@memberjunction/ng-conversations 6.1.4 → 6.2.0-edge.1

package/dist/lib/services/artifact-permission.service.d.ts

@@ -36,48 +36,87 @@ export declare class ArtifactPermissionService {
     /**
      * Load all explicit permissions for an artifact
      */
+    LoadPermissions(artifactId: string, currentUser: UserInfo): Promise<ArtifactPermission[]>;
+    /** @deprecated Use {@link LoadPermissions}. */
     loadPermissions(artifactId: string, currentUser: UserInfo): Promise<ArtifactPermission[]>;
     /**
      * Check if user has specific permission for an artifact (HYBRID CHECK)
      * Checks in order: Owner > Explicit Permission > Collection Inheritance
      */
+    CheckPermission(artifactId: string, userId: string, permission: 'read' | 'edit' | 'share', currentUser: UserInfo): Promise<boolean>;
+    /** @deprecated Use {@link CheckPermission}. */
     checkPermission(artifactId: string, userId: string, permission: 'read' | 'edit' | 'share', currentUser: UserInfo): Promise<boolean>;
     /**
      * Get explicit permission record for a user on an artifact
      */
+    GetExplicitPermission(artifactId: string, userId: string, currentUser: UserInfo): Promise<ArtifactPermission | null>;
+    /** @deprecated Use {@link GetExplicitPermission}. */
     getExplicitPermission(artifactId: string, userId: string, currentUser: UserInfo): Promise<ArtifactPermission | null>;
     /**
      * Get all effective permissions for an artifact (owner + explicit + inherited)
      */
+    GetEffectiveUsers(artifactId: string, currentUser: UserInfo): Promise<EffectivePermission[]>;
+    /** @deprecated Use {@link GetEffectiveUsers}. */
     getEffectiveUsers(artifactId: string, currentUser: UserInfo): Promise<EffectivePermission[]>;
     /**
      * Grant explicit permission to a user
      */
+    GrantPermission(artifactId: string, userId: string, permissions: ArtifactPermissionSet, sharedByUserId: string, currentUser: UserInfo): Promise<MJArtifactPermissionEntity>;
+    /** @deprecated Use {@link GrantPermission}. */
     grantPermission(artifactId: string, userId: string, permissions: ArtifactPermissionSet, sharedByUserId: string, currentUser: UserInfo): Promise<MJArtifactPermissionEntity>;
     /**
      * Update existing permission
      */
+    UpdatePermission(permissionId: string, permissions: ArtifactPermissionSet, currentUser: UserInfo): Promise<boolean>;
+    /** @deprecated Use {@link UpdatePermission}. */
     updatePermission(permissionId: string, permissions: ArtifactPermissionSet, currentUser: UserInfo): Promise<boolean>;
     /**
      * Revoke explicit permission
      */
+    RevokePermission(permissionId: string, currentUser: UserInfo): Promise<boolean>;
+    /** @deprecated Use {@link RevokePermission}. */
     revokePermission(permissionId: string, currentUser: UserInfo): Promise<boolean>;
     /**
      * Validate that requested permissions don't exceed granter's permissions
      */
+    ValidatePermissions(requested: ArtifactPermissionSet, granter: ArtifactPermissionSet, isOwner: boolean): boolean;
+    /** @deprecated Use {@link ValidatePermissions}. */
     validatePermissions(requested: ArtifactPermissionSet, granter: ArtifactPermissionSet, isOwner: boolean): boolean;
     /**
      * Get available permissions for a user to grant based on their own permissions
      */
+    GetAvailablePermissions(userPermissions: ArtifactPermissionSet, isOwner: boolean): string[];
+    /** @deprecated Use {@link GetAvailablePermissions}. */
     getAvailablePermissions(userPermissions: ArtifactPermissionSet, isOwner: boolean): string[];
     /**
      * Check if user is owner of artifact
      */
+    IsOwner(artifactId: string, userId: string, currentUser: UserInfo): Promise<boolean>;
+    /** @deprecated Use {@link IsOwner}. */
     isOwner(artifactId: string, userId: string, currentUser: UserInfo): Promise<boolean>;
     /**
      * Get all permissions for current user on an artifact (convenience method for UI)
      */
+    GetUserPermissions(artifactId: string, currentUser: UserInfo): Promise<ArtifactPermissionSet>;
+    /** @deprecated Use {@link GetUserPermissions}. */
     getUserPermissions(artifactId: string, currentUser: UserInfo): Promise<ArtifactPermissionSet>;
+    /**
+     * Returns an `ExtraFilter` for `MJ: Artifacts` that matches the artifacts the user can read,
+     * by the same rule as {@link CheckPermission}: the user owns it, else an explicit grant
+     * decides, else a read grant on a collection that holds a version of it.
+     *
+     * Each lookup runs against its own entity, so the filter holds only `UserID` and IDs.
+     */
+    GetReadableArtifactsFilter(userId: string, currentUser: UserInfo): Promise<string>;
+    /**
+     * IDs of artifacts that have at least one version in any of the given collections.
+     */
+    private getArtifactIdsInCollections;
+    /**
+     * Applies the grant order: an explicit grant decides for its artifact; collection access
+     * counts only for artifacts that have no explicit grant.
+     */
+    private resolveReadableArtifactIds;
     /**
      * Helper: Get artifact record
      */

package/dist/lib/services/artifact-permission.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-permission.service.d.ts","sourceRoot":"","sources":["../../../src/lib/services/artifact-permission.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAqB,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACtF,OAAO,EAAE,0BAA0B,EAAgD,MAAM,+BAA+B,CAAC;AACzH,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;;AAG9E,MAAM,WAAW,kBAAkB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,mBAAoB,SAAQ,kBAAkB;IAC3D,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,YAAY,CAAC;IAC5C,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,qBAAqB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;CACrB;AAED,qBAGa,yBAAyB;IAI9B,OAAO,CAAC,2BAA2B;IAHvC,OAAO,CAAC,SAAS,CAAkC;gBAGvC,2BAA2B,EAAE,2BAA2B;IAGpE;;;OAGG;IACH,IAAW,QAAQ,IAAI,iBAAiB,CAEvC;IACD,IAAW,QAAQ,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI,EAKlD;IAED;;OAEG;IACG,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAe/F;;;OAGG;IACG,eAAe,CACjB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EACrC,WAAW,EAAE,QAAQ,GACtB,OAAO,CAAC,OAAO,CAAC;IA+BnB;;OAEG;IACG,qBAAqB,CACvB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,QAAQ,GACtB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAerC;;OAEG;IACG,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAmElG;;OAEG;IACG,eAAe,CACjB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,qBAAqB,EAClC,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,QAAQ,GACtB,OAAO,CAAC,0BAA0B,CAAC;IAsBtC;;OAEG;IACG,gBAAgB,CAClB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,qBAAqB,EAClC,WAAW,EAAE,QAAQ,GACtB,OAAO,CAAC,OAAO,CAAC;IAenB;;OAEG;IACG,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAWrF;;OAEG;IACH,mBAAmB,CACf,SAAS,EAAE,qBAAqB,EAChC,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,OAAO,GACjB,OAAO;IAUV;;OAEG;IACH,uBAAuB,CAAC,eAAe,EAAE,qBAAqB,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE;IAY3F;;OAEG;IACG,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAK1F;;OAEG;IACG,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAUnG;;OAEG;YACW,WAAW;IAezB;;OAEG;YACW,sBAAsB;IAgBpC;;OAEG;IACH,OAAO,CAAC,aAAa;IAarB;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAgB/B,OAAO,CAAC,eAAe;yCA3Wd,yBAAyB;6CAAzB,yBAAyB;CAyXrC"}
+{"version":3,"file":"artifact-permission.service.d.ts","sourceRoot":"","sources":["../../../src/lib/services/artifact-permission.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAqB,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACtF,OAAO,EAAE,0BAA0B,EAAgD,MAAM,+BAA+B,CAAC;AAEzH,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;;AAQ9E,MAAM,WAAW,kBAAkB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,mBAAoB,SAAQ,kBAAkB;IAC3D,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,YAAY,CAAC;IAC5C,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,qBAAqB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;CACrB;AAED,qBAGa,yBAAyB;IAI9B,OAAO,CAAC,2BAA2B;IAHvC,OAAO,CAAC,SAAS,CAAkC;gBAGvC,2BAA2B,EAAE,2BAA2B;IAGpE;;;OAGG;IACH,IAAW,QAAQ,IAAI,iBAAiB,CAEvC;IACD,IAAW,QAAQ,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI,EAKlD;IAED;;OAEG;IACG,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAe/F,+CAA+C;IACzC,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAI/F;;;OAGG;IACG,eAAe,CACjB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EACrC,WAAW,EAAE,QAAQ,GACtB,OAAO,CAAC,OAAO,CAAC;IA+BnB,+CAA+C;IACzC,eAAe,CACjB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EACrC,WAAW,EAAE,QAAQ,GACtB,OAAO,CAAC,OAAO,CAAC;IAInB;;OAEG;IACG,qBAAqB,CACvB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,QAAQ,GACtB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAerC,qDAAqD;IAC/C,qBAAqB,CACvB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,QAAQ,GACtB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAIrC;;OAEG;IACG,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAmElG,iDAAiD;IAC3C,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAIlG;;OAEG;IACG,eAAe,CACjB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,qBAAqB,EAClC,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,QAAQ,GACtB,OAAO,CAAC,0BAA0B,CAAC;IAsBtC,+CAA+C;IACzC,eAAe,CACjB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,qBAAqB,EAClC,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,QAAQ,GACtB,OAAO,CAAC,0BAA0B,CAAC;IAItC;;OAEG;IACG,gBAAgB,CAClB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,qBAAqB,EAClC,WAAW,EAAE,QAAQ,GACtB,OAAO,CAAC,OAAO,CAAC;IAenB,gDAAgD;IAC1C,gBAAgB,CAClB,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,qBAAqB,EAClC,WAAW,EAAE,QAAQ,GACtB,OAAO,CAAC,OAAO,CAAC;IAInB;;OAEG;IACG,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAWrF,gDAAgD;IAC1C,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAIrF;;OAEG;IACH,mBAAmB,CACf,SAAS,EAAE,qBAAqB,EAChC,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,OAAO,GACjB,OAAO;IAUV,mDAAmD;IACnD,mBAAmB,CACf,SAAS,EAAE,qBAAqB,EAChC,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,OAAO,GACjB,OAAO;IAIV;;OAEG;IACH,uBAAuB,CAAC,eAAe,EAAE,qBAAqB,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE;IAY3F,uDAAuD;IACvD,uBAAuB,CAAC,eAAe,EAAE,qBAAqB,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE;IAI3F;;OAEG;IACG,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAK1F,uCAAuC;IACjC,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAI1F;;OAEG;IACG,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAUnG,kDAAkD;IAC5C,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAInG;;;;;;OAMG;IACG,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC;IAqCxF;;OAEG;YACW,2BAA2B;IA0BzC;;;OAGG;IACH,OAAO,CAAC,0BAA0B;IAuBlC;;OAEG;YACW,WAAW;IAezB;;OAEG;YACW,sBAAsB;IAgBpC;;OAEG;IACH,OAAO,CAAC,aAAa;IAarB;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAgB/B,OAAO,CAAC,eAAe;yCA7hBd,yBAAyB;6CAAzB,yBAAyB;CA2iBrC"}

