@meshmakers/octo-services 3.3.590 → 3.3.610

package/fesm2022/meshmakers-octo-services.mjs

@@ -215,6 +215,26 @@ class ProgressValue {
 class ProgressWindowService {
 }
 
+var IdentityProviderType;
+(function (IdentityProviderType) {
+    IdentityProviderType[IdentityProviderType["Google"] = 0] = "Google";
+    IdentityProviderType[IdentityProviderType["Microsoft"] = 1] = "Microsoft";
+    IdentityProviderType[IdentityProviderType["MicrosoftAzureAd"] = 2] = "MicrosoftAzureAd";
+    IdentityProviderType[IdentityProviderType["MicrosoftActiveDirectory"] = 3] = "MicrosoftActiveDirectory";
+    IdentityProviderType[IdentityProviderType["OpenLdap"] = 4] = "OpenLdap";
+    IdentityProviderType[IdentityProviderType["Facebook"] = 5] = "Facebook";
+    IdentityProviderType[IdentityProviderType["OctoTenant"] = 6] = "OctoTenant";
+})(IdentityProviderType || (IdentityProviderType = {}));
+const IDENTITY_PROVIDER_TYPE_LABELS = {
+    [IdentityProviderType.Google]: 'Google',
+    [IdentityProviderType.Microsoft]: 'Microsoft',
+    [IdentityProviderType.MicrosoftAzureAd]: 'Azure Entra ID',
+    [IdentityProviderType.MicrosoftActiveDirectory]: 'Microsoft Active Directory',
+    [IdentityProviderType.OpenLdap]: 'OpenLDAP',
+    [IdentityProviderType.Facebook]: 'Facebook',
+    [IdentityProviderType.OctoTenant]: 'Octo Tenant'
+};
+
 /**
  * Communication service DTOs for adapter and pipeline management.
  */
@@ -2789,14 +2809,64 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.0", ngImpor
                 }]
         }] });
 
+/**
+ * Injection token for providing the current tenant ID.
+ * This is required for operations that need tenant context, such as:
+ * - Exporting/importing runtime models
+ * - Asset repository operations
+ * - Job management
+ *
+ * @example
+ * ```typescript
+ * // app.config.ts
+ * import { TENANT_ID_PROVIDER } from '@meshmakers/octo-services';
+ * import { ActivatedRoute } from '@angular/router';
+ * import { firstValueFrom } from 'rxjs';
+ *
+ * export const appConfig: ApplicationConfig = {
+ *   providers: [
+ *     {
+ *       provide: TENANT_ID_PROVIDER,
+ *       useFactory: () => {
+ *         const route = inject(ActivatedRoute);
+ *         const configService = inject(CONFIGURATION_SERVICE);
+ *         return async (): Promise<string | null> => {
+ *           if (route.firstChild) {
+ *             const params = await firstValueFrom(route.firstChild.params);
+ *             const tenantId = params['tenantId'] as string;
+ *             if (tenantId) {
+ *               return tenantId;
+ *             }
+ *           }
+ *           return configService.config?.systemTenantId ?? null;
+ *         };
+ *       }
+ *     }
+ *   ]
+ * };
+ * ```
+ */
+const TENANT_ID_PROVIDER = new InjectionToken('TENANT_ID_PROVIDER');
+
 class AssetRepoService {
     httpClient = inject(HttpClient);
     configurationService = inject(CONFIGURATION_SERVICE);
+    tenantIdProvider = inject(TENANT_ID_PROVIDER, { optional: true });
+    async getTenantApiBaseUrl() {
+        if (!this.configurationService.config?.assetServices)
+            return null;
+        let tenantId = 'octosystem';
+        if (this.tenantIdProvider) {
+            tenantId = await this.tenantIdProvider() ?? 'octosystem';
+        }
+        return `${this.configurationService.config.assetServices}${tenantId}/v1/tenants`;
+    }
     async getTenants(skip, take) {
         const params = new HttpParams().set('skip', '' + skip.toString()).set('take', '' + take.toString());
-        if (this.configurationService.config?.assetServices) {
+        const baseUrl = await this.getTenantApiBaseUrl();
+        if (baseUrl) {
             const r = await firstValueFrom(this.httpClient
-                .get(this.configurationService.config.assetServices + 'system/v1/tenants', {
+                .get(baseUrl, {
                 params,
                 observe: 'response'
             }));
@@ -2804,10 +2874,11 @@ class AssetRepoService {
         }
         return null;
     }
-    async getTenantDetails(tenantId) {
-        if (this.configurationService.config?.assetServices) {
+    async getTenantDetails(childTenantId) {
+        const baseUrl = await this.getTenantApiBaseUrl();
+        if (baseUrl) {
             const r = await firstValueFrom(this.httpClient
-                .get(this.configurationService.config.assetServices + `system/v1/tenants/${tenantId}`, {
+                .get(`${baseUrl}/${childTenantId}`, {
                 observe: 'response'
             }));
             return r.body;
@@ -2815,36 +2886,40 @@ class AssetRepoService {
