@flusys/nestjs-iam 7.0.2 → 8.0.0-beta.1

package/fesm/284.js

@@ -0,0 +1,1262 @@
+import { JwtAuthGuard } from "@flusys/nestjs-shared/guards";
+import * as __rspack_external__flusys_nestjs_shared_dtos_c4585026 from "@flusys/nestjs-shared/dtos";
+export const __rspack_esm_id = 284;
+export const __rspack_esm_ids = [284];
+export const __webpack_modules__ = {
+575(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+
+// EXPORTS
+__webpack_require__.d(__webpack_exports__, {
+  ZX: () => (/* reexport */ ActionController),
+  jj: () => (/* reexport */ CompanyActionPermissionController),
+  ig: () => (/* reexport */ MyPermissionController),
+  lk: () => (/* reexport */ RoleController),
+  uv: () => (/* reexport */ RolePermissionController),
+  NF: () => (/* reexport */ UserActionPermissionController)
+});
+
+// EXTERNAL MODULE: external "@flusys/nestjs-shared"
+var nestjs_shared_ = __webpack_require__(422);
+;// CONCATENATED MODULE: external "@flusys/nestjs-shared/guards"
+
+// EXTERNAL MODULE: external "@nestjs/common"
+var common_ = __webpack_require__(157);
+// EXTERNAL MODULE: external "@nestjs/swagger"
+var swagger_ = __webpack_require__(176);
+// EXTERNAL MODULE: ./projects/nestjs-iam/src/config/message-keys.ts
+var message_keys = __webpack_require__(490);
+// EXTERNAL MODULE: ./projects/nestjs-iam/src/dtos/action.dto.ts
+var action_dto = __webpack_require__(741);
+// EXTERNAL MODULE: ./projects/nestjs-iam/src/services/action.service.ts
+var action_service = __webpack_require__(713);
+// EXTERNAL MODULE: ./projects/nestjs-iam/src/services/iam-config.service.ts
+var iam_config_service = __webpack_require__(645);
+;// CONCATENATED MODULE: ./projects/nestjs-iam/src/controllers/action.controller.ts
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function _ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+
+
+
+
+
+class ActionController extends (0,nestjs_shared_.createApiController)(action_dto/* .CreateActionDto */.Sk, action_dto/* .UpdateActionDto */.H, action_dto/* .ActionResponseDto */.Vw, {
+    entityName: 'action',
+    security: {
+        insert: {
+            level: 'permission',
+            permissions: [
+                nestjs_shared_.ACTION_PERMISSIONS.CREATE
+            ]
+        },
+        insertMany: {
+            level: 'permission',
+            permissions: [
+                nestjs_shared_.ACTION_PERMISSIONS.CREATE
+            ]
+        },
+        getById: {
+            level: 'permission',
+            permissions: [
+                nestjs_shared_.ACTION_PERMISSIONS.READ
+            ]
+        },
+        getAll: {
+            level: 'permission',
+            permissions: [
+                nestjs_shared_.ACTION_PERMISSIONS.READ
+            ]
+        },
+        update: {
+            level: 'permission',
+            permissions: [
+                nestjs_shared_.ACTION_PERMISSIONS.UPDATE
+            ]
+        },
+        updateMany: {
+            level: 'permission',
+            permissions: [
+                nestjs_shared_.ACTION_PERMISSIONS.UPDATE
+            ]
+        },
+        delete: {
+            level: 'permission',
+            permissions: [
+                nestjs_shared_.ACTION_PERMISSIONS.DELETE
+            ]
+        }
+    }
+}) {
+    actionService;
+    iamConfigService;
+    constructor(actionService, iamConfigService){
+        super(actionService), this.actionService = actionService, this.iamConfigService = iamConfigService;
+    }
+    async getActionsForPermission(dto, user) {
+        const actions = await this.actionService.getActionsForPermission(user, dto?.companyId);
+        return {
+            success: true,
+            message: 'Actions retrieved successfully',
+            messageKey: message_keys/* .ACTION_MESSAGES.GET_ALL_SUCCESS */.Q$.GET_ALL_SUCCESS,
+            data: actions
+        };
+    }
+    async getActionTree(query, user) {
+        const tree = await this.actionService.getActionTree(user, query.search, query.isActive, query.withDeleted);
+        return {
+            success: true,
+            message: 'Action tree retrieved successfully',
+            messageKey: message_keys/* .ACTION_MESSAGES.GET_ALL_SUCCESS */.Q$.GET_ALL_SUCCESS,
+            data: tree
+        };
+    }
+}
+_ts_decorate([
+    (0,common_.Post)('tree-for-permission'),
+    (0,common_.UseGuards)(JwtAuthGuard),
+    (0,swagger_.ApiBearerAuth)(),
+    (0,swagger_.ApiOperation)({
+        summary: 'Get actions for permission assignment',
+        description: "Returns actions available for permission assignment, filtered by company whitelist when company feature is enabled. Optional companyId scopes the whitelist to a specific company (must match the caller's own company); defaults to the caller's session company when omitted."
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 200,
+        type: nestjs_shared_.SingleResponseDto
+    }),
+    (0,swagger_.ApiBody)({
+        type: action_dto/* .ActionTreeForPermissionDto */.y9
+    }),
+    _ts_param(0, (0,common_.Body)()),
+    _ts_param(1, (0,nestjs_shared_.CurrentUser)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof action_dto/* .ActionTreeForPermissionDto */.y9 === "undefined" ? Object : action_dto/* .ActionTreeForPermissionDto */.y9,
+        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], ActionController.prototype, "getActionsForPermission", null);
+_ts_decorate([
+    (0,common_.Post)('tree'),
+    (0,common_.UseGuards)(JwtAuthGuard),
+    (0,swagger_.ApiBearerAuth)(),
+    (0,swagger_.ApiOperation)({
+        summary: 'Get actions in hierarchical tree structure',
+        description: 'Returns all actions organized in a parent-child tree structure. Supports optional search and filtering.'
