@marinoscar/platform-api 0.1.0-next.3 → 0.1.0-next.5

package/dist/sharing/groups/sharing-effects.js

@@ -0,0 +1,143 @@
+"use strict";
+// =============================================================================
+// SharingEffects: what happens AFTER a group or grant write commits (#728, #729)
+// =============================================================================
+//
+// Every mutation of the slice ends the same way, outside its transaction:
+//
+//   1. invalidate the affected users' cached memberships (here and, through
+//      the bus, on every replica);
+//   2. emit the in-process event (ids only);
+//   3. count the mutation (`app.sharing.group_mutations`, label `op`);
+//   4. for an invite, dispatch the `groups.invitation` notification.
+//
+// None of these may fail the request: the write is already durable. Internal.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SharingEffects = void 0;
+const common_1 = require("@nestjs/common");
+const index_1 = require("../../otel-core/index");
+const metrics_1 = require("../metrics");
+const group_invitation_templates_1 = require("../notifications/group-invitation.templates");
+const shared_with_you_templates_1 = require("../notifications/shared-with-you.templates");
+const ports_1 = require("../ports");
+const principal_groups_provider_1 = require("../principal-groups.provider");
+/**
+ * The after-commit effects of every group mutation: cache invalidation,
+ * events, the mutation counter and the invitation notification. Never throws.
+ *
+ * @stability experimental
+ */
+let SharingEffects = class SharingEffects {
+    principalGroups;
+    emitter;
+    notifier;
+    metrics;
+    logger = new common_1.Logger('SharingEffects');
+    constructor(principalGroups, emitter, notifier, metrics) {
+        this.principalGroups = principalGroups;
+        this.emitter = emitter;
+        this.notifier = notifier;
+        this.metrics = metrics;
+    }
+    /**
+     * Applies a committed change's after-effects. Never throws.
+     *
+     * @param change - what changed.
+     */
+    committed(change) {
+        if (change.invalidate?.length)
+            this.principalGroups.invalidateUsers(change.invalidate);
+        for (const event of [...(change.event ? [change.event] : []), ...(change.events ?? [])]) {
+            try {
+                this.emitter?.emit(event.name, event.payload);
+            }
+            catch (error) {
+                this.logger.warn(`A listener of ${event.name} threw: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+        try {
+            this.metrics?.add(metrics_1.SHARING_GROUP_MUTATIONS_METRIC, 1, { op: change.op });
+        }
+        catch {
+            // Metrics never fail a request.
+        }
+    }
+    /**
+     * Emits the events of a committed grant change (#729). Never throws; a
+     * grant change invalidates no cache (decisions are per request).
+     *
+     * @param events - the events, ids only.
+     */
+    grantCommitted(events) {
+        for (const event of events) {
+            try {
+                this.emitter?.emit(event.name, event.payload);
+            }
+            catch (error) {
+                this.logger.warn(`A listener of ${event.name} threw: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+    }
+    /**
+     * Dispatches `sharing.shared_with_you` to `userId` for a user grant whose
+     * transaction has COMMITTED. Fire-and-forget; a failure is logged with the
+     * grant id only.
+     *
+     * @param userId - the grantee.
+     * @param data - the template data.
+     * @param grantId - the grant, for the log line.
+     */
+    notifySharedWithYou(userId, data, grantId) {
+        if (!this.notifier)
+            return;
+        const failed = (error) => this.logger.warn(`Share notification for grant ${grantId} could not be dispatched: ${error instanceof Error ? error.message : String(error)}`);
+        try {
+            Promise.resolve(this.notifier.notify(shared_with_you_templates_1.SHARED_WITH_YOU_EVENT_KEY, userId, data)).catch(failed);
+        }
+        catch (error) {
+            failed(error);
+        }
+    }
+    /**
+     * Dispatches the `groups.invitation` notification for an invite whose
+     * transaction has COMMITTED: to the account when the address has one, else
+     * to the address. Fire-and-forget; a failure is logged with the invite id
+     * only.
+     *
+     * @param recipient - the account (when the address has one) and the address.
+     * @param data - the template data.
+     * @param inviteId - the invite, for the log line.
+     */
+    notifyInvitation(recipient, data, inviteId) {
+        if (!this.notifier)
+            return;
+        const sent = recipient.userId
+            ? this.notifier.notify(group_invitation_templates_1.GROUPS_INVITATION_EVENT_KEY, recipient.userId, data)
+            : this.notifier.notifyAddress(group_invitation_templates_1.GROUPS_INVITATION_EVENT_KEY, recipient.email, data);
+        Promise.resolve(sent).catch((error) => this.logger.warn(`Group invitation ${inviteId} could not be dispatched: ${error instanceof Error ? error.message : String(error)}`));
+    }
+};
+exports.SharingEffects = SharingEffects;
+exports.SharingEffects = SharingEffects = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, common_1.Optional)()),
+    __param(1, (0, common_1.Inject)(ports_1.SHARING_EVENT_EMITTER)),
+    __param(2, (0, common_1.Optional)()),
+    __param(2, (0, common_1.Inject)(ports_1.SHARING_NOTIFIER)),
+    __param(3, (0, common_1.Optional)()),
+    __metadata("design:paramtypes", [principal_groups_provider_1.PrincipalGroupsProvider, Object, Object, index_1.MetricsHostService])
+], SharingEffects);
+//# sourceMappingURL=sharing-effects.js.map

package/dist/sharing/groups/sharing-effects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sharing-effects.js","sourceRoot":"","sources":["../../../src/sharing/groups/sharing-effects.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,iFAAiF;AACjF,gFAAgF;AAChF,EAAE;AACF,0EAA0E;AAC1E,EAAE;AACF,4EAA4E;AAC5E,mCAAmC;AACnC,6CAA6C;AAC7C,uEAAuE;AACvE,qEAAqE;AACrE,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;;;;;;;;;;;;;;;AAEhF,2CAAsE;AAEtE,iDAA2D;AAE3D,wCAAoF;AACpF,4FAAgI;AAChI,0FAA2H;AAC3H,oCAAmH;AACnH,4EAAuE;AA8BvE;;;;;GAKG;AAEI,IAAM,cAAc,GAApB,MAAM,cAAc;IAIN;IAC2C;IACL;IAC1B;IANd,MAAM,GAAG,IAAI,eAAM,CAAC,gBAAgB,CAAC,CAAC;IAEvD,YACmB,eAAwC,EACG,OAA6B,EAClC,QAA0B,EACpD,OAA4B;QAHxC,oBAAe,GAAf,eAAe,CAAyB;QACG,YAAO,GAAP,OAAO,CAAsB;QAClC,aAAQ,GAAR,QAAQ,CAAkB;QACpD,YAAO,GAAP,OAAO,CAAqB;IACxD,CAAC;IAEJ;;;;OAIG;IACH,SAAS,CAAC,MAAuB;QAC/B,IAAI,MAAM,CAAC,UAAU,EAAE,MAAM;YAAE,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACvF,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YACxF,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,IAAI,WAAW,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACnH,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,wCAA8B,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1E,CAAC;QAAC,MAAM,CAAC;YACP,gCAAgC;QAClC,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,cAAc,CAAC,MAAsC;QACnD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,IAAI,WAAW,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACnH,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,mBAAmB,CAAC,MAAc,EAAE,IAAmC,EAAE,OAAe;QACtF,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC3B,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE,CAChC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,OAAO,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjJ,IAAI,CAAC;YACH,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,qDAAyB,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,gBAAgB,CAAC,SAAmD,EAAE,IAAqC,EAAE,QAAgB;QAC3H,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC3B,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM;YAC3B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,wDAA2B,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC;YAC3E,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,wDAA2B,EAAE,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpF,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,QAAQ,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CACpI,CAAC;IACJ,CAAC;CACF,CAAA;AAtFY,wCAAc;yBAAd,cAAc;IAD1B,IAAA,mBAAU,GAAE;IAMR,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,6BAAqB,CAAC,CAAA;IACzC,WAAA,IAAA,iBAAQ,GAAE,CAAA;IAAE,WAAA,IAAA,eAAM,EAAC,wBAAgB,CAAC,CAAA;IACpC,WAAA,IAAA,iBAAQ,GAAE,CAAA;qCAHuB,mDAAuB,kBAGlB,0BAAkB;GAPhD,cAAc,CAsF1B"}

