@flusys/nestjs-iam 7.1.0 → 8.0.0

package/cjs/services/role.service.js

@@ -1,224 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-Object.defineProperty(exports, "RoleService", {
-    enumerable: true,
-    get: function() {
-        return RoleService;
-    }
-});
-const _classes = require("@flusys/nestjs-shared/classes");
-const _modules = require("@flusys/nestjs-shared/modules");
-const _utils = require("@flusys/nestjs-shared/utils");
-const _common = require("@nestjs/common");
-const _typeorm = require("typeorm");
-const _config = require("../config");
-const _permissionwithcompanyentity = require("../entities/permission-with-company.entity");
-const _rolewithcompanyentity = require("../entities/role-with-company.entity");
-const _roleentity = require("../entities/role.entity");
-const _useriampermissionentity = require("../entities/user-iam-permission.entity");
-const _iamentitytypeenum = require("../enums/iam-entity-type.enum");
-const _iampermissiontypeenum = require("../enums/iam-permission-type.enum");
-const _iamconfigservice = require("./iam-config.service");
-const _iamdatasourceservice = require("./iam-datasource.service");
-const _permissioncacheservice = require("./permission-cache.service");
-function _define_property(obj, key, value) {
-    if (key in obj) {
-        Object.defineProperty(obj, key, {
-            value: value,
-            enumerable: true,
-            configurable: true,
-            writable: true
-        });
-    } else {
-        obj[key] = value;
-    }
-    return obj;
-}
-function _ts_decorate(decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for(var i = decorators.length - 1; i >= 0; i--)if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-function _ts_metadata(k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-}
-function _ts_param(paramIndex, decorator) {
-    return function(target, key) {
-        decorator(target, key, paramIndex);
-    };
-}
-let RoleService = class RoleService extends _classes.ApiService {
-    async beforeUpdateOperation(dto, _user, _queryRunner) {
-        const dtos = Array.isArray(dto) ? dto : [
-            dto
-        ];
-        const ids = dtos.map((d)=>d.id);
-        await this.ensureDataSourceRepository();
-        const readonlyRoles = await this.repository.find({
-            where: {
-                id: (0, _typeorm.In)(ids),
-                readOnly: true,
-                deletedAt: (0, _typeorm.IsNull)()
-            }
-        });
-        if (readonlyRoles.length > 0) {
-            const names = readonlyRoles.map((r)=>r.name).join(', ');
-            throw new _common.ForbiddenException({
-                message: `Cannot modify readonly role(s): ${names}`,
-                messageKey: _config.ROLE_MESSAGES.READONLY_UPDATE_FORBIDDEN,
-                messageVariables: {
-                    names
-                }
-            });
-        }
-    }
-    async beforeDeleteOperation(dto, user, queryRunner) {
-        await super.beforeDeleteOperation(dto, user, queryRunner);
-        const roleIds = Array.isArray(dto.id) ? dto.id : [
-            dto.id
-        ];
-        if (roleIds.length === 0) {
-            return;
-        }
-        await this.ensureDataSourceRepository();
-        const readonlyRoles = await this.repository.find({
-            where: {
-                id: (0, _typeorm.In)(roleIds),
-                readOnly: true,
-                deletedAt: (0, _typeorm.IsNull)()
-            }
-        });
-        if (readonlyRoles.length > 0) {
-            const names = readonlyRoles.map((r)=>r.name).join(', ');
-            throw new _common.ForbiddenException({
-                message: `Cannot delete readonly role(s): ${names}`,
-                messageKey: _config.ROLE_MESSAGES.READONLY_DELETE_FORBIDDEN,
-                messageVariables: {
-                    names
-                }
-            });
-        }
-        const enableCompanyFeature = this.iamConfigService.isCompanyFeatureEnabled();
-        const permissionEntity = enableCompanyFeature ? _permissionwithcompanyentity.UserIamPermissionWithCompany : _useriampermissionentity.UserIamPermission;
-        const permissionRepo = queryRunner.manager.getRepository(permissionEntity);
-        const userRoleRows = await permissionRepo.find({
-            where: {
-                permissionType: _iampermissiontypeenum.IamPermissionType.USER_ROLE,
-                sourceType: _iamentitytypeenum.IamEntityType.USER,
-                targetType: _iamentitytypeenum.IamEntityType.ROLE,
-                targetId: (0, _typeorm.In)(roleIds)
-            }
-        });
-        const affectedUserIds = [
-            ...new Set(userRoleRows.map((row)=>row.sourceId))
-        ];
-        await permissionRepo.delete({
-            permissionType: _iampermissiontypeenum.IamPermissionType.ROLE_ACTION,
-            sourceType: _iamentitytypeenum.IamEntityType.ROLE,