+    }),
+    (0,swagger_.ApiResponse)({
+        status: 200,
+        description: 'Actions tree retrieved successfully',
+        type: nestjs_shared_.SingleResponseDto
+    }),
+    (0,swagger_.ApiBody)({
+        type: action_dto/* .ActionTreeQueryDto */.AU
+    }),
+    _ts_param(0, (0,common_.Body)()),
+    _ts_param(1, (0,nestjs_shared_.CurrentUser)()),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof action_dto/* .ActionTreeQueryDto */.AU === "undefined" ? Object : action_dto/* .ActionTreeQueryDto */.AU,
+        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
+    ]),
+    _ts_metadata("design:returntype", Promise)
+], ActionController.prototype, "getActionTree", null);
+ActionController = _ts_decorate([
+    (0,swagger_.ApiTags)('IAM - Actions'),
+    (0,common_.Controller)('iam/actions'),
+    _ts_param(0, (0,common_.Inject)(action_service/* .ActionService */.u)),
+    _ts_param(1, (0,common_.Inject)(iam_config_service/* .IAMConfigService */.N)),
+    _ts_metadata("design:type", Function),
+    _ts_metadata("design:paramtypes", [
+        typeof action_service/* .ActionService */.u === "undefined" ? Object : action_service/* .ActionService */.u,
+        typeof iam_config_service/* .IAMConfigService */.N === "undefined" ? Object : iam_config_service/* .IAMConfigService */.N
+    ])
+], ActionController);
+
+// EXTERNAL MODULE: ./projects/nestjs-iam/src/dtos/role.dto.ts
+var role_dto = __webpack_require__(967);
+// EXTERNAL MODULE: ./projects/nestjs-iam/src/services/role.service.ts + 1 modules
+var role_service = __webpack_require__(446);
+;// CONCATENATED MODULE: ./projects/nestjs-iam/src/controllers/role.controller.ts
+function role_controller_ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function role_controller_ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function role_controller_ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+
+
+class RoleController extends (0,nestjs_shared_.createApiController)(role_dto/* .CreateRoleDto */.St, role_dto/* .UpdateRoleDto */.$v, role_dto/* .RoleResponseDto */.Tm, {
+    entityName: 'role',
+    security: {
+        insert: {
+            level: 'permission',
+            permissions: [
+                nestjs_shared_.ROLE_PERMISSIONS.CREATE
+            ]
+        },
+        insertMany: {
+            level: 'permission',
+            permissions: [
+                nestjs_shared_.ROLE_PERMISSIONS.CREATE
+            ]
+        },
+        getById: {
+            level: 'permission',
+            permissions: [
+                nestjs_shared_.ROLE_PERMISSIONS.READ
+            ]
+        },
+        getAll: {
+            level: 'permission',
+            permissions: [
+                nestjs_shared_.ROLE_PERMISSIONS.READ
+            ]
+        },
+        update: {
+            level: 'permission',
+            permissions: [
+                nestjs_shared_.ROLE_PERMISSIONS.UPDATE
+            ]
+        },
+        updateMany: {
+            level: 'permission',
+            permissions: [
+                nestjs_shared_.ROLE_PERMISSIONS.UPDATE
+            ]
+        },
+        delete: {
+            level: 'permission',
+            permissions: [
+                nestjs_shared_.ROLE_PERMISSIONS.DELETE
+            ]
+        }
+    }
+}) {
+    roleService;
+    constructor(roleService){
+        super(roleService), this.roleService = roleService;
+    }
+}
+RoleController = role_controller_ts_decorate([
+    (0,swagger_.ApiTags)('IAM - Roles'),
+    (0,common_.Controller)('iam/roles'),
+    role_controller_ts_param(0, (0,common_.Inject)(role_service/* .RoleService */.W)),
+    role_controller_ts_metadata("design:type", Function),
+    role_controller_ts_metadata("design:paramtypes", [
+        typeof role_service/* .RoleService */.W === "undefined" ? Object : role_service/* .RoleService */.W
+    ])
+], RoleController);
+
+// EXTERNAL MODULE: ./projects/nestjs-iam/src/dtos/permission.dto.ts
+var permission_dto = __webpack_require__(296);
+// EXTERNAL MODULE: ./projects/nestjs-iam/src/services/permission.service.ts
+var permission_service = __webpack_require__(472);
+;// CONCATENATED MODULE: ./projects/nestjs-iam/src/controllers/company-action-permission.controller.ts
+function company_action_permission_controller_ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function company_action_permission_controller_ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function company_action_permission_controller_ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+
+
+
+class CompanyActionPermissionController {
+    permissionService;
+    constructor(permissionService){
+        this.permissionService = permissionService;
+    }
+    async assignCompanyActions(dto) {
+        const result = await this.permissionService.assignCompanyActions(dto);
+        return {
+            success: true,
+            message: 'Company actions updated successfully',
+            messageKey: message_keys/* .PERMISSION_OPERATION_MESSAGES.PROCESS_SUCCESS */.P3.PROCESS_SUCCESS,
+            messageVariables: {
+                added: result.added,
+                removed: result.removed,
+                total: result.total
+            },
+            data: result
+        };
+    }
+    async getCompanyActions(dto) {
+        const actions = await this.permissionService.getCompanyActions(dto.companyId, false);
+        return {
+            success: true,
+            message: 'Company actions retrieved successfully',
+            messageKey: message_keys/* .COMPANY_ACTION_PERMISSION_MESSAGES.GET_SUCCESS */.GG.GET_SUCCESS,
+            data: actions
+        };
+    }
+}
+company_action_permission_controller_ts_decorate([
+    (0,common_.Post)('company-actions/assign'),
+    (0,nestjs_shared_.RequirePermission)(nestjs_shared_.COMPANY_ACTION_PERMISSIONS.ASSIGN),
+    (0,swagger_.ApiOperation)({
+        summary: 'Whitelist actions for company',
+        description: 'Controls which actions are available to company users/roles.'
