@flusys/nestjs-iam 7.0.2 → 8.0.0-beta.1

package/fesm/chunks/364.js

@@ -0,0 +1,86 @@
+export const __rspack_esm_id = 364;
+export const __rspack_esm_ids = [364];
+export const __webpack_modules__ = {
+743(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _action_entity_js__rspack_import_0 = __webpack_require__(864);
+/* import */ var _permission_base_entity_js__rspack_import_1 = __webpack_require__(423);
+/* import */ var _role_base_entity_js__rspack_import_2 = __webpack_require__(784);
+/* import */ var _permission_with_company_entity_js__rspack_import_3 = __webpack_require__(746);
+/* import */ var _role_with_company_entity_js__rspack_import_4 = __webpack_require__(353);
+/* import */ var _role_entity_js__rspack_import_5 = __webpack_require__(326);
+/* import */ var _user_iam_permission_entity_js__rspack_import_6 = __webpack_require__(489);
+
+
+
+
+
+
+
+
+
+
+
+
+// Core entities (no company feature)
+const IAMCoreEntities = [
+    _action_entity_js__rspack_import_0/* .Action */.r,
+    _role_entity_js__rspack_import_5/* .Role */.X,
+    _user_iam_permission_entity_js__rspack_import_6/* .UserIamPermission */.y
+];
+// Company-specific entities
+const IAMCompanyEntities = [
+    _role_with_company_entity_js__rspack_import_4/* .RoleWithCompany */.g,
+    _permission_with_company_entity_js__rspack_import_3/* .UserIamPermissionWithCompany */.t
+];
+// All entities
+const IAMAllEntities = [
+    _action_entity_js__rspack_import_0/* .Action */.r,
+    _role_entity_js__rspack_import_5/* .Role */.X,
+    _role_with_company_entity_js__rspack_import_4/* .RoleWithCompany */.g,
+    _user_iam_permission_entity_js__rspack_import_6/* .UserIamPermission */.y,
+    _permission_with_company_entity_js__rspack_import_3/* .UserIamPermissionWithCompany */.t
+];
+/**
+ * Get IAM entities based on configuration
+ * @param enableCompanyFeature - Whether company feature is enabled
+ * @param permissionMode - Permission mode: 'FULL' | 'RBAC' | 'DIRECT' (default: 'FULL')
+ */ function getIAMEntitiesByConfig(enableCompanyFeature, permissionMode = 'FULL') {
+    const entities = [
+        _action_entity_js__rspack_import_0/* .Action */.r
+    ];
+    // Permission entity - always included
+    if (enableCompanyFeature) {
+        entities.push(_permission_with_company_entity_js__rspack_import_3/* .UserIamPermissionWithCompany */.t);
+    } else {
+        entities.push(_user_iam_permission_entity_js__rspack_import_6/* .UserIamPermission */.y);
+    }
+    // Role entity - Only for RBAC or FULL mode (not DIRECT)
+    if (permissionMode === 'RBAC' || permissionMode === 'FULL') {
+        if (enableCompanyFeature) {
+            entities.push(_role_with_company_entity_js__rspack_import_4/* .RoleWithCompany */.g);
+        } else {
+            entities.push(_role_entity_js__rspack_import_5/* .Role */.X);
+        }
+    }
+    return entities;
+}
+
+__webpack_require__.d(__webpack_exports__, {
+  $m: () => (/* reexport safe */ _permission_base_entity_js__rspack_import_1.$),
+  Xh: () => (/* reexport safe */ _role_entity_js__rspack_import_5.X),
+  gP: () => (/* reexport safe */ _role_with_company_entity_js__rspack_import_4.g),
+  getIAMEntitiesByConfig: () => (getIAMEntitiesByConfig),
+  rc: () => (/* reexport safe */ _action_entity_js__rspack_import_0.r),
+  tt: () => (/* reexport safe */ _permission_with_company_entity_js__rspack_import_3.t),
+  um: () => (/* reexport safe */ _role_base_entity_js__rspack_import_2.u),
+  yi: () => (/* reexport safe */ _user_iam_permission_entity_js__rspack_import_6.y)
+}, {
+  Gr: IAMCompanyEntities,
+  SB: IAMAllEntities,
+  aZ: IAMCoreEntities
+});
+
+
+},
+
+};

package/fesm/config/index.js

@@ -1,3 +1,133 @@
-export * from './event-actions';
-export * from './iam.constants';
-export * from './message-keys';
+export const __rspack_esm_id = 565;
+export const __rspack_esm_ids = [565];
+export const __webpack_modules__ = {
+916(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/**
+ * Domain event actions published by the IAM module, alongside the CRUD
+ * lifecycle actions every ApiService emits.