         return null;
     }
     async createTenant(tenantDto) {
-        const params = new HttpParams().set('tenantId', tenantDto.tenantId).set('databaseName', tenantDto.database);
-        if (this.configurationService.config?.assetServices) {
-            await firstValueFrom(this.httpClient.post(this.configurationService.config.assetServices + 'system/v1/tenants', null, {
+        const params = new HttpParams().set('childTenantId', tenantDto.tenantId).set('databaseName', tenantDto.database);
+        const baseUrl = await this.getTenantApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.post(baseUrl, null, {
                 params,
                 observe: 'response'
             }));
         }
     }
     async attachTenant(dataSourceDto) {
-        const params = new HttpParams().set('tenantId', dataSourceDto.tenantId).set('databaseName', dataSourceDto.database);
-        if (this.configurationService.config?.assetServices) {
-            await firstValueFrom(this.httpClient.post(this.configurationService.config.assetServices + 'system/v1/tenants/attach', null, {
+        const params = new HttpParams().set('childTenantId', dataSourceDto.tenantId).set('databaseName', dataSourceDto.database);
+        const baseUrl = await this.getTenantApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.post(`${baseUrl}/attach`, null, {
                 params,
                 observe: 'response'
             }));
         }
     }
-    async detachTenant(tenantId) {
-        const params = new HttpParams().set('tenantId', tenantId);
-        if (this.configurationService.config?.assetServices) {
-            await firstValueFrom(this.httpClient.post(this.configurationService.config.assetServices + 'system/v1/tenants/detach', null, {
+    async detachTenant(childTenantId) {
+        const params = new HttpParams().set('childTenantId', childTenantId);
+        const baseUrl = await this.getTenantApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.post(`${baseUrl}/detach`, null, {
                 params,
                 observe: 'response'
             }));
         }
     }
-    async deleteTenant(tenantId) {
-        const params = new HttpParams().set('tenantId', tenantId);
-        if (this.configurationService.config?.assetServices) {
-            await firstValueFrom(this.httpClient.delete(this.configurationService.config.assetServices + 'system/v1/tenants', {
+    async deleteTenant(childTenantId) {
+        const params = new HttpParams().set('childTenantId', childTenantId);
+        const baseUrl = await this.getTenantApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.delete(baseUrl, {
                 params,
                 observe: 'response'
             }));
@@ -2852,12 +2927,11 @@ class AssetRepoService {
     }
     async importRtModel(tenantId, file, importStrategy = ImportStrategyDto.InsertOnly) {
         const params = new HttpParams()
-            .set('tenantId', tenantId)
             .set('importStrategy', importStrategy.toString());
         if (this.configurationService.config?.assetServices) {
             const formData = new FormData();
             formData.append("file", file);
-            const r = await firstValueFrom(this.httpClient.post(this.configurationService.config.assetServices + 'system/v1/Models/ImportRt', formData, {
+            const r = await firstValueFrom(this.httpClient.post(this.configurationService.config.assetServices + tenantId + '/v1/Models/ImportRt', formData, {
                 params,
                 observe: 'response'
             }));
@@ -2867,12 +2941,11 @@ class AssetRepoService {
     }
     async importCkModel(tenantId, file, importStrategy = ImportStrategyDto.InsertOnly) {
         const params = new HttpParams()
-            .set('tenantId', tenantId)
             .set('importStrategy', importStrategy.toString());
         if (this.configurationService.config?.assetServices) {
             const formData = new FormData();
             formData.append("file", file);
-            const r = await firstValueFrom(this.httpClient.post(this.configurationService.config.assetServices + 'system/v1/Models/ImportCk', formData, {
+            const r = await firstValueFrom(this.httpClient.post(this.configurationService.config.assetServices + tenantId + '/v1/Models/ImportCk', formData, {
                 params,
                 observe: 'response'
             }));
@@ -2881,11 +2954,9 @@ class AssetRepoService {
         return null;
     }
     async exportRtModelByQuery(tenantId, queryId) {