+    }),
+    (0,nestjs_shared_.ApiResponseDto)(permission_dto/* .PermissionOperationResultDto */.xJ),
+    (0,swagger_.ApiBody)({
+        type: permission_dto/* .AssignCompanyActionsDto */.Nx
+    }),
+    company_action_permission_controller_ts_param(0, (0,common_.Body)()),
+    company_action_permission_controller_ts_metadata("design:type", Function),
+    company_action_permission_controller_ts_metadata("design:paramtypes", [
+        typeof permission_dto/* .AssignCompanyActionsDto */.Nx === "undefined" ? Object : permission_dto/* .AssignCompanyActionsDto */.Nx
+    ]),
+    company_action_permission_controller_ts_metadata("design:returntype", Promise)
+], CompanyActionPermissionController.prototype, "assignCompanyActions", null);
+company_action_permission_controller_ts_decorate([
+    (0,common_.Post)('get-company-actions'),
+    (0,nestjs_shared_.RequirePermission)(nestjs_shared_.COMPANY_ACTION_PERMISSIONS.READ),
+    (0,swagger_.ApiOperation)({
+        summary: 'Get company whitelisted actions',
+        description: 'Returns actions available to company.'
+    }),
+    (0,nestjs_shared_.ApiResponseDto)(permission_dto/* .CompanyActionResponseDto */.E4, true, 'single'),
+    (0,swagger_.ApiBody)({
+        type: permission_dto/* .GetCompanyActionsDto */.c8
+    }),
+    company_action_permission_controller_ts_param(0, (0,common_.Body)()),
+    company_action_permission_controller_ts_metadata("design:type", Function),
+    company_action_permission_controller_ts_metadata("design:paramtypes", [
+        typeof permission_dto/* .GetCompanyActionsDto */.c8 === "undefined" ? Object : permission_dto/* .GetCompanyActionsDto */.c8
+    ]),
+    company_action_permission_controller_ts_metadata("design:returntype", Promise)
+], CompanyActionPermissionController.prototype, "getCompanyActions", null);
+CompanyActionPermissionController = company_action_permission_controller_ts_decorate([
+    (0,swagger_.ApiTags)('IAM - Company Action Permissions'),
+    (0,common_.Controller)('iam/permissions'),
+    (0,common_.UseGuards)(nestjs_shared_.JwtAuthGuard, nestjs_shared_.PermissionGuard),
+    (0,swagger_.ApiBearerAuth)(),
+    company_action_permission_controller_ts_param(0, (0,common_.Inject)(permission_service/* .PermissionService */.n)),
+    company_action_permission_controller_ts_metadata("design:type", Function),
+    company_action_permission_controller_ts_metadata("design:paramtypes", [
+        typeof permission_service/* .PermissionService */.n === "undefined" ? Object : permission_service/* .PermissionService */.n
+    ])
+], CompanyActionPermissionController);
+
+;// CONCATENATED MODULE: ./projects/nestjs-iam/src/controllers/my-permission.controller.ts
+function my_permission_controller_ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function my_permission_controller_ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function my_permission_controller_ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+
+
+
+class MyPermissionController {
+    permissionService;
+    // NOTE: @Inject() required for bundled code - type metadata may be lost during esbuild
+    constructor(permissionService){
+        this.permissionService = permissionService;
+    }
+    async getMyPermissions(query, user) {
+        const data = await this.permissionService.getMyPermissions(user.id, user.branchId ?? null, user.companyId ?? null, query.parentCodes);
+        return {
+            success: true,
+            message: 'Permissions loaded successfully',
+            messageKey: message_keys/* .MY_PERMISSION_MESSAGES.GET_SUCCESS */.sb.GET_SUCCESS,
+            data
+        };
+    }
+    async getMyRoles(user) {
+        const data = await this.permissionService.getUserEffectiveRoles(user.id, user.companyId ?? null, user.branchId ?? null);
+        return {
+            success: true,
+            message: 'Roles loaded successfully',
+            messageKey: message_keys/* .MY_PERMISSION_MESSAGES.MY_ROLES_SUCCESS */.sb.MY_ROLES_SUCCESS,
+            data
+        };
+    }
+    async getMyActions(user) {
+        const data = await this.permissionService.getUserEffectiveActions(user.id, user.companyId ?? null, user.branchId ?? null);
+        return {
+            success: true,
+            message: 'Actions loaded successfully',
+            messageKey: message_keys/* .MY_PERMISSION_MESSAGES.MY_ACTIONS_SUCCESS */.sb.MY_ACTIONS_SUCCESS,
+            data
+        };
+    }
+}
+my_permission_controller_ts_decorate([
+    (0,common_.Post)('my-permissions'),
+    (0,swagger_.ApiOperation)({
+        summary: 'Get current user permissions',
+        description: 'Returns complete permissions for authenticated user. Includes menus, frontend actions, and caches endpoint permissions. Optionally filter by parent codes.'
+    }),
+    (0,nestjs_shared_.ApiResponseDto)(permission_dto/* .MyPermissionsResponseDto */.ji),
+    (0,swagger_.ApiResponse)({
+        status: 401,
+        description: 'Unauthorized'
+    }),
+    (0,swagger_.ApiBody)({
+        type: permission_dto/* .MyPermissionsQueryDto */.O_
+    }),
+    my_permission_controller_ts_param(0, (0,common_.Body)()),
+    my_permission_controller_ts_param(1, (0,nestjs_shared_.CurrentUser)()),
+    my_permission_controller_ts_metadata("design:type", Function),
+    my_permission_controller_ts_metadata("design:paramtypes", [
+        typeof permission_dto/* .MyPermissionsQueryDto */.O_ === "undefined" ? Object : permission_dto/* .MyPermissionsQueryDto */.O_,
+        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
+    ]),
+    my_permission_controller_ts_metadata("design:returntype", Promise)
+], MyPermissionController.prototype, "getMyPermissions", null);
+my_permission_controller_ts_decorate([
+    (0,common_.Post)('my-roles'),
+    (0,swagger_.ApiOperation)({
+        summary: 'Get current user roles',
+        description: 'Returns effective roles for the authenticated user, merging company-wide (branch-independent) and login-branch-specific role assignments.'
