,CAAC,MAAM,CAAkB,MAAc;QAC1C,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YAC5B,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AA9DY,wCAAc;AAUnB;IAHL,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACxB,gEAAgE;;IAC/D,IAAA,YAAG,GAAE;IACM,WAAA,IAAA,cAAK,GAAE,CAAA;IAAc,WAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;;;;0CAE/C;AAMK;IAJL,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACxB,gEAAgE;;IAC/D,IAAA,YAAG,EAAC,SAAS,CAAC;IACd,IAAA,kBAAK,EAAC,oBAAQ,EAAE,QAAQ,CAAC;IACV,WAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;;;;8CAE9B;AASK;IAJL,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,uBAAK,EAAC,qBAAM,CAAC,aAAa,CAAC;IAC3B,IAAA,aAAI,GAAE;IACN,IAAA,4BAAe,EAAC,oBAAQ,CAAC;IACZ,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAO,2BAAW;;4CAQrC;AAMK;IAJL,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,uBAAK,EAAC,qBAAM,CAAC,aAAa,CAAC;IAC3B,IAAA,YAAG,EAAC,SAAS,CAAC;IACd,IAAA,4BAAe,EAAC,oBAAQ,EAAE,QAAQ,CAAC;IACtB,WAAA,IAAA,aAAI,GAAE,CAAA;IAAqB,WAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;;qCAA7B,2BAAW;;4CAOrC;AAOK;IALL,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,uBAAK,EAAC,qBAAM,CAAC,aAAa,CAAC;IAC3B,IAAA,iBAAQ,EAAC,mBAAU,CAAC,UAAU,CAAC;IAC/B,IAAA,eAAM,EAAC,SAAS,CAAC;IACjB,IAAA,4BAAe,EAAC,oBAAQ,EAAE,QAAQ,CAAC;IACtB,WAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;;;;4CAI5B;yBA7DU,cAAc;IAD1B,IAAA,mBAAU,EAAC,oBAAQ,CAAC,QAAQ,CAAC;qCAGI,0BAAW;QACV,4BAAY;QACZ,4BAAY;GAJlC,cAAc,CA8D1B"}
+{"version":3,"file":"role.controller.js","sourceRoot":"","sources":["../../../../src/foundations/role/controllers/role.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAawB;AAExB,yEAAgE;AAChE,2DAAoE;AACpE,gFAAmE;AACnE,0EAAqE;AACrE,8EAA0E;AAC1E,sEAAkE;AAClE,iEAA4D;AAC5D,6DAAyD;AACzD,2DAAuD;AACvD,kFAAwE;AACxE,+EAAyE;AAIlE,IAAM,cAAc,GAApB,MAAM,cAAc;IACzB,YACmB,WAAwB,EACxB,YAA0B,EAC1B,YAA0B;QAF1B,gBAAW,GAAX,WAAW,CAAa;QACxB,iBAAY,GAAZ,YAAY,CAAc;QAC1B,iBAAY,GAAZ,YAAY,CAAc;IAC1C,CAAC;IAKE,AAAN,KAAK,CAAC,IAAI,CAAU,KAAU,EAAmB,MAAe;QAC9D,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IAMK,AAAN,KAAK,CAAC,QAAQ,CAAkB,MAAc;QAC5C,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,+EAA+E;IAC/E,8EAA8E;IAC9E,uEAAuE;IAKjE,AAAN,KAAK,CAAC,MAAM,CAAS,IAAiB;QACpC,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC;YACrC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI;SAChC,CAAC,CAAC;QAEH,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YACnC,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IAMK,AAAN,KAAK,CAAC,MAAM,CAAS,IAAiB,EAAmB,MAAc;QACrE,IAAI,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE;YACzB,MAAM,IAAI,sBAAa,CAAC,0CAA0C,EAAE,mBAAU,CAAC,mBAAmB,CAAC,CAAC;QAEtG,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YACnC,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IAOK,AAAN,KAAK,CAAC,MAAM,CAAkB,MAAc;QAC1C,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YAC5B,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AA9DY,wCAAc;AAUnB;IAHL,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACxB,gEAAgE;;IAC/D,IAAA,YAAG,GAAE;IACM,WAAA,IAAA,cAAK,GAAE,CAAA;IAAc,WAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;;;;0CAE/C;AAMK;IAJL,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACxB,gEAAgE;;IAC/D,IAAA,YAAG,EAAC,SAAS,CAAC;IACd,IAAA,kBAAK,EAAC,oBAAQ,EAAE,QAAQ,CAAC;IACV,WAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;;;;8CAE9B;AASK;IAJL,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,uBAAK,EAAC,qBAAM,CAAC,aAAa,CAAC;IAC3B,IAAA,aAAI,GAAE;IACN,IAAA,4BAAe,EAAC,oBAAQ,CAAC;IACZ,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAO,2BAAW;;4CAQrC;AAMK;IAJL,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,uBAAK,EAAC,qBAAM,CAAC,aAAa,CAAC;IAC3B,IAAA,YAAG,EAAC,SAAS,CAAC;IACd,IAAA,4BAAe,EAAC,oBAAQ,EAAE,QAAQ,CAAC;IACtB,WAAA,IAAA,aAAI,GAAE,CAAA;IAAqB,WAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;;qCAA7B,2BAAW;;4CAOrC;AAOK;IALL,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,uBAAK,EAAC,qBAAM,CAAC,aAAa,CAAC;IAC3B,IAAA,iBAAQ,EAAC,mBAAU,CAAC,UAAU,CAAC;IAC/B,IAAA,eAAM,EAAC,SAAS,CAAC;IACjB,IAAA,4BAAe,EAAC,oBAAQ,EAAE,QAAQ,CAAC;IACtB,WAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;;;;4CAI5B;yBA7DU,cAAc;IAF1B,IAAA,4BAAS,EAAC,EAAE,MAAM,EAAE,8BAAY,CAAC,IAAI,EAAE,CAAC;IACxC,IAAA,mBAAU,EAAC,oBAAQ,CAAC,QAAQ,CAAC;qCAGI,0BAAW;QACV,4BAAY;QACZ,4BAAY;GAJlC,cAAc,CA8D1B"}