-        const params = new HttpParams().set('tenantId', tenantId);
         if (this.configurationService.config?.assetServices) {
             const r = await firstValueFrom(this.httpClient
-                .post(this.configurationService.config.assetServices + 'system/v1/Models/ExportRtByQuery', { queryId }, {
-                params,
+                .post(this.configurationService.config.assetServices + tenantId + '/v1/Models/ExportRtByQuery', { queryId }, {
                 observe: 'response'
             }));
             return r.body?.jobId ?? null;
@@ -2893,11 +2964,9 @@ class AssetRepoService {
         return null;
     }
     async exportRtModelDeepGraph(tenantId, originRtIds, originCkTypeId) {
-        const params = new HttpParams().set('tenantId', tenantId);
         if (this.configurationService.config?.assetServices) {
             const r = await firstValueFrom(this.httpClient
-                .post(this.configurationService.config.assetServices + 'system/v1/Models/ExportRtByDeepGraph', { originRtIds, originCkTypeId }, {
-                params,
+                .post(this.configurationService.config.assetServices + tenantId + '/v1/Models/ExportRtByDeepGraph', { originRtIds, originCkTypeId }, {
                 observe: 'response'
             }));
             return r.body?.jobId ?? null;
@@ -3037,16 +3106,28 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.0", ngImpor
 class IdentityService {
     httpClient = inject(HttpClient);
     configurationService = inject(CONFIGURATION_SERVICE);
+    tenantIdProvider = inject(TENANT_ID_PROVIDER, { optional: true });
+    async getApiBaseUrl() {
+        if (!this.configurationService.config?.issuer)
+            return null;
+        let tenantId = 'octosystem';
+        if (this.tenantIdProvider) {
+            tenantId = await this.tenantIdProvider() ?? 'octosystem';
+        }
+        return `${this.configurationService.config.issuer}${tenantId}/v1/`;
+    }
     async userDiagnostics() {
-        if (this.configurationService.config?.issuer) {
-            return await firstValueFrom(this.httpClient.get(this.configurationService.config.issuer + 'system/v1/Diagnostics'));
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            return await firstValueFrom(this.httpClient.get(baseUrl + 'Diagnostics'));
         }
         return null;
     }
     async getUsers(skip, take) {
         const params = new HttpParams().set('skip', '' + skip.toString()).set('take', '' + take.toString());
-        if (this.configurationService.config?.issuer) {
-            const response = await firstValueFrom(this.httpClient.get(this.configurationService.config.issuer + 'system/v1/users/getPaged', {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.get(baseUrl + 'users/getPaged', {
                 params,
                 observe: 'response'
             }));
@@ -3055,8 +3136,9 @@ class IdentityService {
         return null;
     }
     async getUserDetails(userName) {
-        if (this.configurationService.config?.issuer) {
-            const response = await firstValueFrom(this.httpClient.get(this.configurationService.config.issuer + `system/v1/users/${userName}`, {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.get(baseUrl + `users/${userName}`, {
                 observe: 'response'
             }));
             return response.body;
@@ -3064,29 +3146,43 @@ class IdentityService {
         return null;
     }
     async createUser(userDto) {
-        if (this.configurationService.config?.issuer) {
-            await firstValueFrom(this.httpClient.post(this.configurationService.config.issuer + 'system/v1/users', userDto, {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.post(baseUrl + 'users', userDto, {
                 observe: 'response'
             }));
         }
     }
     async updateUser(userName, userDto) {
-        if (this.configurationService.config?.issuer) {
-            await firstValueFrom(this.httpClient.put(this.configurationService.config.issuer + `system/v1/users/${userName}`, userDto, {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.put(baseUrl + `users/${userName}`, userDto, {
                 observe: 'response'
             }));
         }
     }
     async deleteUser(userName) {
-        if (this.configurationService.config?.issuer) {
-            await firstValueFrom(this.httpClient.delete(this.configurationService.config.issuer + `system/v1/users/${userName}`, {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.delete(baseUrl + `users/${userName}`, {
                 observe: 'response'
             }));