+    }),
+    (0,nestjs_shared_.ApiResponseDto)(permission_dto/* .UserRoleResponseDto */.LK, true, 'single'),
+    (0,swagger_.ApiResponse)({
+        status: 401,
+        description: 'Unauthorized'
+    }),
+    my_permission_controller_ts_param(0, (0,nestjs_shared_.CurrentUser)()),
+    my_permission_controller_ts_metadata("design:type", Function),
+    my_permission_controller_ts_metadata("design:paramtypes", [
+        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
+    ]),
+    my_permission_controller_ts_metadata("design:returntype", Promise)
+], MyPermissionController.prototype, "getMyRoles", null);
+my_permission_controller_ts_decorate([
+    (0,common_.Post)('my-actions'),
+    (0,swagger_.ApiOperation)({
+        summary: 'Get current user direct actions',
+        description: 'Returns effective direct action assignments for the authenticated user, merging company-wide (branch-independent) and login-branch-specific assignments.'
+    }),
+    (0,nestjs_shared_.ApiResponseDto)(permission_dto/* .UserActionResponseDto */.gF, true, 'single'),
+    (0,swagger_.ApiResponse)({
+        status: 401,
+        description: 'Unauthorized'
+    }),
+    my_permission_controller_ts_param(0, (0,nestjs_shared_.CurrentUser)()),
+    my_permission_controller_ts_metadata("design:type", Function),
+    my_permission_controller_ts_metadata("design:paramtypes", [
+        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
+    ]),
+    my_permission_controller_ts_metadata("design:returntype", Promise)
+], MyPermissionController.prototype, "getMyActions", null);
+MyPermissionController = my_permission_controller_ts_decorate([
+    (0,swagger_.ApiTags)('IAM - My Permissions'),
+    (0,common_.Controller)('iam/permissions'),
+    (0,common_.UseGuards)(nestjs_shared_.JwtAuthGuard),
+    (0,swagger_.ApiBearerAuth)(),
+    my_permission_controller_ts_param(0, (0,common_.Inject)(permission_service/* .PermissionService */.n)),
+    my_permission_controller_ts_metadata("design:type", Function),
+    my_permission_controller_ts_metadata("design:paramtypes", [
+        typeof permission_service/* .PermissionService */.n === "undefined" ? Object : permission_service/* .PermissionService */.n
+    ])
+], MyPermissionController);
+
+// EXTERNAL MODULE: ./projects/nestjs-iam/src/helpers/index.ts + 3 modules
+var helpers = __webpack_require__(674);
+;// CONCATENATED MODULE: ./projects/nestjs-iam/src/controllers/role-permission.controller.ts
+function role_permission_controller_ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function role_permission_controller_ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function role_permission_controller_ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+
+
+
+
+
+class RolePermissionController {
+    permissionService;
+    config;
+    // NOTE: @Inject() required for bundled code - type metadata may be lost during esbuild
+    constructor(permissionService, config){
+        this.permissionService = permissionService;
+        this.config = config;
+    }
+    async assignRoleActions(dto) {
+        const result = await this.permissionService.assignRoleActions(dto);
+        return {
+            success: true,
+            message: 'Role actions updated successfully',
+            messageKey: message_keys/* .PERMISSION_OPERATION_MESSAGES.PROCESS_SUCCESS */.P3.PROCESS_SUCCESS,
+            messageVariables: {
+                added: result.added,
+                removed: result.removed,
+                total: result.total
+            },
+            data: result
+        };
+    }
+    async getRoleActions(dto) {
+        const actions = await this.permissionService.getRoleActions(dto.roleId);
+        return {
+            success: true,
+            message: 'Role actions retrieved successfully',
+            messageKey: message_keys/* .ROLE_PERMISSION_MESSAGES.ACTIONS_SUCCESS */.eh.ACTIONS_SUCCESS,
+            data: actions
+        };
+    }
+    async assignUserRoles(dto, user) {
+        (0,helpers/* .validateCompanyAccess */.u)(this.config, dto.companyId, user);
+        const result = await this.permissionService.assignUserRoles(dto);
+        return {
+            success: true,
+            message: 'User roles updated successfully',
+            messageKey: message_keys/* .PERMISSION_OPERATION_MESSAGES.PROCESS_SUCCESS */.P3.PROCESS_SUCCESS,
+            messageVariables: {
+                added: result.added,
+                removed: result.removed,
+                total: result.total
+            },
+            data: result
+        };
+    }
+    async getUserRoles(dto, user) {
+        (0,helpers/* .validateCompanyAccess */.u)(this.config, dto.companyId, user);
+        const roles = await this.permissionService.getUserRoles(dto.userId, dto.branchId, dto.companyId);
+        return {
+            success: true,
+            message: 'User roles retrieved successfully',
+            messageKey: message_keys/* .ROLE_PERMISSION_MESSAGES.USER_ROLES_SUCCESS */.eh.USER_ROLES_SUCCESS,
+            data: roles
+        };
+    }
+}
+role_permission_controller_ts_decorate([
+    (0,common_.Post)('role-actions/assign'),
+    (0,nestjs_shared_.RequirePermission)(nestjs_shared_.ROLE_ACTION_PERMISSIONS.ASSIGN),
+    (0,swagger_.ApiOperation)({
+        summary: 'Assign/remove actions to/from role',
+        description: 'RBAC mode. No branch scoping.'
+    }),
+    (0,nestjs_shared_.ApiResponseDto)(permission_dto/* .PermissionOperationResultDto */.xJ),
+    (0,swagger_.ApiBody)({
+        type: permission_dto/* .AssignRoleActionsDto */.cv
+    }),
+    role_permission_controller_ts_param(0, (0,common_.Body)()),
+    role_permission_controller_ts_metadata("design:type", Function),
+    role_permission_controller_ts_metadata("design:paramtypes", [
+        typeof permission_dto/* .AssignRoleActionsDto */.cv === "undefined" ? Object : permission_dto/* .AssignRoleActionsDto */.cv
+    ]),
+    role_permission_controller_ts_metadata("design:returntype", Promise)
+], RolePermissionController.prototype, "assignRoleActions", null);
+role_permission_controller_ts_decorate([
+    (0,common_.Post)('get-role-actions'),
+    (0,nestjs_shared_.RequirePermission)(nestjs_shared_.ROLE_ACTION_PERMISSIONS.READ),
+    (0,swagger_.ApiOperation)({
+        summary: 'Get role actions',
+        description: 'Returns actions assigned to role.'