package/dist/foundations/role/controllers/role.user.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"role.user.controller.d.ts","sourceRoot":"","sources":["../../../../src/foundations/role/controllers/role.user.controller.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AAGnF,OAAO,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAG/D,qBACa,kBAAkB;IAE3B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBADR,WAAW,EAAE,WAAW,EACxB,QAAQ,EAAE,eAAe;IAKtC,YAAY,CACL,GAAG,EAAE,GAAG,EACV,KAAK,EAAE,GAAG,EACF,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,OAAO;CAe1C"}
+{"version":3,"file":"role.user.controller.d.ts","sourceRoot":"","sources":["../../../../src/foundations/role/controllers/role.user.controller.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,kDAAkD,CAAC;AAGnF,OAAO,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAK/D,qBAEa,kBAAkB;IAE3B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBADR,WAAW,EAAE,WAAW,EACxB,QAAQ,EAAE,eAAe;IAKtC,YAAY,CACL,GAAG,EAAE,GAAG,EACV,KAAK,EAAE,GAAG,EACF,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,OAAO;CAe1C"}

package/dist/foundations/role/controllers/role.user.controller.js

@@ -19,6 +19,8 @@ const security_service_1 = require("../../../core/security/services/security.ser
 const role_meta_1 = require("../../role/entities/role.meta");
 const role_service_1 = require("../../role/services/role.service");
 const user_meta_1 = require("../../user/entities/user.meta");
+const module_decorator_1 = require("../../../common/decorators/module.decorator");
+const core_module_ids_1 = require("../../../common/constants/core-module.ids");
 let RoleUserController = class RoleUserController {
     constructor(roleServide, security) {
         this.roleServide = roleServide;
@@ -52,6 +54,7 @@ __decorate([
     __metadata("design:returntype", Promise)
 ], RoleUserController.prototype, "findBySearch", null);
 exports.RoleUserController = RoleUserController = __decorate([
+    (0, module_decorator_1.ModuleACL)({ module: core_module_ids_1.CoreModuleId.Role }),
     (0, common_1.Controller)(user_meta_1.userMeta.endpoint),
     __metadata("design:paramtypes", [role_service_1.RoleService,
         security_service_1.SecurityService])