         }
     }
     async getUserRoles(userName) {
-        if (this.configurationService.config?.issuer) {
-            const response = await firstValueFrom(this.httpClient.get(this.configurationService.config.issuer + `system/v1/users/${userName}/roles`, {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.get(baseUrl + `users/${userName}/roles`, {
+                observe: 'response'
+            }));
+            return response.body;
+        }
+        return null;
+    }
+    async getUserDirectRoles(userName) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.get(baseUrl + `users/${userName}/directRoles`, {
                 observe: 'response'
             }));
             return response.body;
@@ -3094,37 +3190,42 @@ class IdentityService {
         return null;
     }
     async updateUserRoles(userName, roles) {
-        if (this.configurationService.config?.issuer) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
             const roleIds = roles.map((role) => role.id);
-            await firstValueFrom(this.httpClient.put(this.configurationService.config.issuer + `system/v1/users/${userName}/roles`, roleIds, {
+            await firstValueFrom(this.httpClient.put(baseUrl + `users/${userName}/roles`, roleIds, {
                 observe: 'response'
             }));
         }
     }
     async addUserToRole(userName, roleName) {
-        if (this.configurationService.config?.issuer) {
-            await firstValueFrom(this.httpClient.put(this.configurationService.config.issuer + `system/v1/users/${userName}/roles/${roleName}`, null, {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.put(baseUrl + `users/${userName}/roles/${roleName}`, null, {
                 observe: 'response'
             }));
         }
     }
     async removeRoleFromUser(userName, roleName) {
-        if (this.configurationService.config?.issuer) {
-            await firstValueFrom(this.httpClient.delete(this.configurationService.config.issuer + `system/v1/users/${userName}/roles/${roleName}`, {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.delete(baseUrl + `users/${userName}/roles/${roleName}`, {
                 observe: 'response'
             }));
         }
     }
     async mergeUsers(targetUserName, sourceUserName) {
-        if (this.configurationService.config?.issuer) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
             const request = { sourceUserName };
-            await firstValueFrom(this.httpClient.post(this.configurationService.config.issuer + `system/v1/users/${encodeURIComponent(targetUserName)}/merge`, request, { observe: 'response' }));
+            await firstValueFrom(this.httpClient.post(baseUrl + `users/${encodeURIComponent(targetUserName)}/merge`, request, { observe: 'response' }));
         }
     }
     async resetPassword(userName, password) {
         const params = new HttpParams().set('userName', userName).set('password', password);
-        if (this.configurationService.config?.issuer) {
-            const response = await firstValueFrom(this.httpClient.post(this.configurationService.config.issuer + 'system/v1/users/ResetPassword', null, {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.post(baseUrl + 'users/ResetPassword', null, {
                 params,
                 observe: 'response'
             }));
@@ -3134,8 +3235,9 @@ class IdentityService {
     }
     async getClients(skip, take) {
         const params = new HttpParams().set('skip', '' + skip.toString()).set('take', '' + take.toString());
-        if (this.configurationService.config?.issuer) {
-            const response = await firstValueFrom(this.httpClient.get(this.configurationService.config.issuer + 'system/v1/clients/getPaged', {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.get(baseUrl + 'clients/getPaged', {
                 params,
                 observe: 'response'
             }));
@@ -3144,8 +3246,9 @@ class IdentityService {
         return null;
     }
     async getClientDetails(clientId) {
-        if (this.configurationService.config?.issuer) {
-            const response = await firstValueFrom(this.httpClient.get(this.configurationService.config.issuer + `system/v1/clients/${clientId}`, {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.get(baseUrl + `clients/${clientId}`, {
                 observe: 'response'
             }));
             return response.body;
@@ -3153,31 +3256,35 @@ class IdentityService {
         return null;
     }
     async createClient(clientDto) {
-        if (this.configurationService.config?.issuer) {