package/dist/sharing/groups/sharing-principal.decorator.d.ts

@@ -0,0 +1,14 @@
+import type { Principal } from '../../core/index';
+/**
+ * Builds the `@CurrentPrincipal()` parameter decorator of the group routes
+ * from the module's principal resolver. A route that reached the handler
+ * without a principal (never true behind the host's access decorators) is
+ * refused with 403 rather than run unscoped.
+ *
+ * @param resolve - reads the principal from the framework request.
+ * @returns the parameter decorator factory.
+ *
+ * @stability experimental
+ */
+export declare function createSharingPrincipalDecorator(resolve: (request: unknown) => Principal | undefined): () => ParameterDecorator;
+//# sourceMappingURL=sharing-principal.decorator.d.ts.map

package/dist/sharing/groups/sharing-principal.decorator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sharing-principal.decorator.d.ts","sourceRoot":"","sources":["../../../src/sharing/groups/sharing-principal.decorator.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElD;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,SAAS,GAAG,SAAS,GAAG,MAAM,kBAAkB,CAM9H"}

package/dist/sharing/groups/sharing-principal.decorator.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createSharingPrincipalDecorator = createSharingPrincipalDecorator;
+const common_1 = require("@nestjs/common");
+/**
+ * Builds the `@CurrentPrincipal()` parameter decorator of the group routes
+ * from the module's principal resolver. A route that reached the handler
+ * without a principal (never true behind the host's access decorators) is
+ * refused with 403 rather than run unscoped.
+ *
+ * @param resolve - reads the principal from the framework request.
+ * @returns the parameter decorator factory.
+ *
+ * @stability experimental
+ */
+function createSharingPrincipalDecorator(resolve) {
+    return (0, common_1.createParamDecorator)((_data, ctx) => {
+        const principal = resolve(ctx.switchToHttp().getRequest());
+        if (!principal)
+            throw new common_1.ForbiddenException('No authenticated principal');
+        return principal;
+    });
+}
+//# sourceMappingURL=sharing-principal.decorator.js.map

package/dist/sharing/groups/sharing-principal.decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sharing-principal.decorator.js","sourceRoot":"","sources":["../../../src/sharing/groups/sharing-principal.decorator.ts"],"names":[],"mappings":";;AAeA,0EAMC;AArBD,2CAAiG;AAIjG;;;;;;;;;;GAUG;AACH,SAAgB,+BAA+B,CAAC,OAAoD;IAClG,OAAO,IAAA,6BAAoB,EAAC,CAAC,KAAc,EAAE,GAAqB,EAAa,EAAE;QAC/E,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,2BAAkB,CAAC,4BAA4B,CAAC,CAAC;QAC3E,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/sharing/index.d.ts

@@ -0,0 +1,56 @@
+export { SharingModule } from './sharing.module';
+export { SHARING_GRANT_DEFAULTS, SHARING_GROUP_DEFAULTS, SHARING_LINK_DEFAULTS, SHARING_OPTIONS, defaultSharingPrincipal, resolveSharingModuleOptions, } from './sharing.options';
+export type { ResolvedSharingModuleOptions, SharingGrantsOptions, SharingGroupsOptions, SharingLinksOptions, SharingModuleOptions, } from './sharing.options';
+export { SHARING_DATA, SHARING_EVENT_BUS, SHARING_EVENT_EMITTER, SHARING_JOBS, SHARING_NOTIFIER, SHARING_TENANCY } from './ports';
+export type { SharingDataPort, SharingEventBus, SharingEventBusMeta, SharingEventEmitter, SharingJobExecutionProfile, SharingJobHandler, SharingJobRecord, SharingJobsPort, SharingNotifier, SharingSystemReason, SharingTenancy, } from './ports';
+export { SHARING_PERMISSIONS, SHARING_PERMISSION_DECLARATIONS } from './permissions';
+export type { SharingPermissionDeclaration } from './permissions';
+export { SHARING_ACCESS_DECISIONS_METRIC, SHARING_APP_METRICS, SHARING_DECISION_OUTCOMES, SHARING_DECISION_VIAS, SHARING_GROUP_MUTATIONS_METRIC, SHARING_LINK_RESOLUTIONS_METRIC, SHARING_LINK_RESOLUTION_OUTCOMES, SHARING_MUTATION_OPS, } from './metrics';
+export type { SharingLinkResolutionOutcome, SharingMutationOp } from './metrics';
+export { SHARING_ERROR_REASONS } from './errors';
+export { activeGroupsOf, groupOwnedResourceRegistry, groupRoleAtLeast, ownedByMeOrMyGroups, ownerWhere, registerGroupOwnedResource, } from './ownership';
+export type { GroupOwnedResourceDef, ResourceOwner } from './ownership';
+export { BUILTIN_GROUP_ROLE_IDS, GROUP_ROLE_PLATFORM_ACTIONS, describeGroupRole, findGroupRole, groupRoleCan, groupRoleRank, groupRoleRegistry, listGroupRoles, managerGroupRoleIds, registerGroupRole, } from './group-roles';
+export type { GroupRoleDef } from './group-roles';
+export { DEFAULT_MAX_GRANTS_PER_RESOURCE, registerResourceType, resourceTypeRegistry } from './access/resource-types';
+export type { GrantableKind, PrismaTx, ResourceDescription, ResourceOwnerInfo, ResourceTypeDef } from './access/resource-types';
+export { ACCESS_POLICY_CLOCK, AccessPolicy, accessDenial, resourceKey } from './access/access-policy.service';
+export type { AccessDecision, AccessVia, BuiltinAccessVia, EffectiveRole, ResourceRef } from './access/access-policy.service';
+export { BUILTIN_GRANTEE_KIND_IDS, GRANTEE_KIND_PERSISTENCE_AVAILABLE, GranteeInputError, describeGranteeKind, findGranteeKind, granteeKindRegistry, granteeKindVia, persistedGranteeKinds, registerGranteeKind, } from './access/grantee-kinds';
+export type { GranteeColumns, GranteeDescription, GranteeFacts, GranteeKindDef, GranteeRef } from './access/grantee-kinds';
+export { accessRuleRegistry, registerAccessRule } from './access/access-rules';
+export type { AccessRuleContext, AccessRuleDef, AccessRulePosition, AccessRuleSql, AccessRuleSqlContext, AccessRuleVerdict, } from './access/access-rules';
+export { SHARED_IDS_INLINE_LIMIT, accessibleSql, accessibleWhere, sharedResourceIds } from './access/accessible';
+export type { AccessibleColumnOptions, AccessibleFieldOptions, AccessibleSqlOptions, AccessibleWhere, AccessibleWhereOptions, SqlKit, } from './access/accessible';
+export { PRINCIPAL_GROUPS_CLOCK, PRINCIPAL_GROUPS_MAX_ENTRIES, PRINCIPAL_INVALIDATE_CHANNEL, PrincipalGroupsProvider, SHARING_GROUPS_INVALIDATE_CHANNEL, } from './principal-groups.provider';
+export type { PrincipalWithGroups } from './principal-groups.provider';
+export { SHARING_EVENTS } from './events';
+export type { GrantEventPayload, GroupEventPayload, GroupInviteEventPayload, GroupMemberEventPayload, SharingEventName } from './events';
+export { GROUPS_INVITATION_EVENT, GROUPS_INVITATION_EVENT_KEY, GROUP_INVITATIONS_PATH, GROUP_INVITATION_EMAIL_TEMPLATE, groupInvitationBrowserTemplate, renderGroupInvitationEmail, } from './notifications/group-invitation.templates';
+export type { GroupInvitationBrowserContent, GroupInvitationEmailKit, GroupInvitationNotificationData, RenderedGroupInvitationEmail, SafeHtmlLike, } from './notifications/group-invitation.templates';
+export { SHARED_WITH_ME_PATH, SHARED_WITH_YOU_EMAIL_TEMPLATE, SHARED_WITH_YOU_EVENT, SHARED_WITH_YOU_EVENT_KEY, renderSharedWithYouEmail, sharedWithYouBrowserTemplate, } from './notifications/shared-with-you.templates';
+export type { RenderedSharedWithYouEmail, SharedWithYouBrowserContent, SharedWithYouNotificationData, } from './notifications/shared-with-you.templates';
+export { GroupMembershipPurge, SHARING_MODEL_OWNERSHIP, SHARING_USER_OWNED_MODELS } from './user-data';
+export type { GroupPurgeSummary } from './user-data';
+export { GroupsService } from './groups/groups.service';
+export { GroupMembershipService } from './groups/group-membership.service';
+export type { GroupAccess } from './groups/group-membership.service';
+export { GROUP_INVITES_CLOCK, GroupInvitesService, inviteStatus } from './groups/group-invites.service';
+export { SharingEffects } from './groups/sharing-effects';
+export type { CommittedChange, SharingEmittedEvent } from './groups/sharing-effects';
+export type { GrantRow, GroupRow } from './data/sharing-tx';
+export { MemberLookupThrottle } from './groups/member-lookup-throttle';
+export type { MemberLookupThrottleOptions } from './groups/member-lookup-throttle';
+export { ORPHANED_GROUPS_SAMPLE, GroupsOrphanedDoctorCheck, decideOrphanedGroups } from './doctor/groups-orphaned.doctor-check';
+export { GRANTS_CLOCK, GrantsService, deleteGrantsForResources, toGrantDto } from './grants/grants.service';
+export type { GrantWithGrantee } from './grants/grants.service';
+export { GRANTS_PRUNE_CHUNK, GRANTS_PRUNE_CLOCK, GRANTS_PRUNE_JOB_TYPE, GrantsPruneHandler } from './jobs/grants-prune.handler';
+export type { GrantsPruneSummary } from './jobs/grants-prune.handler';
+export { GrantsPruneTask } from './jobs/grants-prune.task';
+export { ANY_LINK_RESOURCE_TYPE, LINK_GRANTS_CLOCK, LinkGrantsService, importLegacyToken, linkFailureOutcome, resolveLinkExpiry, toLinkGrantView, } from './links/link-grants.service';
+export type { ImportedLegacyLink, LegacyLinkImport, LinkResolution, LinkResolutionExpectation, LinkResolutionFailure, ResolvedLinkGrant, } from './links/link-grants.service';
+export { LINK_GRANT_SPAN_ATTRIBUTE, LinkGrantGuard } from './links/link-grant.guard';
+export { CurrentLinkGrant, LINK_GRANT_REQUEST_KEY, LINK_GRANT_RESOURCE_KEY, LinkGrantResource } from './links/link-grant.decorators';
+export { LinkMissThrottle } from './links/link-miss-throttle';
+export { PUBLIC_LINK_RESPONSE_HEADERS, PublicLinkInterceptor, setPublicLinkHeaders } from './links/public-link.interceptor';
+//# sourceMappingURL=index.d.ts.map

