@memberjunction/core-entities 5.29.0 → 5.30.0

package/dist/custom/PermissionProviders/AccessControlRuleProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccessControlRuleProvider.js","sourceRoot":"","sources":["../../../src/custom/PermissionProviders/AccessControlRuleProvider.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAEH,QAAQ,EAIR,sBAAsB,GAEzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAkBnE,oGAAoG;AACpG,MAAM,gBAAgB,GAAa;IAC/B,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,iBAAiB;IACrF,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW;CAC5E,CAAC;AAEF;;;;;;;;;;;GAWG;AAEI,IAAM,yBAAyB,GAA/B,MAAM,yBAA0B,SAAQ,sBAAsB;IAA9D;;QACM,eAAU,GAAG,sBAAsB,CAAC;QACpC,gBAAW,GAChB,6GAA6G,CAAC;QACzG,0BAAqB,GAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC9E,qBAAgB,GAAuB,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACvF,iBAAY,GAAG,KAAK,CAAC;QACrB,uBAAkB,GAAG,IAAI,CAAC;IA2PvC,CAAC;IAzPY,gBAAgB;QACrB,OAAO,IAAI,QAAQ,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,CAAC;IAED,KAAK,CAAC,eAAe,CACjB,IAAc,EACd,YAAoB,EACpB,UAAyB,EACzB,MAAwB;QAExB,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,MAAM,EAAE,mCAAmC;aAC9C,CAAC;QACN,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,MAAM,EAAE,mBAAmB,YAAY,GAAG;aAC7C,CAAC;QACN,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzC,OAAO;YACH,OAAO,EAAE,OAAO;YAChB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,OAAO;gBACX,CAAC,CAAC,YAAY,MAAM,oBAAoB;gBACxC,CAAC,CAAC,wBAAwB,MAAM,OAAO,YAAY,IAAI,UAAU,EAAE;SAC1E,CAAC;IACN,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,IAAc,EAAE,YAAoB,EAAE,UAAkB;QAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QAEzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEpC,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC;gBACnC,YAAY,EAAE,UAAU;gBACxB,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO;aAC3E,CAAC,CAAC,CAAC;IACR,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAc,EAAE,YAAqB;QACxD,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;QAEzE,MAAM,cAAc,GAAa;YAC7B,sCAAsC,IAAI,CAAC,EAAE,IAAI;YACjD,wCAAwC;SAC3C,CAAC;QACF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,cAAc,CAAC,IAAI,CAAC,yCAAyC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAElD,IAAI,MAAM,GAAG,IAAI,aAAa,uDAAuD,CAAC;QACtF,IAAI,YAAY,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;YACpD,IAAI,CAAC,QAAQ;gBAAE,OAAO,EAAE,CAAC;YACzB,MAAM,GAAG,IAAI,MAAM,mBAAmB,QAAQ,GAAG,CAAC;QACtD,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAC7B,0BAA0B,EAC1B,MAAM,EACN,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,iBAAiB,CAAC,EACvD,kBAAkB,CACrB,CAAC;QAIF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;YACzG,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC5D,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,GAAG,CAAC,MAAM;gBAAE,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YAClC,MAAM,CAAC,EAAE,QAAQ,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;gBAAE,SAAS;YACxC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC;gBACxC,YAAY,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS;gBAC5C,UAAU,EAAE,QAAQ;gBACpB,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI;gBAC/D,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;gBACnC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;aAClF,CAAC,CAAC,CAAC;QACR,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,YAAoB,EAAE,UAAkB;QACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QAEzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC/D,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACnC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC;gBACxC,YAAY,EAAE,UAAU;gBACxB,WAAW,EAAE,GAAG,CAAC,WAA0B;gBAC3C,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,WAAW,EAAE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC;gBACzC,OAAO;gBACP,cAAc,EAAE,GAAG,CAAC,EAAE;gBACtB,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;aACjE,CAAC,CAAC,CAAC;QACR,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACM,KAAK,CAAC,4BAA4B,CAAC,OAAiB;QACzD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAC7B,0BAA0B,EAC1B,qCAAqC,OAAO,CAAC,EAAE,IAAI;YAC/C,2BAA2B,OAAO,CAAC,EAAE,IAAI;YACzC,qDAAqD,EACzD,gBAAgB,EAChB,8BAA8B,CACjC,CAAC;QAEF,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACnC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC;gBACxC,YAAY,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS;gBACrC,UAAU,EAAE,GAAG,CAAC,QAAQ;gBACxB,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO;gBAC9E,cAAc,EAAE,GAAG,CAAC,EAAE;gBACtB,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;aACjE,CAAC,CAAC,CAAC;QACR,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED;;;OAGG;IACM,KAAK,CAAC,2BAA2B,CAAC,OAAiB;QACxD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAC7B,0BAA0B,EAC1B,oBAAoB,OAAO,CAAC,EAAE,uDAAuD,EACrF,gBAAgB,EAChB,6BAA6B,CAChC,CAAC;QAEF,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACnC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC;gBACxC,YAAY,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS;gBACrC,UAAU,EAAE,GAAG,CAAC,QAAQ;gBACxB,WAAW,EAAE,GAAG,CAAC,WAA0B;gBAC3C,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,WAAW,EAAE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC;gBACzC,OAAO;gBACP,cAAc,EAAE,GAAG,CAAC,EAAE;gBACtB,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;aACjE,CAAC,CAAC,CAAC;QACR,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAEO,eAAe,CAAC,UAAkB;QACtC,MAAM,EAAE,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAC3C,OAAO,MAAM,EAAE,EAAE,IAAI,IAAI,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,QAAgB,EAAE,QAAgB;QAC7D,OAAO,IAAI,CAAC,SAAS,CACjB,0BAA0B,EAC1B,aAAa,QAAQ,mBAAmB,QAAQ,uDAAuD,EACvG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,iBAAiB,IAAI,CAAC,KAAK,QAAQ,CAAC,EACzE,kBAAkB,CACrB,CAAC;IACN,CAAC;IAEO,kBAAkB,CAAC,GAAyB;QAChD,QAAQ,GAAG,CAAC,WAAW,EAAE,CAAC;YACtB,KAAK,MAAM;gBACP,IAAI,CAAC,GAAG,CAAC,SAAS;oBAAE,OAAO,SAAS,CAAC;gBACrC,OAAO,IAAI,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,SAAU,CAAC,CAAC,EAAE,IAAI,CAAC;YACpF,KAAK,UAAU;gBACX,OAAO,yBAAyB,CAAC;YACrC,KAAK,QAAQ;gBACT,OAAO,wBAAwB,CAAC;YACpC;gBACI,OAAO,SAAS,CAAC;QACzB,CAAC;IACL,CAAC;IAEO,cAAc,CAAC,IAAc,EAAE,IAA4B;QAC/D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoB,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC;gBAAE,SAAS;YAClD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAEO,kBAAkB,CAAC,IAAc,EAAE,GAAyB;QAChE,QAAQ,GAAG,CAAC,WAAW,EAAE,CAAC;YACtB,KAAK,UAAU,CAAC;YAChB,KAAK,QAAQ;gBACT,OAAO,IAAI,CAAC;YAChB,KAAK,MAAM;gBACP,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YACjE,KAAK,MAAM;gBACP,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,SAAU,CAAC,CAAC,CAAC;YACzG;gBACI,OAAO,KAAK,CAAC;QACrB,CAAC;IACL,CAAC;IAEO,UAAU,CAAC,GAAyB;QACxC,OAAO,IAAI,CAAC,cAAc,CAAC;YACvB,IAAI,EAAE,GAAG,CAAC,OAAO;YACjB,MAAM,EAAE,GAAG,CAAC,SAAS;YACrB,MAAM,EAAE,GAAG,CAAC,SAAS;YACrB,MAAM,EAAE,GAAG,CAAC,SAAS;YACrB,KAAK,EAAE,GAAG,CAAC,QAAQ;SACtB,CAAC,CAAC;IACP,CAAC;CACJ,CAAA;AAlQY,yBAAyB;IADrC,aAAa,CAAC,sBAAsB,EAAE,6BAA6B,CAAC;GACxD,yBAAyB,CAkQrC"}