-            await firstValueFrom(this.httpClient.post(this.configurationService.config.issuer + 'system/v1/clients', clientDto, {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.post(baseUrl + 'clients', clientDto, {
                 observe: 'response'
             }));
         }
     }
     async updateClient(clientId, clientDto) {
-        if (this.configurationService.config?.issuer) {
-            await firstValueFrom(this.httpClient.put(this.configurationService.config.issuer + `system/v1/clients/${clientId}`, clientDto, {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.put(baseUrl + `clients/${clientId}`, clientDto, {
                 observe: 'response'
             }));
         }
     }
     async deleteClient(clientId) {
-        if (this.configurationService.config?.issuer) {
-            await firstValueFrom(this.httpClient.delete(this.configurationService.config.issuer + `system/v1/clients/${clientId}`, {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.delete(baseUrl + `clients/${clientId}`, {
                 observe: 'response'
             }));
         }
     }
     async generatePassword() {
         const params = new HttpParams();
-        if (this.configurationService.config?.issuer) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
             const r = await firstValueFrom(this.httpClient
-                .get(this.configurationService.config.issuer + 'system/v1/tools/generatePassword', {
+                .get(baseUrl + 'tools/generatePassword', {
                 params,
                 observe: 'response'
             }));
@@ -3190,8 +3297,9 @@ class IdentityService {
     // ========================================
     async getRoles(skip, take) {
         const params = new HttpParams().set('skip', '' + skip.toString()).set('take', '' + take.toString());
-        if (this.configurationService.config?.issuer) {
-            const response = await firstValueFrom(this.httpClient.get(this.configurationService.config.issuer + 'system/v1/roles/getPaged', {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.get(baseUrl + 'roles/getPaged', {
                 params,
                 observe: 'response'
             }));
@@ -3200,8 +3308,9 @@ class IdentityService {
         return null;
     }
     async getRoleDetails(roleName) {
-        if (this.configurationService.config?.issuer) {
-            const response = await firstValueFrom(this.httpClient.get(this.configurationService.config.issuer + `system/v1/roles/names/${roleName}`, {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.get(baseUrl + `roles/names/${roleName}`, {
                 observe: 'response'
             }));
             return response.body;
@@ -3209,22 +3318,292 @@ class IdentityService {
         return null;
     }
     async createRole(roleDto) {
-        if (this.configurationService.config?.issuer) {
-            await firstValueFrom(this.httpClient.post(this.configurationService.config.issuer + 'system/v1/roles', roleDto, {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.post(baseUrl + 'roles', roleDto, {
                 observe: 'response'
             }));
         }
     }
     async updateRole(roleName, roleDto) {
-        if (this.configurationService.config?.issuer) {
-            await firstValueFrom(this.httpClient.put(this.configurationService.config.issuer + `system/v1/roles/${roleName}`, roleDto, {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.put(baseUrl + `roles/${roleName}`, roleDto, {
                 observe: 'response'
             }));
         }
     }
     async deleteRole(roleName) {
-        if (this.configurationService.config?.issuer) {
-            await firstValueFrom(this.httpClient.delete(this.configurationService.config.issuer + `system/v1/roles/${roleName}`, {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.delete(baseUrl + `roles/${roleName}`, {
+                observe: 'response'
+            }));
+        }
+    }
+    // ========================================
+    // Identity Provider Management
+    // ========================================
+    async getIdentityProviders() {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.get(baseUrl + 'identityproviders', {
+                observe: 'response'
+            }));
+            return response.body;
+        }
+        return null;
+    }
+    async getIdentityProviderDetails(rtId) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.get(baseUrl + `identityproviders/${rtId}`, {
+                observe: 'response'
+            }));
+            return response.body;
+        }