package/dist/sharing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sharing/index.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,eAAe,EACf,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,4BAA4B,EAC5B,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAClI,YAAY,EACV,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,0BAA0B,EAC1B,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,cAAc,GACf,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,mBAAmB,EAAE,+BAA+B,EAAE,MAAM,eAAe,CAAC;AACrF,YAAY,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EACL,+BAA+B,EAC/B,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,8BAA8B,EAC9B,+BAA+B,EAC/B,gCAAgC,EAChC,oBAAoB,GACrB,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,4BAA4B,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AAGjD,OAAO,EACL,cAAc,EACd,0BAA0B,EAC1B,gBAAgB,EAChB,mBAAmB,EACnB,UAAU,EACV,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAGxE,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,aAAa,EACb,iBAAiB,EACjB,cAAc,EACd,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAGlD,OAAO,EAAE,+BAA+B,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AACtH,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAChI,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC9G,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,gBAAgB,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAG9H,OAAO,EACL,wBAAwB,EACxB,kCAAkC,EAClC,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAC3H,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC/E,YAAY,EACV,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,uBAAuB,EAAE,aAAa,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACjH,YAAY,EACV,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,eAAe,EACf,sBAAsB,EACtB,MAAM,GACP,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAC5B,4BAA4B,EAC5B,uBAAuB,EACvB,iCAAiC,GAClC,MAAM,6BAA6B,CAAC;AACrC,YAAY,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAGvE,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAGzI,OAAO,EACL,uBAAuB,EACvB,2BAA2B,EAC3B,sBAAsB,EACtB,+BAA+B,EAC/B,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,4CAA4C,CAAC;AACpD,YAAY,EACV,6BAA6B,EAC7B,uBAAuB,EACvB,+BAA+B,EAC/B,4BAA4B,EAC5B,YAAY,GACb,MAAM,4CAA4C,CAAC;AACpD,OAAO,EACL,mBAAmB,EACnB,8BAA8B,EAC9B,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,2CAA2C,CAAC;AACnD,YAAY,EACV,0BAA0B,EAC1B,2BAA2B,EAC3B,6BAA6B,GAC9B,MAAM,2CAA2C,CAAC;AAGnD,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AACvG,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGrD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,YAAY,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACxG,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,YAAY,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACrF,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,YAAY,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAChI,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,wBAAwB,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC5G,YAAY,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAGhE,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAChI,YAAY,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAG3D,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,GAChB,MAAM,6BAA6B,CAAC;AACrC,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,EACd,yBAAyB,EACzB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,yBAAyB,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACrI,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,4BAA4B,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC"}