-            sourceId: (0, _typeorm.In)(roleIds)
-        });
-        await permissionRepo.delete({
-            permissionType: _iampermissiontypeenum.IamPermissionType.USER_ROLE,
-            targetType: _iamentitytypeenum.IamEntityType.ROLE,
-            targetId: (0, _typeorm.In)(roleIds)
-        });
-        if (affectedUserIds.length > 0) {
-            await this.permissionCacheService.invalidateUsers(affectedUserIds);
-        }
-    }
-    // Entity Conversion
-    async convertSingleDtoToEntity(dto, user) {
-        const entity = await super.convertSingleDtoToEntity(dto, user);
-        // Handle companyId based on company feature
-        if (this.iamConfigService.isCompanyFeatureEnabled()) {
-            const isUpdate = 'id' in dto && dto.id;
-            // For create: use dto.companyId or user's companyId
-            // For update: only override if explicitly provided
-            if (!isUpdate || dto.companyId !== undefined) {
-                entity.companyId = dto.companyId ?? user?.companyId ?? null;
-            }
-        }
-        return entity;
-    }
-    // Query Customization
-    async getSelectQuery(query, _user, select) {
-        if (!select?.length) {
-            select = [
-                'id',
-                'name',
-                'description',
-                'isActive',
-                'readOnly',
-                'serial',
-                'createdAt'
-            ];
-            if (this.iamConfigService.isCompanyFeatureEnabled()) {
-                select.push('companyId');
-            }
-        }
-        query.select(select.map((f)=>`${this.entityName}.${f}`));
-        return {
-            query,
-            isRaw: false
-        };
-    }
-    async getGlobalSearchQuery(query, search) {
-        query.andWhere('(role.name LIKE :search OR role.description LIKE :search)', {
-            search: `%${search}%`
-        });
-        return {
-            query,
-            isRaw: false
-        };
-    }
-    async getExtraManipulateQuery(query, filterDto, user) {
-        const result = await super.getExtraManipulateQuery(query, filterDto, user);
-        (0, _utils.applyCompanyFilter)(query, {
-            isCompanyFeatureEnabled: this.iamConfigService.isCompanyFeatureEnabled(),
-            entityAlias: 'role'
-        }, user);
-        return result;
-    }
-    // Response Conversion
-    convertEntityToResponseDto(entity, _isRaw) {
-        return {
-            id: entity.id,
-            readOnly: entity.readOnly,
-            name: entity.name,
-            description: entity.description,
-            isActive: entity.isActive,
-            serial: entity.serial,
-            companyId: ('companyId' in entity ? entity.companyId : null) ?? null,
-            createdAt: entity.createdAt,
-            updatedAt: entity.updatedAt,
-            deletedAt: entity.deletedAt,
-            createdById: entity.createdById,
-            updatedById: entity.updatedById,
-            deletedById: entity.deletedById
-        };
-    }
-    constructor(cacheManager, utilsService, iamConfigService, dataSourceProvider, permissionCacheService){
-        super(_config.IAM_EVENT_ENTITIES.ROLE, cacheManager, utilsService, RoleService.name, true, _config.IAM_EVENT_MODULE, dataSourceProvider, iamConfigService.isCompanyFeatureEnabled() ? _rolewithcompanyentity.RoleWithCompany : _roleentity.Role), _define_property(this, "cacheManager", void 0), _define_property(this, "utilsService", void 0), _define_property(this, "iamConfigService", void 0), _define_property(this, "permissionCacheService", void 0), this.cacheManager = cacheManager, this.utilsService = utilsService, this.iamConfigService = iamConfigService, this.permissionCacheService = permissionCacheService;
-    }
-};
-RoleService = _ts_decorate([
-    (0, _common.Injectable)({
-        scope: _common.Scope.REQUEST
-    }),
-    _ts_param(0, (0, _common.Inject)('CACHE_INSTANCE')),
-    _ts_param(1, (0, _common.Inject)(_modules.UtilsService)),
-    _ts_param(2, (0, _common.Inject)(_iamconfigservice.IAMConfigService)),
-    _ts_param(3, (0, _common.Inject)(_iamdatasourceservice.IAMDataSourceService)),
-    _ts_param(4, (0, _common.Inject)(_permissioncacheservice.PermissionCacheService)),
-    _ts_metadata("design:type", Function),
-    _ts_metadata("design:paramtypes", [
-        typeof _classes.HybridCache === "undefined" ? Object : _classes.HybridCache,
-        typeof _modules.UtilsService === "undefined" ? Object : _modules.UtilsService,
-        typeof _iamconfigservice.IAMConfigService === "undefined" ? Object : _iamconfigservice.IAMConfigService,
-        typeof _iamdatasourceservice.IAMDataSourceService === "undefined" ? Object : _iamdatasourceservice.IAMDataSourceService,
-        typeof _permissioncacheservice.PermissionCacheService === "undefined" ? Object : _permissioncacheservice.PermissionCacheService
-    ])
-], RoleService);