+ */ const IAM_EVENT_ACTIONS = {
+    PERMISSIONS_ASSIGNED: 'permissions-assigned'
+};
+/** Every entity the IAM module publishes under, ApiService backed or not */ const IAM_EVENT_ENTITIES = {
+    ACTION: 'action',
+    ROLE: 'role',
+    USER_ACTION: 'user_action',
+    ROLE_ACTION: 'role_action',
+    COMPANY_ACTION: 'company_action',
+    USER_ROLE: 'user_role'
+};
+const IAM_EVENT_MODULE = 'iam';
+
+__webpack_require__.d(__webpack_exports__, {
+}, {
+  H: IAM_EVENT_ENTITIES,
+  X: IAM_EVENT_ACTIONS
+});
+
+
+},
+180(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+const IAM_MODULE_OPTIONS = 'IAM_MODULE_OPTIONS';
+
+__webpack_require__.d(__webpack_exports__, {
+}, {
+  G: IAM_MODULE_OPTIONS
+});
+
+
+},
+434(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+/* import */ var _event_actions_js__rspack_import_0 = __webpack_require__(916);
+/* import */ var _iam_constants_js__rspack_import_1 = __webpack_require__(180);
+/* import */ var _message_keys_js__rspack_import_2 = __webpack_require__(490);
+
+
+
+
+__webpack_require__.d(__webpack_exports__, {
+  G7: () => (/* reexport safe */ _iam_constants_js__rspack_import_1.G),
+  GG: () => (/* reexport safe */ _message_keys_js__rspack_import_2.GG),
+  HP: () => (/* reexport safe */ _event_actions_js__rspack_import_0.H),
+  M_: () => (/* reexport safe */ (/* inlined export _event_actions_js__rspack_import_0 */"iam")),
+  P3: () => (/* reexport safe */ _message_keys_js__rspack_import_2.P3),
+  Q$: () => (/* reexport safe */ _message_keys_js__rspack_import_2.Q$),
+  QW: () => (/* reexport safe */ _message_keys_js__rspack_import_2.QW),
+  XV: () => (/* reexport safe */ _event_actions_js__rspack_import_0.X),
+  eh: () => (/* reexport safe */ _message_keys_js__rspack_import_2.eh),
+  k: () => (/* reexport safe */ _message_keys_js__rspack_import_2.k),
+  sb: () => (/* reexport safe */ _message_keys_js__rspack_import_2.sb),
+  xI: () => (/* reexport safe */ _message_keys_js__rspack_import_2.xI)
+});
+
+
+},
+490(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+// ==================== IAM MODULE MESSAGE KEYS ====================
+const ACTION_MESSAGES = {
+    GET_ALL_SUCCESS: 'action.get.all.success',
+    READONLY_UPDATE_FORBIDDEN: 'action.readonly.update.forbidden',
+    READONLY_DELETE_FORBIDDEN: 'action.readonly.delete.forbidden'
+};
+const ROLE_MESSAGES = {
+    READONLY_UPDATE_FORBIDDEN: 'role.readonly.update.forbidden',
+    READONLY_DELETE_FORBIDDEN: 'role.readonly.delete.forbidden'
+};
+const PERMISSION_OPERATION_MESSAGES = {
+    PROCESS_SUCCESS: 'permission.process.success',
+    ALREADY_EXISTS: 'permission.already.exists',
+    USER_REQUIRED: 'permission.user.required'
+};
+const ROLE_PERMISSION_MESSAGES = {
+    ACTIONS_SUCCESS: 'role.permission.actions.success',
+    USER_ROLES_SUCCESS: 'role.permission.user.roles.success'
+};
+const USER_ACTION_PERMISSION_MESSAGES = {
+    GET_SUCCESS: 'user.action.permission.get.success'
+};
+const COMPANY_ACTION_PERMISSION_MESSAGES = {
+    GET_SUCCESS: 'company.action.permission.get.success'
+};
+const MY_PERMISSION_MESSAGES = {
+    GET_SUCCESS: 'my.permission.get.success',
+    MY_ROLES_SUCCESS: 'my.permission.roles.success',
+    MY_ACTIONS_SUCCESS: 'my.permission.actions.success'
+};
+const IAM_MODE_MESSAGES = {
+    DIRECT_MODE_UNAVAILABLE: 'iam.direct.mode.unavailable',
+    RBAC_MODE_UNAVAILABLE: 'iam.rbac.mode.unavailable',
+    ROLE_ASSIGNMENT_UNAVAILABLE: 'iam.role.assignment.unavailable'
+};
+
+__webpack_require__.d(__webpack_exports__, {
+}, {
+  GG: COMPANY_ACTION_PERMISSION_MESSAGES,
+  P3: PERMISSION_OPERATION_MESSAGES,
+  Q$: ACTION_MESSAGES,
+  QW: ROLE_MESSAGES,
+  eh: ROLE_PERMISSION_MESSAGES,
+  k: USER_ACTION_PERMISSION_MESSAGES,
+  sb: MY_PERMISSION_MESSAGES,
+  xI: IAM_MODE_MESSAGES
+});
+
+
+},
+
+};
+import { __webpack_require__ } from '../runtime.js';
+var __webpack_exec__ = function(moduleId) { return __webpack_require__(__webpack_require__.s = moduleId); }
+import * as __rspack_chunk_1 from './index.js';
+__webpack_require__.C(__rspack_chunk_1);