package/dist/sharing/index.js

@@ -0,0 +1,177 @@
+"use strict";
+// `@marinoscar/platform-api/sharing`: the sharing slice (epic #666): groups,
+// their members and invites, the ownership contract and the principal
+// enrichment (issue #728); grants, the resource-type registry, AccessPolicy,
+// the "resources I can see" helpers and the grants prune job (issue #729);
+// link grants, the public link route and the public-route pattern (#730).
+// Documented in ./README.md. Explicit named exports only.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GranteeInputError = exports.GRANTEE_KIND_PERSISTENCE_AVAILABLE = exports.BUILTIN_GRANTEE_KIND_IDS = exports.resourceKey = exports.accessDenial = exports.AccessPolicy = exports.ACCESS_POLICY_CLOCK = exports.resourceTypeRegistry = exports.registerResourceType = exports.DEFAULT_MAX_GRANTS_PER_RESOURCE = exports.registerGroupRole = exports.managerGroupRoleIds = exports.listGroupRoles = exports.groupRoleRegistry = exports.groupRoleRank = exports.groupRoleCan = exports.findGroupRole = exports.describeGroupRole = exports.GROUP_ROLE_PLATFORM_ACTIONS = exports.BUILTIN_GROUP_ROLE_IDS = exports.registerGroupOwnedResource = exports.ownerWhere = exports.ownedByMeOrMyGroups = exports.groupRoleAtLeast = exports.groupOwnedResourceRegistry = exports.activeGroupsOf = exports.SHARING_ERROR_REASONS = exports.SHARING_MUTATION_OPS = exports.SHARING_LINK_RESOLUTION_OUTCOMES = exports.SHARING_LINK_RESOLUTIONS_METRIC = exports.SHARING_GROUP_MUTATIONS_METRIC = exports.SHARING_DECISION_VIAS = exports.SHARING_DECISION_OUTCOMES = exports.SHARING_APP_METRICS = exports.SHARING_ACCESS_DECISIONS_METRIC = exports.SHARING_PERMISSION_DECLARATIONS = exports.SHARING_PERMISSIONS = exports.SHARING_TENANCY = exports.SHARING_NOTIFIER = exports.SHARING_JOBS = exports.SHARING_EVENT_EMITTER = exports.SHARING_EVENT_BUS = exports.SHARING_DATA = exports.resolveSharingModuleOptions = exports.defaultSharingPrincipal = exports.SHARING_OPTIONS = exports.SHARING_LINK_DEFAULTS = exports.SHARING_GROUP_DEFAULTS = exports.SHARING_GRANT_DEFAULTS = exports.SharingModule = void 0;
+exports.GRANTS_PRUNE_JOB_TYPE = exports.GRANTS_PRUNE_CLOCK = exports.GRANTS_PRUNE_CHUNK = exports.toGrantDto = exports.deleteGrantsForResources = exports.GrantsService = exports.GRANTS_CLOCK = exports.decideOrphanedGroups = exports.GroupsOrphanedDoctorCheck = exports.ORPHANED_GROUPS_SAMPLE = exports.MemberLookupThrottle = exports.SharingEffects = exports.inviteStatus = exports.GroupInvitesService = exports.GROUP_INVITES_CLOCK = exports.GroupMembershipService = exports.GroupsService = exports.SHARING_USER_OWNED_MODELS = exports.SHARING_MODEL_OWNERSHIP = exports.GroupMembershipPurge = exports.sharedWithYouBrowserTemplate = exports.renderSharedWithYouEmail = exports.SHARED_WITH_YOU_EVENT_KEY = exports.SHARED_WITH_YOU_EVENT = exports.SHARED_WITH_YOU_EMAIL_TEMPLATE = exports.SHARED_WITH_ME_PATH = exports.renderGroupInvitationEmail = exports.groupInvitationBrowserTemplate = exports.GROUP_INVITATION_EMAIL_TEMPLATE = exports.GROUP_INVITATIONS_PATH = exports.GROUPS_INVITATION_EVENT_KEY = exports.GROUPS_INVITATION_EVENT = exports.SHARING_EVENTS = exports.SHARING_GROUPS_INVALIDATE_CHANNEL = exports.PrincipalGroupsProvider = exports.PRINCIPAL_INVALIDATE_CHANNEL = exports.PRINCIPAL_GROUPS_MAX_ENTRIES = exports.PRINCIPAL_GROUPS_CLOCK = exports.sharedResourceIds = exports.accessibleWhere = exports.accessibleSql = exports.SHARED_IDS_INLINE_LIMIT = exports.registerAccessRule = exports.accessRuleRegistry = exports.registerGranteeKind = exports.persistedGranteeKinds = exports.granteeKindVia = exports.granteeKindRegistry = exports.findGranteeKind = exports.describeGranteeKind = void 0;
+exports.setPublicLinkHeaders = exports.PublicLinkInterceptor = exports.PUBLIC_LINK_RESPONSE_HEADERS = exports.LinkMissThrottle = exports.LinkGrantResource = exports.LINK_GRANT_RESOURCE_KEY = exports.LINK_GRANT_REQUEST_KEY = exports.CurrentLinkGrant = exports.LinkGrantGuard = exports.LINK_GRANT_SPAN_ATTRIBUTE = exports.toLinkGrantView = exports.resolveLinkExpiry = exports.linkFailureOutcome = exports.importLegacyToken = exports.LinkGrantsService = exports.LINK_GRANTS_CLOCK = exports.ANY_LINK_RESOURCE_TYPE = exports.GrantsPruneTask = exports.GrantsPruneHandler = void 0;
+// ---- the module and its options (rung 1) ------------------------------------------
+var sharing_module_1 = require("./sharing.module");
+Object.defineProperty(exports, "SharingModule", { enumerable: true, get: function () { return sharing_module_1.SharingModule; } });
+var sharing_options_1 = require("./sharing.options");
+Object.defineProperty(exports, "SHARING_GRANT_DEFAULTS", { enumerable: true, get: function () { return sharing_options_1.SHARING_GRANT_DEFAULTS; } });
+Object.defineProperty(exports, "SHARING_GROUP_DEFAULTS", { enumerable: true, get: function () { return sharing_options_1.SHARING_GROUP_DEFAULTS; } });
+Object.defineProperty(exports, "SHARING_LINK_DEFAULTS", { enumerable: true, get: function () { return sharing_options_1.SHARING_LINK_DEFAULTS; } });
+Object.defineProperty(exports, "SHARING_OPTIONS", { enumerable: true, get: function () { return sharing_options_1.SHARING_OPTIONS; } });
+Object.defineProperty(exports, "defaultSharingPrincipal", { enumerable: true, get: function () { return sharing_options_1.defaultSharingPrincipal; } });
+Object.defineProperty(exports, "resolveSharingModuleOptions", { enumerable: true, get: function () { return sharing_options_1.resolveSharingModuleOptions; } });
+// ---- the host ports: one token per app capability ----------------------------------
+var ports_1 = require("./ports");
+Object.defineProperty(exports, "SHARING_DATA", { enumerable: true, get: function () { return ports_1.SHARING_DATA; } });
+Object.defineProperty(exports, "SHARING_EVENT_BUS", { enumerable: true, get: function () { return ports_1.SHARING_EVENT_BUS; } });
+Object.defineProperty(exports, "SHARING_EVENT_EMITTER", { enumerable: true, get: function () { return ports_1.SHARING_EVENT_EMITTER; } });
+Object.defineProperty(exports, "SHARING_JOBS", { enumerable: true, get: function () { return ports_1.SHARING_JOBS; } });
+Object.defineProperty(exports, "SHARING_NOTIFIER", { enumerable: true, get: function () { return ports_1.SHARING_NOTIFIER; } });
+Object.defineProperty(exports, "SHARING_TENANCY", { enumerable: true, get: function () { return ports_1.SHARING_TENANCY; } });
+// ---- permissions, metrics, errors, as data for the app's registries ---------------
+var permissions_1 = require("./permissions");
+Object.defineProperty(exports, "SHARING_PERMISSIONS", { enumerable: true, get: function () { return permissions_1.SHARING_PERMISSIONS; } });
+Object.defineProperty(exports, "SHARING_PERMISSION_DECLARATIONS", { enumerable: true, get: function () { return permissions_1.SHARING_PERMISSION_DECLARATIONS; } });
+var metrics_1 = require("./metrics");
+Object.defineProperty(exports, "SHARING_ACCESS_DECISIONS_METRIC", { enumerable: true, get: function () { return metrics_1.SHARING_ACCESS_DECISIONS_METRIC; } });
+Object.defineProperty(exports, "SHARING_APP_METRICS", { enumerable: true, get: function () { return metrics_1.SHARING_APP_METRICS; } });
+Object.defineProperty(exports, "SHARING_DECISION_OUTCOMES", { enumerable: true, get: function () { return metrics_1.SHARING_DECISION_OUTCOMES; } });
+Object.defineProperty(exports, "SHARING_DECISION_VIAS", { enumerable: true, get: function () { return metrics_1.SHARING_DECISION_VIAS; } });
+Object.defineProperty(exports, "SHARING_GROUP_MUTATIONS_METRIC", { enumerable: true, get: function () { return metrics_1.SHARING_GROUP_MUTATIONS_METRIC; } });
+Object.defineProperty(exports, "SHARING_LINK_RESOLUTIONS_METRIC", { enumerable: true, get: function () { return metrics_1.SHARING_LINK_RESOLUTIONS_METRIC; } });
+Object.defineProperty(exports, "SHARING_LINK_RESOLUTION_OUTCOMES", { enumerable: true, get: function () { return metrics_1.SHARING_LINK_RESOLUTION_OUTCOMES; } });
+Object.defineProperty(exports, "SHARING_MUTATION_OPS", { enumerable: true, get: function () { return metrics_1.SHARING_MUTATION_OPS; } });
+var errors_1 = require("./errors");
+Object.defineProperty(exports, "SHARING_ERROR_REASONS", { enumerable: true, get: function () { return errors_1.SHARING_ERROR_REASONS; } });
+// ---- the ownership contract (rung 2: the group-owned-resource registry) -----------
+var ownership_1 = require("./ownership");