package/cjs/services/role.service.spec.js

@@ -1,347 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-const _testing = require("@nestjs/testing");
-const _modules = require("@flusys/nestjs-shared/modules");
-const _repositorymock = require("@test-utils/mocks/repository.mock");
-const _loggedusermock = require("@test-utils/mocks/logged-user.mock");
-const _roleentity = require("../entities/role.entity");
-const _rolewithcompanyentity = require("../entities/role-with-company.entity");
-const _iamconfigservice = require("./iam-config.service");
-const _iamdatasourceservice = require("./iam-datasource.service");
-const _permissioncacheservice = require("./permission-cache.service");
-const _roleservice = require("./role.service");
-function buildRole(overrides = {}) {
-    return {
-        id: 'role-uuid-1',
-        readOnly: false,
-        name: 'Manager',
-        description: null,
-        isActive: true,
-        serial: 1,
-        createdAt: new Date(),
-        updatedAt: new Date(),
-        deletedAt: null,
-        createdById: null,
-        updatedById: null,
-        deletedById: null,
-        ...overrides
-    };
-}
-describe('RoleService', ()=>{
-    let service;
-    let module;
-    let mockRepo;
-    let mockIamConfigService;
-    let mockPermissionCacheService;
-    beforeEach(async ()=>{
-        mockRepo = (0, _repositorymock.createMockRepository)();
-        mockRepo.find.mockResolvedValue([]);
-        const mockDataSourceProvider = (0, _repositorymock.createMockDataSourceProvider)(mockRepo);
-        mockIamConfigService = {
-            isCompanyFeatureEnabled: jest.fn().mockReturnValue(false)
-        };
-        mockPermissionCacheService = {
-            invalidateUsers: jest.fn()
-        };
-        module = await _testing.Test.createTestingModule({
-            providers: [
-                _roleservice.RoleService,
-                {
-                    provide: 'CACHE_INSTANCE',
-                    useValue: {}
-                },
-                {
-                    provide: _modules.UtilsService,
-                    useValue: {}
-                },
-                {
-                    provide: _iamconfigservice.IAMConfigService,
-                    useValue: mockIamConfigService
-                },
-                {
-                    provide: _iamdatasourceservice.IAMDataSourceService,
-                    useValue: mockDataSourceProvider
-                },
-                {
-                    provide: _permissioncacheservice.PermissionCacheService,
-                    useValue: mockPermissionCacheService
-                }
-            ]
-        }).compile();
-        service = await module.resolve(_roleservice.RoleService);
-    });
-    describe('entity selection', ()=>{
-        it('uses Role when the company feature is disabled', async ()=>{
-            mockIamConfigService.isCompanyFeatureEnabled.mockReturnValue(false);
-            const built = await module.resolve(_roleservice.RoleService);
-            expect(built['_entity']).toBe(_roleentity.Role);
-        });
-        it('uses RoleWithCompany when the company feature is enabled', async ()=>{
-            mockIamConfigService.isCompanyFeatureEnabled.mockReturnValue(true);
-            const built = await module.resolve(_roleservice.RoleService);
-            expect(built['_entity']).toBe(_rolewithcompanyentity.RoleWithCompany);
-        });
-    });
-    describe('convertSingleDtoToEntity', ()=>{
-        it('creates a plain entity without companyId when the company feature is disabled', async ()=>{
-            mockIamConfigService.isCompanyFeatureEnabled.mockReturnValue(false);
-            await service.ensureDataSourceRepository();
-            mockRepo.create.mockReturnValue({});
-            const entity = await service.convertSingleDtoToEntity({
-                name: 'Manager'
-            }, (0, _loggedusermock.buildMockUser)());
-            expect(entity.companyId).toBeUndefined();