+var __webpack_exports__ = __webpack_exec__(434);var __webpack_exports__ACTION_MESSAGES = __webpack_exports__.Q$;
+var __webpack_exports__COMPANY_ACTION_PERMISSION_MESSAGES = __webpack_exports__.GG;
+var __webpack_exports__IAM_EVENT_ACTIONS = __webpack_exports__.XV;
+var __webpack_exports__IAM_EVENT_ENTITIES = __webpack_exports__.HP;
+var __webpack_exports__IAM_EVENT_MODULE = __webpack_exports__.M_;
+var __webpack_exports__IAM_MODE_MESSAGES = __webpack_exports__.xI;
+var __webpack_exports__IAM_MODULE_OPTIONS = __webpack_exports__.G7;
+var __webpack_exports__MY_PERMISSION_MESSAGES = __webpack_exports__.sb;
+var __webpack_exports__PERMISSION_OPERATION_MESSAGES = __webpack_exports__.P3;
+var __webpack_exports__ROLE_MESSAGES = __webpack_exports__.QW;
+var __webpack_exports__ROLE_PERMISSION_MESSAGES = __webpack_exports__.eh;
+var __webpack_exports__USER_ACTION_PERMISSION_MESSAGES = __webpack_exports__.k;
+export { __webpack_exports__ACTION_MESSAGES as ACTION_MESSAGES, __webpack_exports__COMPANY_ACTION_PERMISSION_MESSAGES as COMPANY_ACTION_PERMISSION_MESSAGES, __webpack_exports__IAM_EVENT_ACTIONS as IAM_EVENT_ACTIONS, __webpack_exports__IAM_EVENT_ENTITIES as IAM_EVENT_ENTITIES, __webpack_exports__IAM_EVENT_MODULE as IAM_EVENT_MODULE, __webpack_exports__IAM_MODE_MESSAGES as IAM_MODE_MESSAGES, __webpack_exports__IAM_MODULE_OPTIONS as IAM_MODULE_OPTIONS, __webpack_exports__MY_PERMISSION_MESSAGES as MY_PERMISSION_MESSAGES, __webpack_exports__PERMISSION_OPERATION_MESSAGES as PERMISSION_OPERATION_MESSAGES, __webpack_exports__ROLE_MESSAGES as ROLE_MESSAGES, __webpack_exports__ROLE_PERMISSION_MESSAGES as ROLE_PERMISSION_MESSAGES, __webpack_exports__USER_ACTION_PERMISSION_MESSAGES as USER_ACTION_PERMISSION_MESSAGES };

package/fesm/controllers/index.js

@@ -1,7 +1,18 @@
-export * from './action.controller';
-export * from './role.controller';
-// Permission controllers (conditionally registered based on permission mode)
-export * from './company-action-permission.controller';
-export * from './my-permission.controller';
-export * from './role-permission.controller';
-export * from './user-action-permission.controller';
+export const __rspack_esm_id = 24;
+export const __rspack_esm_ids = [24];
+export const __webpack_modules__ = {};
+import { __webpack_require__ } from '../runtime.js';
+var __webpack_exec__ = function(moduleId) { return __webpack_require__(__webpack_require__.s = moduleId); }
+import * as __rspack_chunk_1 from '../867.js';
+__webpack_require__.C(__rspack_chunk_1);
+import * as __rspack_chunk_2 from '../284.js';
+__webpack_require__.C(__rspack_chunk_2);
+import * as __rspack_chunk_3 from './index.js';
+__webpack_require__.C(__rspack_chunk_3);
+var __webpack_exports__ = __webpack_exec__(575);var __webpack_exports__ActionController = __webpack_exports__.ZX;
+var __webpack_exports__CompanyActionPermissionController = __webpack_exports__.jj;
+var __webpack_exports__MyPermissionController = __webpack_exports__.ig;
+var __webpack_exports__RoleController = __webpack_exports__.lk;
+var __webpack_exports__RolePermissionController = __webpack_exports__.uv;
+var __webpack_exports__UserActionPermissionController = __webpack_exports__.NF;
+export { __webpack_exports__ActionController as ActionController, __webpack_exports__CompanyActionPermissionController as CompanyActionPermissionController, __webpack_exports__MyPermissionController as MyPermissionController, __webpack_exports__RoleController as RoleController, __webpack_exports__RolePermissionController as RolePermissionController, __webpack_exports__UserActionPermissionController as UserActionPermissionController };

package/fesm/docs/index.js

@@ -1 +1,240 @@
-export * from './iam-swagger.config';
+export const __rspack_esm_id = 428;
+export const __rspack_esm_ids = [428];
+export const __webpack_modules__ = {
+438(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+
+// EXPORTS
+__webpack_require__.d(__webpack_exports__, {
+  s: () => (/* reexport */ iamSwaggerConfig)
+});
+
+// EXTERNAL MODULE: ./projects/nestjs-iam/src/enums/permission-type.enum.ts
