@flusys/nestjs-iam 7.0.2 → 8.0.0-beta.1

package/fesm/controllers/action.controller.js

@@ -1,164 +0,0 @@
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-function _ts_param(paramIndex, decorator) {
-    return function(target, key) {
-        decorator(target, key, paramIndex);
-    };
-}
-import { ACTION_PERMISSIONS, createApiController, CurrentUser, ILoggedUserInfo, SingleResponseDto } from '@flusys/nestjs-shared';
-import { JwtAuthGuard } from '@flusys/nestjs-shared/guards';
-import { Body, Controller, Inject, Post, UseGuards } from '@nestjs/common';
-import { ApiBearerAuth, ApiBody, ApiOperation, ApiResponse, ApiTags } from '@nestjs/swagger';
-import { ACTION_MESSAGES } from '../config';
-import { ActionResponseDto, ActionTreeForPermissionDto, ActionTreeQueryDto, CreateActionDto, UpdateActionDto } from '../dtos/action.dto';
-import { ActionService } from '../services/action.service';
-import { IAMConfigService } from '../services/iam-config.service';
-export class ActionController extends createApiController(CreateActionDto, UpdateActionDto, ActionResponseDto, {
-    entityName: 'action',
-    security: {
-        insert: {
-            level: 'permission',
-            permissions: [
-                ACTION_PERMISSIONS.CREATE
-            ]
-        },
-        insertMany: {
-            level: 'permission',
-            permissions: [
-                ACTION_PERMISSIONS.CREATE
-            ]
-        },
-        getById: {
-            level: 'permission',
-            permissions: [
-                ACTION_PERMISSIONS.READ
-            ]
-        },
-        getAll: {
-            level: 'permission',
-            permissions: [
-                ACTION_PERMISSIONS.READ
-            ]
-        },
-        update: {
-            level: 'permission',
-            permissions: [
-                ACTION_PERMISSIONS.UPDATE
-            ]
-        },
-        updateMany: {
-            level: 'permission',
-            permissions: [
-                ACTION_PERMISSIONS.UPDATE
-            ]
-        },
-        delete: {
-            level: 'permission',
-            permissions: [
-                ACTION_PERMISSIONS.DELETE
-            ]
-        }
-    }
-}) {
-    async getActionsForPermission(dto, user) {
-        const actions = await this.actionService.getActionsForPermission(user, dto?.companyId);
-        return {
-            success: true,
-            message: 'Actions retrieved successfully',
-            messageKey: ACTION_MESSAGES.GET_ALL_SUCCESS,
-            data: actions
-        };
-    }
-    async getActionTree(query, user) {
-        const tree = await this.actionService.getActionTree(user, query.search, query.isActive, query.withDeleted);
-        return {
-            success: true,
-            message: 'Action tree retrieved successfully',
-            messageKey: ACTION_MESSAGES.GET_ALL_SUCCESS,
-            data: tree
-        };
-    }
-    constructor(actionService, iamConfigService){
-        super(actionService), _define_property(this, "actionService", void 0), _define_property(this, "iamConfigService", void 0), this.actionService = actionService, this.iamConfigService = iamConfigService;
-    }
-}
-_ts_decorate([
-    Post('tree-for-permission'),
-    UseGuards(JwtAuthGuard),
-    ApiBearerAuth(),
-    ApiOperation({
-        summary: 'Get actions for permission assignment',
-        description: "Returns actions available for permission assignment, filtered by company whitelist when company feature is enabled. Optional companyId scopes the whitelist to a specific company (must match the caller's own company); defaults to the caller's session company when omitted."
-    }),
-    ApiResponse({
-        status: 200,
-        type: SingleResponseDto
-    }),
-    ApiBody({
-        type: ActionTreeForPermissionDto
-    }),
-    _ts_param(0, Body()),
-    _ts_param(1, CurrentUser()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof ActionTreeForPermissionDto === "undefined" ? Object : ActionTreeForPermissionDto,
-        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], ActionController.prototype, "getActionsForPermission", null);
-_ts_decorate([
-    Post('tree'),
-    UseGuards(JwtAuthGuard),
-    ApiBearerAuth(),
-    ApiOperation({
-        summary: 'Get actions in hierarchical tree structure',
-        description: 'Returns all actions organized in a parent-child tree structure. Supports optional search and filtering.'
-    }),
-    ApiResponse({
-        status: 200,
-        description: 'Actions tree retrieved successfully',
-        type: SingleResponseDto
-    }),
-    ApiBody({
-        type: ActionTreeQueryDto
-    }),
-    _ts_param(0, Body()),
-    _ts_param(1, CurrentUser()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof ActionTreeQueryDto === "undefined" ? Object : ActionTreeQueryDto,
-        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], ActionController.prototype, "getActionTree", null);
-ActionController = _ts_decorate([
-    ApiTags('IAM - Actions'),
-    Controller('iam/actions'),
-    _ts_param(0, Inject(ActionService)),
-    _ts_param(1, Inject(IAMConfigService)),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof ActionService === "undefined" ? Object : ActionService,
-        typeof IAMConfigService === "undefined" ? Object : IAMConfigService
-    ])
-], ActionController);