package/dist/lib/services/artifact-permission.service.js

@@ -1,6 +1,6 @@
 import { Injectable } from '@angular/core';
 import { RunView, Metadata } from '@memberjunction/core';
-import { UUIDsEqual } from '@memberjunction/global';
+import { NormalizeUUID, UUIDsEqual } from '@memberjunction/global';
 import * as i0 from "@angular/core";
 import * as i1 from "./collection-permission.service";
 export class ArtifactPermissionService {
@@ -25,7 +25,7 @@ export class ArtifactPermissionService {
     /**
      * Load all explicit permissions for an artifact
      */
-    async loadPermissions(artifactId, currentUser) {
+    async LoadPermissions(artifactId, currentUser) {
         const rv = RunView.FromMetadataProvider(this.Provider);
         const result = await rv.RunView({
             EntityName: 'MJ: Artifact Permissions',
@@ -38,18 +38,22 @@ export class ArtifactPermissionService {
         }
         return [];
     }
+    /** @deprecated Use {@link LoadPermissions}. */
+    async loadPermissions(artifactId, currentUser) {
+        return this.LoadPermissions(artifactId, currentUser);
+    }
     /**
      * Check if user has specific permission for an artifact (HYBRID CHECK)
      * Checks in order: Owner > Explicit Permission > Collection Inheritance
      */
-    async checkPermission(artifactId, userId, permission, currentUser) {
+    async CheckPermission(artifactId, userId, permission, currentUser) {
         // 1. Check ownership - owner has all permissions
         const artifact = await this.getArtifact(artifactId, currentUser);
         if (artifact && UUIDsEqual(artifact.UserID, userId)) {
             return true;
         }
         // 2. Check explicit artifact permission
-        const explicit = await this.getExplicitPermission(artifactId, userId, currentUser);
+        const explicit = await this.GetExplicitPermission(artifactId, userId, currentUser);
         if (explicit) {
             return this.hasPermission(explicit, permission);
         }
@@ -64,10 +68,14 @@ export class ArtifactPermissionService {
         // 4. No access
         return false;
     }
+    /** @deprecated Use {@link CheckPermission}. */
+    async checkPermission(artifactId, userId, permission, currentUser) {
+        return this.CheckPermission(artifactId, userId, permission, currentUser);
+    }
     /**
      * Get explicit permission record for a user on an artifact
      */
-    async getExplicitPermission(artifactId, userId, currentUser) {
+    async GetExplicitPermission(artifactId, userId, currentUser) {
         const rv = RunView.FromMetadataProvider(this.Provider);
         const result = await rv.RunView({
             EntityName: 'MJ: Artifact Permissions',
@@ -80,10 +88,14 @@ export class ArtifactPermissionService {
         }
         return null;
     }
+    /** @deprecated Use {@link GetExplicitPermission}. */
+    async getExplicitPermission(artifactId, userId, currentUser) {
+        return this.GetExplicitPermission(artifactId, userId, currentUser);
+    }
     /**
      * Get all effective permissions for an artifact (owner + explicit + inherited)
      */
-    async getEffectiveUsers(artifactId, currentUser) {
+    async GetEffectiveUsers(artifactId, currentUser) {
         const effectivePermissions = [];
         const seenUsers = new Set();
         // 1. Add owner
@@ -105,7 +117,7 @@ export class ArtifactPermissionService {
             seenUsers.add(artifact.UserID);
         }
         // 2. Add explicit permissions
-        const explicitPerms = await this.loadPermissions(artifactId, currentUser);
+        const explicitPerms = await this.LoadPermissions(artifactId, currentUser);
         for (const perm of explicitPerms) {
             if (!seenUsers.has(perm.userId)) {
                 effectivePermissions.push({
@@ -141,10 +153,14 @@ export class ArtifactPermissionService {
         }
         return effectivePermissions;
     }
+    /** @deprecated Use {@link GetEffectiveUsers}. */
+    async getEffectiveUsers(artifactId, currentUser) {
+        return this.GetEffectiveUsers(artifactId, currentUser);
+    }
     /**
      * Grant explicit permission to a user
      */
-    async grantPermission(artifactId, userId, permissions, sharedByUserId, currentUser) {
+    async GrantPermission(artifactId, userId, permissions, sharedByUserId, currentUser) {
         const md = this.Provider;
         const permission = await md.GetEntityObject('MJ: Artifact Permissions', currentUser);
         permission.ArtifactID = artifactId;
@@ -159,10 +175,14 @@ export class ArtifactPermissionService {
         }
         return permission;
     }
+    /** @deprecated Use {@link GrantPermission}. */
+    async grantPermission(artifactId, userId, permissions, sharedByUserId, currentUser) {
+        return this.GrantPermission(artifactId, userId, permissions, sharedByUserId, currentUser);
+    }
     /**
      * Update existing permission
      */
-    async updatePermission(permissionId, permissions, currentUser) {
+    async UpdatePermission(permissionId, permissions, currentUser) {
         const md = this.Provider;
         const permission = await md.GetEntityObject('MJ: Artifact Permissions', currentUser);
         await permission.Load(permissionId);
@@ -171,19 +191,27 @@ export class ArtifactPermissionService {
         permission.CanShare = permissions.canShare;
         return await permission.Save();
     }
+    /** @deprecated Use {@link UpdatePermission}. */
+    async updatePermission(permissionId, permissions, currentUser) {
+        return this.UpdatePermission(permissionId, permissions, currentUser);
+    }
     /**
      * Revoke explicit permission
      */
-    async revokePermission(permissionId, currentUser) {
+    async RevokePermission(permissionId, currentUser) {
         const md = this.Provider;
         const permission = await md.GetEntityObject('MJ: Artifact Permissions', currentUser);
         await permission.Load(permissionId);
         return await permission.Delete();
     }
+    /** @deprecated Use {@link RevokePermission}. */
+    async revokePermission(permissionId, currentUser) {
+        return this.RevokePermission(permissionId, currentUser);
+    }
     /**
      * Validate that requested permissions don't exceed granter's permissions
      */
-    validatePermissions(requested, granter, isOwner) {
+    ValidatePermissions(requested, granter, isOwner) {
         if (isOwner)
             return true; // Owner can grant anything
         // Can't grant permissions you don't have
@@ -193,10 +221,14 @@ export class ArtifactPermissionService {
             return false;
         return true;
     }
+    /** @deprecated Use {@link ValidatePermissions}. */
+    validatePermissions(requested, granter, isOwner) {
+        return this.ValidatePermissions(requested, granter, isOwner);
+    }
     /**
      * Get available permissions for a user to grant based on their own permissions
      */
-    getAvailablePermissions(userPermissions, isOwner) {
+    GetAvailablePermissions(userPermissions, isOwner) {
         if (isOwner) {
             return ['Read', 'Edit', 'Share'];
         }
@@ -207,24 +239,127 @@ export class ArtifactPermissionService {
             available.push('Share');
         return available;
     }
+    /** @deprecated Use {@link GetAvailablePermissions}. */
+    getAvailablePermissions(userPermissions, isOwner) {
+        return this.GetAvailablePermissions(userPermissions, isOwner);
+    }
     /**
      * Check if user is owner of artifact
      */
-    async isOwner(artifactId, userId, currentUser) {
+    async IsOwner(artifactId, userId, currentUser) {
         const artifact = await this.getArtifact(artifactId, currentUser);
         return artifact ? UUIDsEqual(artifact.UserID, userId) : false;
     }
+    /** @deprecated Use {@link IsOwner}. */
+    async isOwner(artifactId, userId, currentUser) {
+        return this.IsOwner(artifactId, userId, currentUser);
+    }
     /**
      * Get all permissions for current user on an artifact (convenience method for UI)
      */
-    async getUserPermissions(artifactId, currentUser) {
+    async GetUserPermissions(artifactId, currentUser) {
         const [canRead, canEdit, canShare] = await Promise.all([
-            this.checkPermission(artifactId, currentUser.ID, 'read', currentUser),
-            this.checkPermission(artifactId, currentUser.ID, 'edit', currentUser),
-            this.checkPermission(artifactId, currentUser.ID, 'share', currentUser)
+            this.CheckPermission(artifactId, currentUser.ID, 'read', currentUser),
+            this.CheckPermission(artifactId, currentUser.ID, 'edit', currentUser),
+            this.CheckPermission(artifactId, currentUser.ID, 'share', currentUser)
         ]);
         return { canRead, canEdit, canShare };
     }
+    /** @deprecated Use {@link GetUserPermissions}. */
+    async getUserPermissions(artifactId, currentUser) {
+        return this.GetUserPermissions(artifactId, currentUser);
+    }
+    /**
+     * Returns an `ExtraFilter` for `MJ: Artifacts` that matches the artifacts the user can read,
+     * by the same rule as {@link CheckPermission}: the user owns it, else an explicit grant
+     * decides, else a read grant on a collection that holds a version of it.
+     *
+     * Each lookup runs against its own entity, so the filter holds only `UserID` and IDs.