+        return null;
+    }
+    async createIdentityProvider(dto) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.post(baseUrl + 'identityproviders', dto, {
+                observe: 'response'
+            }));
+            return response.body;
+        }
+        return null;
+    }
+    async updateIdentityProvider(rtId, dto) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.put(baseUrl + `identityproviders/${rtId}`, dto, {
+                observe: 'response'
+            }));
+        }
+    }
+    async deleteIdentityProvider(rtId) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.delete(baseUrl + `identityproviders/${rtId}`, {
+                observe: 'response'
+            }));
+        }
+    }
+    // ========================================
+    // Email Domain Group Rules
+    // ========================================
+    async getEmailDomainGroupRules() {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.get(baseUrl + 'emaildomaingrouprules', {
+                observe: 'response'
+            }));
+            return response.body;
+        }
+        return null;
+    }
+    async getEmailDomainGroupRuleDetails(rtId) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.get(baseUrl + `emaildomaingrouprules/${rtId}`, {
+                observe: 'response'
+            }));
+            return response.body;
+        }
+        return null;
+    }
+    async createEmailDomainGroupRule(dto) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.post(baseUrl + 'emaildomaingrouprules', dto, {
+                observe: 'response'
+            }));
+            return response.body;
+        }
+        return null;
+    }
+    async updateEmailDomainGroupRule(rtId, dto) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.put(baseUrl + `emaildomaingrouprules/${rtId}`, dto, {
+                observe: 'response'
+            }));
+        }
+    }
+    async deleteEmailDomainGroupRule(rtId) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.delete(baseUrl + `emaildomaingrouprules/${rtId}`, {
+                observe: 'response'
+            }));
+        }
+    }
+    // ========================================
+    // Group Management
+    // ========================================
+    async getGroups() {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.get(baseUrl + 'groups', {
+                observe: 'response'
+            }));
+            return response.body;
+        }
+        return null;
+    }
+    async getGroupsPaged(skip, take) {
+        const params = new HttpParams().set('skip', skip.toString()).set('take', take.toString());
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.get(baseUrl + 'groups/getPaged', {
+                params,
+                observe: 'response'
+            }));
+            return response.body;
+        }
+        return null;
+    }
+    async getGroupById(rtId) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.get(baseUrl + `groups/${rtId}`, {
+                observe: 'response'
+            }));
+            return response.body;
+        }
+        return null;
+    }
+    async getGroupByName(groupName) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.get(baseUrl + `groups/names/${encodeURIComponent(groupName)}`, {
+                observe: 'response'
+            }));
+            return response.body;
+        }
+        return null;
+    }
+    async createGroup(dto) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.post(baseUrl + 'groups', dto, {
+                observe: 'response'
+            }));
+            return response.body;
+        }
+        return null;
+    }
+    async updateGroup(rtId, dto) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.put(baseUrl + `groups/${rtId}`, dto, {
+                observe: 'response'
+            }));
+            return response.body;
+        }
+        return null;
+    }
+    async deleteGroup(rtId) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.delete(baseUrl + `groups/${rtId}`, {
+                observe: 'response'
+            }));
+        }
+    }
+    async getGroupRoles(rtId) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.get(baseUrl + `groups/${rtId}/roles`, {
+                observe: 'response'
+            }));
+            return response.body;
+        }
+        return null;
+    }
+    async updateGroupRoles(rtId, roleIds) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.put(baseUrl + `groups/${rtId}/roles`, roleIds, {
+                observe: 'response'
+            }));
+        }
+    }