package/dist/foundations/role/controllers/role.user.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"role.user.controller.js","sourceRoot":"","sources":["../../../../src/foundations/role/controllers/role.user.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAmF;AAEnF,0EAAqE;AACrE,uFAAmF;AACnF,6DAAyD;AAEzD,mEAA+D;AAC/D,6DAAyD;AAGlD,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC7B,YACmB,WAAwB,EACxB,QAAyB;QADzB,gBAAW,GAAX,WAAW,CAAa;QACxB,aAAQ,GAAR,QAAQ,CAAiB;IACzC,CAAC;IAIE,AAAN,KAAK,CAAC,YAAY,CACL,GAAQ,EACV,KAAU,EACF,MAAc,EACd,MAAe,EACZ,SAAmB;QAEvC,IAAI,SAAS;YACX,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC;gBAC1C,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QAEL,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;YACxC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AA5BY,gDAAkB;AAQvB;IAFL,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,YAAG,EAAC,WAAW,oBAAQ,CAAC,QAAQ,EAAE,CAAC;IAEjC,WAAA,IAAA,gBAAO,GAAE,CAAA;IACT,WAAA,IAAA,cAAK,GAAE,CAAA;IACP,WAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,WAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,WAAA,IAAA,cAAK,EAAC,WAAW,CAAC,CAAA;;;;sDAcpB;6BA3BU,kBAAkB;IAD9B,IAAA,mBAAU,EAAC,oBAAQ,CAAC,QAAQ,CAAC;qCAGI,0BAAW;QACd,kCAAe;GAHjC,kBAAkB,CA4B9B"}
+{"version":3,"file":"role.user.controller.js","sourceRoot":"","sources":["../../../../src/foundations/role/controllers/role.user.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAmF;AAEnF,0EAAqE;AACrE,uFAAmF;AACnF,6DAAyD;AAEzD,mEAA+D;AAC/D,6DAAyD;AACzD,kFAAwE;AACxE,+EAAyE;AAIlE,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC7B,YACmB,WAAwB,EACxB,QAAyB;QADzB,gBAAW,GAAX,WAAW,CAAa;QACxB,aAAQ,GAAR,QAAQ,CAAiB;IACzC,CAAC;IAIE,AAAN,KAAK,CAAC,YAAY,CACL,GAAQ,EACV,KAAU,EACF,MAAc,EACd,MAAe,EACZ,SAAmB;QAEvC,IAAI,SAAS;YACX,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC;gBAC1C,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QAEL,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;YACxC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AA5BY,gDAAkB;AAQvB;IAFL,IAAA,kBAAS,EAAC,6BAAY,CAAC;IACvB,IAAA,YAAG,EAAC,WAAW,oBAAQ,CAAC,QAAQ,EAAE,CAAC;IAEjC,WAAA,IAAA,gBAAO,GAAE,CAAA;IACT,WAAA,IAAA,cAAK,GAAE,CAAA;IACP,WAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,WAAA,IAAA,cAAK,EAAC,QAAQ,CAAC,CAAA;IACf,WAAA,IAAA,cAAK,EAAC,WAAW,CAAC,CAAA;;;;sDAcpB;6BA3BU,kBAAkB;IAF9B,IAAA,4BAAS,EAAC,EAAE,MAAM,EAAE,8BAAY,CAAC,IAAI,EAAE,CAAC;IACxC,IAAA,mBAAU,EAAC,oBAAQ,CAAC,QAAQ,CAAC;qCAGI,0BAAW;QACd,kCAAe;GAHjC,kBAAkB,CA4B9B"}