+     */
+    async GetReadableArtifactsFilter(userId, currentUser) {
+        const ownerOnly = `(UserID='${userId}')`;
+        const rv = RunView.FromMetadataProvider(this.Provider);
+        const [grantResult, collectionResult] = await rv.RunViews([
+            {
+                EntityName: 'MJ: Artifact Permissions',
+                ExtraFilter: `UserID='${userId}'`,
+                Fields: ['ArtifactID', 'CanRead'],
+                ResultType: 'simple'
+            },
+            {
+                EntityName: 'MJ: Collection Permissions',
+                ExtraFilter: `UserID='${userId}' AND CanRead=1`,
+                Fields: ['CollectionID'],
+                ResultType: 'simple'
+            }
+        ], currentUser);
+        // Without the explicit grants, a grant that withholds read is unknown, so collection
+        // access cannot be applied safely.
+        if (!grantResult.Success) {
+            console.error('Failed to load artifact grants:', grantResult.ErrorMessage);
+            return ownerOnly;
+        }
+        const grants = (grantResult.Results ?? []);
+        const collectionIds = collectionResult.Success
+            ? (collectionResult.Results ?? []).map(r => r.CollectionID)
+            : [];
+        const collectionArtifactIds = await this.getArtifactIdsInCollections(collectionIds, currentUser);
+        const readableIds = this.resolveReadableArtifactIds(grants, collectionArtifactIds);
+        return readableIds.length > 0
+            ? `(UserID='${userId}' OR ID IN (${readableIds.map(id => `'${id}'`).join(',')}))`
+            : ownerOnly;
+    }
+    /**
+     * IDs of artifacts that have at least one version in any of the given collections.
+     */
+    async getArtifactIdsInCollections(collectionIds, currentUser) {
+        if (collectionIds.length === 0) {
+            return [];
+        }
+        const rv = RunView.FromMetadataProvider(this.Provider);
+        const versionResult = await rv.RunView({
+            EntityName: 'MJ: Collection Artifacts',
+            ExtraFilter: `CollectionID IN (${collectionIds.map(id => `'${id}'`).join(',')})`,
+            Fields: ['ArtifactVersionID'],
+            ResultType: 'simple'
+        }, currentUser);
+        const versionIds = versionResult.Success ? (versionResult.Results ?? []).map(r => r.ArtifactVersionID) : [];
+        if (versionIds.length === 0) {
+            return [];
+        }
+        const artifactResult = await rv.RunView({
+            EntityName: 'MJ: Artifact Versions',
+            ExtraFilter: `ID IN (${versionIds.map(id => `'${id}'`).join(',')})`,
+            Fields: ['ArtifactID'],
+            ResultType: 'simple'
+        }, currentUser);
+        return artifactResult.Success ? (artifactResult.Results ?? []).map(r => r.ArtifactID) : [];
+    }
+    /**
+     * Applies the grant order: an explicit grant decides for its artifact; collection access
+     * counts only for artifacts that have no explicit grant.
+     */
+    resolveReadableArtifactIds(grants, collectionArtifactIds) {
+        const explicitRead = new Map();
+        for (const grant of grants) {
+            const key = NormalizeUUID(grant.ArtifactID);
+            const canRead = (explicitRead.get(key)?.canRead ?? false) || !!grant.CanRead;
+            explicitRead.set(key, { id: grant.ArtifactID, canRead });
+        }
+        const readable = new Map();
+        for (const { id, canRead } of explicitRead.values()) {
+            if (canRead) {
+                readable.set(NormalizeUUID(id), id);
+            }
+        }
+        for (const id of collectionArtifactIds) {
+            const key = NormalizeUUID(id);
+            if (!explicitRead.has(key) && !readable.has(key)) {
+                readable.set(key, id);
+            }
+        }
+        return [...readable.values()];
+    }
     /**
      * Helper: Get artifact record
      */

package/dist/lib/services/artifact-permission.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-permission.service.js","sourceRoot":"","sources":["../../../src/lib/services/artifact-permission.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAY,OAAO,EAAE,QAAQ,EAAqB,MAAM,sBAAsB,CAAC;AAGtF,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;;;AA6BpD,MAAM,OAAO,yBAAyB;IAItB;IAHJ,SAAS,GAA6B,IAAI,CAAC;IAEnD,YACY,2BAAwD;QAAxD,gCAA2B,GAA3B,2BAA2B,CAA6B;IACjE,CAAC;IAEJ;;;OAGG;IACH,IAAW,QAAQ;QACf,OAAO,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,QAAQ,CAAC;IAC/C,CAAC;IACD,IAAW,QAAQ,CAAC,KAA+B;QAC/C,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACjB,IAAI,CAAC,2BAA2B,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtD,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,UAAkB,EAAE,WAAqB;QAC3D,MAAM,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAA6B;YACxD,UAAU,EAAE,0BAA0B;YACtC,WAAW,EAAE,eAAe,UAAU,GAAG;YACzC,OAAO,EAAE,oBAAoB;YAC7B,UAAU,EAAE,eAAe;SAC9B,EAAE,WAAW,CAAC,CAAC;QAEhB,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnC,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,EAAE,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CACjB,UAAkB,EAClB,MAAc,EACd,UAAqC,EACrC,WAAqB;QAErB,iDAAiD;QACjD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACjE,IAAI,QAAQ,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,wCAAwC;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QACnF,IAAI,QAAQ,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACpD,CAAC;QAED,6CAA6C;QAC7C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAC/E,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACnC,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,eAAe,CAC/E,UAAU,CAAC,YAAY,EACvB,MAAM,EACN,WAAW,CACd,CAAC;YAEF,IAAI,oBAAoB,IAAI,IAAI,CAAC,uBAAuB,CAAC,oBAAoB,EAAE,UAAU,CAAC,EAAE,CAAC;gBACzF,OAAO,IAAI,CAAC,CAAC,4BAA4B;YAC7C,CAAC;QACL,CAAC;QAED,eAAe;QACf,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CACvB,UAAkB,EAClB,MAAc,EACd,WAAqB;QAErB,MAAM,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAA6B;YACxD,UAAU,EAAE,0BAA0B;YACtC,WAAW,EAAE,eAAe,UAAU,iBAAiB,MAAM,GAAG;YAChE,OAAO,EAAE,CAAC;YACV,UAAU,EAAE,eAAe;SAC9B,EAAE,WAAW,CAAC,CAAC;QAEhB,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,UAAkB,EAAE,WAAqB;QAC7D,MAAM,oBAAoB,GAA0B,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QAEpC,eAAe;QACf,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACjE,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC9B,oBAAoB,CAAC,IAAI,CAAC;gBACtB,EAAE,EAAE,EAAE,EAAE,iCAAiC;gBACzC,UAAU,EAAE,UAAU;gBACtB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI,IAAI,OAAO;gBAClC,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,IAAI;gBACd,cAAc,EAAE,IAAI;gBACpB,gBAAgB,EAAE,IAAI;gBACtB,QAAQ,EAAE,QAAQ,CAAC,cAAc;gBACjC,MAAM,EAAE,OAAO;aAClB,CAAC,CAAC;YACH,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QAED,8BAA8B;QAC9B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAC1E,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YAC/B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9B,oBAAoB,CAAC,IAAI,CAAC;oBACtB,GAAG,IAAI;oBACP,MAAM,EAAE,UAAU;iBACrB,CAAC,CAAC;gBACH,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/B,CAAC;QACL,CAAC;QAED,0CAA0C;QAC1C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAC/E,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACnC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,eAAe,CAC1E,UAAU,CAAC,YAAY,EACvB,WAAW,CACd,CAAC;YAEF,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;gBACrC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClC,oBAAoB,CAAC,IAAI,CAAC;wBACtB,EAAE,EAAE,EAAE;wBACN,UAAU,EAAE,UAAU;wBACtB,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO;wBACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;wBACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,cAAc,EAAE,QAAQ,CAAC,cAAc;wBACvC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;wBAC3C,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,MAAM,EAAE,YAAY;wBACpB,cAAc,EAAE,UAAU,CAAC,UAAU,IAAI,oBAAoB;qBAChE,CAAC,CAAC;oBACH,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACnC,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,oBAAoB,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACjB,UAAkB,EAClB,MAAc,EACd,WAAkC,EAClC,cAAsB,EACtB,WAAqB;QAErB,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QACzB,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,eAAe,CACvC,0BAA0B,EAC1B,WAAW,CACd,CAAC;QAEF,UAAU,CAAC,UAAU,GAAG,UAAU,CAAC;QACnC,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC;QAC3B,UAAU,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;QACzC,UAAU,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;QACzC,UAAU,CAAC,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC;QAC3C,UAAU,CAAC,cAAc,GAAG,cAAc,CAAC;QAE3C,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,OAAO,IAAI,4BAA4B,CAAC,CAAC;QACtF,CAAC;QAED,OAAO,UAAU,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAClB,YAAoB,EACpB,WAAkC,EAClC,WAAqB;QAErB,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QACzB,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,eAAe,CACvC,0BAA0B,EAC1B,WAAW,CACd,CAAC;QAEF,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACpC,UAAU,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;QACzC,UAAU,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;QACzC,UAAU,CAAC,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC;QAE3C,OAAO,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,YAAoB,EAAE,WAAqB;QAC9D,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QACzB,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,eAAe,CACvC,0BAA0B,EAC1B,WAAW,CACd,CAAC;QAEF,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACpC,OAAO,MAAM,UAAU,CAAC,MAAM,EAAE,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,mBAAmB,CACf,SAAgC,EAChC,OAA8B,EAC9B,OAAgB;QAEhB,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC,CAAC,2BAA2B;QAErD,yCAAyC;QACzC,IAAI,SAAS,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QACxD,IAAI,SAAS,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAE1D,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,uBAAuB,CAAC,eAAsC,EAAE,OAAgB;QAC5E,IAAI,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB;QAC/C,IAAI,eAAe,CAAC,OAAO;YAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,eAAe,CAAC,QAAQ;YAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEtD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,UAAkB,EAAE,MAAc,EAAE,WAAqB;QACnE