+    async addUserToGroup(rtId, userId) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.put(baseUrl + `groups/${rtId}/members/users/${userId}`, null, {
+                observe: 'response'
+            }));
+        }
+    }
+    async removeUserFromGroup(rtId, userId) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.delete(baseUrl + `groups/${rtId}/members/users/${userId}`, {
+                observe: 'response'
+            }));
+        }
+    }
+    async addGroupToGroup(rtId, childGroupId) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.put(baseUrl + `groups/${rtId}/members/groups/${childGroupId}`, null, {
+                observe: 'response'
+            }));
+        }
+    }
+    async removeGroupFromGroup(rtId, childGroupId) {
+        const baseUrl = await this.getApiBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.delete(baseUrl + `groups/${rtId}/members/groups/${childGroupId}`, {
+                observe: 'response'
+            }));
+        }
+    }
+    // ========================================
+    // Admin Provisioning (via system tenant)
+    // ========================================
+    getSystemTenantBaseUrl() {
+        if (!this.configurationService.config?.issuer)
+            return null;
+        return `${this.configurationService.config.issuer}octosystem/v1/`;
+    }
+    async getAdminProvisionedUsers(targetTenantId) {
+        const baseUrl = this.getSystemTenantBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.get(baseUrl + `adminProvisioning/${encodeURIComponent(targetTenantId)}`, {
+                observe: 'response'
+            }));
+            return response.body;
+        }
+        return null;
+    }
+    async provisionCurrentUser(targetTenantId) {
+        const baseUrl = this.getSystemTenantBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.post(baseUrl + `adminProvisioning/${encodeURIComponent(targetTenantId)}/provisionCurrentUser`, null, {
+                observe: 'response'
+            }));
+            return response.body;
+        }
+        return null;
+    }
+    async createAdminProvisioning(targetTenantId, dto) {
+        const baseUrl = this.getSystemTenantBaseUrl();
+        if (baseUrl) {
+            const response = await firstValueFrom(this.httpClient.post(baseUrl + `adminProvisioning/${encodeURIComponent(targetTenantId)}`, dto, {
+                observe: 'response'
+            }));
+            return response.body;
+        }
+        return null;
+    }
+    async deleteAdminProvisioning(targetTenantId, mappingRtId) {
+        const baseUrl = this.getSystemTenantBaseUrl();
+        if (baseUrl) {
+            await firstValueFrom(this.httpClient.delete(baseUrl + `adminProvisioning/${encodeURIComponent(targetTenantId)}/${encodeURIComponent(mappingRtId)}`, {
                 observe: 'response'
             }));
         }
@@ -3652,45 +4031,6 @@ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "21.2.0", ngImpor
                 }]
         }] });
 
-/**
- * Injection token for providing the current tenant ID.
- * This is required for operations that need tenant context, such as:
- * - Exporting/importing runtime models
- * - Asset repository operations
- * - Job management
- *
- * @example
- * ```typescript
- * // app.config.ts
- * import { TENANT_ID_PROVIDER } from '@meshmakers/octo-services';
- * import { ActivatedRoute } from '@angular/router';
- * import { firstValueFrom } from 'rxjs';
- *
- * export const appConfig: ApplicationConfig = {
- *   providers: [
- *     {
- *       provide: TENANT_ID_PROVIDER,
- *       useFactory: () => {
- *         const route = inject(ActivatedRoute);
- *         const configService = inject(CONFIGURATION_SERVICE);
- *         return async (): Promise<string | null> => {
- *           if (route.firstChild) {
- *             const params = await firstValueFrom(route.firstChild.params);
- *             const tenantId = params['tenantId'] as string;
- *             if (tenantId) {
- *               return tenantId;
- *             }
- *           }
- *           return configService.config?.systemTenantId ?? null;
- *         };
- *       }
- *     }
- *   ]
- * };
- * ```
- */
-const TENANT_ID_PROVIDER = new InjectionToken('TENANT_ID_PROVIDER');
-
 const GetEntitiesByCkTypeDocumentDto = gql `
     query getEntitiesByCkType($ckTypeId: String!, $rtId: OctoObjectId, $after: String, $first: Int, $searchFilter: SearchFilter, $fieldFilters: [FieldFilter], $sort: [Sort]) {
   runtime {
@@ -4122,5 +4462,5 @@ function provideOctoServices(octoServiceOptions) {
  * Generated bundle index. Do not edit.