+Object.defineProperty(exports, "activeGroupsOf", { enumerable: true, get: function () { return ownership_1.activeGroupsOf; } });
+Object.defineProperty(exports, "groupOwnedResourceRegistry", { enumerable: true, get: function () { return ownership_1.groupOwnedResourceRegistry; } });
+Object.defineProperty(exports, "groupRoleAtLeast", { enumerable: true, get: function () { return ownership_1.groupRoleAtLeast; } });
+Object.defineProperty(exports, "ownedByMeOrMyGroups", { enumerable: true, get: function () { return ownership_1.ownedByMeOrMyGroups; } });
+Object.defineProperty(exports, "ownerWhere", { enumerable: true, get: function () { return ownership_1.ownerWhere; } });
+Object.defineProperty(exports, "registerGroupOwnedResource", { enumerable: true, get: function () { return ownership_1.registerGroupOwnedResource; } });
+// ---- the group-role registry (PP-14.15b) ---------------------------------------------
+var group_roles_1 = require("./group-roles");
+Object.defineProperty(exports, "BUILTIN_GROUP_ROLE_IDS", { enumerable: true, get: function () { return group_roles_1.BUILTIN_GROUP_ROLE_IDS; } });
+Object.defineProperty(exports, "GROUP_ROLE_PLATFORM_ACTIONS", { enumerable: true, get: function () { return group_roles_1.GROUP_ROLE_PLATFORM_ACTIONS; } });
+Object.defineProperty(exports, "describeGroupRole", { enumerable: true, get: function () { return group_roles_1.describeGroupRole; } });
+Object.defineProperty(exports, "findGroupRole", { enumerable: true, get: function () { return group_roles_1.findGroupRole; } });
+Object.defineProperty(exports, "groupRoleCan", { enumerable: true, get: function () { return group_roles_1.groupRoleCan; } });
+Object.defineProperty(exports, "groupRoleRank", { enumerable: true, get: function () { return group_roles_1.groupRoleRank; } });
+Object.defineProperty(exports, "groupRoleRegistry", { enumerable: true, get: function () { return group_roles_1.groupRoleRegistry; } });
+Object.defineProperty(exports, "listGroupRoles", { enumerable: true, get: function () { return group_roles_1.listGroupRoles; } });
+Object.defineProperty(exports, "managerGroupRoleIds", { enumerable: true, get: function () { return group_roles_1.managerGroupRoleIds; } });
+Object.defineProperty(exports, "registerGroupRole", { enumerable: true, get: function () { return group_roles_1.registerGroupRole; } });
+// ---- the resource-type registry (rung 2) and AccessPolicy (#729) -------------------
+var resource_types_1 = require("./access/resource-types");
+Object.defineProperty(exports, "DEFAULT_MAX_GRANTS_PER_RESOURCE", { enumerable: true, get: function () { return resource_types_1.DEFAULT_MAX_GRANTS_PER_RESOURCE; } });
+Object.defineProperty(exports, "registerResourceType", { enumerable: true, get: function () { return resource_types_1.registerResourceType; } });
+Object.defineProperty(exports, "resourceTypeRegistry", { enumerable: true, get: function () { return resource_types_1.resourceTypeRegistry; } });
+var access_policy_service_1 = require("./access/access-policy.service");
+Object.defineProperty(exports, "ACCESS_POLICY_CLOCK", { enumerable: true, get: function () { return access_policy_service_1.ACCESS_POLICY_CLOCK; } });
+Object.defineProperty(exports, "AccessPolicy", { enumerable: true, get: function () { return access_policy_service_1.AccessPolicy; } });
+Object.defineProperty(exports, "accessDenial", { enumerable: true, get: function () { return access_policy_service_1.accessDenial; } });
+Object.defineProperty(exports, "resourceKey", { enumerable: true, get: function () { return access_policy_service_1.resourceKey; } });
+// ---- the grantee-kind and access-rule registries (PP-14.16) -----------------------
+var grantee_kinds_1 = require("./access/grantee-kinds");
+Object.defineProperty(exports, "BUILTIN_GRANTEE_KIND_IDS", { enumerable: true, get: function () { return grantee_kinds_1.BUILTIN_GRANTEE_KIND_IDS; } });
+Object.defineProperty(exports, "GRANTEE_KIND_PERSISTENCE_AVAILABLE", { enumerable: true, get: function () { return grantee_kinds_1.GRANTEE_KIND_PERSISTENCE_AVAILABLE; } });
+Object.defineProperty(exports, "GranteeInputError", { enumerable: true, get: function () { return grantee_kinds_1.GranteeInputError; } });
+Object.defineProperty(exports, "describeGranteeKind", { enumerable: true, get: function () { return grantee_kinds_1.describeGranteeKind; } });
+Object.defineProperty(exports, "findGranteeKind", { enumerable: true, get: function () { return grantee_kinds_1.findGranteeKind; } });
+Object.defineProperty(exports, "granteeKindRegistry", { enumerable: true, get: function () { return grantee_kinds_1.granteeKindRegistry; } });
+Object.defineProperty(exports, "granteeKindVia", { enumerable: true, get: function () { return grantee_kinds_1.granteeKindVia; } });
+Object.defineProperty(exports, "persistedGranteeKinds", { enumerable: true, get: function () { return grantee_kinds_1.persistedGranteeKinds; } });
+Object.defineProperty(exports, "registerGranteeKind", { enumerable: true, get: function () { return grantee_kinds_1.registerGranteeKind; } });
+var access_rules_1 = require("./access/access-rules");
+Object.defineProperty(exports, "accessRuleRegistry", { enumerable: true, get: function () { return access_rules_1.accessRuleRegistry; } });
+Object.defineProperty(exports, "registerAccessRule", { enumerable: true, get: function () { return access_rules_1.registerAccessRule; } });
+var accessible_1 = require("./access/accessible");
+Object.defineProperty(exports, "SHARED_IDS_INLINE_LIMIT", { enumerable: true, get: function () { return accessible_1.SHARED_IDS_INLINE_LIMIT; } });
+Object.defineProperty(exports, "accessibleSql", { enumerable: true, get: function () { return accessible_1.accessibleSql; } });
+Object.defineProperty(exports, "accessibleWhere", { enumerable: true, get: function () { return accessible_1.accessibleWhere; } });
+Object.defineProperty(exports, "sharedResourceIds", { enumerable: true, get: function () { return accessible_1.sharedResourceIds; } });
+// ---- the principal enrichment -------------------------------------------------------
+var principal_groups_provider_1 = require("./principal-groups.provider");
+Object.defineProperty(exports, "PRINCIPAL_GROUPS_CLOCK", { enumerable: true, get: function () { return principal_groups_provider_1.PRINCIPAL_GROUPS_CLOCK; } });
+Object.defineProperty(exports, "PRINCIPAL_GROUPS_MAX_ENTRIES", { enumerable: true, get: function () { return principal_groups_provider_1.PRINCIPAL_GROUPS_MAX_ENTRIES; } });
+Object.defineProperty(exports, "PRINCIPAL_INVALIDATE_CHANNEL", { enumerable: true, get: function () { return principal_groups_provider_1.PRINCIPAL_INVALIDATE_CHANNEL; } });
+Object.defineProperty(exports, "PrincipalGroupsProvider", { enumerable: true, get: function () { return principal_groups_provider_1.PrincipalGroupsProvider; } });
+Object.defineProperty(exports, "SHARING_GROUPS_INVALIDATE_CHANNEL", { enumerable: true, get: function () { return principal_groups_provider_1.SHARING_GROUPS_INVALIDATE_CHANNEL; } });
+// ---- events (rung 4) ----------------------------------------------------------------
+var events_1 = require("./events");
+Object.defineProperty(exports, "SHARING_EVENTS", { enumerable: true, get: function () { return events_1.SHARING_EVENTS; } });
+// ---- notifications --------------------------------------------------------------------
+var group_invitation_templates_1 = require("./notifications/group-invitation.templates");
+Object.defineProperty(exports, "GROUPS_INVITATION_EVENT", { enumerable: true, get: function () { return group_invitation_templates_1.GROUPS_INVITATION_EVENT; } });
+Object.defineProperty(exports, "GROUPS_INVITATION_EVENT_KEY", { enumerable: true, get: function () { return group_invitation_templates_1.GROUPS_INVITATION_EVENT_KEY; } });
+Object.defineProperty(exports, "GROUP_INVITATIONS_PATH", { enumerable: true, get: function () { return group_invitation_templates_1.GROUP_INVITATIONS_PATH; } });
+Object.defineProperty(exports, "GROUP_INVITATION_EMAIL_TEMPLATE", { enumerable: true, get: function () { return group_invitation_templates_1.GROUP_INVITATION_EMAIL_TEMPLATE; } });
+Object.defineProperty(exports, "groupInvitationBrowserTemplate", { enumerable: true, get: function () { return group_invitation_templates_1.groupInvitationBrowserTemplate; } });