+var permission_type_enum = __webpack_require__(841);
+;// CONCATENATED MODULE: ./projects/nestjs-iam/src/docs/iam-swagger.config.ts
+
+/** Auth-related tags that should always be excluded from IAM API docs */ const AUTH_RELATED_TAGS = [
+    'Authentication',
+    'Users',
+    'Companies',
+    'Branches',
+    'User Permissions',
+    'Company Selection'
+];
+function iamSwaggerConfig(enableCompanyFeature = false, permissionMode = permission_type_enum/* .IAMPermissionMode.FULL */.w.FULL, databaseMode = 'single') {
+    const multiTenantNote = databaseMode === 'multi-tenant' ? `\n> **Multi-Tenant Mode**: Include \`x-tenant-id\` header to target a specific tenant database.\n` : '';
+    const excludeSchemaProperties = enableCompanyFeature ? [] : [
+        // DTOs with companyId and branchId
+        {
+            schemaName: 'AssignUserActionsDto',
+            properties: [
+                'companyId',
+                'branchId'
+            ]
+        },
+        {
+            schemaName: 'AssignUserRolesDto',
+            properties: [
+                'companyId',
+                'branchId'
+            ]
+        },
+        {
+            schemaName: 'GetUserActionsDto',
+            properties: [
+                'companyId',
+                'branchId'
+            ]
+        },
+        {
+            schemaName: 'GetUserRolesDto',
+            properties: [
+                'companyId',
+                'branchId'
+            ]
+        },
+        {
+            schemaName: 'ActionTreeForPermissionDto',
+            properties: [
+                'companyId'
+            ]
+        },
+        // Response DTOs with branchId
+        {
+            schemaName: 'UserActionResponseDto',
+            properties: [
+                'branchId'
+            ]
+        },
+        {
+            schemaName: 'UserRoleResponseDto',
+            properties: [
+                'branchId'
+            ]
+        },
+        // Company-related DTOs (entire schemas hidden via tag exclusion, but just in case)
+        {
+            schemaName: 'AssignCompanyActionsDto',
+            properties: [
+                'companyId'
+            ]
+        },
+        {
+            schemaName: 'CompanyActionResponseDto',
+            properties: [
+                'companyId'
+            ]
+        }
+    ];
+    // Hide query parameters for GET endpoints when company feature is disabled
+    const excludeQueryParameters = enableCompanyFeature ? [] : [
+        {
+            pathPattern: '/iam/permissions/user-actions/*',
+            method: 'get',
+            parameters: [
+                'companyId',
+                'branchId'
+            ]
+        },
+        {
+            pathPattern: '/iam/permissions/user-roles/*',
+            method: 'get',
+            parameters: [
+                'companyId',
+                'branchId'
+            ]
+        }
+    ];
+    // Build exclude tags list: always exclude Auth tags + conditionally exclude based on permission mode
+    const excludeTags = [
+        ...AUTH_RELATED_TAGS
+    ];
+    // Hide company-related IAM endpoints when company feature is disabled
+    if (!enableCompanyFeature) {
+        excludeTags.push('IAM - Company Action Permissions');
+    }
+    // Conditionally exclude endpoints based on permission mode
+    if (permissionMode === permission_type_enum/* .IAMPermissionMode.RBAC */.w.RBAC) {
+        // RBAC only - hide direct user action endpoints
+        excludeTags.push('IAM - Permissions (Direct)');
+    } else if (permissionMode === permission_type_enum/* .IAMPermissionMode.DIRECT */.w.DIRECT) {
+        // Direct only - hide RBAC endpoints
+        excludeTags.push('IAM - Permissions (RBAC)');
+        excludeTags.push('IAM - Roles'); // Roles are only used in RBAC
+    }
+    return {
+        title: 'IAM API',
+        description: `
+## Identity & Access Management API
+${multiTenantNote}
+Advanced permission system with flexible modes: RBAC, Direct Permissions, or both.