-        });
-        it('stamps companyId from the DTO on create when the company feature is enabled', async ()=>{
-            mockIamConfigService.isCompanyFeatureEnabled.mockReturnValue(true);
-            await service.ensureDataSourceRepository();
-            mockRepo.create.mockReturnValue({});
-            const entity = await service.convertSingleDtoToEntity({
-                name: 'Manager',
-                companyId: 'company-explicit'
-            }, (0, _loggedusermock.buildMockUser)({
-                companyId: 'company-from-user'
-            }));
-            expect(entity.companyId).toBe('company-explicit');
-        });
-        it('falls back to the user companyId on create when the DTO omits it', async ()=>{
-            mockIamConfigService.isCompanyFeatureEnabled.mockReturnValue(true);
-            await service.ensureDataSourceRepository();
-            mockRepo.create.mockReturnValue({});
-            const entity = await service.convertSingleDtoToEntity({
-                name: 'Manager'
-            }, (0, _loggedusermock.buildMockUser)({
-                companyId: 'company-from-user'
-            }));
-            expect(entity.companyId).toBe('company-from-user');
-        });
-        it('does not override companyId on update when the DTO omits it', async ()=>{
-            mockIamConfigService.isCompanyFeatureEnabled.mockReturnValue(true);
-            await service.ensureDataSourceRepository();
-            const existing = buildRole({
-                id: 'role-uuid-1',
-                companyId: 'existing-company'
-            });
-            mockRepo.findOne.mockResolvedValue(existing);
-            const entity = await service.convertSingleDtoToEntity({
-                id: 'role-uuid-1',
-                name: 'Manager Updated'
-            }, (0, _loggedusermock.buildMockUser)({
-                companyId: 'company-from-user'
-            }));
-            expect(entity.companyId).toBe('existing-company');
-        });
-        it('overrides companyId on update when explicitly provided in the DTO', async ()=>{
-            mockIamConfigService.isCompanyFeatureEnabled.mockReturnValue(true);
-            await service.ensureDataSourceRepository();
-            const existing = buildRole({
-                id: 'role-uuid-1',
-                companyId: 'existing-company'
-            });
-            mockRepo.findOne.mockResolvedValue(existing);
-            const entity = await service.convertSingleDtoToEntity({
-                id: 'role-uuid-1',
-                name: 'Manager Updated',
-                companyId: 'new-company'
-            }, (0, _loggedusermock.buildMockUser)());
-            expect(entity.companyId).toBe('new-company');
-        });
-        it('throws NotFoundException when updating a role that does not exist', async ()=>{
-            mockIamConfigService.isCompanyFeatureEnabled.mockReturnValue(false);
-            await service.ensureDataSourceRepository();
-            mockRepo.findOne.mockResolvedValue(null);
-            await expect(service.convertSingleDtoToEntity({
-                id: 'missing-role'
-            }, (0, _loggedusermock.buildMockUser)())).rejects.toThrow();
-        });
-    });
-    describe('getSelectQuery', ()=>{
-        it('selects the default field set without companyId when the company feature is disabled', async ()=>{
-            mockIamConfigService.isCompanyFeatureEnabled.mockReturnValue(false);
-            const query = mockRepo.createQueryBuilder();
-            await service.getSelectQuery(query, (0, _loggedusermock.buildMockUser)());
-            expect(query.select).toHaveBeenCalledWith(expect.not.arrayContaining([
-                'role.companyId'
-            ]));
-        });
-        it('includes companyId in the default field set when the company feature is enabled', async ()=>{
-            mockIamConfigService.isCompanyFeatureEnabled.mockReturnValue(true);