package/dist/custom/PermissionProviders/ApplicationRolePermissionProvider.d.ts

@@ -0,0 +1,28 @@
+import { GranteeType, NormalizedPermission, PermissionAction, PermissionCheckResult, PermissionProviderBase, UserInfo } from '@memberjunction/core';
+/**
+ * Wraps the Phase 1 {@link UserInfoEngine} application-access logic behind the
+ * unified {@link PermissionProviderBase} contract. Unlike `UserHasApplicationAccess`
+ * which operates on the *current* user only, this provider reasons about arbitrary
+ * users by inspecting the raw ApplicationRole catalog.
+ *
+ * Mapping: `Read` = CanAccess, `Admin` = CanAdmin.
+ *
+ * `resourceType` is always `"Applications"`. `resourceId` is the application ID.
+ *
+ * An application with zero ApplicationRole records is "open access" — every user
+ * has Read (but not Admin) on it.
+ */
+export declare class ApplicationRolePermissionProvider extends PermissionProviderBase {
+    readonly DomainName = "Application Roles";
+    readonly Description = "Role-based authorization for MJ applications (Phase 1). Apps with no ApplicationRole records are open-access.";
+    readonly SupportedGranteeTypes: GranteeType[];
+    readonly SupportedActions: PermissionAction[];
+    readonly SupportsDeny = false;
+    GetResourceTypes(): string[];
+    CheckPermission(user: UserInfo, resourceType: string, resourceId: string | null, action: PermissionAction): Promise<PermissionCheckResult>;
+    GetEffectivePermissions(user: UserInfo, resourceType: string, resourceId: string): Promise<NormalizedPermission[]>;
+    GetUserResources(user: UserInfo, resourceType?: string): Promise<NormalizedPermission[]>;
+    GetResourcePermissions(resourceType: string, resourceId: string): Promise<NormalizedPermission[]>;
+    private actionsForUserApp;
+}
+//# sourceMappingURL=ApplicationRolePermissionProvider.d.ts.map

package/dist/custom/PermissionProviders/ApplicationRolePermissionProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApplicationRolePermissionProvider.d.ts","sourceRoot":"","sources":["../../../src/custom/PermissionProviders/ApplicationRolePermissionProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,WAAW,EAEX,oBAAoB,EACpB,gBAAgB,EAChB,qBAAqB,EACrB,sBAAsB,EACtB,QAAQ,EACX,MAAM,sBAAsB,CAAC;AAK9B;;;;;;;;;;;;GAYG;AACH,qBACa,iCAAkC,SAAQ,sBAAsB;IACzE,QAAQ,CAAC,UAAU,uBAAuB;IAC1C,QAAQ,CAAC,WAAW,mHACgG;IACpH,QAAQ,CAAC,qBAAqB,EAAE,WAAW,EAAE,CAAY;IACzD,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,CAAqB;IAClE,QAAQ,CAAC,YAAY,SAAS;IAErB,gBAAgB,IAAI,MAAM,EAAE;IAI/B,eAAe,CACjB,IAAI,EAAE,QAAQ,EACd,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,MAAM,EAAE,gBAAgB,GACzB,OAAO,CAAC,qBAAqB,CAAC;IA2B3B,uBAAuB,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAYlH,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAgBxF,sBAAsB,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAmCvG,OAAO,CAAC,iBAAiB;CAqB5B"}