+Object.defineProperty(exports, "renderGroupInvitationEmail", { enumerable: true, get: function () { return group_invitation_templates_1.renderGroupInvitationEmail; } });
+var shared_with_you_templates_1 = require("./notifications/shared-with-you.templates");
+Object.defineProperty(exports, "SHARED_WITH_ME_PATH", { enumerable: true, get: function () { return shared_with_you_templates_1.SHARED_WITH_ME_PATH; } });
+Object.defineProperty(exports, "SHARED_WITH_YOU_EMAIL_TEMPLATE", { enumerable: true, get: function () { return shared_with_you_templates_1.SHARED_WITH_YOU_EMAIL_TEMPLATE; } });
+Object.defineProperty(exports, "SHARED_WITH_YOU_EVENT", { enumerable: true, get: function () { return shared_with_you_templates_1.SHARED_WITH_YOU_EVENT; } });
+Object.defineProperty(exports, "SHARED_WITH_YOU_EVENT_KEY", { enumerable: true, get: function () { return shared_with_you_templates_1.SHARED_WITH_YOU_EVENT_KEY; } });
+Object.defineProperty(exports, "renderSharedWithYouEmail", { enumerable: true, get: function () { return shared_with_you_templates_1.renderSharedWithYouEmail; } });
+Object.defineProperty(exports, "sharedWithYouBrowserTemplate", { enumerable: true, get: function () { return shared_with_you_templates_1.sharedWithYouBrowserTemplate; } });
+// ---- the user-owned data and model ownership declarations, and the purge ----------
+var user_data_1 = require("./user-data");
+Object.defineProperty(exports, "GroupMembershipPurge", { enumerable: true, get: function () { return user_data_1.GroupMembershipPurge; } });
+Object.defineProperty(exports, "SHARING_MODEL_OWNERSHIP", { enumerable: true, get: function () { return user_data_1.SHARING_MODEL_OWNERSHIP; } });
+Object.defineProperty(exports, "SHARING_USER_OWNED_MODELS", { enumerable: true, get: function () { return user_data_1.SHARING_USER_OWNED_MODELS; } });
+// ---- the services the module exports (what the app may inject) -------------------
+var groups_service_1 = require("./groups/groups.service");
+Object.defineProperty(exports, "GroupsService", { enumerable: true, get: function () { return groups_service_1.GroupsService; } });
+var group_membership_service_1 = require("./groups/group-membership.service");
+Object.defineProperty(exports, "GroupMembershipService", { enumerable: true, get: function () { return group_membership_service_1.GroupMembershipService; } });
+var group_invites_service_1 = require("./groups/group-invites.service");
+Object.defineProperty(exports, "GROUP_INVITES_CLOCK", { enumerable: true, get: function () { return group_invites_service_1.GROUP_INVITES_CLOCK; } });
+Object.defineProperty(exports, "GroupInvitesService", { enumerable: true, get: function () { return group_invites_service_1.GroupInvitesService; } });
+Object.defineProperty(exports, "inviteStatus", { enumerable: true, get: function () { return group_invites_service_1.inviteStatus; } });
+var sharing_effects_1 = require("./groups/sharing-effects");
+Object.defineProperty(exports, "SharingEffects", { enumerable: true, get: function () { return sharing_effects_1.SharingEffects; } });
+var member_lookup_throttle_1 = require("./groups/member-lookup-throttle");
+Object.defineProperty(exports, "MemberLookupThrottle", { enumerable: true, get: function () { return member_lookup_throttle_1.MemberLookupThrottle; } });
+var groups_orphaned_doctor_check_1 = require("./doctor/groups-orphaned.doctor-check");
+Object.defineProperty(exports, "ORPHANED_GROUPS_SAMPLE", { enumerable: true, get: function () { return groups_orphaned_doctor_check_1.ORPHANED_GROUPS_SAMPLE; } });
+Object.defineProperty(exports, "GroupsOrphanedDoctorCheck", { enumerable: true, get: function () { return groups_orphaned_doctor_check_1.GroupsOrphanedDoctorCheck; } });
+Object.defineProperty(exports, "decideOrphanedGroups", { enumerable: true, get: function () { return groups_orphaned_doctor_check_1.decideOrphanedGroups; } });
+var grants_service_1 = require("./grants/grants.service");
+Object.defineProperty(exports, "GRANTS_CLOCK", { enumerable: true, get: function () { return grants_service_1.GRANTS_CLOCK; } });
+Object.defineProperty(exports, "GrantsService", { enumerable: true, get: function () { return grants_service_1.GrantsService; } });
+Object.defineProperty(exports, "deleteGrantsForResources", { enumerable: true, get: function () { return grants_service_1.deleteGrantsForResources; } });
+Object.defineProperty(exports, "toGrantDto", { enumerable: true, get: function () { return grants_service_1.toGrantDto; } });
+// ---- the grants prune job (server-only) and its enqueue-only cron (#729) ------------
+var grants_prune_handler_1 = require("./jobs/grants-prune.handler");
+Object.defineProperty(exports, "GRANTS_PRUNE_CHUNK", { enumerable: true, get: function () { return grants_prune_handler_1.GRANTS_PRUNE_CHUNK; } });
+Object.defineProperty(exports, "GRANTS_PRUNE_CLOCK", { enumerable: true, get: function () { return grants_prune_handler_1.GRANTS_PRUNE_CLOCK; } });
+Object.defineProperty(exports, "GRANTS_PRUNE_JOB_TYPE", { enumerable: true, get: function () { return grants_prune_handler_1.GRANTS_PRUNE_JOB_TYPE; } });
+Object.defineProperty(exports, "GrantsPruneHandler", { enumerable: true, get: function () { return grants_prune_handler_1.GrantsPruneHandler; } });
+var grants_prune_task_1 = require("./jobs/grants-prune.task");
+Object.defineProperty(exports, "GrantsPruneTask", { enumerable: true, get: function () { return grants_prune_task_1.GrantsPruneTask; } });
+// ---- link grants and the public-route pattern (#730) --------------------------------
+var link_grants_service_1 = require("./links/link-grants.service");
+Object.defineProperty(exports, "ANY_LINK_RESOURCE_TYPE", { enumerable: true, get: function () { return link_grants_service_1.ANY_LINK_RESOURCE_TYPE; } });
+Object.defineProperty(exports, "LINK_GRANTS_CLOCK", { enumerable: true, get: function () { return link_grants_service_1.LINK_GRANTS_CLOCK; } });
+Object.defineProperty(exports, "LinkGrantsService", { enumerable: true, get: function () { return link_grants_service_1.LinkGrantsService; } });
+Object.defineProperty(exports, "importLegacyToken", { enumerable: true, get: function () { return link_grants_service_1.importLegacyToken; } });
+Object.defineProperty(exports, "linkFailureOutcome", { enumerable: true, get: function () { return link_grants_service_1.linkFailureOutcome; } });
+Object.defineProperty(exports, "resolveLinkExpiry", { enumerable: true, get: function () { return link_grants_service_1.resolveLinkExpiry; } });
+Object.defineProperty(exports, "toLinkGrantView", { enumerable: true, get: function () { return link_grants_service_1.toLinkGrantView; } });
+var link_grant_guard_1 = require("./links/link-grant.guard");
+Object.defineProperty(exports, "LINK_GRANT_SPAN_ATTRIBUTE", { enumerable: true, get: function () { return link_grant_guard_1.LINK_GRANT_SPAN_ATTRIBUTE; } });
+Object.defineProperty(exports, "LinkGrantGuard", { enumerable: true, get: function () { return link_grant_guard_1.LinkGrantGuard; } });
+var link_grant_decorators_1 = require("./links/link-grant.decorators");
+Object.defineProperty(exports, "CurrentLinkGrant", { enumerable: true, get: function () { return link_grant_decorators_1.CurrentLinkGrant; } });
+Object.defineProperty(exports, "LINK_GRANT_REQUEST_KEY", { enumerable: true, get: function () { return link_grant_decorators_1.LINK_GRANT_REQUEST_KEY; } });
+Object.defineProperty(exports, "LINK_GRANT_RESOURCE_KEY", { enumerable: true, get: function () { return link_grant_decorators_1.LINK_GRANT_RESOURCE_KEY; } });
+Object.defineProperty(exports, "LinkGrantResource", { enumerable: true, get: function () { return link_grant_decorators_1.LinkGrantResource; } });
+var link_miss_throttle_1 = require("./links/link-miss-throttle");
+Object.defineProperty(exports, "LinkMissThrottle", { enumerable: true, get: function () { return link_miss_throttle_1.LinkMissThrottle; } });
+var public_link_interceptor_1 = require("./links/public-link.interceptor");
+Object.defineProperty(exports, "PUBLIC_LINK_RESPONSE_HEADERS", { enumerable: true, get: function () { return public_link_interceptor_1.PUBLIC_LINK_RESPONSE_HEADERS; } });
+Object.defineProperty(exports, "PublicLinkInterceptor", { enumerable: true, get: function () { return public_link_interceptor_1.PublicLinkInterceptor; } });
+Object.defineProperty(exports, "setPublicLinkHeaders", { enumerable: true, get: function () { return public_link_interceptor_1.setPublicLinkHeaders; } });
+//# sourceMappingURL=index.js.map