-            const query = mockRepo.createQueryBuilder();
-            await service.getSelectQuery(query, (0, _loggedusermock.buildMockUser)());
-            expect(query.select).toHaveBeenCalledWith(expect.arrayContaining([
-                'role.companyId'
-            ]));
-        });
-        it('uses the explicitly provided select list as-is', async ()=>{
-            const query = mockRepo.createQueryBuilder();
-            await service.getSelectQuery(query, (0, _loggedusermock.buildMockUser)(), [
-                'id',
-                'name'
-            ]);
-            expect(query.select).toHaveBeenCalledWith([
-                'role.id',
-                'role.name'
-            ]);
-        });
-    });
-    describe('getGlobalSearchQuery', ()=>{
-        it('filters by name or description', async ()=>{
-            const query = mockRepo.createQueryBuilder();
-            await service.getGlobalSearchQuery(query, 'manager');
-            expect(query.andWhere).toHaveBeenCalledWith('(role.name LIKE :search OR role.description LIKE :search)', {
-                search: '%manager%'
-            });
-        });
-    });
-    describe('getExtraManipulateQuery', ()=>{
-        it('applies a company filter clause when the company feature is enabled and the user has a company', async ()=>{
-            mockIamConfigService.isCompanyFeatureEnabled.mockReturnValue(true);
-            const query = mockRepo.createQueryBuilder();
-            await service.getExtraManipulateQuery(query, {}, (0, _loggedusermock.buildMockUser)({
-                companyId: 'company-1'
-            }));
-            expect(query.andWhere).toHaveBeenCalledWith('role.companyId = :companyId', {
-                companyId: 'company-1'
-            });
-        });
-        it('does not apply a company filter when the company feature is disabled', async ()=>{
-            mockIamConfigService.isCompanyFeatureEnabled.mockReturnValue(false);
-            const query = mockRepo.createQueryBuilder();
-            await service.getExtraManipulateQuery(query, {}, (0, _loggedusermock.buildMockUser)({
-                companyId: 'company-1'
-            }));
-            expect(query.andWhere).not.toHaveBeenCalled();
-        });
-    });
-    describe('convertEntityToResponseDto', ()=>{
-        it('defaults companyId to null when the entity has no companyId field', ()=>{
-            const entity = buildRole();
-            const dto = service.convertEntityToResponseDto(entity, false);
-            expect(dto.companyId).toBeNull();
-        });
-        it('surfaces companyId when present on the entity', ()=>{
-            const entity = buildRole({
-                companyId: 'company-1'
-            });
-            const dto = service.convertEntityToResponseDto(entity, false);
-            expect(dto.companyId).toBe('company-1');
-        });
-    });
-    describe('beforeDeleteOperation', ()=>{
-        function buildQueryRunner(permissionRepo) {
-            return {
-                manager: {
-                    getRepository: jest.fn().mockReturnValue(permissionRepo)
-                }
-            };
-        }
-        it('does nothing when the delete DTO has no ids', async ()=>{
-            const permissionRepo = (0, _repositorymock.createMockRepository)();
-            const queryRunner = buildQueryRunner(permissionRepo);
-            await service.beforeDeleteOperation({
-                id: [],
-                type: 'delete'
-            }, (0, _loggedusermock.buildMockUser)(), queryRunner);
-            expect(permissionRepo.find).not.toHaveBeenCalled();
-        });
-        it('cascades ROLE_ACTION and USER_ROLE cleanup and invalidates affected users cache', async ()=>{
-            mockIamConfigService.isCompanyFeatureEnabled.mockReturnValue(false);
-            const permissionRepo = (0, _repositorymock.createMockRepository)();
-            permissionRepo.find.mockResolvedValue([
-                {