package/fesm/controllers/action.controller.spec.js

@@ -1,75 +0,0 @@
-import { buildMockUser } from '@test-utils/mocks/logged-user.mock';
-import { ActionController } from './action.controller';
-describe('ActionController', ()=>{
-    let controller;
-    let mockActionService;
-    let mockIamConfigService;
-    beforeEach(()=>{
-        mockActionService = {
-            insert: jest.fn(),
-            findById: jest.fn(),
-            getAll: jest.fn(),
-            update: jest.fn(),
-            delete: jest.fn(),
-            getActionsForPermission: jest.fn(),
-            getActionTree: jest.fn()
-        };
-        mockIamConfigService = {};
-        controller = new ActionController(mockActionService, mockIamConfigService);
-    });
-    it('wires the injected service onto the generated controller base', ()=>{
-        expect(controller.actionService).toBe(mockActionService);
-        expect(controller.service).toBe(mockActionService);
-    });
-    describe('getActionsForPermission', ()=>{
-        it('returns actions scoped to the caller session company when no companyId is given', async ()=>{
-            const user = buildMockUser();
-            mockActionService.getActionsForPermission.mockResolvedValue([
-                {
-                    id: 'action-1',
-                    code: 'user.create'
-                }
-            ]);
-            const result = await controller.getActionsForPermission({}, user);
-            expect(mockActionService.getActionsForPermission).toHaveBeenCalledWith(user, undefined);
-            expect(result.success).toBe(true);
-            expect(result.data).toEqual([
-                {
-                    id: 'action-1',
-                    code: 'user.create'
-                }
-            ]);
-        });
-        it('forwards an explicit companyId override', async ()=>{
-            const user = buildMockUser();
-            mockActionService.getActionsForPermission.mockResolvedValue([]);
-            await controller.getActionsForPermission({
-                companyId: 'company-2'
-            }, user);
-            expect(mockActionService.getActionsForPermission).toHaveBeenCalledWith(user, 'company-2');
-        });
-    });
-    describe('getActionTree', ()=>{
-        it('returns the hierarchical action tree with query filters applied', async ()=>{
-            const user = buildMockUser();
-            mockActionService.getActionTree.mockResolvedValue([
-                {
-                    id: 'action-1',
-                    children: []
-                }
-            ]);
-            const result = await controller.getActionTree({
-                search: 'user',
-                isActive: true,
-                withDeleted: false
-            }, user);
-            expect(mockActionService.getActionTree).toHaveBeenCalledWith(user, 'user', true, false);
-            expect(result.data).toEqual([
-                {
-                    id: 'action-1',
-                    children: []
-                }
-            ]);
-        });
-    });
-});