package/dist/custom/PermissionProviders/ApplicationRolePermissionProvider.js

@@ -0,0 +1,144 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { Metadata, PermissionProviderBase, } from '@memberjunction/core';
+import { RegisterClass, UUIDsEqual } from '@memberjunction/global';
+import { UserInfoEngine } from '../../engines/UserInfoEngine.js';
+/**
+ * Wraps the Phase 1 {@link UserInfoEngine} application-access logic behind the
+ * unified {@link PermissionProviderBase} contract. Unlike `UserHasApplicationAccess`
+ * which operates on the *current* user only, this provider reasons about arbitrary
+ * users by inspecting the raw ApplicationRole catalog.
+ *
+ * Mapping: `Read` = CanAccess, `Admin` = CanAdmin.
+ *
+ * `resourceType` is always `"Applications"`. `resourceId` is the application ID.
+ *
+ * An application with zero ApplicationRole records is "open access" — every user
+ * has Read (but not Admin) on it.
+ */
+let ApplicationRolePermissionProvider = class ApplicationRolePermissionProvider extends PermissionProviderBase {
+    constructor() {
+        super(...arguments);
+        this.DomainName = 'Application Roles';
+        this.Description = 'Role-based authorization for MJ applications (Phase 1). Apps with no ApplicationRole records are open-access.';
+        this.SupportedGranteeTypes = ['Role'];
+        this.SupportedActions = ['Read', 'Admin'];
+        this.SupportsDeny = false;
+    }
+    GetResourceTypes() {
+        return ['Applications'];
+    }
+    async CheckPermission(user, resourceType, resourceId, action) {
+        if (resourceType !== 'Applications') {
+            return {
+                Allowed: false,
+                DomainName: this.DomainName,
+                Reason: `Unsupported resource type '${resourceType}'; expected 'Applications'`,
+            };
+        }
+        if (!resourceId) {
+            return {
+                Allowed: false,
+                DomainName: this.DomainName,
+                Reason: 'Application permissions require a specific application ID',
+            };
+        }
+        const actions = this.actionsForUserApp(user, resourceId);
+        const allowed = actions.includes(action);
+        return {
+            Allowed: allowed,
+            DomainName: this.DomainName,
+            Reason: allowed
+                ? `User has ${action} on application '${resourceId}'`
+                : `User lacks ${action} on application '${resourceId}'`,
+        };
+    }
+    async GetEffectivePermissions(user, resourceType, resourceId) {
+        if (resourceType !== 'Applications')
+            return [];
+        const actions = this.actionsForUserApp(user, resourceId);
+        if (actions.length === 0)
+            return [];
+        const app = new Metadata().Applications.find((a) => UUIDsEqual(a.ID, resourceId));
+        return [this.buildNormalizedPermission({
+                resourceType: 'Applications', resourceId, resourceName: app?.Name,
+                granteeType: 'User', granteeId: user.ID, granteeName: user.Name, actions,
+            })];
+    }
+    async GetUserResources(user, resourceType) {
+        if (resourceType && resourceType !== 'Applications')
+            return [];
+        const md = new Metadata();
+        const results = [];
+        for (const app of md.Applications) {
+            const actions = this.actionsForUserApp(user, app.ID);
+            if (actions.length === 0)
+                continue;
+            results.push(this.buildNormalizedPermission({
+                resourceType: 'Applications', resourceId: app.ID, resourceName: app.Name,
+                granteeType: 'User', granteeId: user.ID, granteeName: user.Name, actions,
+            }));
+        }
+        return results;
+    }
+    async GetResourcePermissions(resourceType, resourceId) {
+        if (resourceType !== 'Applications')
+            return [];
+        const md = new Metadata();
+        const app = md.Applications.find((a) => UUIDsEqual(a.ID, resourceId));
+        if (!app)
+            return [];
+        const appRoles = UserInfoEngine.Instance.ApplicationRoles.filter((ar) => UUIDsEqual(ar.ApplicationID, resourceId));
+        // Open access: return a synthetic "Everyone" row so the Sharing Center
+        // can visually distinguish unrestricted apps from explicitly-granted ones.
+        if (appRoles.length === 0) {
+            return [this.buildNormalizedPermission({
+                    resourceType: 'Applications', resourceId: app.ID, resourceName: app.Name,
+                    granteeType: 'Everyone', granteeId: null, granteeName: 'All authenticated users',
+                    actions: ['Read'],
+                })];
+        }
+        const results = [];
+        for (const ar of appRoles) {
+            const actions = this.boolsToActions({ Read: ar.CanAccess, Admin: ar.CanAdmin });
+            if (actions.length === 0)
+                continue;
+            results.push(this.buildNormalizedPermission({
+                resourceType: 'Applications', resourceId: app.ID, resourceName: app.Name,
+                granteeType: 'Role', granteeId: ar.RoleID, granteeName: ar.Role, actions,
+                sourceRecordId: ar.ID,
+            }));
+        }
+        return results;
+    }
+    actionsForUserApp(user, applicationId) {
+        const appRoles = UserInfoEngine.Instance.ApplicationRoles.filter((ar) => UUIDsEqual(ar.ApplicationID, applicationId));
+        // Open access semantics (Phase 1): no rows = every authenticated user has Read.
+        if (appRoles.length === 0)
+            return ['Read'];
+        if (!user.UserRoles?.length)
+            return [];
+        let canAccess = false;
+        let canAdmin = false;
+        for (const ur of user.UserRoles) {
+            for (const ar of appRoles) {
+                if (UUIDsEqual(ar.RoleID, ur.RoleID)) {
+                    if (ar.CanAccess)
+                        canAccess = true;
+                    if (ar.CanAdmin)
+                        canAdmin = true;
+                }
+            }
+        }
+        return this.boolsToActions({ Read: canAccess, Admin: canAdmin });
+    }
+};
+ApplicationRolePermissionProvider = __decorate([
+    RegisterClass(PermissionProviderBase, 'MJApplicationRolePermissionProvider')
+], ApplicationRolePermissionProvider);
+export { ApplicationRolePermissionProvider };
+//# sourceMappingURL=ApplicationRolePermissionProvider.js.map