package/dist/sharing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sharing/index.ts"],"names":[],"mappings":";AAAA,6EAA6E;AAC7E,sEAAsE;AACtE,6EAA6E;AAC7E,2EAA2E;AAC3E,0EAA0E;AAC1E,0DAA0D;;;;;AAE1D,sFAAsF;AACtF,mDAAiD;AAAxC,+GAAA,aAAa,OAAA;AACtB,qDAO2B;AANzB,yHAAA,sBAAsB,OAAA;AACtB,yHAAA,sBAAsB,OAAA;AACtB,wHAAA,qBAAqB,OAAA;AACrB,kHAAA,eAAe,OAAA;AACf,0HAAA,uBAAuB,OAAA;AACvB,8HAAA,2BAA2B,OAAA;AAU7B,uFAAuF;AACvF,iCAAkI;AAAzH,qGAAA,YAAY,OAAA;AAAE,0GAAA,iBAAiB,OAAA;AAAE,8GAAA,qBAAqB,OAAA;AAAE,qGAAA,YAAY,OAAA;AAAE,yGAAA,gBAAgB,OAAA;AAAE,wGAAA,eAAe,OAAA;AAehH,sFAAsF;AACtF,6CAAqF;AAA5E,kHAAA,mBAAmB,OAAA;AAAE,8HAAA,+BAA+B,OAAA;AAE7D,qCASmB;AARjB,0HAAA,+BAA+B,OAAA;AAC/B,8GAAA,mBAAmB,OAAA;AACnB,oHAAA,yBAAyB,OAAA;AACzB,gHAAA,qBAAqB,OAAA;AACrB,yHAAA,8BAA8B,OAAA;AAC9B,0HAAA,+BAA+B,OAAA;AAC/B,2HAAA,gCAAgC,OAAA;AAChC,+GAAA,oBAAoB,OAAA;AAGtB,mCAAiD;AAAxC,+GAAA,qBAAqB,OAAA;AAE9B,sFAAsF;AACtF,yCAOqB;AANnB,2GAAA,cAAc,OAAA;AACd,uHAAA,0BAA0B,OAAA;AAC1B,6GAAA,gBAAgB,OAAA;AAChB,gHAAA,mBAAmB,OAAA;AACnB,uGAAA,UAAU,OAAA;AACV,uHAAA,0BAA0B,OAAA;AAI5B,yFAAyF;AACzF,6CAWuB;AAVrB,qHAAA,sBAAsB,OAAA;AACtB,0HAAA,2BAA2B,OAAA;AAC3B,gHAAA,iBAAiB,OAAA;AACjB,4GAAA,aAAa,OAAA;AACb,2GAAA,YAAY,OAAA;AACZ,4GAAA,aAAa,OAAA;AACb,gHAAA,iBAAiB,OAAA;AACjB,6GAAA,cAAc,OAAA;AACd,kHAAA,mBAAmB,OAAA;AACnB,gHAAA,iBAAiB,OAAA;AAInB,uFAAuF;AACvF,0DAAsH;AAA7G,iIAAA,+BAA+B,OAAA;AAAE,sHAAA,oBAAoB,OAAA;AAAE,sHAAA,oBAAoB,OAAA;AAEpF,wEAA8G;AAArG,4HAAA,mBAAmB,OAAA;AAAE,qHAAA,YAAY,OAAA;AAAE,qHAAA,YAAY,OAAA;AAAE,oHAAA,WAAW,OAAA;AAGrE,sFAAsF;AACtF,wDAUgC;AAT9B,yHAAA,wBAAwB,OAAA;AACxB,mIAAA,kCAAkC,OAAA;AAClC,kHAAA,iBAAiB,OAAA;AACjB,oHAAA,mBAAmB,OAAA;AACnB,gHAAA,eAAe,OAAA;AACf,oHAAA,mBAAmB,OAAA;AACnB,+GAAA,cAAc,OAAA;AACd,sHAAA,qBAAqB,OAAA;AACrB,oHAAA,mBAAmB,OAAA;AAGrB,sDAA+E;AAAtE,kHAAA,kBAAkB,OAAA;AAAE,kHAAA,kBAAkB,OAAA;AAS/C,kDAAiH;AAAxG,qHAAA,uBAAuB,OAAA;AAAE,2GAAA,aAAa,OAAA;AAAE,6GAAA,eAAe,OAAA;AAAE,+GAAA,iBAAiB,OAAA;AAUnF,wFAAwF;AACxF,yEAMqC;AALnC,mIAAA,sBAAsB,OAAA;AACtB,yIAAA,4BAA4B,OAAA;AAC5B,yIAAA,4BAA4B,OAAA;AAC5B,oIAAA,uBAAuB,OAAA;AACvB,8IAAA,iCAAiC,OAAA;AAInC,wFAAwF;AACxF,mCAA0C;AAAjC,wGAAA,cAAc,OAAA;AAGvB,0FAA0F;AAC1F,yFAOoD;AANlD,qIAAA,uBAAuB,OAAA;AACvB,yIAAA,2BAA2B,OAAA;AAC3B,oIAAA,sBAAsB,OAAA;AACtB,6IAAA,+BAA+B,OAAA;AAC/B,4IAAA,8BAA8B,OAAA;AAC9B,wIAAA,0BAA0B,OAAA;AAS5B,uFAOmD;AANjD,gIAAA,mBAAmB,OAAA;AACnB,2IAAA,8BAA8B,OAAA;AAC9B,kIAAA,qBAAqB,OAAA;AACrB,sIAAA,yBAAyB,OAAA;AACzB,qIAAA,wBAAwB,OAAA;AACxB,yIAAA,4BAA4B,OAAA;AAQ9B,sFAAsF;AACtF,yCAAuG;AAA9F,iHAAA,oBAAoB,OAAA;AAAE,oHAAA,uBAAuB,OAAA;AAAE,sHAAA,yBAAyB,OAAA;AAGjF,qFAAqF;AACrF,0DAAwD;AAA/C,+GAAA,aAAa,OAAA;AACtB,8EAA2E;AAAlE,kIAAA,sBAAsB,OAAA;AAE/B,wEAAwG;AAA/F,4HAAA,mBAAmB,OAAA;AAAE,4HAAA,mBAAmB,OAAA;AAAE,qHAAA,YAAY,OAAA;AAC/D,4DAA0D;AAAjD,iHAAA,cAAc,OAAA;AAGvB,0EAAuE;AAA9D,8HAAA,oBAAoB,OAAA;AAE7B,sFAAgI;AAAvH,sIAAA,sBAAsB,OAAA;AAAE,yIAAA,yBAAyB,OAAA;AAAE,oIAAA,oBAAoB,OAAA;AAChF,0DAA4G;AAAnG,8GAAA,YAAY,OAAA;AAAE,+GAAA,aAAa,OAAA;AAAE,0HAAA,wBAAwB,OAAA;AAAE,4GAAA,UAAU,OAAA;AAG1E,wFAAwF;AACxF,oEAAgI;AAAvH,0HAAA,kBAAkB,OAAA;AAAE,0HAAA,kBAAkB,OAAA;AAAE,6HAAA,qBAAqB,OAAA;AAAE,0HAAA,kBAAkB,OAAA;AAE1F,8DAA2D;AAAlD,oHAAA,eAAe,OAAA;AAExB,wFAAwF;AACxF,mEAQqC;AAPnC,6HAAA,sBAAsB,OAAA;AACtB,wHAAA,iBAAiB,OAAA;AACjB,wHAAA,iBAAiB,OAAA;AACjB,wHAAA,iBAAiB,OAAA;AACjB,yHAAA,kBAAkB,OAAA;AAClB,wHAAA,iBAAiB,OAAA;AACjB,sHAAA,eAAe,OAAA;AAUjB,6DAAqF;AAA5E,6HAAA,yBAAyB,OAAA;AAAE,kHAAA,cAAc,OAAA;AAClD,uEAAqI;AAA5H,yHAAA,gBAAgB,OAAA;AAAE,+HAAA,sBAAsB,OAAA;AAAE,gIAAA,uBAAuB,OAAA;AAAE,0HAAA,iBAAiB,OAAA;AAC7F,iEAA8D;AAArD,sHAAA,gBAAgB,OAAA;AACzB,2EAA4H;AAAnH,uIAAA,4BAA4B,OAAA;AAAE,gIAAA,qBAAqB,OAAA;AAAE,+HAAA,oBAAoB,OAAA"}