+    }),
+    (0,nestjs_shared_.ApiResponseDto)(permission_dto/* .RoleActionResponseDto */.$l, true, 'single'),
+    (0,swagger_.ApiBody)({
+        type: permission_dto/* .GetRoleActionsDto */.Zn
+    }),
+    role_permission_controller_ts_param(0, (0,common_.Body)()),
+    role_permission_controller_ts_metadata("design:type", Function),
+    role_permission_controller_ts_metadata("design:paramtypes", [
+        typeof permission_dto/* .GetRoleActionsDto */.Zn === "undefined" ? Object : permission_dto/* .GetRoleActionsDto */.Zn
+    ]),
+    role_permission_controller_ts_metadata("design:returntype", Promise)
+], RolePermissionController.prototype, "getRoleActions", null);
+role_permission_controller_ts_decorate([
+    (0,common_.Post)('user-roles/assign'),
+    (0,nestjs_shared_.RequirePermission)(nestjs_shared_.USER_ROLE_PERMISSIONS.ASSIGN),
+    (0,swagger_.ApiOperation)({
+        summary: 'Assign/remove roles to/from user',
+        description: 'RBAC mode. If company feature enabled, branchId is required.'
+    }),
+    (0,nestjs_shared_.ApiResponseDto)(permission_dto/* .PermissionOperationResultDto */.xJ),
+    (0,swagger_.ApiBody)({
+        type: permission_dto/* .AssignUserRolesDto */.Xz
+    }),
+    role_permission_controller_ts_param(0, (0,common_.Body)()),
+    role_permission_controller_ts_param(1, (0,nestjs_shared_.CurrentUser)()),
+    role_permission_controller_ts_metadata("design:type", Function),
+    role_permission_controller_ts_metadata("design:paramtypes", [
+        typeof permission_dto/* .AssignUserRolesDto */.Xz === "undefined" ? Object : permission_dto/* .AssignUserRolesDto */.Xz,
+        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
+    ]),
+    role_permission_controller_ts_metadata("design:returntype", Promise)
+], RolePermissionController.prototype, "assignUserRoles", null);
+role_permission_controller_ts_decorate([
+    (0,common_.Post)('get-user-roles'),
+    (0,nestjs_shared_.RequirePermission)(nestjs_shared_.USER_ROLE_PERMISSIONS.READ),
+    (0,swagger_.ApiOperation)({
+        summary: 'Get user roles',
+        description: 'Returns roles assigned to user. Filter by companyId and branchId.'
+    }),
+    (0,nestjs_shared_.ApiResponseDto)(permission_dto/* .UserRoleResponseDto */.LK, true, 'single'),
+    (0,swagger_.ApiBody)({
+        type: permission_dto/* .GetUserRolesDto */.Q0
+    }),
+    role_permission_controller_ts_param(0, (0,common_.Body)()),
+    role_permission_controller_ts_param(1, (0,nestjs_shared_.CurrentUser)()),
+    role_permission_controller_ts_metadata("design:type", Function),
+    role_permission_controller_ts_metadata("design:paramtypes", [
+        typeof permission_dto/* .GetUserRolesDto */.Q0 === "undefined" ? Object : permission_dto/* .GetUserRolesDto */.Q0,
+        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
+    ]),
+    role_permission_controller_ts_metadata("design:returntype", Promise)
+], RolePermissionController.prototype, "getUserRoles", null);
+RolePermissionController = role_permission_controller_ts_decorate([
+    (0,swagger_.ApiTags)('IAM - Role Permissions'),
+    (0,common_.Controller)('iam/permissions'),
+    (0,common_.UseGuards)(nestjs_shared_.JwtAuthGuard, nestjs_shared_.PermissionGuard),
+    (0,swagger_.ApiBearerAuth)(),
+    role_permission_controller_ts_param(0, (0,common_.Inject)(permission_service/* .PermissionService */.n)),
+    role_permission_controller_ts_param(1, (0,common_.Inject)(iam_config_service/* .IAMConfigService */.N)),
+    role_permission_controller_ts_metadata("design:type", Function),
+    role_permission_controller_ts_metadata("design:paramtypes", [
+        typeof permission_service/* .PermissionService */.n === "undefined" ? Object : permission_service/* .PermissionService */.n,
+        typeof iam_config_service/* .IAMConfigService */.N === "undefined" ? Object : iam_config_service/* .IAMConfigService */.N
+    ])
+], RolePermissionController);
+
+;// CONCATENATED MODULE: ./projects/nestjs-iam/src/controllers/user-action-permission.controller.ts
+function user_action_permission_controller_ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function user_action_permission_controller_ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+function user_action_permission_controller_ts_param(paramIndex, decorator) {
+    return function(target, key) {
+        decorator(target, key, paramIndex);
+    };
+}
+
+
+
+
+
+
+
+
+class UserActionPermissionController {
+    permissionService;
+    config;
+    // NOTE: @Inject() required for bundled code - type metadata may be lost during esbuild
+    constructor(permissionService, config){
+        this.permissionService = permissionService;
+        this.config = config;
+    }
+    async assignUserActions(dto, user) {
+        (0,helpers/* .validateCompanyAccess */.u)(this.config, dto.companyId, user);
+        const result = await this.permissionService.assignUserActions(dto);
+        return {
+            success: true,
+            message: 'User actions updated successfully',
+            messageKey: message_keys/* .PERMISSION_OPERATION_MESSAGES.PROCESS_SUCCESS */.P3.PROCESS_SUCCESS,
+            messageVariables: {
+                added: result.added,
+                removed: result.removed,
+                total: result.total
+            },
+            data: result
+        };
+    }
+    async getUserActions(dto, user) {
+        (0,helpers/* .validateCompanyAccess */.u)(this.config, dto.companyId, user);
+        const actions = await this.permissionService.getUserActions(dto.userId, dto.companyId, dto.branchId);
+        return {
+            success: true,
+            message: 'User actions retrieved successfully',
+            messageKey: message_keys/* .USER_ACTION_PERMISSION_MESSAGES.GET_SUCCESS */.k.GET_SUCCESS,
+            data: actions
+        };
+    }
+}
+user_action_permission_controller_ts_decorate([
+    (0,common_.Post)('user-actions/assign'),
+    (0,nestjs_shared_.RequirePermission)(nestjs_shared_.USER_ACTION_PERMISSIONS.ASSIGN),
+    (0,swagger_.ApiOperation)({
+        summary: 'Assign/remove actions to/from user',
+        description: 'Direct permissions. If company feature enabled, branchId is required.'