package/dist/custom/PermissionProviders/ApplicationRolePermissionProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApplicationRolePermissionProvider.js","sourceRoot":"","sources":["../../../src/custom/PermissionProviders/ApplicationRolePermissionProvider.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAEH,QAAQ,EAIR,sBAAsB,GAEzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEnE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D;;;;;;;;;;;;GAYG;AAEI,IAAM,iCAAiC,GAAvC,MAAM,iCAAkC,SAAQ,sBAAsB;IAAtE;;QACM,eAAU,GAAG,mBAAmB,CAAC;QACjC,gBAAW,GAChB,+GAA+G,CAAC;QAC3G,0BAAqB,GAAkB,CAAC,MAAM,CAAC,CAAC;QAChD,qBAAgB,GAAuB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACzD,iBAAY,GAAG,KAAK,CAAC;IA0HlC,CAAC;IAxHY,gBAAgB;QACrB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,eAAe,CACjB,IAAc,EACd,YAAoB,EACpB,UAAyB,EACzB,MAAwB;QAExB,IAAI,YAAY,KAAK,cAAc,EAAE,CAAC;YAClC,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,MAAM,EAAE,8BAA8B,YAAY,4BAA4B;aACjF,CAAC;QACN,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,MAAM,EAAE,2DAA2D;aACtE,CAAC;QACN,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzC,OAAO;YACH,OAAO,EAAE,OAAO;YAChB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,OAAO;gBACX,CAAC,CAAC,YAAY,MAAM,oBAAoB,UAAU,GAAG;gBACrD,CAAC,CAAC,cAAc,MAAM,oBAAoB,UAAU,GAAG;SAC9D,CAAC;IACN,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,IAAc,EAAE,YAAoB,EAAE,UAAkB;QAClF,IAAI,YAAY,KAAK,cAAc;YAAE,OAAO,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEpC,MAAM,GAAG,GAAG,IAAI,QAAQ,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;QAClF,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC;gBACnC,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI;gBACjE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO;aAC3E,CAAC,CAAC,CAAC;IACR,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAc,EAAE,YAAqB;QACxD,IAAI,YAAY,IAAI,YAAY,KAAK,cAAc;YAAE,OAAO,EAAE,CAAC;QAE/D,MAAM,EAAE,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC1B,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,YAAY,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACrD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACnC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC;gBACxC,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,IAAI;gBACxE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO;aAC3E,CAAC,CAAC,CAAC;QACR,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,YAAoB,EAAE,UAAkB;QACjE,IAAI,YAAY,KAAK,cAAc;YAAE,OAAO,EAAE,CAAC;QAE/C,MAAM,EAAE,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QAEpB,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CACpE,UAAU,CAAC,EAAE,CAAC,aAAa,EAAE,UAAU,CAAC,CAC3C,CAAC;QAEF,uEAAuE;QACvE,2EAA2E;QAC3E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC;oBACnC,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,IAAI;oBACxE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,yBAAyB;oBAChF,OAAO,EAAE,CAAC,MAAM,CAAC;iBACpB,CAAC,CAAC,CAAC;QACR,CAAC;QAED,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAEnC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC;gBACxC,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,IAAI;gBACxE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO;gBACxE,cAAc,EAAE,EAAE,CAAC,EAAE;aACxB,CAAC,CAAC,CAAC;QACR,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAEO,iBAAiB,CAAC,IAAc,EAAE,aAAqB;QAC3D,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CACpE,UAAU,CAAC,EAAE,CAAC,aAAa,EAAE,aAAa,CAAC,CAC9C,CAAC;QAEF,gFAAgF;QAChF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM;YAAE,OAAO,EAAE,CAAC;QAEvC,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9B,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;gBACxB,IAAI,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;oBACnC,IAAI,EAAE,CAAC,SAAS;wBAAE,SAAS,GAAG,IAAI,CAAC;oBACnC,IAAI,EAAE,CAAC,QAAQ;wBAAE,QAAQ,GAAG,IAAI,CAAC;gBACrC,CAAC;YACL,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrE,CAAC;CACJ,CAAA;AAhIY,iCAAiC;IAD7C,aAAa,CAAC,sBAAsB,EAAE,qCAAqC,CAAC;GAChE,iCAAiC,CAgI7C"}