package/fesm/controllers/company-action-permission.controller.js

@@ -1,109 +0,0 @@
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-function _ts_param(paramIndex, decorator) {
-    return function(target, key) {
-        decorator(target, key, paramIndex);
-    };
-}
-import { ApiResponseDto, COMPANY_ACTION_PERMISSIONS, JwtAuthGuard, PermissionGuard, RequirePermission } from '@flusys/nestjs-shared';
-import { Body, Controller, Inject, Post, UseGuards } from '@nestjs/common';
-import { ApiBearerAuth, ApiBody, ApiOperation, ApiTags } from '@nestjs/swagger';
-import { COMPANY_ACTION_PERMISSION_MESSAGES, PERMISSION_OPERATION_MESSAGES } from '../config';
-import { AssignCompanyActionsDto, CompanyActionResponseDto, GetCompanyActionsDto, PermissionOperationResultDto } from '../dtos/permission.dto';
-import { PermissionService } from '../services/permission.service';
-export class CompanyActionPermissionController {
-    async assignCompanyActions(dto) {
-        const result = await this.permissionService.assignCompanyActions(dto);
-        return {
-            success: true,
-            message: 'Company actions updated successfully',
-            messageKey: PERMISSION_OPERATION_MESSAGES.PROCESS_SUCCESS,
-            messageVariables: {
-                added: result.added,
-                removed: result.removed,
-                total: result.total
-            },
-            data: result
-        };
-    }
-    async getCompanyActions(dto) {
-        const actions = await this.permissionService.getCompanyActions(dto.companyId, false);
-        return {
-            success: true,
-            message: 'Company actions retrieved successfully',
-            messageKey: COMPANY_ACTION_PERMISSION_MESSAGES.GET_SUCCESS,
-            data: actions
-        };
-    }
-    constructor(permissionService){
-        _define_property(this, "permissionService", void 0);
-        this.permissionService = permissionService;
-    }
-}
-_ts_decorate([
-    Post('company-actions/assign'),
-    RequirePermission(COMPANY_ACTION_PERMISSIONS.ASSIGN),
-    ApiOperation({
-        summary: 'Whitelist actions for company',
-        description: 'Controls which actions are available to company users/roles.'
-    }),
-    ApiResponseDto(PermissionOperationResultDto),
-    ApiBody({
-        type: AssignCompanyActionsDto
-    }),
-    _ts_param(0, Body()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof AssignCompanyActionsDto === "undefined" ? Object : AssignCompanyActionsDto
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], CompanyActionPermissionController.prototype, "assignCompanyActions", null);
-_ts_decorate([
-    Post('get-company-actions'),
-    RequirePermission(COMPANY_ACTION_PERMISSIONS.READ),
-    ApiOperation({
-        summary: 'Get company whitelisted actions',
-        description: 'Returns actions available to company.'
-    }),
-    ApiResponseDto(CompanyActionResponseDto, true, 'single'),
-    ApiBody({
-        type: GetCompanyActionsDto
-    }),
-    _ts_param(0, Body()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof GetCompanyActionsDto === "undefined" ? Object : GetCompanyActionsDto
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], CompanyActionPermissionController.prototype, "getCompanyActions", null);
-CompanyActionPermissionController = _ts_decorate([
-    ApiTags('IAM - Company Action Permissions'),
-    Controller('iam/permissions'),
-    UseGuards(JwtAuthGuard, PermissionGuard),
-    ApiBearerAuth(),
-    _ts_param(0, Inject(PermissionService)),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof PermissionService === "undefined" ? Object : PermissionService
-    ])
-], CompanyActionPermissionController);

package/fesm/controllers/company-action-permission.controller.spec.js

@@ -1,61 +0,0 @@
-import { CompanyActionPermissionController } from './company-action-permission.controller';
-describe('CompanyActionPermissionController', ()=>{
-    let controller;
-    let mockPermissionService;
-    beforeEach(()=>{
-        mockPermissionService = {
-            assignCompanyActions: jest.fn(),
-            getCompanyActions: jest.fn()
-        };
-        controller = new CompanyActionPermissionController(mockPermissionService);
-    });
-    describe('assignCompanyActions', ()=>{
-        it('whitelists actions for a company', async ()=>{
-            mockPermissionService.assignCompanyActions.mockResolvedValue({
-                added: 3,
-                removed: 0,
-                total: 3
-            });
-            const result = await controller.assignCompanyActions({
-                companyId: 'company-1',
-                actionIds: [
-                    'action-1',
-                    'action-2',
-                    'action-3'
-                ]
-            });
-            expect(mockPermissionService.assignCompanyActions).toHaveBeenCalledWith({
-                companyId: 'company-1',
-                actionIds: [
-                    'action-1',
-                    'action-2',
-                    'action-3'
-                ]
-            });
-            expect(result.success).toBe(true);
-            expect(result.data).toEqual({
-                added: 3,
-                removed: 0,
-                total: 3
-            });
-        });
-    });
-    describe('getCompanyActions', ()=>{
-        it('returns the whitelisted actions for a company', async ()=>{
-            mockPermissionService.getCompanyActions.mockResolvedValue([
-                {
-                    actionId: 'action-1'
-                }
-            ]);
-            const result = await controller.getCompanyActions({
-                companyId: 'company-1'
-            });
-            expect(mockPermissionService.getCompanyActions).toHaveBeenCalledWith('company-1', false);
-            expect(result.data).toEqual([
-                {
-                    actionId: 'action-1'
-                }
-            ]);
-        });
-    });
-});