+    }),
+    (0,nestjs_shared_.ApiResponseDto)(permission_dto/* .PermissionOperationResultDto */.xJ),
+    (0,swagger_.ApiBody)({
+        type: permission_dto/* .AssignUserActionsDto */.zs
+    }),
+    user_action_permission_controller_ts_param(0, (0,common_.Body)()),
+    user_action_permission_controller_ts_param(1, (0,nestjs_shared_.CurrentUser)()),
+    user_action_permission_controller_ts_metadata("design:type", Function),
+    user_action_permission_controller_ts_metadata("design:paramtypes", [
+        typeof permission_dto/* .AssignUserActionsDto */.zs === "undefined" ? Object : permission_dto/* .AssignUserActionsDto */.zs,
+        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
+    ]),
+    user_action_permission_controller_ts_metadata("design:returntype", Promise)
+], UserActionPermissionController.prototype, "assignUserActions", null);
+user_action_permission_controller_ts_decorate([
+    (0,common_.Post)('get-user-actions'),
+    (0,nestjs_shared_.RequirePermission)(nestjs_shared_.USER_ACTION_PERMISSIONS.READ),
+    (0,swagger_.ApiOperation)({
+        summary: 'Get user direct actions',
+        description: 'Returns direct action permissions for user. Filter by companyId and branchId.'
+    }),
+    (0,nestjs_shared_.ApiResponseDto)(permission_dto/* .UserActionResponseDto */.gF, true, 'single'),
+    (0,swagger_.ApiBody)({
+        type: permission_dto/* .GetUserActionsDto */.CM
+    }),
+    user_action_permission_controller_ts_param(0, (0,common_.Body)()),
+    user_action_permission_controller_ts_param(1, (0,nestjs_shared_.CurrentUser)()),
+    user_action_permission_controller_ts_metadata("design:type", Function),
+    user_action_permission_controller_ts_metadata("design:paramtypes", [
+        typeof permission_dto/* .GetUserActionsDto */.CM === "undefined" ? Object : permission_dto/* .GetUserActionsDto */.CM,
+        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
+    ]),
+    user_action_permission_controller_ts_metadata("design:returntype", Promise)
+], UserActionPermissionController.prototype, "getUserActions", null);
+UserActionPermissionController = user_action_permission_controller_ts_decorate([
+    (0,swagger_.ApiTags)('IAM - User Action Permissions'),
+    (0,common_.Controller)('iam/permissions'),
+    (0,common_.UseGuards)(nestjs_shared_.JwtAuthGuard, nestjs_shared_.PermissionGuard),
+    (0,swagger_.ApiBearerAuth)(),
+    user_action_permission_controller_ts_param(0, (0,common_.Inject)(permission_service/* .PermissionService */.n)),
+    user_action_permission_controller_ts_param(1, (0,common_.Inject)(iam_config_service/* .IAMConfigService */.N)),
+    user_action_permission_controller_ts_metadata("design:type", Function),
+    user_action_permission_controller_ts_metadata("design:paramtypes", [
+        typeof permission_service/* .PermissionService */.n === "undefined" ? Object : permission_service/* .PermissionService */.n,
+        typeof iam_config_service/* .IAMConfigService */.N === "undefined" ? Object : iam_config_service/* .IAMConfigService */.N
+    ])
+], UserActionPermissionController);
+
+;// CONCATENATED MODULE: ./projects/nestjs-iam/src/controllers/index.ts
+
+
+// Permission controllers (conditionally registered based on permission mode)
+
+
+
+
+
+
+},
+741(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _flusys_nestjs_shared_dtos__rspack_import_0 = __webpack_require__(873);
+/* import */ var _nestjs_swagger__rspack_import_1 = __webpack_require__(176);
+/* import */ var class_transformer__rspack_import_2 = __webpack_require__(812);
+/* import */ var class_validator__rspack_import_3 = __webpack_require__(421);
+/* import */ var _enums_index_js__rspack_import_4 = __webpack_require__(560);
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+
+
+
+
+
+class CreateActionDto {
+    name;
+    description;
+    code;
+    actionType;
+    permissionLogic;
+    parentId;
+    serial;
+    isActive;
+}
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)({
+        description: 'Action name',
+        example: 'View Users'
+    }),
+    (0,class_validator__rspack_import_3.IsString)(),
+    (0,class_validator__rspack_import_3.IsNotEmpty)(),
+    (0,class_validator__rspack_import_3.MaxLength)(255),
+    _ts_metadata("design:type", String)
+], CreateActionDto.prototype, "name", void 0);
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)({
+        description: 'Action description',
+        example: 'Permission to view user list',
+        required: false
+    }),
+    (0,class_validator__rspack_import_3.IsString)(),
+    (0,class_validator__rspack_import_3.IsOptional)(),
+    (0,class_validator__rspack_import_3.MaxLength)(500),
+    _ts_metadata("design:type", String)
+], CreateActionDto.prototype, "description", void 0);
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)({
+        description: 'Unique code for programmatic reference',
+        example: 'user.view',
+        required: false
+    }),
+    (0,class_validator__rspack_import_3.IsString)(),
+    (0,class_validator__rspack_import_3.IsOptional)(),
+    (0,class_validator__rspack_import_3.MaxLength)(255),
+    _ts_metadata("design:type", String)
+], CreateActionDto.prototype, "code", void 0);
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)({
+        description: 'Action type (backend for API endpoints, frontend for UI features)',
+        enum: _enums_index_js__rspack_import_4/* .ActionType */.X,
+        example: _enums_index_js__rspack_import_4/* .ActionType.BACKEND */.X.BACKEND,
+        default: _enums_index_js__rspack_import_4/* .ActionType.BACKEND */.X.BACKEND,
+        required: false
+    }),
+    (0,class_validator__rspack_import_3.IsEnum)(_enums_index_js__rspack_import_4/* .ActionType */.X),
+    (0,class_validator__rspack_import_3.IsOptional)(),
+    _ts_metadata("design:type", typeof _enums_index_js__rspack_import_4/* .ActionType */.X === "undefined" ? Object : _enums_index_js__rspack_import_4/* .ActionType */.X)