package/dist/custom/PermissionProviders/ArtifactPermissionProvider.d.ts

@@ -0,0 +1,45 @@
+import { GranteeType, NormalizedPermission, PermissionAction, PermissionCheckResult, PermissionProviderBase, UserInfo } from '@memberjunction/core';
+/**
+ * Wraps the `MJ: Artifact Permissions` table behind the unified
+ * {@link PermissionProviderBase} contract. Artifact permissions are user-only
+ * and cover Read / Update / Delete / Share.
+ *
+ * This provider reads the permission table directly via RunView; it does NOT
+ * duplicate the cascade-from-collection logic of the Angular-side
+ * `ArtifactPermissionService`. Cascade evaluation belongs in the Sharing Center
+ * when it aggregates across both Artifact + Collection domains.
+ *
+ * `resourceType` is `"Artifacts"`. `resourceId` is the artifact ID.
+ */
+export declare class ArtifactPermissionProvider extends PermissionProviderBase {
+    readonly DomainName = "Artifact Permissions";
+    readonly Description = "User-level sharing permissions on conversation artifacts (Read/Update/Delete/Share)";
+    readonly SupportedGranteeTypes: GranteeType[];
+    readonly SupportedActions: PermissionAction[];
+    readonly SupportsDeny = false;
+    GetResourceTypes(): string[];
+    CheckPermission(user: UserInfo, _resourceType: string, resourceId: string | null, action: PermissionAction): Promise<PermissionCheckResult>;
+    GetEffectivePermissions(user: UserInfo, _resourceType: string, resourceId: string): Promise<NormalizedPermission[]>;
+    GetUserResources(user: UserInfo, resourceType?: string): Promise<NormalizedPermission[]>;
+    /**
+     * ArtifactPermission rows where this user is the grantee AND someone else
+     * is the grantor. Excludes rows the user created for themselves.
+     */
+    GetPermissionsSharedWithUser(grantee: UserInfo): Promise<NormalizedPermission[]>;
+    /**
+     * All ArtifactPermission rows where this user is the SharedByUserID. Unlike
+     * Dashboards, Artifacts track the grantor explicitly — there's no implicit
+     * "owner without SharedByUserID" case in this table.
+     */
+    GetPermissionsGrantedByUser(grantor: UserInfo): Promise<NormalizedPermission[]>;
+    GetResourcePermissions(resourceType: string, resourceId: string): Promise<NormalizedPermission[]>;
+    /**
+     * Shared tail for `GetUserResources` and `GetPermissionsSharedWithUser` — both
+     * emit one row per permission keyed to a specific grantee. Caller passes a
+     * function to pluck the grantee ID since the column differs subtly across paths.
+     */
+    private expandRowsAsGrantee;
+    private fetchPermissionForUser;
+    private toActions;
+}
+//# sourceMappingURL=ArtifactPermissionProvider.d.ts.map

package/dist/custom/PermissionProviders/ArtifactPermissionProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ArtifactPermissionProvider.d.ts","sourceRoot":"","sources":["../../../src/custom/PermissionProviders/ArtifactPermissionProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,WAAW,EACX,oBAAoB,EACpB,gBAAgB,EAChB,qBAAqB,EACrB,sBAAsB,EACtB,QAAQ,EACX,MAAM,sBAAsB,CAAC;AAkB9B;;;;;;;;;;;GAWG;AACH,qBACa,0BAA2B,SAAQ,sBAAsB;IAClE,QAAQ,CAAC,UAAU,0BAA0B;IAC7C,QAAQ,CAAC,WAAW,yFAAyF;IAC7G,QAAQ,CAAC,qBAAqB,EAAE,WAAW,EAAE,CAAY;IACzD,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,CAAyC;IACtF,QAAQ,CAAC,YAAY,SAAS;IAErB,gBAAgB,IAAI,MAAM,EAAE;IAI/B,eAAe,CACjB,IAAI,EAAE,QAAQ,EACd,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,MAAM,EAAE,gBAAgB,GACzB,OAAO,CAAC,qBAAqB,CAAC;IAoB3B,uBAAuB,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAcnH,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAW9F;;;OAGG;IACY,4BAA4B,CAAC,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAU/F;;;;OAIG;IACY,2BAA2B,CAAC,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IA0BxF,sBAAsB,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IA0BvG;;;;OAIG;YACW,mBAAmB;YAsBnB,sBAAsB;IAUpC,OAAO,CAAC,SAAS;CASpB"}