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACjE,OAAO,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CAAC,UAAkB,EAAE,WAAqB;QAC9D,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACnD,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC;YACrE,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC;YACrE,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC;SACzE,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC1C,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW,CAAC,UAAkB,EAAE,WAAqB;QAC/D,MAAM,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAmB;YAC9C,UAAU,EAAE,eAAe;YAC3B,WAAW,EAAE,OAAO,UAAU,GAAG;YACjC,OAAO,EAAE,CAAC;YACV,UAAU,EAAE,eAAe;SAC9B,EAAE,WAAW,CAAC,CAAC;QAEhB,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,sBAAsB,CAChC,UAAkB,EAClB,WAAqB;QAErB,MAAM,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAA6B;YACxD,UAAU,EAAE,0BAA0B;YACtC,WAAW,EAAE;+EACsD,UAAU;cAC3E;YACF,UAAU,EAAE,eAAe;SAC9B,EAAE,WAAW,CAAC,CAAC;QAEhB,OAAO,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,UAA8B,EAAE,IAA+B;QACjF,QAAQ,IAAI,EAAE,CAAC;YACX,KAAK,MAAM;gBACP,OAAO,UAAU,CAAC,OAAO,CAAC;YAC9B,KAAK,MAAM;gBACP,OAAO,UAAU,CAAC,OAAO,CAAC;YAC9B,KAAK,OAAO;gBACR,OAAO,UAAU,CAAC,QAAQ,CAAC;YAC/B;gBACI,OAAO,KAAK,CAAC;QACrB,CAAC;IACL,CAAC;IAED;;OAEG;IACK,uBAAuB,CAC3B,UAAqE,EACrE,IAA+B;QAE/B,QAAQ,IAAI,EAAE,CAAC;YACX,KAAK,MAAM;gBACP,OAAO,UAAU,CAAC,OAAO,CAAC;YAC9B,KAAK,MAAM;gBACP,OAAO,UAAU,CAAC,OAAO,CAAC;YAC9B,KAAK,OAAO;gBACR,OAAO,UAAU,CAAC,QAAQ,CAAC;YAC/B;gBACI,OAAO,KAAK,CAAC;QACrB,CAAC;IACL,CAAC;IAEO,eAAe,CAAC,MAAkC;QACtD,OAAO;YACH,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI;YAC7C,gBAAgB,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;YAC7C,QAAQ,EAAE,MAAM,CAAC,cAAc;SAClC,CAAC;IACN,CAAC;mHAxXQ,yBAAyB;gEAAzB,yBAAyB,WAAzB,yBAAyB,mBAFtB,MAAM;;iFAET,yBAAyB;cAHrC,UAAU;eAAC;gBACR,UAAU,EAAE,MAAM;aACrB","sourcesContent":["import { Injectable } from '@angular/core';\nimport { UserInfo, RunView, Metadata, IMetadataProvider } from '@memberjunction/core';\nimport { MJArtifactPermissionEntity, MJArtifactEntity, MJCollectionArtifactEntity } from '@memberjunction/core-entities';\nimport { CollectionPermissionService } from './collection-permission.service';\nimport { UUIDsEqual } from '@memberjunction/global';\n\nexport interface ArtifactPermission {\n    id: string;\n    artifactId: string;\n    userId: string;\n    userName: string;\n    canRead: boolean;\n    canEdit: boolean;\n    canShare: boolean;\n    sharedByUserId: string | null;\n    sharedByUserName: string | null;\n    sharedAt: Date;\n}\n\nexport interface EffectivePermission extends ArtifactPermission {\n    source: 'owner' | 'explicit' | 'collection';\n    collectionName?: string; // If inherited from collection\n}\n\nexport interface ArtifactPermissionSet {\n    canRead: boolean;\n    canEdit: boolean;\n    canShare: boolean;\n}\n\n@Injectable({\n    providedIn: 'root'\n})\nexport class ArtifactPermissionService {\n    private _provider: IMetadataProvider | null = null;\n\n    constructor(\n        private collectionPermissionService: CollectionPermissionService\n    ) {}\n\n    /**\n     * The metadata provider this service uses. When unset, falls back to Metadata.Provider.\n     * Setting it also propagates to the collection-permission service this depends on.\n     */\n    public get Provider(): IMetadataProvider {\n        return this._provider ?? Metadata.Provider;\n    }\n    public set Provider(value: IMetadataProvider | null) {\n        this._provider = value;\n        if (value !== null) {\n            this.collectionPermissionService.Provider = value;\n        }\n    }\n\n    /**\n     * Load all explicit permissions for an artifact\n     */\n    async loadPermissions(artifactId: string, currentUser: UserInfo): Promise<ArtifactPermission[]> {\n        const rv = RunView.FromMetadataProvider(this.Provider);\n        const result = await rv.RunView<MJArtifactPermissionEntity>({\n            EntityName: 'MJ: Artifact Permissions',\n            ExtraFilter: `ArtifactID='${artifactId}'`,\n            OrderBy: '__mj_CreatedAt ASC',\n            ResultType: 'entity_object'\n        }, currentUser);\n\n        if (result.Success && result.Results) {\n            return result.Results.map(p => this.mapToPermission(p));\n        }\n        return [];\n    }\n\n    /**\n     * Check if user has specific permission for an artifact (HYBRID CHECK)\n     * Checks in order: Owner > Explicit Permission > Collection Inheritance\n     */\n    async checkPermission(\n        artifactId: string,\n        userId: string,\n        permission: 'read' | 'edit' | 'share',\n        currentUser: UserInfo\n    ): Promise<boolean> {\n        // 1. Check ownership - owner has all permissions\n        const artifact = await this.getArtifact(artifactId, currentUser);\n        if (artifact && UUIDsEqual(artifact.UserID, userId)) {\n            return true;\n        }\n\n        // 2. Check explicit artifact permission\n        const explicit = await this.getExplicitPermission(artifactId, userId, currentUser);\n        if (explicit) {\n            return this.hasPermission(explicit, permission);\n        }\n\n        // 3. Check collection permission inheritance\n        const collections = await this.getArtifactCollections(artifactId, currentUser);\n        for (const collection of collections) {\n            const collectionPermission = await this.collectionPermissionService.checkPermission(\n                collection.CollectionID,\n                userId,\n                currentUser\n            );\n\n            if (collectionPermission && this.hasCollectionPermission(collectionPermission, permission)) {\n                return true; // Inherited from collection\n            }\n        }\n\n        // 4. No access\n        return false;\n    }\n\n    /**\n     * Get explicit permission record for a user on an artifact\n     */\n    async getExplicitPermission(\n        artifactId: string,\n        userId: string,\n        currentUser: UserInfo\n    ): Promise<ArtifactPermission | null> {\n        const rv = RunView.FromMetadataProvider(this.Provider);\n        const result = await rv.RunView<MJArtifactPermissionEntity>({\n            EntityName: 'MJ: Artifact Permissions',\n            ExtraFilter: `ArtifactID='${artifactId}' AND UserID='${userId}'`,\n            MaxRows: 1,\n            ResultType: 'entity_object'\n        }, currentUser);\n\n        if (result.Success && result.Results && result.Results.length > 0) {\n            return this.mapToPermission(result.Results[0]);\n        }\n        return null;\n    }\n\n    /**\n     * Get all effective permissions for an artifact (owner + explicit + inherited)\n     */\n    async getEffectiveUsers(artifactId: string, currentUser: UserInfo): Promise<EffectivePermission[]> {\n        const effectivePermissions: EffectivePermission[] = [];\n        const seenUsers = new Set<string>();\n\n        // 1. Add owner\n        const artifact = await this.getArtifact(artifactId, currentUser);\n        if (artifact && artifact.UserID) {\n            effectivePermissions.push({\n                id: '', // No permission record for owner\n                artifactId: artifactId,\n                userId: artifact.UserID,\n                userName: artifact.User || 'Owner',\n                canRead: true,\n                canEdit: true,\n                canShare: true,\n                sharedByUserId: null,\n                sharedByUserName: null,\n                sharedAt: artifact.__mj_CreatedAt,\n                source: 'owner'\n            });\n            seenUsers.add(artifact.UserID);\n        }\n\n        // 2. Add explicit permissions\n        const explicitPerms = await this.loadPermissions(artifactId, currentUser);\n        for (const perm of explicitPerms) {\n            if (!seenUsers.has(perm.userId)) {\n                effectivePermissions.push({\n                    ...perm,\n                    source: 'explicit'\n                });\n                seenUsers.add(perm.userId);\n            }\n        }\n\n        // 3. Add collection-inherited permissions\n        const collections = await this.getArtifactCollections(artifactId, currentUser);\n        for (const collection of collections) {\n            const collectionPerms = await this.collectionPermissionService.loadPermissions(\n                collection.CollectionID,\n                currentUser\n            );\n\n            for (const collPerm of collectionPerms) {\n                if (!seenUsers.has(collPerm.userId)) {\n                    effectivePermissions.push({\n                        id: '',\n                        artifactId: artifactId,\n                        userId: collPerm.userId,\n                        userName: collPerm.userName,\n                        canRead: collPerm.canRead,\n                        canEdit: collPerm.canEdit,\n                        canShare: collPerm.canShare,\n                        sharedByUserId: collPerm.sharedByUserId,\n                        sharedByUserName: collPerm.sharedByUserName,\n                        sharedAt: collPerm.sharedAt,\n                        source: 'collection',\n                        collectionName: collection.Collection || 'Unknown Collection'\n                    });\n                    seenUsers.add(collPerm.userId);\n                }\n            }\n        }\n\n        return effectivePermissions;\n    }\n\n    /**\n     * Grant explicit permission to a user\n     */\n    async grantPermission(\n        artifactId: string,\n        userId: string,\n        permissions: ArtifactPermissionSet,\n        sharedByUserId: string,\n        currentUser: UserInfo\n    ): Promise<MJArtifactPermissionEntity> {\n        const md = this.Provider;\n        const permission = await md.GetEntityObject<MJArtifactPermissionEntity>(\n            'MJ: Artifact Permissions',\n            currentUser\n        );\n\n        permission.ArtifactID = artifactId;\n        permission.UserID = userId;\n        permission.CanRead = permissions.canRead;\n        permission.CanEdit = permissions.canEdit;\n        permission.CanShare = permissions.canShare;\n        permission.SharedByUserID = sharedByUserId;\n\n        const saved = await permission.Save();\n        if (!saved) {\n            throw new