+], CreateActionDto.prototype, "actionType", void 0);
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)({
+        description: 'Permission logic (AND/OR rules)',
+        required: false
+    }),
+    (0,class_validator__rspack_import_3.IsOptional)(),
+    _ts_metadata("design:type", typeof LogicNode === "undefined" ? Object : LogicNode)
+], CreateActionDto.prototype, "permissionLogic", void 0);
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)({
+        description: 'Parent action ID for hierarchy',
+        example: '123e4567-e89b-12d3-a456-426614174000',
+        required: false
+    }),
+    (0,class_validator__rspack_import_3.IsUUID)(),
+    (0,class_validator__rspack_import_3.IsOptional)(),
+    _ts_metadata("design:type", String)
+], CreateActionDto.prototype, "parentId", void 0);
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)({
+        description: 'Display order',
+        required: false
+    }),
+    (0,class_validator__rspack_import_3.IsInt)(),
+    (0,class_validator__rspack_import_3.IsOptional)(),
+    _ts_metadata("design:type", Number)
+], CreateActionDto.prototype, "serial", void 0);
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)({
+        description: 'Active status',
+        default: true,
+        required: false
+    }),
+    (0,class_validator__rspack_import_3.IsBoolean)(),
+    (0,class_validator__rspack_import_3.IsOptional)(),
+    _ts_metadata("design:type", Boolean)
+], CreateActionDto.prototype, "isActive", void 0);
+class UpdateActionDto extends (0,_nestjs_swagger__rspack_import_1.PartialType)(CreateActionDto) {
+    id;
+}
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)({
+        description: 'Action ID',
+        example: '123e4567-e89b-12d3-a456-426614174000'
+    }),
+    (0,class_validator__rspack_import_3.IsUUID)(),
+    (0,class_validator__rspack_import_3.IsNotEmpty)(),
+    _ts_metadata("design:type", String)
+], UpdateActionDto.prototype, "id", void 0);
+class ActionResponseDto extends _flusys_nestjs_shared_dtos__rspack_import_0.IdentityResponseDto {
+    readOnly;
+    name;
+    description;
+    code;
+    actionType;
+    permissionLogic;
+    parentId;
+    serial;
+    isActive;
+}
+_ts_decorate([
+    (0,class_transformer__rspack_import_2.Expose)(),
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)(),
+    _ts_metadata("design:type", Boolean)
+], ActionResponseDto.prototype, "readOnly", void 0);
+_ts_decorate([
+    (0,class_transformer__rspack_import_2.Expose)(),
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)(),
+    _ts_metadata("design:type", String)
+], ActionResponseDto.prototype, "name", void 0);
+_ts_decorate([
+    (0,class_transformer__rspack_import_2.Expose)(),
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)(),
+    _ts_metadata("design:type", Object)
+], ActionResponseDto.prototype, "description", void 0);
+_ts_decorate([
+    (0,class_transformer__rspack_import_2.Expose)(),
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)(),
+    _ts_metadata("design:type", Object)
+], ActionResponseDto.prototype, "code", void 0);
+_ts_decorate([
+    (0,class_transformer__rspack_import_2.Expose)(),
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)({
+        enum: _enums_index_js__rspack_import_4/* .ActionType */.X
+    }),
+    _ts_metadata("design:type", typeof _enums_index_js__rspack_import_4/* .ActionType */.X === "undefined" ? Object : _enums_index_js__rspack_import_4/* .ActionType */.X)
+], ActionResponseDto.prototype, "actionType", void 0);
+_ts_decorate([
+    (0,class_transformer__rspack_import_2.Expose)(),
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)(),
+    _ts_metadata("design:type", Object)
+], ActionResponseDto.prototype, "permissionLogic", void 0);
+_ts_decorate([
+    (0,class_transformer__rspack_import_2.Expose)(),
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)(),
+    _ts_metadata("design:type", Object)
+], ActionResponseDto.prototype, "parentId", void 0);
+_ts_decorate([
+    (0,class_transformer__rspack_import_2.Expose)(),
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)(),
+    _ts_metadata("design:type", Object)
+], ActionResponseDto.prototype, "serial", void 0);
+_ts_decorate([
+    (0,class_transformer__rspack_import_2.Expose)(),
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)(),
+    _ts_metadata("design:type", Boolean)
+], ActionResponseDto.prototype, "isActive", void 0);
+class ActionTreeDto extends ActionResponseDto {
+    children;
+}
+_ts_decorate([
+    (0,class_transformer__rspack_import_2.Expose)(),
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)({
+        type: ()=>[
+                ActionTreeDto
+            ]
+    }),
+    _ts_metadata("design:type", Array)
+], ActionTreeDto.prototype, "children", void 0);
+class ActionTreeForPermissionDto {
+    companyId;
+}
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)({
+        description: 'Company to scope the action whitelist to. Defaults to the current user session company when omitted.',
+        required: false
+    }),
+    (0,class_validator__rspack_import_3.IsUUID)(),
+    (0,class_validator__rspack_import_3.IsOptional)(),
+    _ts_metadata("design:type", String)
+], ActionTreeForPermissionDto.prototype, "companyId", void 0);
+class ActionTreeQueryDto {
+    search;
+    isActive;
+    withDeleted;
+}
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)({
+        description: 'Search by name or code',
+        example: 'user',
+        required: false
+    }),
+    (0,class_validator__rspack_import_3.IsString)(),
+    (0,class_validator__rspack_import_3.IsOptional)(),
+    _ts_metadata("design:type", String)
+], ActionTreeQueryDto.prototype, "search", void 0);
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)({
+        description: 'Filter by active status',
+        example: true,
+        required: false
+    }),
+    (0,class_validator__rspack_import_3.IsBoolean)(),
+    (0,class_validator__rspack_import_3.IsOptional)(),