package/dist/custom/PermissionProviders/ArtifactPermissionProvider.js

@@ -0,0 +1,169 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { PermissionProviderBase, } from '@memberjunction/core';
+import { RegisterClass } from '@memberjunction/global';
+/**
+ * Wraps the `MJ: Artifact Permissions` table behind the unified
+ * {@link PermissionProviderBase} contract. Artifact permissions are user-only
+ * and cover Read / Update / Delete / Share.
+ *
+ * This provider reads the permission table directly via RunView; it does NOT
+ * duplicate the cascade-from-collection logic of the Angular-side
+ * `ArtifactPermissionService`. Cascade evaluation belongs in the Sharing Center
+ * when it aggregates across both Artifact + Collection domains.
+ *
+ * `resourceType` is `"Artifacts"`. `resourceId` is the artifact ID.
+ */
+let ArtifactPermissionProvider = class ArtifactPermissionProvider extends PermissionProviderBase {
+    constructor() {
+        super(...arguments);
+        this.DomainName = 'Artifact Permissions';
+        this.Description = 'User-level sharing permissions on conversation artifacts (Read/Update/Delete/Share)';
+        this.SupportedGranteeTypes = ['User'];
+        this.SupportedActions = ['Read', 'Update', 'Delete', 'Share'];
+        this.SupportsDeny = false;
+    }
+    GetResourceTypes() {
+        return ['Artifacts'];
+    }
+    async CheckPermission(user, _resourceType, resourceId, action) {
+        if (!resourceId) {
+            return {
+                Allowed: false,
+                DomainName: this.DomainName,
+                Reason: 'Artifact permissions require a specific artifact ID',
+            };
+        }
+        const row = await this.fetchPermissionForUser(resourceId, user.ID);
+        const actions = this.toActions(row);
+        const allowed = actions.includes(action);
+        return {
+            Allowed: allowed,
+            DomainName: this.DomainName,
+            Reason: allowed
+                ? `User has ${action} via direct artifact permission`
+                : `User has no ${action} permission on artifact '${resourceId}'`,
+        };
+    }
+    async GetEffectivePermissions(user, _resourceType, resourceId) {
+        const row = await this.fetchPermissionForUser(resourceId, user.ID);
+        if (!row)
+            return [];
+        const actions = this.toActions(row);
+        if (actions.length === 0)
+            return [];
+        const nameMap = await this.bulkLookupNames('MJ: Artifacts', [resourceId]);
+        return [this.buildNormalizedPermission({
+                resourceType: 'Artifacts', resourceId, resourceName: nameMap.get(resourceId),
+                granteeType: 'User', granteeId: user.ID, granteeName: user.Name, actions,
+                sourceRecordId: row.ID,
+            })];
+    }
+    async GetUserResources(user, resourceType) {
+        if (resourceType && resourceType !== 'Artifacts')
+            return [];
+        const rows = await this.fetchRows('MJ: Artifact Permissions', `UserID='${user.ID}'`, ['ID', 'ArtifactID', 'UserID', 'CanRead', 'CanEdit', 'CanDelete', 'CanShare'], 'GetUserResources');
+        return this.expandRowsAsGrantee(rows, user, (r) => r.UserID);
+    }
+    /**
+     * ArtifactPermission rows where this user is the grantee AND someone else
+     * is the grantor. Excludes rows the user created for themselves.
+     */
+    async GetPermissionsSharedWithUser(grantee) {
+        const rows = await this.fetchRows('MJ: Artifact Permissions', `UserID='${grantee.ID}' AND (SharedByUserID IS NULL OR SharedByUserID <> '${grantee.ID}')`, ['ID', 'ArtifactID', 'UserID', 'User', 'SharedByUserID', 'CanRead', 'CanEdit', 'CanDelete', 'CanShare'], 'GetPermissionsSharedWithUser');
+        return this.expandRowsAsGrantee(rows, grantee, (r) => r.UserID);
+    }
+    /**
+     * All ArtifactPermission rows where this user is the SharedByUserID. Unlike
+     * Dashboards, Artifacts track the grantor explicitly — there's no implicit
+     * "owner without SharedByUserID" case in this table.
+     */
+    async GetPermissionsGrantedByUser(grantor) {
+        const rows = await this.fetchRows('MJ: Artifact Permissions', `SharedByUserID='${grantor.ID}'`, ['ID', 'ArtifactID', 'UserID', 'User', 'SharedByUserID', 'CanRead', 'CanEdit', 'CanDelete', 'CanShare'], 'GetPermissionsGrantedByUser');
+        if (rows.length === 0)
+            return [];
+        const artifactIds = Array.from(new Set(rows.map((r) => r.ArtifactID)));
+        const nameMap = await this.bulkLookupNames('MJ: Artifacts', artifactIds);
+        const results = [];
+        for (const row of rows) {
+            const actions = this.toActions(row);
+            if (actions.length === 0)
+                continue;
+            results.push(this.buildNormalizedPermission({
+                resourceType: 'Artifacts', resourceId: row.ArtifactID,
+                resourceName: nameMap.get(row.ArtifactID),
+                granteeType: 'User', granteeId: row.UserID, granteeName: row.User ?? undefined,
+                actions, sourceRecordId: row.ID,
+            }));
+        }
+        return results;
+    }
+    async GetResourcePermissions(resourceType, resourceId) {
+        if (resourceType !== 'Artifacts')
+            return [];
+        const rows = await this.fetchRows('MJ: Artifact Permissions', `ArtifactID='${resourceId}'`, ['ID', 'ArtifactID', 'UserID', 'User', 'CanRead', 'CanEdit', 'CanDelete', 'CanShare'], 'GetResourcePermissions');
+        if (rows.length === 0)
+            return [];
+        const nameMap = await this.bulkLookupNames('MJ: Artifacts', [resourceId]);
+        const resourceName = nameMap.get(resourceId);
+        const results = [];
+        for (const row of rows) {
+            const actions = this.toActions(row);
+            if (actions.length === 0)
+                continue;
+            results.push(this.buildNormalizedPermission({
+                resourceType: 'Artifacts', resourceId, resourceName,
+                granteeType: 'User', granteeId: row.UserID, granteeName: row.User ?? undefined,
+                actions, sourceRecordId: row.ID,
+            }));
+        }
+        return results;
+    }
+    /**
+     * Shared tail for `GetUserResources` and `GetPermissionsSharedWithUser` — both
+     * emit one row per permission keyed to a specific grantee. Caller passes a
+     * function to pluck the grantee ID since the column differs subtly across paths.
+     */
+    async expandRowsAsGrantee(rows, grantee, _pluckGranteeId) {
+        if (rows.length === 0)
+            return [];
+        const artifactIds = Array.from(new Set(rows.map((r) => r.ArtifactID)));
+        const nameMap = await this.bulkLookupNames('MJ: Artifacts', artifactIds);
+        const results = [];
+        for (const row of rows) {
+            const actions = this.toActions(row);
+            if (actions.length === 0)
+                continue;
+            results.push(this.buildNormalizedPermission({
+                resourceType: 'Artifacts', resourceId: row.ArtifactID,
+                resourceName: nameMap.get(row.ArtifactID),
+                granteeType: 'User', granteeId: grantee.ID, granteeName: grantee.Name,
+                actions, sourceRecordId: row.ID,
+            }));
+        }
+        return results;
+    }
+    async fetchPermissionForUser(artifactId, userId) {
+        const rows = await this.fetchRows('MJ: Artifact Permissions', `ArtifactID='${artifactId}' AND UserID='${userId}'`, ['ID', 'ArtifactID', 'UserID', 'CanRead', 'CanEdit', 'CanDelete', 'CanShare'], 'fetchPermissionForUser');
+        return rows[0] ?? null;
+    }
+    toActions(row) {
+        if (!row)
+            return [];
+        return this.boolsToActions({
+            Read: row.CanRead,
+            Update: row.CanEdit,
+            Delete: row.CanDelete,
+            Share: row.CanShare,
+        });
+    }
+};
+ArtifactPermissionProvider = __decorate([
+    RegisterClass(PermissionProviderBase, 'MJArtifactPermissionProvider')
+], ArtifactPermissionProvider);
+export { ArtifactPermissionProvider };
+//# sourceMappingURL=ArtifactPermissionProvider.js.map