+
+### Current Configuration
+- **Permission Mode**: ${permissionMode === permission_type_enum/* .IAMPermissionMode.RBAC */.w.RBAC ? '**RBAC** (Role-Based Access Control)' : permissionMode === permission_type_enum/* .IAMPermissionMode.DIRECT */.w.DIRECT ? '**DIRECT** (Direct User Permissions)' : '**FULL** (RBAC + Direct)'}${enableCompanyFeature ? '\n- **Company Feature**: Enabled (Multi-tenant with company/branch scoping)' : '\n- **Company Feature**: Disabled'}
+
+### Features Based on Mode
+
+${permissionMode === permission_type_enum/* .IAMPermissionMode.RBAC */.w.RBAC || permissionMode === permission_type_enum/* .IAMPermissionMode.FULL */.w.FULL ? `#### RBAC Features (Active)
+- **Roles**: Create company-scoped roles${enableCompanyFeature ? ' (auto-filtered by user company)' : ''}
+- **Role-Actions**: Assign actions to roles
+- **User-Roles**: Assign roles to users${enableCompanyFeature ? ' at branch level' : ''}
+` : ''}${permissionMode === permission_type_enum/* .IAMPermissionMode.DIRECT */.w.DIRECT || permissionMode === permission_type_enum/* .IAMPermissionMode.FULL */.w.FULL ? `#### Direct Permission Features (Active)
+- **User-Actions**: Direct action assignment to users${enableCompanyFeature ? ' at branch level' : ''}
+` : ''}${enableCompanyFeature ? `#### Company Features (Active)
+- **Company-Action Whitelist**: Control which actions are available per company
+- **Branch-Based Scoping**: Permissions scoped to specific branches
+- **Auto-Filtering**: Roles automatically filtered by user's company
+- **Action Tree Filtering**: Available actions filtered by company whitelist
+` : ''}
+### Core Concepts
+
+#### Actions
+Represent permissions in the system. Can be hierarchical.
+
+**Action Types:**
+- \`menu\` - Menu visibility (actions with type='menu' are used as menus)
+- \`endpoint\` - API endpoint access
+- \`frontend\` - Frontend feature toggles
+${permissionMode === permission_type_enum/* .IAMPermissionMode.RBAC */.w.RBAC || permissionMode === permission_type_enum/* .IAMPermissionMode.FULL */.w.FULL ? `
+#### Roles
+Collections of actions that can be assigned to users.${enableCompanyFeature ? ' Scoped to companies.' : ' Global across the system.'}
+` : ''}${enableCompanyFeature ? `
+#### Company-Action Whitelist
+Controls which actions are available to a company. Users/roles can only use whitelisted actions.