package/dist/foundations/s3/controllers/s3.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"s3.controller.d.ts","sourceRoot":"","sources":["../../../../src/foundations/s3/controllers/s3.controller.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAIvD,OAAO,EAGL,iBAAiB,EAClB,MAAM,2DAA2D,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kDAAkD,CAAC;AACvF,OAAO,EAEL,sBAAsB,EACvB,MAAM,kEAAkE,CAAC;AAS1E,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAKzD;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAQtD,CAAC;AAEH,oFAAoF;AACpF,eAAO,MAAM,+BAA+B,EAAE,WAAW,CAAC,MAAM,CAI9D,CAAC;AAOH,qBACa,YAAY;IAErB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAE9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAG3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;IAK3B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;gBAZf,OAAO,EAAE,SAAS,EAClB,MAAM,EAAE,eAAe,EACvB,aAAa,EAAE,aAAa,CAAC,mBAAmB,CAAC,EAEjD,UAAU,EAAE,kBAAkB,EAG9B,SAAS,CAAC,EAAE,iBAAiB,EAK7B,cAAc,CAAC,EAAE,sBAAsB;IAKpD,eAAe,CACL,GAAG,EAAE,MAAM,EACH,WAAW,EAAE,MAAM,EACtB,QAAQ,EAAE,OAAO;IAgBhC,YAAY,CACF,GAAG,EAAE,MAAM,EACN,QAAQ,EAAE,OAAO,EACjB,QAAQ,CAAC,EAAE,MAAM;IAchC,UAAU,CAAe,GAAG,EAAE,MAAM;IAM1C;;;OAGG;IAEG,SAAS,CACN,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,YAAY,EACV,KAAK,EAAE,MAAM,GAC5B,OAAO,CAAC,IAAI,CAAC;IAwChB;;OAEG;IAEG,SAAS,CAAQ,KAAK,EAAE,YAAY,EAAkB,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoCzF;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAqB3B;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAMrB;;;;OAIG;YACW,eAAe;IAiB7B,OAAO,CAAC,UAAU;IAYlB,OAAO,CAAC,YAAY;CAwBrB"}
+{"version":3,"file":"s3.controller.d.ts","sourceRoot":"","sources":["../../../../src/foundations/s3/controllers/s3.controller.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAIvD,OAAO,EAGL,iBAAiB,EAClB,MAAM,2DAA2D,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kDAAkD,CAAC;AACvF,OAAO,EAEL,sBAAsB,EACvB,MAAM,kEAAkE,CAAC;AAS1E,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAOzD;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAQtD,CAAC;AAEH,oFAAoF;AACpF,eAAO,MAAM,+BAA+B,EAAE,WAAW,CAAC,MAAM,CAI9D,CAAC;AAOH,qBAEa,YAAY;IAErB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAE9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAG3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;IAK3B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;gBAZf,OAAO,EAAE,SAAS,EAClB,MAAM,EAAE,eAAe,EACvB,aAAa,EAAE,aAAa,CAAC,mBAAmB,CAAC,EAEjD,UAAU,EAAE,kBAAkB,EAG9B,SAAS,CAAC,EAAE,iBAAiB,EAK7B,cAAc,CAAC,EAAE,sBAAsB;IAKpD,eAAe,CACL,GAAG,EAAE,MAAM,EACH,WAAW,EAAE,MAAM,EACtB,QAAQ,EAAE,OAAO;IAgBhC,YAAY,CACF,GAAG,EAAE,MAAM,EACN,QAAQ,EAAE,OAAO,EACjB,QAAQ,CAAC,EAAE,MAAM;IAchC,UAAU,CAAe,GAAG,EAAE,MAAM;IAM1C;;;OAGG;IAEG,SAAS,CACN,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,YAAY,EACV,KAAK,EAAE,MAAM,GAC5B,OAAO,CAAC,IAAI,CAAC;IAwChB;;OAEG;IAEG,SAAS,CAAQ,KAAK,EAAE,YAAY,EAAkB,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoCzF;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAqB3B;;;;;OAKG;IACH,OAAO,CAAC,aAAa;IAMrB;;;;OAIG;YACW,eAAe;IAiB7B,OAAO,CAAC,UAAU;IAYlB,OAAO,CAAC,YAAY;CAwBrB"}

package/dist/foundations/s3/controllers/s3.controller.js

@@ -24,6 +24,8 @@ const s3_meta_1 = require("../../s3/entities/s3.meta");
 const s3_cipher_service_1 = require("../../s3/services/s3-cipher.service");
 const s3_client_key_service_1 = require("../../s3/services/s3-client-key.service");
 const s3_service_1 = require("../../s3/services/s3.service");
+const module_decorator_1 = require("../../../common/decorators/module.decorator");
+const core_module_ids_1 = require("../../../common/constants/core-module.ids");
 /** How long the browser keeps a file reached through a permanent (non-expiring) link. */
 const PERMANENT_LINK_CACHE_SECONDS = 3600;
 /**
@@ -303,6 +305,7 @@ __decorate([
     __metadata("design:returntype", Promise)
 ], S3Controller.prototype, "getObject", null);
 exports.S3Controller = S3Controller = __decorate([
+    (0, module_decorator_1.ModuleACL)({ module: core_module_ids_1.CoreModuleId.S3 }),
     (0, common_1.Controller)(s3_meta_1.s3Meta.endpoint),
     __param(4, (0, common_1.Optional)()),
     __param(4, (0, common_1.Inject)(s3_key_access_policy_interface_1.S3_KEY_ACCESS_POLICY)),