package/dist/custom/PermissionProviders/ArtifactPermissionProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ArtifactPermissionProvider.js","sourceRoot":"","sources":["../../../src/custom/PermissionProviders/ArtifactPermissionProvider.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAKH,sBAAsB,GAEzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAiBvD;;;;;;;;;;;GAWG;AAEI,IAAM,0BAA0B,GAAhC,MAAM,0BAA2B,SAAQ,sBAAsB;IAA/D;;QACM,eAAU,GAAG,sBAAsB,CAAC;QACpC,gBAAW,GAAG,qFAAqF,CAAC;QACpG,0BAAqB,GAAkB,CAAC,MAAM,CAAC,CAAC;QAChD,qBAAgB,GAAuB,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7E,iBAAY,GAAG,KAAK,CAAC;IA6KlC,CAAC;IA3KY,gBAAgB;QACrB,OAAO,CAAC,WAAW,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,eAAe,CACjB,IAAc,EACd,aAAqB,EACrB,UAAyB,EACzB,MAAwB;QAExB,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,MAAM,EAAE,qDAAqD;aAChE,CAAC;QACN,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzC,OAAO;YACH,OAAO,EAAE,OAAO;YAChB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,OAAO;gBACX,CAAC,CAAC,YAAY,MAAM,iCAAiC;gBACrD,CAAC,CAAC,eAAe,MAAM,4BAA4B,UAAU,GAAG;SACvE,CAAC;IACN,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,IAAc,EAAE,aAAqB,EAAE,UAAkB;QACnF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEpC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,eAAe,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC;gBACnC,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;gBAC5E,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO;gBACxE,cAAc,EAAE,GAAG,CAAC,EAAE;aACzB,CAAC,CAAC,CAAC;IACR,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAc,EAAE,YAAqB;QACxD,IAAI,YAAY,IAAI,YAAY,KAAK,WAAW;YAAE,OAAO,EAAE,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAC7B,0BAA0B,EAC1B,WAAW,IAAI,CAAC,EAAE,GAAG,EACrB,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC,EAC7E,kBAAkB,CACrB,CAAC;QACF,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACjE,CAAC;IAED;;;OAGG;IACM,KAAK,CAAC,4BAA4B,CAAC,OAAiB;QACzD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAC7B,0BAA0B,EAC1B,WAAW,OAAO,CAAC,EAAE,uDAAuD,OAAO,CAAC,EAAE,IAAI,EAC1F,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC,EACvG,8BAA8B,CACjC,CAAC;QACF,OAAO,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC;IAED;;;;OAIG;IACM,KAAK,CAAC,2BAA2B,CAAC,OAAiB;QACxD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAC7B,0BAA0B,EAC1B,mBAAmB,OAAO,CAAC,EAAE,GAAG,EAChC,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC,EACvG,6BAA6B,CAChC,CAAC;QACF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEjC,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;QAEzE,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACnC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC;gBACxC,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU;gBACrD,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC;gBACzC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,IAAI,IAAI,SAAS;gBAC9E,OAAO,EAAE,cAAc,EAAE,GAAG,CAAC,EAAE;aAClC,CAAC,CAAC,CAAC;QACR,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,YAAoB,EAAE,UAAkB;QACjE,IAAI,YAAY,KAAK,WAAW;YAAE,OAAO,EAAE,CAAC;QAE5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAC7B,0BAA0B,EAC1B,eAAe,UAAU,GAAG,EAC5B,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC,EACrF,wBAAwB,CAC3B,CAAC;QACF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,eAAe,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1E,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC7C,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACnC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC;gBACxC,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY;gBACnD,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,IAAI,IAAI,SAAS;gBAC9E,OAAO,EAAE,cAAc,EAAE,GAAG,CAAC,EAAE;aAClC,CAAC,CAAC,CAAC;QACR,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,mBAAmB,CAC7B,IAA6B,EAC7B,OAAiB,EACjB,eAAqD;QAErD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;QACzE,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACnC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC;gBACxC,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU;gBACrD,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC;gBACzC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI;gBACrE,OAAO,EAAE,cAAc,EAAE,GAAG,CAAC,EAAE;aAClC,CAAC,CAAC,CAAC;QACR,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,UAAkB,EAAE,MAAc;QACnE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAC7B,0BAA0B,EAC1B,eAAe,UAAU,iBAAiB,MAAM,GAAG,EACnD,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,CAAC,EAC7E,wBAAwB,CAC3B,CAAC;QACF,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC3B,CAAC;IAEO,SAAS,CAAC,GAA6C;QAC3D,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,cAAc,CAAC;YACvB,IAAI,EAAE,GAAG,CAAC,OAAO;YACjB,MAAM,EAAE,GAAG,CAAC,OAAO;YACnB,MAAM,EAAE,GAAG,CAAC,SAAS;YACrB,KAAK,EAAE,GAAG,CAAC,QAAQ;SACtB,CAAC,CAAC;IACP,CAAC;CACJ,CAAA;AAlLY,0BAA0B;IADtC,aAAa,CAAC,sBAAsB,EAAE,8BAA8B,CAAC;GACzD,0BAA0B,CAkLtC"}