+
+**Flow:**
+1. Admin assigns actions to company (whitelist)
+2. Only whitelisted actions appear in permission assignment UIs
+3. Users/roles cannot be assigned non-whitelisted actions
+` : ''}
+### Permission Resolution
+
+${permissionMode === permission_type_enum/* .IAMPermissionMode.FULL */.w.FULL ? `1. **Company-Action Whitelist** - Filter by company (if enabled)
+2. **UserAction (DENY)** - Explicit denials take precedence
+3. **UserAction (GRANT)** - Direct user grants
+4. **UserRole → RoleAction** - Inherited from assigned roles
+5. **Action Permission Logic** - Complex AND/OR rules` : permissionMode === permission_type_enum/* .IAMPermissionMode.RBAC */.w.RBAC ? `1. **Company-Action Whitelist** - Filter by company (if enabled)
+2. **UserRole → RoleAction** - Actions inherited from roles
+3. **Action Permission Logic** - Complex AND/OR rules` : `1. **Company-Action Whitelist** - Filter by company (if enabled)
+2. **UserAction (DENY)** - Explicit denials take precedence
+3. **UserAction (GRANT)** - Direct user grants
+4. **Action Permission Logic** - Complex AND/OR rules`}
+
+### API Endpoints Summary
+
+#### Available Endpoints
+- ✅ **Actions**: CRUD operations, tree view${enableCompanyFeature ? ', filtered tree for permissions' : ''}${permissionMode === permission_type_enum/* .IAMPermissionMode.RBAC */.w.RBAC || permissionMode === permission_type_enum/* .IAMPermissionMode.FULL */.w.FULL ? `
+- ✅ **Roles**: CRUD operations${enableCompanyFeature ? ' (auto-filtered by company)' : ''}
+- ✅ **Role-Actions**: Assign actions to roles, get role actions
+- ✅ **User-Roles**: Assign roles to users, get user roles` : `
+- ❌ **Roles**: Disabled (RBAC mode not active)`}${permissionMode === permission_type_enum/* .IAMPermissionMode.DIRECT */.w.DIRECT || permissionMode === permission_type_enum/* .IAMPermissionMode.FULL */.w.FULL ? `
+- ✅ **User-Actions**: Direct action assignment to users` : `
+- ❌ **User-Actions**: Disabled (DIRECT mode not active)`}${enableCompanyFeature ? `
+- ✅ **Company-Actions**: Whitelist actions for companies` : `
+- ❌ **Company-Actions**: Disabled (company feature not enabled)`}
+- ✅ **My Permissions**: Get current user's complete permissions (includes menu-type actions)
+
+### Best Practices
+
+1. **Action Codes**: Use meaningful codes like \`user.create\`, \`order.view\`
+2. **Hierarchical Actions**: Group related actions (use parentId for hierarchy)${permissionMode === permission_type_enum/* .IAMPermissionMode.RBAC */.w.RBAC || permissionMode === permission_type_enum/* .IAMPermissionMode.FULL */.w.FULL ? `
+3. **Role Design**: Create roles for common permission patterns` : ''}${permissionMode === permission_type_enum/* .IAMPermissionMode.DIRECT */.w.DIRECT || permissionMode === permission_type_enum/* .IAMPermissionMode.FULL */.w.FULL ? `
+${permissionMode === permission_type_enum/* .IAMPermissionMode.FULL */.w.FULL ? '4' : '3'}. **Direct Actions**: Use sparingly for exceptions` : ''}${enableCompanyFeature ? `
+${permissionMode === permission_type_enum/* .IAMPermissionMode.FULL */.w.FULL ? '5' : '4'}. **Company Whitelisting**: Set up action whitelist before assigning permissions
+${permissionMode === permission_type_enum/* .IAMPermissionMode.FULL */.w.FULL ? '6' : '5'}. **Branch Scoping**: Use branches for location-based access control` : ''}
+  `,
+        version: '1.0',
+        path: 'api/docs/iam',
+        bearerAuth: true,
+        excludeSchemaProperties,
+        excludeTags,
+        excludeQueryParameters
+    };
+}
+
+;// CONCATENATED MODULE: ./projects/nestjs-iam/src/docs/index.ts
+
+
+
+},
+841(__unused_rspack_module, __webpack_exports__, __webpack_require__) {
+var IAMPermissionMode = /*#__PURE__*/ function(IAMPermissionMode) {
+    IAMPermissionMode[IAMPermissionMode["RBAC"] = 1] = "RBAC";
+    IAMPermissionMode[IAMPermissionMode["DIRECT"] = 2] = "DIRECT";
+    IAMPermissionMode[IAMPermissionMode["FULL"] = 3] = "FULL";
+    return IAMPermissionMode;
+}({});
+
+__webpack_require__.d(__webpack_exports__, {
+  w: () => (IAMPermissionMode)
+});
+
+
+},
+
+};
+import { __webpack_require__ } from '../runtime.js';
+var __webpack_exec__ = function(moduleId) { return __webpack_require__(__webpack_require__.s = moduleId); }
+import * as __rspack_chunk_1 from './index.js';
+__webpack_require__.C(__rspack_chunk_1);
+var __webpack_exports__ = __webpack_exec__(438);var __webpack_exports__iamSwaggerConfig = __webpack_exports__.s;
+export { __webpack_exports__iamSwaggerConfig as iamSwaggerConfig };