+    _ts_metadata("design:type", Boolean)
+], ActionTreeQueryDto.prototype, "isActive", void 0);
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)({
+        description: 'Include deleted actions',
+        default: false,
+        required: false
+    }),
+    (0,class_validator__rspack_import_3.IsBoolean)(),
+    (0,class_validator__rspack_import_3.IsOptional)(),
+    _ts_metadata("design:type", Boolean)
+], ActionTreeQueryDto.prototype, "withDeleted", void 0);
+
+__webpack_require__.d(__webpack_exports__, {
+  AU: () => (ActionTreeQueryDto),
+  H: () => (UpdateActionDto),
+  Sk: () => (CreateActionDto),
+  Vw: () => (ActionResponseDto),
+  gb: () => (ActionTreeDto),
+  y9: () => (ActionTreeForPermissionDto)
+});
+
+
+},
+967(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _flusys_nestjs_shared_dtos__rspack_import_0 = __webpack_require__(873);
+/* import */ var _nestjs_swagger__rspack_import_1 = __webpack_require__(176);
+/* import */ var class_transformer__rspack_import_2 = __webpack_require__(812);
+/* import */ var class_validator__rspack_import_3 = __webpack_require__(421);
+function _ts_decorate(decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+        r = Reflect.decorate(decorators, target, key, desc);
+    } else {
+        for(var i = decorators.length - 1; i >= 0; i--){
+            if (d = decorators[i]) {
+                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+            }
+        }
+    }
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+function _ts_metadata(metadataKey, metadataValue) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+        return Reflect.metadata(metadataKey, metadataValue);
+    }
+}
+
+
+
+
+class CreateRoleDto {
+    name;
+    description;
+    companyId;
+    isActive;
+    serial;
+}
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)({
+        description: 'Role name',
+        example: 'Manager'
+    }),
+    (0,class_validator__rspack_import_3.IsString)(),
+    (0,class_validator__rspack_import_3.IsNotEmpty)(),
+    (0,class_validator__rspack_import_3.MaxLength)(255),
+    _ts_metadata("design:type", String)
+], CreateRoleDto.prototype, "name", void 0);
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)({
+        description: 'Role description',
+        example: 'Management level access',
+        required: false
+    }),
+    (0,class_validator__rspack_import_3.IsString)(),
+    (0,class_validator__rspack_import_3.IsOptional)(),
+    (0,class_validator__rspack_import_3.MaxLength)(500),
+    _ts_metadata("design:type", String)
+], CreateRoleDto.prototype, "description", void 0);
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)({
+        description: 'Company ID (scope role to specific company) - Only available when company feature is enabled',
+        example: '123e4567-e89b-12d3-a456-426614174000',
+        required: false
+    }),
+    (0,class_validator__rspack_import_3.IsUUID)(),
+    (0,class_validator__rspack_import_3.IsOptional)(),
+    _ts_metadata("design:type", String)
+], CreateRoleDto.prototype, "companyId", void 0);
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)({
+        description: 'Active status',
+        default: true,
+        required: false
+    }),
+    (0,class_validator__rspack_import_3.IsBoolean)(),
+    (0,class_validator__rspack_import_3.IsOptional)(),
+    _ts_metadata("design:type", Boolean)
+], CreateRoleDto.prototype, "isActive", void 0);
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)({
+        description: 'Display order',
+        required: false
+    }),
+    (0,class_validator__rspack_import_3.IsInt)(),
+    (0,class_validator__rspack_import_3.IsOptional)(),
+    _ts_metadata("design:type", Number)
+], CreateRoleDto.prototype, "serial", void 0);
+class UpdateRoleDto extends (0,_nestjs_swagger__rspack_import_1.PartialType)(CreateRoleDto) {
+    id;
+}
+_ts_decorate([
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)({
+        description: 'Role ID',
+        example: '123e4567-e89b-12d3-a456-426614174000'
+    }),
+    (0,class_validator__rspack_import_3.IsUUID)(),
+    (0,class_validator__rspack_import_3.IsNotEmpty)(),
+    _ts_metadata("design:type", String)
+], UpdateRoleDto.prototype, "id", void 0);
+class RoleResponseDto extends _flusys_nestjs_shared_dtos__rspack_import_0.IdentityResponseDto {
+    readOnly;
+    name;
+    description;
+    companyId;
+    isActive;
+    serial;
+}
+_ts_decorate([
+    (0,class_transformer__rspack_import_2.Expose)(),
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)(),
+    _ts_metadata("design:type", Boolean)
+], RoleResponseDto.prototype, "readOnly", void 0);
+_ts_decorate([
+    (0,class_transformer__rspack_import_2.Expose)(),
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)(),
+    _ts_metadata("design:type", String)
+], RoleResponseDto.prototype, "name", void 0);
+_ts_decorate([
+    (0,class_transformer__rspack_import_2.Expose)(),
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)(),
+    _ts_metadata("design:type", Object)
+], RoleResponseDto.prototype, "description", void 0);
+_ts_decorate([
+    (0,class_transformer__rspack_import_2.Expose)(),
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)(),
+    _ts_metadata("design:type", Object)
+], RoleResponseDto.prototype, "companyId", void 0);
+_ts_decorate([
+    (0,class_transformer__rspack_import_2.Expose)(),
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)(),
+    _ts_metadata("design:type", Boolean)
+], RoleResponseDto.prototype, "isActive", void 0);
+_ts_decorate([
+    (0,class_transformer__rspack_import_2.Expose)(),
+    (0,_nestjs_swagger__rspack_import_1.ApiProperty)(),
+    _ts_metadata("design:type", Object)
+], RoleResponseDto.prototype, "serial", void 0);
+
+__webpack_require__.d(__webpack_exports__, {
+  $v: () => (UpdateRoleDto),
+  St: () => (CreateRoleDto),
+  Tm: () => (RoleResponseDto)
+});
+
+
+},
+873(module) {
+
+module.exports = __rspack_external__flusys_nestjs_shared_dtos_c4585026;
+
+
+},
+
+};