Error(permission.LatestResult?.Message || 'Failed to grant permission');\n        }\n\n        return permission;\n    }\n\n    /**\n     * Update existing permission\n     */\n    async updatePermission(\n        permissionId: string,\n        permissions: ArtifactPermissionSet,\n        currentUser: UserInfo\n    ): Promise<boolean> {\n        const md = this.Provider;\n        const permission = await md.GetEntityObject<MJArtifactPermissionEntity>(\n            'MJ: Artifact Permissions',\n            currentUser\n        );\n\n        await permission.Load(permissionId);\n        permission.CanRead = permissions.canRead;\n        permission.CanEdit = permissions.canEdit;\n        permission.CanShare = permissions.canShare;\n\n        return await permission.Save();\n    }\n\n    /**\n     * Revoke explicit permission\n     */\n    async revokePermission(permissionId: string, currentUser: UserInfo): Promise<boolean> {\n        const md = this.Provider;\n        const permission = await md.GetEntityObject<MJArtifactPermissionEntity>(\n            'MJ: Artifact Permissions',\n            currentUser\n        );\n\n        await permission.Load(permissionId);\n        return await permission.Delete();\n    }\n\n    /**\n     * Validate that requested permissions don't exceed granter's permissions\n     */\n    validatePermissions(\n        requested: ArtifactPermissionSet,\n        granter: ArtifactPermissionSet,\n        isOwner: boolean\n    ): boolean {\n        if (isOwner) return true; // Owner can grant anything\n\n        // Can't grant permissions you don't have\n        if (requested.canEdit && !granter.canEdit) return false;\n        if (requested.canShare && !granter.canShare) return false;\n\n        return true;\n    }\n\n    /**\n     * Get available permissions for a user to grant based on their own permissions\n     */\n    getAvailablePermissions(userPermissions: ArtifactPermissionSet, isOwner: boolean): string[] {\n        if (isOwner) {\n            return ['Read', 'Edit', 'Share'];\n        }\n\n        const available = ['Read']; // Always have read\n        if (userPermissions.canEdit) available.push('Edit');\n        if (userPermissions.canShare) available.push('Share');\n\n        return available;\n    }\n\n    /**\n     * Check if user is owner of artifact\n     */\n    async isOwner(artifactId: string, userId: string, currentUser: UserInfo): Promise<boolean> {\n        const artifact = await this.getArtifact(artifactId, currentUser);\n        return artifact ? UUIDsEqual(artifact.UserID, userId) : false;\n    }\n\n    /**\n     * Get all permissions for current user on an artifact (convenience method for UI)\n     */\n    async getUserPermissions(artifactId: string, currentUser: UserInfo): Promise<ArtifactPermissionSet> {\n        const [canRead, canEdit, canShare] = await Promise.all([\n            this.checkPermission(artifactId, currentUser.ID, 'read', currentUser),\n            this.checkPermission(artifactId, currentUser.ID, 'edit', currentUser),\n            this.checkPermission(artifactId, currentUser.ID, 'share', currentUser)\n        ]);\n\n        return { canRead, canEdit, canShare };\n    }\n\n    /**\n     * Helper: Get artifact record\n     */\n    private async getArtifact(artifactId: string, currentUser: UserInfo): Promise<MJArtifactEntity | null> {\n        const rv = RunView.FromMetadataProvider(this.Provider);\n        const result = await rv.RunView<MJArtifactEntity>({\n            EntityName: 'MJ: Artifacts',\n            ExtraFilter: `ID='${artifactId}'`,\n            MaxRows: 1,\n            ResultType: 'entity_object'\n        }, currentUser);\n\n        if (result.Success && result.Results && result.Results.length > 0) {\n            return result.Results[0];\n        }\n        return null;\n    }\n\n    /**\n     * Helper: Get all collections containing this artifact\n     */\n    private async getArtifactCollections(\n        artifactId: string,\n        currentUser: UserInfo\n    ): Promise<MJCollectionArtifactEntity[]> {\n        const rv = RunView.FromMetadataProvider(this.Provider);\n        const result = await rv.RunView<MJCollectionArtifactEntity>({\n            EntityName: 'MJ: Collection Artifacts',\n            ExtraFilter: `ArtifactVersionID IN (\n                SELECT ID FROM [__mj].[vwArtifactVersions] WHERE ArtifactID='${artifactId}'\n            )`,\n            ResultType: 'entity_object'\n        }, currentUser);\n\n        return result.Success && result.Results ? result.Results : [];\n    }\n\n    /**\n     * Helper: Check if permission set has specific permission\n     */\n    private hasPermission(permission: ArtifactPermission, type: 'read' | 'edit' | 'share'): boolean {\n        switch (type) {\n            case 'read':\n                return permission.canRead;\n            case 'edit':\n                return permission.canEdit;\n            case 'share':\n                return permission.canShare;\n            default:\n                return false;\n        }\n    }\n\n    /**\n     * Helper: Check if collection permission has specific permission\n     */\n    private hasCollectionPermission(\n        permission: { canRead: boolean; canEdit: boolean; canShare: boolean },\n        type: 'read' | 'edit' | 'share'\n    ): boolean {\n        switch (type) {\n            case 'read':\n                return permission.canRead;\n            case 'edit':\n                return permission.canEdit;\n            case 'share':\n                return permission.canShare;\n            default:\n                return false;\n        }\n    }\n\n    private mapToPermission(entity: MJArtifactPermissionEntity): ArtifactPermission {\n        return {\n            id: entity.ID,\n            artifactId: entity.ArtifactID,\n            userId: entity.UserID,\n            userName: entity.User || '',\n            canRead: entity.CanRead,\n            canEdit: entity.CanEdit,\n            canShare: entity.CanShare,\n            sharedByUserId: entity.SharedByUserID || null,\n            sharedByUserName: entity.SharedByUser || null,\n            sharedAt: entity.__mj_CreatedAt\n        };\n    }\n}\n"]}
+{"version":3,"file":"artifact-permission.service.js","sourceRoot":"","sources":["../../../src/lib/services/artifact-permission.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAY,OAAO,EAAE,QAAQ,EAAqB,MAAM,sBAAsB,CAAC;AAItF,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;;;AAkCnE,MAAM,OAAO,yBAAyB;IAItB;IAHJ,SAAS,GAA6B,IAAI,CAAC;IAEnD,YACY,2BAAwD;QAAxD,gCAA2B,GAA3B,2BAA2B,CAA6B;IACjE,CAAC;IAEJ;;;OAGG;IACH,IAAW,QAAQ;QACf,OAAO,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,QAAQ,CAAC;IAC/C,CAAC;IACD,IAAW,QAAQ,CAAC,KAA+B;QAC/C,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACjB,IAAI,CAAC,2BAA2B,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtD,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,UAAkB,EAAE,WAAqB;QAC3D,MAAM,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAA6B;YACxD,UAAU,EAAE,0BAA0B;YACtC,WAAW,EAAE,eAAe,UAAU,GAAG;YACzC,OAAO,EAAE,oBAAoB;YAC7B,UAAU,EAAE,eAAe;SAC9B,EAAE,WAAW,CAAC,CAAC;QAEhB,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnC,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,EAAE,CAAC;IACd,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,eAAe,CAAC,UAAkB,EAAE,WAAqB;QAC3D,OAAO,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACzD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CACjB,UAAkB,EAClB,MAAc,EACd,UAAqC,EACrC,WAAqB;QAErB,iDAAiD;QACjD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACjE,IAAI,QAAQ,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,wCAAwC;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QACnF,IAAI,QAAQ,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACpD,CAAC;QAED,6CAA6C;QAC7C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAC/E,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACnC,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,eAAe,CAC/E,UAAU,CAAC,YAAY,EACvB,MAAM,EACN,WAAW,CACd,CAAC;YAEF,IAAI,oBAAoB,IAAI,IAAI,CAAC,uBAAuB,CAAC,oBAAoB,EAAE,UAAU,CAAC,EAAE,CAAC;gBACzF,OAAO,IAAI,CAAC,CAAC,4BAA4B;YAC7C,CAAC;QACL,CAAC;QAED,eAAe;QACf,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,eAAe,CACjB,UAAkB,EAClB,MAAc,EACd,UAAqC,EACrC,WAAqB;QAErB,OAAO,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IAC7E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CACvB,UAAkB,EAClB,MAAc,EACd,WAAqB;QAErB,MAAM,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAA6B;YACxD,UAAU,EAAE,0BAA0B;YACtC,WAAW,EAAE,eAAe,UAAU,iBAAiB,MAAM,GAAG;YAChE,OAAO,EAAE,CAAC;YACV,UAAU,EAAE,eAAe;SAC9B,EAAE,WAAW,CAAC,CAAC;QAEhB,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,qBAAqB,CACvB,UAAkB,EAClB,MAAc,EACd,WAAqB;QAErB,OAAO,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IACvE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,UAAkB,EAAE,WAAqB;QAC7D,MAAM,oBAAoB,GAA0B,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QAEpC,eAAe;QACf,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACjE,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC9B,oBAAoB,CAAC,IAAI,CAAC;gBACtB,EAAE,EAAE,EAAE,EAAE,iCAAiC;gBACzC,UAAU,EAAE,UAAU;gBACtB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI,IAAI,OAAO;gBAClC,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,IAAI;gBACd,cAAc,EAAE,IAAI;gBACpB,gBAAgB,EAAE,IAAI;gBACtB,QAAQ,EAAE,QAAQ,CAAC,cAAc;gBACjC,MAAM,EAAE,OAAO;aAClB,CAAC,CAAC;YACH,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QAED,8BAA8B;QAC9B,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAC1E,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YAC/B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9B,oBAAoB,CAAC,IAAI,CAAC;oBACtB,GAAG,IAAI;oBACP,MAAM,EAAE,UAAU;iBACrB,CAAC,CAAC;gBACH,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/B,CAAC;QACL,CAAC;QAED,0CAA0C;QAC1C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAC/E,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACnC,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,eAAe,CAC1E,UAAU,CAAC,YAAY,EACvB,WAAW,CACd,CAAC;YAEF,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;gBACrC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClC,oBAAoB,CAAC,IAAI,CAAC;wBACtB,EAAE,EAAE,EAAE;wBACN,UAAU,EAAE,UAAU;wBACtB,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO;wBACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;wBACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,cAAc,EAAE,QAAQ,CAAC,cAAc;wBACvC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;wBAC3C,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,MAAM,EAAE,YAAY;wBACpB,cAAc,EAAE,UAAU,CAAC,UAAU,IAAI,oBAAoB;qBAChE,CAAC,CAAC;oBACH,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACnC,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,oBAAoB,CAAC;IAChC,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,iBAAiB,CAAC,UAAkB,EAAE,WAAqB;QAC7D,OAAO,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC3D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACjB,UAAkB,EAClB,MAAc,EACd,WAAkC,EAClC,cAAsB,EACtB,WAAqB;QAErB,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QACzB,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,eAAe,CACvC,0BAA0B,EAC1B,WAAW,CACd,CAAC;QAEF,UAAU,CAAC,UAAU,GAAG,UAAU,CAAC;QACnC,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC;QAC3B,UAAU,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;QACzC,UAAU,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;QACzC,UAAU,CAAC,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC;QAC3C,UAAU,CAAC,cAAc,GAAG,cAAc,CAAC;QAE3C,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,OAAO,IAAI,4BAA4B,CAAC,CAAC;QACtF,CAAC;QAED,OAAO,UAAU,CAAC;IACtB,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,eAAe,CACjB,UAAkB,EAClB,MAAc,EACd,WAAkC,EAClC,cAAsB,EACtB,WAAqB;QAErB,OAAO,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;IAC9F,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAClB,YAAoB,EACpB,WAAkC,EAClC,WAAqB;QAErB,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QACzB,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,eAAe,CACvC,0BAA0B,EAC1B,WAAW,CACd,CAAC;QAEF,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACpC,UAAU,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;QACzC,UAAU,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;QACzC,UAAU,CAAC,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC;QAE3C,OAAO,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,gBAAgB,CAClB,YAAoB,EACpB,WAAkC,EAClC,WAAqB;QAErB,OAAO,IAAI,CAAC,gBAAgB,CAAC,YAAY,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IACzE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,YAAoB,EAAE,WAAqB;QAC9D,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QACzB,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,eAAe,CACvC,0BAA0B,EAC1B,WAAW,CACd,CAAC;QAEF,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACpC,OAAO,MAAM,UAAU,CAAC,MAAM,EAAE,CAAC;IACrC,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,gBAAgB,CAAC,YAAoB,EAAE,WAAqB;QAC9D,OAAO,IAAI,CAAC,gBAAgB,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,mBAAmB,CACf,SAAgC,EAChC,OAA8B,EAC9B,OAAgB;QAEhB,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC,CAAC,2BAA2B;QAErD,yCAAyC;QACzC,IAAI,SAAS,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QACxD,IAAI,SAAS,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAE1D,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,mDAAmD;IACnD,mBAAmB,CACf,SAAgC,EAChC,OAA8B,EAC9B,OAAgB;QAEhB,OAAO,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED;;OAEG;IACH,uBAAuB,CAAC,eAAsC,EAAE,OAAgB;QAC5E,IAAI,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB;QAC/C,IAAI,eAAe,CAAC,OAAO;YAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,eAAe,CAAC,QAAQ;YAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEtD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,uDAAuD;IACvD,uBAAuB,CAAC,eAAsC,EAAE,OAAgB;QAC5E,OAAO,IAAI,CAAC,uBAAuB,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,UAAkB,EAAE,MAAc,EAAE,WAAqB;QACnE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACjE,OAAO,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,CAAC;IAED,uCAAuC;IACvC,KAAK,CAAC,OAAO,CAAC,UAAkB,EAAE,MAAc,EAAE,WAAqB;QACnE,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CAAC,UAAkB,EAAE,WAAqB;QAC9D,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACnD,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC;YACrE,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC;YACrE,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC;SACzE,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC1C,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,kBAAkB,CAAC,UAAkB,EAAE,WAAqB;QAC9D,OAAO,IAAI,CAAC,kBAAkB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,0BAA0B,CAAC,MAAc,EAAE,WAAqB;QAClE,MAAM,SAAS,GAAG,YAAY,MAAM,IAAI,CAAC;QACzC,MAAM,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,CAAC,WAAW,EAAE,gBAAgB,CAAC,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC;YACtD;gBACI,UAAU,EAAE,0BAA0B;gBACtC,WAAW,EAAE,WAAW,MAAM,GAAG;gBACjC,MAAM,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC;gBACjC,UAAU,EAAE,QAAQ;aACvB;YACD;gBACI,UAAU,EAAE,4BAA4B;gBACxC,WAAW,EAAE,WAAW,MAAM,iBAAiB;gBAC/C,MAAM,EAAE,CAAC,cAAc,CAAC;gBACxB,UAAU,EAAE,QAAQ;aACvB;SACJ,EAAE,WAAW,CAAC,CAAC;QAEhB,qFAAqF;QACrF,mCAAmC;QACnC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACvB,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC;YAC3E,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,WAAW,CAAC,OAAO,IAAI,EAAE,CAAuB,CAAC;QACjE,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO;YAC1C,CAAC,CAAE,CAAC,gBAAgB,CAAC,OAAO,IAAI,EAAE,CAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;YACrF,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAEjG,MAAM,WAAW,GAAG,IAAI,CAAC,0BAA0B,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;QACnF,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC;YACzB,CAAC,CAAC,YAAY,MAAM,eAAe,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI;YACjF,CAAC,CAAC,SAAS,CAAC;IACpB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,2BAA2B,CAAC,aAAuB,EAAE,WAAqB;QACpF,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,OAAO,CAAwB;YAC1D,UAAU,EAAE,0BAA0B;YACtC,WAAW,EAAE,oBAAoB,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;YAChF,MAAM,EAAE,CAAC,mBAAmB,CAAC;YAC7B,UAAU,EAAE,QAAQ;SACvB,EAAE,WAAW,CAAC,CAAC;QAChB,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5G,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,OAAO,CAAqB;YACxD,UAAU,EAAE,uBAAuB;YACnC,WAAW,EAAE,UAAU,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;YACnE,MAAM,EAAE,CAAC,YAAY,CAAC;YACtB,UAAU,EAAE,QAAQ;SACvB,EAAE,WAAW,CAAC,CAAC;QAChB,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/F,CAAC;IAED;;;OAGG;IACK,0BAA0B,CAAC,MAA0B,EAAE,qBAA+B;QAC1F,MAAM,YAAY,GAAG,IAAI,GAAG,EAA4C,CAAC;QACzE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC5C,MAAM,OAAO,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;YAC7E,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC3C,KAAK,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;YAClD,IAAI,OAAO,EAAE,CAAC;gBACV,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACxC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,qBAAqB,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;YAC9B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC1B,CAAC;QACL,CAAC;QACD,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW,CAAC,UAAkB,EAAE,WAAqB;QAC/D,MAAM,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAmB;YAC9C,UAAU,EAAE,eAAe;YAC3B,WAAW,EAAE,OAAO,UAAU,GAAG;YACjC,OAAO,EAAE,CAAC;YACV,UAAU,EAAE,eAAe;SAC9B,EAAE,WAAW,CAAC,CAAC;QAEhB,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,sBAAsB,CAChC,UAAkB,EAClB,WAAqB;QAErB,MAAM,EAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAA6B;YACxD,UAAU,EAAE,0BAA0B;YACtC,WAAW,EAAE;+EACsD,UAAU;cAC3E;YACF,UAAU,EAAE,eAAe;SAC9B,EAAE,WAAW,CAAC,CAAC;QAEhB,OAAO,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,UAA8B,EAAE,IAA+B;QACjF,QAAQ,IAAI,EAAE,CAAC;YACX,KAAK,MAAM;gBACP,OAAO,UAAU,CAAC,OAAO,CAAC;YAC9B,KAAK,MAAM;gBACP,OAAO,UAAU,CAAC,OAAO,CAAC;YAC9B,KAAK,OAAO;gBACR,OAAO,UAAU,CAAC,QAAQ,CAAC;YAC/B;gBACI,OAAO,KAAK,CAAC;QACrB,CAAC;IACL,CAAC;IAED;;OAEG;IACK,uBAAuB,CAC3B,UAAqE,EACrE,IAA+B;QAE/B,QAAQ,IAAI,EAAE,CAAC;YACX,KAAK,MAAM;gBACP,OAAO,UAAU,CAAC,OAAO,CAAC;YAC9B,KAAK,MAAM;gBACP,OAAO,UAAU,CAAC,OAAO,CAAC;YAC9B,KAAK,OAAO;gBACR,OAAO,UAAU,CAAC,QAAQ,CAAC;YAC/B;gBACI,OAAO,KAAK,CAAC;QACrB,CAAC;IACL,CAAC;IAEO,eAAe,CAAC,MAAkC;QACtD,OAAO;YACH,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI;YAC7C,gBAAgB,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;YAC7C,QAAQ,EAAE,MAAM,CAAC,cAAc;SAClC,CAAC;IACN,CAAC;mHA1iBQ,yBAAyB;gEAAzB,yBAAyB,WAAzB,yBAAyB,mBAFtB,MAAM;;iFAET,yBAAyB;cAHrC,UAAU;eAAC;gBACR,UAAU,EAAE,MAAM;aACrB","sourcesContent":["import { Injectable } from '@angular/core';\nimport { UserInfo, RunView, Metadata, IMetadataProvider } from '@memberjunction/core';\nimport { MJArtifactPermissionEntity, MJArtifactEntity, MJCollectionArtifactEntity } from '@memberjunction/core-entities';\nimport type { MJArtifactVersionEntity, MJCollectionPermissionEntity } from '@memberjunction/core-entities';\nimport { CollectionPermissionService } from './collection-permission.service';\nimport { NormalizeUUID, UUIDsEqual } from '@memberjunction/global';\n\ntype ArtifactGrantRow = Pick<MJArtifactPermissionEntity, 'ArtifactID' | 'CanRead'>;\ntype CollectionGrantRow = Pick<MJCollectionPermissionEntity, 'CollectionID'>;\ntype CollectionArtifactRow = Pick<MJCollectionArtifactEntity, 'ArtifactVersionID'>;\ntype ArtifactVersionRow = Pick<MJArtifactVersionEntity, 'ArtifactID'>;\n\nexport interface ArtifactPermission {\n    id: string;\n    artifactId: string;\n    userId: string;\n    userName: string;\n    canRead: boolean;\n    canEdit: boolean;\n    canShare: boolean;\n    sharedByUserId: string | null;\n    sharedByUserName: string | null;\n    sharedAt: Date;\n}\n\nexport interface EffectivePermission extends ArtifactPermission {\n    source: 'owner' | 'explicit' | 'collection';\n    collectionName?: string; // If inherited from collection\n}\n\nexport interface ArtifactPermissionSet {\n    canRead: boolean;\n    canEdit: boolean;\n    canShare: boolean;\n}\n\n@Injectable({\n    providedIn: 'root'\n})\nexport class ArtifactPermissionService {\n    private _provider: IMetadataProvider | null = null;\n\n    constructor(\n        private collectionPermissionService: CollectionPermissionService\n    ) {}\n\n    /**\n     * The metadata provider this service uses. When unset, falls back to Metadata.Provider.\n     * Setting it also propagates to the collection-permission service this depends on.