-                    sourceId: 'user-1'
-                },
-                {
-                    sourceId: 'user-2'
-                }
-            ]);
-            const queryRunner = buildQueryRunner(permissionRepo);
-            await service.beforeDeleteOperation({
-                id: 'role-uuid-1',
-                type: 'delete'
-            }, (0, _loggedusermock.buildMockUser)(), queryRunner);
-            expect(permissionRepo.delete).toHaveBeenCalledWith(expect.objectContaining({
-                permissionType: 'role_action',
-                sourceType: 'role'
-            }));
-            expect(permissionRepo.delete).toHaveBeenCalledWith(expect.objectContaining({
-                permissionType: 'user_role',
-                targetType: 'role'
-            }));
-            expect(mockPermissionCacheService.invalidateUsers).toHaveBeenCalledWith([
-                'user-1',
-                'user-2'
-            ]);
-        });
-        it('does not invalidate any cache when no users are affected', async ()=>{
-            const permissionRepo = (0, _repositorymock.createMockRepository)();
-            permissionRepo.find.mockResolvedValue([]);
-            const queryRunner = buildQueryRunner(permissionRepo);
-            await service.beforeDeleteOperation({
-                id: [
-                    'role-uuid-1'
-                ],
-                type: 'delete'
-            }, (0, _loggedusermock.buildMockUser)(), queryRunner);
-            expect(mockPermissionCacheService.invalidateUsers).not.toHaveBeenCalled();
-        });
-        it('supports array ids and dedupes affected user ids', async ()=>{
-            const permissionRepo = (0, _repositorymock.createMockRepository)();
-            permissionRepo.find.mockResolvedValue([
-                {
-                    sourceId: 'user-1'
-                },
-                {
-                    sourceId: 'user-1'
-                }
-            ]);
-            const queryRunner = buildQueryRunner(permissionRepo);
-            await service.beforeDeleteOperation({
-                id: [
-                    'role-uuid-1',
-                    'role-uuid-2'
-                ],
-                type: 'delete'
-            }, (0, _loggedusermock.buildMockUser)(), queryRunner);
-            expect(mockPermissionCacheService.invalidateUsers).toHaveBeenCalledWith([
-                'user-1'
-            ]);
-        });
-        it('rejects deleting a readonly role', async ()=>{
-            mockRepo.find.mockResolvedValue([
-                buildRole({
-                    readOnly: true
-                })
-            ]);
-            const permissionRepo = (0, _repositorymock.createMockRepository)();
-            const queryRunner = buildQueryRunner(permissionRepo);
-            await expect(service.beforeDeleteOperation({
-                id: 'role-uuid-1',
-                type: 'delete'
-            }, (0, _loggedusermock.buildMockUser)(), queryRunner)).rejects.toThrow('Cannot delete readonly role');
-            expect(permissionRepo.find).not.toHaveBeenCalled();
-        });
-    });
-    describe('beforeUpdateOperation', ()=>{
-        it('rejects updating a readonly role', async ()=>{
-            mockRepo.find.mockResolvedValue([
-                buildRole({
-                    readOnly: true
-                })
-            ]);
-            await expect(service.beforeUpdateOperation({
-                id: 'role-uuid-1',
-                name: 'Renamed'
-            }, (0, _loggedusermock.buildMockUser)(), {})).rejects.toThrow('Cannot modify readonly role');
-        });
-        it('allows updating a non-readonly role', async ()=>{
-            mockRepo.find.mockResolvedValue([]);
-            await expect(service.beforeUpdateOperation({
-                id: 'role-uuid-1',
-                name: 'Renamed'
-            }, (0, _loggedusermock.buildMockUser)(), {})).resolves.toBeUndefined();
-        });
-    });
-});