package/fesm/controllers/my-permission.controller.js

@@ -1,137 +0,0 @@
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-function _ts_param(paramIndex, decorator) {
-    return function(target, key) {
-        decorator(target, key, paramIndex);
-    };
-}
-import { ApiResponseDto, CurrentUser, ILoggedUserInfo, JwtAuthGuard } from '@flusys/nestjs-shared';
-import { MY_PERMISSION_MESSAGES } from '../config';
-import { Body, Controller, Inject, Post, UseGuards } from '@nestjs/common';
-import { ApiBearerAuth, ApiBody, ApiOperation, ApiResponse, ApiTags } from '@nestjs/swagger';
-import { MyPermissionsQueryDto, MyPermissionsResponseDto, UserActionResponseDto, UserRoleResponseDto } from '../dtos/permission.dto';
-import { PermissionService } from '../services/permission.service';
-export class MyPermissionController {
-    async getMyPermissions(query, user) {
-        const data = await this.permissionService.getMyPermissions(user.id, user.branchId ?? null, user.companyId ?? null, query.parentCodes);
-        return {
-            success: true,
-            message: 'Permissions loaded successfully',
-            messageKey: MY_PERMISSION_MESSAGES.GET_SUCCESS,
-            data
-        };
-    }
-    async getMyRoles(user) {
-        const data = await this.permissionService.getUserEffectiveRoles(user.id, user.companyId ?? null, user.branchId ?? null);
-        return {
-            success: true,
-            message: 'Roles loaded successfully',
-            messageKey: MY_PERMISSION_MESSAGES.MY_ROLES_SUCCESS,
-            data
-        };
-    }
-    async getMyActions(user) {
-        const data = await this.permissionService.getUserEffectiveActions(user.id, user.companyId ?? null, user.branchId ?? null);
-        return {
-            success: true,
-            message: 'Actions loaded successfully',
-            messageKey: MY_PERMISSION_MESSAGES.MY_ACTIONS_SUCCESS,
-            data
-        };
-    }
-    // NOTE: @Inject() required for bundled code - type metadata may be lost during esbuild
-    constructor(permissionService){
-        _define_property(this, "permissionService", void 0);
-        this.permissionService = permissionService;
-    }
-}
-_ts_decorate([
-    Post('my-permissions'),
-    ApiOperation({
-        summary: 'Get current user permissions',
-        description: 'Returns complete permissions for authenticated user. Includes menus, frontend actions, and caches endpoint permissions. Optionally filter by parent codes.'
-    }),
-    ApiResponseDto(MyPermissionsResponseDto),
-    ApiResponse({
-        status: 401,
-        description: 'Unauthorized'
-    }),
-    ApiBody({
-        type: MyPermissionsQueryDto
-    }),
-    _ts_param(0, Body()),
-    _ts_param(1, CurrentUser()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof MyPermissionsQueryDto === "undefined" ? Object : MyPermissionsQueryDto,
-        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], MyPermissionController.prototype, "getMyPermissions", null);
-_ts_decorate([
-    Post('my-roles'),
-    ApiOperation({
-        summary: 'Get current user roles',
-        description: 'Returns effective roles for the authenticated user, merging company-wide (branch-independent) and login-branch-specific role assignments.'
-    }),
-    ApiResponseDto(UserRoleResponseDto, true, 'single'),
-    ApiResponse({
-        status: 401,
-        description: 'Unauthorized'
-    }),
-    _ts_param(0, CurrentUser()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], MyPermissionController.prototype, "getMyRoles", null);
-_ts_decorate([
-    Post('my-actions'),
-    ApiOperation({
-        summary: 'Get current user direct actions',
-        description: 'Returns effective direct action assignments for the authenticated user, merging company-wide (branch-independent) and login-branch-specific assignments.'
-    }),
-    ApiResponseDto(UserActionResponseDto, true, 'single'),
-    ApiResponse({
-        status: 401,
-        description: 'Unauthorized'
-    }),
-    _ts_param(0, CurrentUser()),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof ILoggedUserInfo === "undefined" ? Object : ILoggedUserInfo
-    ]),
-    _ts_metadata("design:returntype", Promise)
-], MyPermissionController.prototype, "getMyActions", null);
-MyPermissionController = _ts_decorate([
-    ApiTags('IAM - My Permissions'),
-    Controller('iam/permissions'),
-    UseGuards(JwtAuthGuard),
-    ApiBearerAuth(),
-    _ts_param(0, Inject(PermissionService)),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof PermissionService === "undefined" ? Object : PermissionService
-    ])
-], MyPermissionController);