package/dist/sharing/jobs/grants-prune.handler.d.ts

@@ -0,0 +1,64 @@
+import { OnModuleInit } from '@nestjs/common';
+import { type SharingDataPort, type SharingJobHandler, type SharingJobRecord, type SharingJobsPort } from '../ports';
+import { type ResolvedSharingModuleOptions } from '../sharing.options';
+/**
+ * The job type. PERMANENT once rows of it exist.
+ *
+ * @stability stable
+ */
+export declare const GRANTS_PRUNE_JOB_TYPE = "sharing.grants.prune";
+/**
+ * How many grants (retention) or record ids (dangling) one chunk handles.
+ *
+ * @stability experimental
+ */
+export declare const GRANTS_PRUNE_CHUNK = 500;
+/**
+ * Optional injection token of the prune job's clock (ms since epoch).
+ *
+ * @stability experimental
+ */
+export declare const GRANTS_PRUNE_CLOCK: unique symbol;
+/**
+ * What one prune run deleted.
+ *
+ * @stability experimental
+ */
+export interface GrantsPruneSummary {
+    /** Grants revoked or expired before the retention cut-off. */
+    expiredOrRevoked: number;
+    /** Grants whose record no longer exists, per resource type. */
+    dangling: Record<string, number>;
+    /** Chunks (system transactions) used. */
+    chunks: number;
+}
+/**
+ * Deletes old revoked or expired grants and dangling grants, in chunks.
+ *
+ * @stability experimental
+ */
+export declare class GrantsPruneHandler implements SharingJobHandler, OnModuleInit {
+    private readonly data;
+    private readonly options;
+    private readonly jobs?;
+    private readonly now;
+    /** The job type. */
+    readonly type = "sharing.grants.prune";
+    private readonly logger;
+    constructor(data: SharingDataPort, options: ResolvedSharingModuleOptions, jobs?: SharingJobsPort | undefined, now?: () => number);
+    /** Registers the handler with the app's queue, when the app bound one. */
+    onModuleInit(): void;
+    /**
+     * Runs one prune.
+     *
+     * @param job - the claimed job (its payload is unused: the job is global).
+     */
+    process(job: SharingJobRecord): Promise<void>;
+    /**
+     * The prune itself (also callable directly, e.g. from a test).
+     *
+     * @returns what it deleted.
+     */
+    prune(): Promise<GrantsPruneSummary>;
+}
+//# sourceMappingURL=grants-prune.handler.d.ts.map

package/dist/sharing/jobs/grants-prune.handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants-prune.handler.d.ts","sourceRoot":"","sources":["../../../src/sharing/jobs/grants-prune.handler.ts"],"names":[],"mappings":"AA+BA,OAAO,EAA8B,YAAY,EAAY,MAAM,gBAAgB,CAAC;AAIpF,OAAO,EAA8B,KAAK,eAAe,EAAE,KAAK,iBAAiB,EAAE,KAAK,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,UAAU,CAAC;AACjJ,OAAO,EAAmB,KAAK,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAExF;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,yBAAyB,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAEtC;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,OAAO,MAAsE,CAAC;AAE/G;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,8DAA8D;IAC9D,gBAAgB,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,qBACa,kBAAmB,YAAW,iBAAiB,EAAE,YAAY;IAMhD,OAAO,CAAC,QAAQ,CAAC,IAAI;IAClB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACf,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IAChB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAR9D,oBAAoB;IACpB,QAAQ,CAAC,IAAI,0BAAyB;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;gBAGrB,IAAI,EAAE,eAAe,EAClB,OAAO,EAAE,4BAA4B,EAC5B,IAAI,CAAC,EAAE,eAAe,YAAA,EAChB,GAAG,GAAE,MAAM,MAAiB;IAGvF,0EAA0E;IAC1E,YAAY,IAAI,IAAI;IAIpB;;;;OAIG;IACG,OAAO,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAQnD;;;;OAIG;IACG,KAAK,IAAI,OAAO,CAAC,kBAAkB,CAAC;CAuD3C"}