package/cjs/types/index.js

@@ -1,18 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});
-_export_star(require("./logic-node.type"), exports);
-function _export_star(from, to) {
-    Object.keys(from).forEach(function(k) {
-        if (k !== "default" && !Object.prototype.hasOwnProperty.call(to, k)) {
-            Object.defineProperty(to, k, {
-                enumerable: true,
-                get: function() {
-                    return from[k];
-                }
-            });
-        }
-    });
-    return from;
-}

package/cjs/types/logic-node.type.js

@@ -1,30 +0,0 @@
-/**
- * LogicNode - Represents a node in a permission logic tree
- *
- * Used for complex permission evaluation with AND/OR logic.
- * Supports hierarchical permission structures.
- *
- * Example:
- * ```typescript
- * const logic: LogicNode = {
- *   id: 'root',
- *   type: 'group',
- *   operator: 'AND',
- *   children: [
- *     { id: '1', type: 'action', actionId: 'create-user' },
- *     {
- *       id: '2',
- *       type: 'group',
- *       operator: 'OR',
- *       children: [
- *         { id: '2-1', type: 'action', actionId: 'view-reports' },
- *         { id: '2-2', type: 'action', actionId: 'view-dashboard' }
- *       ]
- *     }
- *   ]
- * };
- * ```
- */ "use strict";
-Object.defineProperty(exports, "__esModule", {
-    value: true
-});

package/fesm/config/event-actions.js

@@ -1,15 +0,0 @@
-/**
- * Domain event actions published by the IAM module, alongside the CRUD
- * lifecycle actions every ApiService emits.
- */ export const IAM_EVENT_ACTIONS = {
-    PERMISSIONS_ASSIGNED: 'permissions-assigned'
-};
-/** Every entity the IAM module publishes under, ApiService backed or not */ export const IAM_EVENT_ENTITIES = {
-    ACTION: 'action',
-    ROLE: 'role',
-    USER_ACTION: 'user_action',
-    ROLE_ACTION: 'role_action',
-    COMPANY_ACTION: 'company_action',
-    USER_ROLE: 'user_role'
-};
-export const IAM_EVENT_MODULE = 'iam';

package/fesm/config/iam.constants.js

@@ -1 +0,0 @@
-export const IAM_MODULE_OPTIONS = 'IAM_MODULE_OPTIONS';

package/fesm/config/message-keys.js

@@ -1,35 +0,0 @@
-// ==================== IAM MODULE MESSAGE KEYS ====================
-export const ACTION_MESSAGES = {
-    GET_ALL_SUCCESS: 'action.get.all.success',
-    READONLY_UPDATE_FORBIDDEN: 'action.readonly.update.forbidden',
-    READONLY_DELETE_FORBIDDEN: 'action.readonly.delete.forbidden'
-};
-export const ROLE_MESSAGES = {
-    READONLY_UPDATE_FORBIDDEN: 'role.readonly.update.forbidden',
-    READONLY_DELETE_FORBIDDEN: 'role.readonly.delete.forbidden'
-};
-export const PERMISSION_OPERATION_MESSAGES = {
-    PROCESS_SUCCESS: 'permission.process.success',
-    ALREADY_EXISTS: 'permission.already.exists',
-    USER_REQUIRED: 'permission.user.required'
-};
-export const ROLE_PERMISSION_MESSAGES = {
-    ACTIONS_SUCCESS: 'role.permission.actions.success',
-    USER_ROLES_SUCCESS: 'role.permission.user.roles.success'
-};
-export const USER_ACTION_PERMISSION_MESSAGES = {
-    GET_SUCCESS: 'user.action.permission.get.success'
-};
-export const COMPANY_ACTION_PERMISSION_MESSAGES = {
-    GET_SUCCESS: 'company.action.permission.get.success'
-};
-export const MY_PERMISSION_MESSAGES = {
-    GET_SUCCESS: 'my.permission.get.success',
-    MY_ROLES_SUCCESS: 'my.permission.roles.success',
-    MY_ACTIONS_SUCCESS: 'my.permission.actions.success'
-};
-export const IAM_MODE_MESSAGES = {
-    DIRECT_MODE_UNAVAILABLE: 'iam.direct.mode.unavailable',
-    RBAC_MODE_UNAVAILABLE: 'iam.rbac.mode.unavailable',
-    ROLE_ASSIGNMENT_UNAVAILABLE: 'iam.role.assignment.unavailable'
-};