\n     */\n    public get Provider(): IMetadataProvider {\n        return this._provider ?? Metadata.Provider;\n    }\n    public set Provider(value: IMetadataProvider | null) {\n        this._provider = value;\n        if (value !== null) {\n            this.collectionPermissionService.Provider = value;\n        }\n    }\n\n    /**\n     * Load all explicit permissions for an artifact\n     */\n    async LoadPermissions(artifactId: string, currentUser: UserInfo): Promise<ArtifactPermission[]> {\n        const rv = RunView.FromMetadataProvider(this.Provider);\n        const result = await rv.RunView<MJArtifactPermissionEntity>({\n            EntityName: 'MJ: Artifact Permissions',\n            ExtraFilter: `ArtifactID='${artifactId}'`,\n            OrderBy: '__mj_CreatedAt ASC',\n            ResultType: 'entity_object'\n        }, currentUser);\n\n        if (result.Success && result.Results) {\n            return result.Results.map(p => this.mapToPermission(p));\n        }\n        return [];\n    }\n\n    /** @deprecated Use {@link LoadPermissions}. */\n    async loadPermissions(artifactId: string, currentUser: UserInfo): Promise<ArtifactPermission[]> {\n        return this.LoadPermissions(artifactId, currentUser);\n    }\n\n    /**\n     * Check if user has specific permission for an artifact (HYBRID CHECK)\n     * Checks in order: Owner > Explicit Permission > Collection Inheritance\n     */\n    async CheckPermission(\n        artifactId: string,\n        userId: string,\n        permission: 'read' | 'edit' | 'share',\n        currentUser: UserInfo\n    ): Promise<boolean> {\n        // 1. Check ownership - owner has all permissions\n        const artifact = await this.getArtifact(artifactId, currentUser);\n        if (artifact && UUIDsEqual(artifact.UserID, userId)) {\n            return true;\n        }\n\n        // 2. Check explicit artifact permission\n        const explicit = await this.GetExplicitPermission(artifactId, userId, currentUser);\n        if (explicit) {\n            return this.hasPermission(explicit, permission);\n        }\n\n        // 3. Check collection permission inheritance\n        const collections = await this.getArtifactCollections(artifactId, currentUser);\n        for (const collection of collections) {\n            const collectionPermission = await this.collectionPermissionService.checkPermission(\n                collection.CollectionID,\n                userId,\n                currentUser\n            );\n\n            if (collectionPermission && this.hasCollectionPermission(collectionPermission, permission)) {\n                return true; // Inherited from collection\n            }\n        }\n\n        // 4. No access\n        return false;\n    }\n\n    /** @deprecated Use {@link CheckPermission}. */\n    async checkPermission(\n        artifactId: string,\n        userId: string,\n        permission: 'read' | 'edit' | 'share',\n        currentUser: UserInfo\n    ): Promise<boolean> {\n        return this.CheckPermission(artifactId, userId, permission, currentUser);\n    }\n\n    /**\n     * Get explicit permission record for a user on an artifact\n     */\n    async GetExplicitPermission(\n        artifactId: string,\n        userId: string,\n        currentUser: UserInfo\n    ): Promise<ArtifactPermission | null> {\n        const rv = RunView.FromMetadataProvider(this.Provider);\n        const result = await rv.RunView<MJArtifactPermissionEntity>({\n            EntityName: 'MJ: Artifact Permissions',\n            ExtraFilter: `ArtifactID='${artifactId}' AND UserID='${userId}'`,\n            MaxRows: 1,\n            ResultType: 'entity_object'\n        }, currentUser);\n\n        if (result.Success && result.Results && result.Results.length > 0) {\n            return this.mapToPermission(result.Results[0]);\n        }\n        return null;\n    }\n\n    /** @deprecated Use {@link GetExplicitPermission}. */\n    async getExplicitPermission(\n        artifactId: string,\n        userId: string,\n        currentUser: UserInfo\n    ): Promise<ArtifactPermission | null> {\n        return this.GetExplicitPermission(artifactId, userId, currentUser);\n    }\n\n    /**\n     * Get all effective permissions for an artifact (owner + explicit + inherited)\n     */\n    async GetEffectiveUsers(artifactId: string, currentUser: UserInfo): Promise<EffectivePermission[]> {\n        const effectivePermissions: EffectivePermission[] = [];\n        const seenUsers = new Set<string>();\n\n        // 1. Add owner\n        const artifact = await this.getArtifact(artifactId, currentUser);\n        if (artifact && artifact.UserID) {\n            effectivePermissions.push({\n                id: '', // No permission record for owner\n                artifactId: artifactId,\n                userId: artifact.UserID,\n                userName: artifact.User || 'Owner',\n                canRead: true,\n                canEdit: true,\n                canShare: true,\n                sharedByUserId: null,\n                sharedByUserName: null,\n                sharedAt: artifact.__mj_CreatedAt,\n                source: 'owner'\n            });\n            seenUsers.add(artifact.UserID);\n        }\n\n        // 2. Add explicit permissions\n        const explicitPerms = await this.LoadPermissions(artifactId, currentUser);\n        for (const perm of explicitPerms) {\n            if (!seenUsers.has(perm.userId)) {\n                effectivePermissions.push({\n                    ...perm,\n                    source: 'explicit'\n                });\n                seenUsers.add(perm.userId);\n            }\n        }\n\n        // 3. Add collection-inherited permissions\n        const collections = await this.getArtifactCollections(artifactId, currentUser);\n        for (const collection of collections) {\n            const collectionPerms = await this.collectionPermissionService.loadPermissions(\n                collection.CollectionID,\n                currentUser\n            );\n\n            for (const collPerm of collectionPerms) {\n                if (!seenUsers.has(collPerm.userId)) {\n                    effectivePermissions.push({\n                        id: '',\n                        artifactId: artifactId,\n                        userId: collPerm.userId,\n                        userName: collPerm.userName,\n                        canRead: collPerm.canRead,\n                        canEdit: collPerm.canEdit,\n                        canShare: collPerm.canShare,\n                        sharedByUserId: collPerm.sharedByUserId,\n                        sharedByUserName: collPerm.sharedByUserName,\n                        sharedAt: collPerm.sharedAt,\n                        source: 'collection',\n                        collectionName: collection.Collection || 'Unknown Collection'\n                    });\n                    seenUsers.add(collPerm.userId);\n                }\n            }\n        }\n\n        return effectivePermissions;\n    }\n\n    /** @deprecated Use {@link GetEffectiveUsers}. */\n    async getEffectiveUsers(artifactId: string, currentUser: UserInfo): Promise<EffectivePermission[]> {\n        return this.GetEffectiveUsers(artifactId, currentUser);\n    }\n\n    /**\n     * Grant explicit permission to a user\n     */\n    async GrantPermission(\n        artifactId: string,\n        userId: string,\n        permissions: ArtifactPermissionSet,\n        sharedByUserId: string,\n        currentUser: UserInfo\n    ): Promise<MJArtifactPermissionEntity> {\n        const md = this.Provider;\n        const permission = await md.GetEntityObject<MJArtifactPermissionEntity>(\n            'MJ: Artifact Permissions',\n            currentUser\n        );\n\n        permission.ArtifactID = artifactId;\n        permission.UserID = userId;\n        permission.CanRead = permissions.canRead;\n        permission.CanEdit = permissions.canEdit;\n        permission.CanShare = permissions.canShare;\n        permission.SharedByUserID = sharedByUserId;\n\n        const saved = await permission.Save();\n        if (!saved) {\n            throw new Error(permission.LatestResult?.Message || 'Failed to grant permission');\n        }\n\n        return permission;\n    }\n\n    /** @deprecated Use {@link GrantPermission}. */\n    async grantPermission(\n        artifactId: string,\n        userId: string,\n        permissions: ArtifactPermissionSet,\n        sharedByUserId: string,\n        currentUser: UserInfo\n    ): Promise<MJArtifactPermissionEntity> {\n        return this.GrantPermission(artifactId, userId, permissions, sharedByUserId, currentUser);\n    }\n\n    /**\n     * Update existing permission\n     */\n    async UpdatePermission(\n        permissionId: string,\n        permissions: ArtifactPermissionSet,\n        currentUser: UserInfo\n    ): Promise<boolean> {\n        const md = this.Provider;\n        const permission = await md.GetEntityObject<MJArtifactPermissionEntity>(\n            'MJ: Artifact Permissions',\n            currentUser\n        );\n\n        await permission.Load(permissionId);\n        permission.CanRead = permissions.canRead;\n        permission.CanEdit = permissions.canEdit;\n        permission.CanShare = permissions.canShare;\n\n        return await permission.Save();\n    }\n\n    /** @deprecated Use {@link UpdatePermission}. */\n    async updatePermission(\n        permissionId: string,\n        permissions: ArtifactPermissionSet,\n        currentUser: UserInfo\n    ): Promise<boolean> {\n        return this.UpdatePermission(permissionId, permissions, currentUser);\n    }\n\n    /**\n     * Revoke explicit permission\n     */\n    async RevokePermission(permissionId: string, currentUser: UserInfo): Promise<boolean> {\n        const md = this.Provider;\n        const permission = await md.GetEntityObject<MJArtifactPermissionEntity>(\n            'MJ: Artifact Permissions',\n            currentUser\n        );\n\n        await permission.Load(permissionId);\n        return await permission.Delete();\n    }\n\n    /** @deprecated Use {@link RevokePermission}. */\n    async revokePermission(permissionId: string, currentUser: UserInfo): Promise<boolean> {\n        return this.RevokePermission(permissionId, currentUser);\n    }\n\n    /**\n     * Validate that requested permissions don't exceed granter's permissions\n     */\n    ValidatePermissions(\n        requested: ArtifactPermissionSet,\n        granter: ArtifactPermissionSet,\n        isOwner: boolean\n    ): boolean {\n        if (isOwner) return true; // Owner can grant anything\n\n        // Can't grant permissions you don't have\n        if (requested.canEdit && !granter.canEdit) return false;\n        if (requested.canShare && !granter.canShare) return false;\n\n        return true;\n    }\n\n    /** @deprecated Use {@link ValidatePermissions}. */\n    validatePermissions(\n        requested: ArtifactPermissionSet,\n        granter: ArtifactPermissionSet,\n        isOwner: boolean\n    ): boolean {\n        return this.ValidatePermissions(requested, granter, isOwner);\n    }\n\n    /**\n     * Get available permissions for a user to grant based on their own permissions\n     */\n    GetAvailablePermissions(userPermissions: ArtifactPermissionSet, isOwner: boolean): string[] {\n        if (isOwner) {\n            return ['Read', 'Edit', 'Share'];\n        }\n\n        const available = ['Read']; // Always have read\n        if (userPermissions.canEdit) available.push('Edit');\n        if (userPermissions.canShare) available.push('Share');\n\n        return available;\n    }\n\n    /** @deprecated Use {@link GetAvailablePermissions}. */\n    getAvailablePermissions(userPermissions: ArtifactPermissionSet, isOwner: boolean): string[] {\n        return this.GetAvailablePermissions(userPermissions, isOwner);\n    }\n\n    /**\n     * Check if user is owner of artifact\n     */\n    async IsOwner(artifactId: string, userId: string, currentUser: UserInfo): Promise<boolean> {\n        const artifact = await this.getArtifact(artifactId, currentUser);\n        return artifact ? UUIDsEqual(artifact.UserID, userId) : false;\n    }\n\n    /** @deprecated Use {@link IsOwner}. */\n    async isOwner(artifactId: string, userId: string, currentUser: UserInfo): Promise<boolean> {\n        return this.IsOwner(artifactId, userId, currentUser);\n    }\n\n    /**\n     * Get all permissions for current user on an artifact (convenience method for UI)\n     */\n    async GetUserPermissions(artifactId: string, currentUser: UserInfo): Promise<ArtifactPermissionSet> {\n        const [canRead, canEdit, canShare] = await Promise.all([\n            this.CheckPermission(artifactId, currentUser.ID, 'read', currentUser),\n            this.CheckPermission(artifactId, currentUser.ID, 'edit', currentUser),\n            this.CheckPermission(artifactId, currentUser.ID, 'share', currentUser)\n        ]);\n\n        return { canRead, canEdit, canShare };\n    }\n\n    /** @deprecated Use {@link GetUserPermissions}. */\n    async getUserPermissions(artifactId: string, currentUser: UserInfo): Promise<ArtifactPermissionSet> {\n        return this.GetUserPermissions(artifactId, currentUser);\n    }\n\n    /**\n     * Returns an `ExtraFilter` for `MJ: Artifacts` that matches the artifacts the user can read,\n     * by the same rule as {@link CheckPermission}: the user owns it, else an explicit grant\n     * decides, else a read grant on a collection that holds a version of it.\n     *\n     * Each lookup runs against its own entity, so the filter holds only `UserID` and IDs.\n     */\n    async GetReadableArtifactsFilter(userId: string, currentUser: UserInfo): Promise<string> {\n        const ownerOnly = `(UserID='${userId}')`;\n        const rv = RunView.FromMetadataProvider(this.Provider);\n        const [grantResult, collectionResult] = await rv.RunViews([\n            {\n                EntityName: 'MJ: Artifact Permissions',\n                ExtraFilter: `UserID='${userId}'`,\n                Fields: ['ArtifactID', 'CanRead'],\n                ResultType: 'simple'\n            },\n            {\n                EntityName: 'MJ: Collection Permissions',\n                ExtraFilter: `UserID='${userId}' AND CanRead=1`,\n                Fields: ['CollectionID'],\n                ResultType: 'simple'\n            }\n        ], currentUser);\n\n        // Without the explicit grants, a grant that withholds read is unknown, so collection\n        // access cannot be applied safely.\n        if (!grantResult.Success) {\n            console.error('Failed to load artifact grants:', grantResult.ErrorMessage);\n            return ownerOnly;\n        }\n\n        const grants = (grantResult.Results ?? []) as ArtifactGrantRow[];\n        const collectionIds = collectionResult.Success\n            ? ((collectionResult.Results ?? []) as CollectionGrantRow[]).map(r => r.CollectionID)\n            : [];\n        const collectionArtifactIds = await this.getArtifactIdsInCollections(collectionIds, currentUser);\n\n        const readableIds = this.resolveReadableArtifactIds(grants, collectionArtifactIds);\n        return readableIds.length > 0\n            ? `(UserID='${userId}' OR ID IN (${readableIds.map(id => `'${id}'`).join(',')}))`\n            : ownerOnly;\n    }\n\n    /**\n     * IDs of artifacts that have at least one version in any of the given collections.\n     */\n    private async getArtifactIdsInCollections(collectionIds: string[], currentUser: UserInfo): Promise<string[]> {\n        if (collectionIds.length === 0) {\n            return [];\n        }\n\n        const rv = RunView.FromMetadataProvider(this.Provider);\n        const versionResult = await rv.RunView<CollectionArtifactRow>({\n            EntityName: 'MJ: Collection Artifacts',\n            ExtraFilter: `CollectionID IN (${collectionIds.map(id => `'${id}'`).join(',')})`,\n            Fields: ['ArtifactVersionID'],\n            ResultType: 'simple'\n        }, currentUser);\n        const versionIds = versionResult.Success ? (versionResult.Results ?? []).map(r => r.ArtifactVersionID) : [];\n        if (versionIds.length === 0) {\n            return [];\n        }\n\n        const artifactResult = await rv.RunView<ArtifactVersionRow>({\n            EntityName: 'MJ: Artifact Versions',\n            ExtraFilter: `ID IN (${versionIds.map(id => `'${id}'`).join(',')})`,\n            Fields: ['ArtifactID'],\n            ResultType: 'simple'\n        }, currentUser);\n        return artifactResult.Success ? (artifactResult.Results ?? []).map(r => r.ArtifactID) : [];\n    }\n\n    /**\n     * Applies the grant order: an explicit grant decides for its artifact; collection access\n     * counts only for artifacts that have no explicit grant.\n     */\n    private resolveReadableArtifactIds(grants: ArtifactGrantRow[], collectionArtifactIds: string[]): string[] {\n        const explicitRead = new Map<string, { id: string; canRead: boolean }>();\n        for (const grant of grants) {\n            const key = NormalizeUUID(grant.ArtifactID);\n            const canRead = (explicitRead.get(key)?.canRead ?? false) || !!grant.CanRead;\n            explicitRead.set(key, { id: grant.ArtifactID, canRead });\n        }\n\n        const readable = new Map<string, string>();\n        for (const { id, canRead } of explicitRead.values()) {\n            if (canRead) {\n                readable.set(NormalizeUUID(id), id);\n            }\n        }\n        for (const id of collectionArtifactIds) {\n            const key = NormalizeUUID(id);\n            if (!explicitRead.has(key) && !readable.has(key)) {\n                readable.set(key, id);\n            }\n        }\n        return [...readable.values()];\n    }\n\n    /**\n     * Helper: Get artifact record\n     */\n    private async getArtifact(artifactId: string, currentUser: UserInfo): Promise<MJArtifactEntity | null> {\n        const rv = RunView.FromMetadataProvider(this.Provider);\n        const result = await rv.RunView<MJArtifactEntity>({\n            EntityName: 'MJ: Artifacts',\n            ExtraFilter: `ID='${artifactId}'`,\n            MaxRows: 1,\n            ResultType: 'entity_object'\n        }, currentUser);\n\n        if (result.Success && result.Results && result.Results.length > 0) {\n            return result.Results[0];\n        }\n        return null;\n    }\n\n    /**\n     * Helper: Get all collections containing this artifact\n     */\n    private async getArtifactCollections(\n        artifactId: string,\n        currentUser: UserInfo\n    ): Promise<MJCollectionArtifactEntity[]> {\n        const rv = RunView.FromMetadataProvider(this.Provider);\n        const result = await rv.RunView<MJCollectionArtifactEntity>({\n            EntityName: 'MJ: Collection Artifacts',\n            ExtraFilter: `ArtifactVersionID IN (\n                SELECT ID FROM [__mj].[vwArtifactVersions] WHERE ArtifactID='${artifactId}'\n            )`,\n            ResultType: 'entity_object'\n        }, currentUser);\n\n        return result.Success && result.Results ? result.Results : [];\n    }\n\n    /**\n     * Helper: Check if permission set has specific permission\n     */\n    private hasPermission(permission: ArtifactPermission, type: 'read' | 'edit' | 'share'): boolean {\n        switch (type) {\n            case 'read':\n                return permission.canRead;\n            case 'edit':\n                return permission.canEdit;\n            case 'share':\n                return permission.canShare;\n            default:\n                return false;\n        }\n    }\n\n    /**\n     * Helper: Check if collection permission has specific permission\n     */\n    private hasCollectionPermission(\n        permission: { canRead: boolean; canEdit: boolean; canShare: boolean },\n        type: 'read' | 'edit' | 'share'\n    ): boolean {\n        switch (type) {\n            case 'read':\n                return permission.canRead;\n            case 'edit':\n                return permission.canEdit;\n            case 'share':\n                return permission.canShare;\n            default:\n                return false;\n        }\n    }\n\n    private mapToPermission(entity: MJArtifactPermissionEntity): ArtifactPermission {\n        return {\n            id: entity.ID,\n            artifactId: entity.ArtifactID,\n            userId: entity.UserID,\n            userName: entity.User || '',\n            canRead: entity.CanRead,\n            canEdit: entity.CanEdit,\n            canShare: entity.CanShare,\n            sharedByUserId: entity.SharedByUserID || null,\n            sharedByUserName: entity.SharedByUser || null,\n            sharedAt: entity.__mj_CreatedAt\n        };\n    }\n}\n"]}