package/fesm/controllers/my-permission.controller.spec.js

@@ -1,124 +0,0 @@
-import { buildMockUser } from '@test-utils/mocks/logged-user.mock';
-import { MyPermissionController } from './my-permission.controller';
-describe('MyPermissionController', ()=>{
-    let controller;
-    let mockPermissionService;
-    beforeEach(()=>{
-        mockPermissionService = {
-            getMyPermissions: jest.fn(),
-            getUserEffectiveRoles: jest.fn(),
-            getUserEffectiveActions: jest.fn()
-        };
-        controller = new MyPermissionController(mockPermissionService);
-    });
-    describe('getMyPermissions', ()=>{
-        it('resolves permissions for the current user, branch, and company', async ()=>{
-            const user = buildMockUser({
-                id: 'user-1',
-                companyId: 'company-1',
-                branchId: 'branch-1'
-            });
-            const permissions = {
-                menus: [],
-                actions: [
-                    'user.create'
-                ]
-            };
-            mockPermissionService.getMyPermissions.mockResolvedValue(permissions);
-            const result = await controller.getMyPermissions({
-                parentCodes: [
-                    'user'
-                ]
-            }, user);
-            expect(mockPermissionService.getMyPermissions).toHaveBeenCalledWith('user-1', 'branch-1', 'company-1', [
-                'user'
-            ]);
-            expect(result).toEqual({
-                success: true,
-                message: 'Permissions loaded successfully',
-                messageKey: expect.any(String),
-                data: permissions
-            });
-        });
-        it('passes null for missing branch and company context', async ()=>{
-            const user = buildMockUser({
-                id: 'user-1',
-                companyId: undefined,
-                branchId: undefined
-            });
-            mockPermissionService.getMyPermissions.mockResolvedValue({});
-            await controller.getMyPermissions({}, user);
-            expect(mockPermissionService.getMyPermissions).toHaveBeenCalledWith('user-1', null, null, undefined);
-        });
-    });
-    describe('getMyRoles', ()=>{
-        it('resolves effective roles for the current user, company, and branch', async ()=>{
-            const user = buildMockUser({
-                id: 'user-1',
-                companyId: 'company-1',
-                branchId: 'branch-1'
-            });
-            const roles = [
-                {
-                    id: 'perm-1',
-                    roleId: 'role-1',
-                    roleName: 'Manager'
-                }
-            ];
-            mockPermissionService.getUserEffectiveRoles.mockResolvedValue(roles);
-            const result = await controller.getMyRoles(user);
-            expect(mockPermissionService.getUserEffectiveRoles).toHaveBeenCalledWith('user-1', 'company-1', 'branch-1');
-            expect(result).toEqual({
-                success: true,
-                message: 'Roles loaded successfully',
-                messageKey: expect.any(String),
-                data: roles
-            });
-        });
-        it('passes null for missing company and branch context', async ()=>{
-            const user = buildMockUser({
-                id: 'user-1',
-                companyId: undefined,
-                branchId: undefined
-            });
-            mockPermissionService.getUserEffectiveRoles.mockResolvedValue([]);
-            await controller.getMyRoles(user);
-            expect(mockPermissionService.getUserEffectiveRoles).toHaveBeenCalledWith('user-1', null, null);
-        });
-    });
-    describe('getMyActions', ()=>{
-        it('resolves effective actions for the current user, company, and branch', async ()=>{
-            const user = buildMockUser({
-                id: 'user-1',
-                companyId: 'company-1',
-                branchId: 'branch-1'
-            });
-            const actions = [
-                {
-                    id: 'perm-1',
-                    actionId: 'action-1',
-                    actionCode: 'user.view'
-                }
-            ];
-            mockPermissionService.getUserEffectiveActions.mockResolvedValue(actions);
-            const result = await controller.getMyActions(user);
-            expect(mockPermissionService.getUserEffectiveActions).toHaveBeenCalledWith('user-1', 'company-1', 'branch-1');
-            expect(result).toEqual({
-                success: true,
-                message: 'Actions loaded successfully',
-                messageKey: expect.any(String),
-                data: actions
-            });
-        });
-        it('passes null for missing company and branch context', async ()=>{
-            const user = buildMockUser({
-                id: 'user-1',
-                companyId: undefined,
-                branchId: undefined
-            });
-            mockPermissionService.getUserEffectiveActions.mockResolvedValue([]);
-            await controller.getMyActions(user);
-            expect(mockPermissionService.getUserEffectiveActions).toHaveBeenCalledWith('user-1', null, null);
-        });
-    });
-});