package/dist/custom/PermissionProviders/CollectionPermissionProvider.d.ts

@@ -0,0 +1,40 @@
+import { GranteeType, NormalizedPermission, PermissionAction, PermissionCheckResult, PermissionProviderBase, UserInfo } from '@memberjunction/core';
+/**
+ * Wraps the `MJ: Collection Permissions` table behind the unified
+ * {@link PermissionProviderBase} contract. Collection permissions are user-only
+ * and cover Read / Update / Delete / Share.
+ *
+ * Collection-to-artifact cascade is handled by downstream consumers (the Sharing
+ * Center's Resource Access Report combines Collection + Artifact results); this
+ * provider only reports direct Collection grants.
+ *
+ * `resourceType` is `"Collections"`. `resourceId` is the collection ID.
+ */
+export declare class CollectionPermissionProvider extends PermissionProviderBase {
+    readonly DomainName = "Collection Permissions";
+    readonly Description = "User-level sharing permissions on artifact collections (Read/Update/Delete/Share)";
+    readonly SupportedGranteeTypes: GranteeType[];
+    readonly SupportedActions: PermissionAction[];
+    readonly SupportsDeny = false;
+    GetResourceTypes(): string[];
+    CheckPermission(user: UserInfo, _resourceType: string, resourceId: string | null, action: PermissionAction): Promise<PermissionCheckResult>;
+    GetEffectivePermissions(user: UserInfo, _resourceType: string, resourceId: string): Promise<NormalizedPermission[]>;
+    GetUserResources(user: UserInfo, resourceType?: string): Promise<NormalizedPermission[]>;
+    /**
+     * CollectionPermission rows where this user is the grantee AND someone else is
+     * the grantor. Excludes collections the user owns and rows they created themselves.
+     */
+    GetPermissionsSharedWithUser(grantee: UserInfo): Promise<NormalizedPermission[]>;
+    /**
+     * CollectionPermission rows this user **explicitly** granted (`SharedByUserID = grantor`).
+     * Implicit owner-shares (SharedByUserID IS NULL) are excluded because the Sharing
+     * Center's revoke flow can only delete rows where the current user is the explicit
+     * grantor.
+     */
+    GetPermissionsGrantedByUser(grantor: UserInfo): Promise<NormalizedPermission[]>;
+    GetResourcePermissions(resourceType: string, resourceId: string): Promise<NormalizedPermission[]>;
+    private fetchPermissionForUser;
+    private fetchCollection;
+    private toActions;
+}
+//# sourceMappingURL=CollectionPermissionProvider.d.ts.map

package/dist/custom/PermissionProviders/CollectionPermissionProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CollectionPermissionProvider.d.ts","sourceRoot":"","sources":["../../../src/custom/PermissionProviders/CollectionPermissionProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,WAAW,EACX,oBAAoB,EACpB,gBAAgB,EAChB,qBAAqB,EACrB,sBAAsB,EACtB,QAAQ,EACX,MAAM,sBAAsB,CAAC;AAsB9B;;;;;;;;;;GAUG;AACH,qBACa,4BAA6B,SAAQ,sBAAsB;IACpE,QAAQ,CAAC,UAAU,4BAA4B;IAC/C,QAAQ,CAAC,WAAW,uFAAuF;IAC3G,QAAQ,CAAC,qBAAqB,EAAE,WAAW,EAAE,CAAY;IACzD,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,CAAyC;IACtF,QAAQ,CAAC,YAAY,SAAS;IAErB,gBAAgB,IAAI,MAAM,EAAE;IAI/B,eAAe,CACjB,IAAI,EAAE,QAAQ,EACd,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,GAAG,IAAI,EACzB,MAAM,EAAE,gBAAgB,GACzB,OAAO,CAAC,qBAAqB,CAAC;IA8B3B,uBAAuB,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAwBnH,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAiD9F;;;OAGG;IACY,4BAA4B,CAAC,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAsC/F;;;;;OAKG;IACY,2BAA2B,CAAC,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IA4BxF,sBAAsB,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;YAmCzF,sBAAsB;YAUtB,eAAe;IAU7B,OAAO,CAAC,SAAS;CASpB"}