  */
 
-export { AggregationInputTypesDto, AggregationTypeDto, AggregationTypesDto, AssetRepoGraphQlDataSource, AssetRepoService, AssociationModOptionsDto, AttributeSelectorService, AttributeValueTypeDto, BasicLegalEntityTypeDto, BasicSalutationDto, BasicTypeOfTelephoneBasicDto, BasicTypeOfTelephoneEnhancedDto, BasicUnitOfMeasureDto, BotService, CONFIGURATION_SERVICE, CkExtensionUpdateOperationsDto, CkModelService, CkTypeAttributeService, CkTypeMetaData, CkTypeSelectorService, CommunicationService, DeleteStrategiesDto, DeploymentState, EnergyCommunityBillingCycleDto, EnergyCommunityBillingDocumentStateDto, EnergyCommunityBillingTypeDto, EnergyCommunityDataQualityDto, EnergyCommunityFacilityTypeDto, EnergyCommunityProductionTypeDto, EnergyCommunityStateDto, EnergyCommunityTaxProcedureCreditNoteDto, EnvironmentGoalStateDto, FieldFilterOperatorsDto, GetCkModelByIdDocumentDto, GetCkModelByIdDtoGQL, GetCkRecordAttributesDocumentDto, GetCkRecordAttributesDtoGQL, GetCkTypeAttributesDocumentDto, GetCkTypeAttributesDtoGQL, GetCkTypeAvailableQueryColumnsDocumentDto, GetCkTypeAvailableQueryColumnsDtoGQL, GetCkTypesDocumentDto, GetCkTypesDtoGQL, GetDerivedCkTypesDocumentDto, GetDerivedCkTypesDtoGQL, GetEntitiesByCkTypeDocumentDto, GetEntitiesByCkTypeDtoGQL, GraphDirectionDto, GraphQL, GraphQLCloneIgnoredProperties, GraphQLCommonIgnoredProperties, GraphQlDataSource, HealthService, HealthStatus, IdentityService, ImportStrategyDto, IndustryBasicAlarmPriorityDto, IndustryBasicAlarmSourceTypeDto, IndustryBasicAlarmStateDto, IndustryBasicAlarmTypeDto, IndustryBasicIecDataTypeDto, IndustryBasicMachineCapabilitiesDto, IndustryBasicMachineStateDto, IndustryMaintenanceAggregationTypeDto, IndustryMaintenanceCostCategoryDto, IndustryMaintenanceEnergyBalanceGroupDto, IndustryMaintenanceEnergyBalanceProductDto, IndustryMaintenanceEnergyBalanceUnitDto, IndustryMaintenanceOrderPriorityDto, IndustryMaintenanceOrderStateDto, IndustryMaintenanceOrderTypeDto, IndustryMaintenanceServiceTypeDto, JobManagementService, LevelMetaData, LoggerSeverity, ModelStateDto, MultiplicitiesDto, NavigationFilterModeDto, OctoErrorLink, OctoGraphQLServiceBase, OctoSdkDemoCustomerStatusDto, OctoSdkDemoNetworkOperatorDto, OctoSdkDemoOperatingStatusDto, OctoServiceOptions, OctoServicesModule, PagedGraphResultDto, ProgressValue, ProgressWindowService, QueryModeDto, RtAssociationMetaData, RuntimeEntityDialogDataSource, RuntimeEntitySelectDataSource, SearchFilterTypesDto, SortOrderDto, SortOrdersDto, SystemAggregationTypesDto, SystemCommunicationCommunicationStateDto, SystemCommunicationConfigurationStateDto, SystemCommunicationDeploymentStateDto, SystemCommunicationPipelineExecutionStatusDto, SystemCommunicationPipelineTriggerTypeDto, SystemEnvironmentModesDto, SystemFieldFilterOperatorDto, SystemIdentityTokenExpirationDto, SystemIdentityTokenTypeDto, SystemIdentityTokenUsageDto, SystemMaintenanceLevelsDto, SystemNavigationFilterModesDto, SystemNotificationEventLevelsDto, SystemNotificationEventSourcesDto, SystemNotificationEventStatesDto, SystemNotificationNotificationTypesDto, SystemNotificationRenderingTypesDto, SystemQueryTypesDto, SystemSortOrdersDto, TENANT_ID_PROVIDER, TusUploadService, UpdateTypeDto, result as possibleTypes, provideOctoServices };
+export { AggregationInputTypesDto, AggregationTypeDto, AggregationTypesDto, AssetRepoGraphQlDataSource, AssetRepoService, AssociationModOptionsDto, AttributeSelectorService, AttributeValueTypeDto, BasicLegalEntityTypeDto, BasicSalutationDto, BasicTypeOfTelephoneBasicDto, BasicTypeOfTelephoneEnhancedDto, BasicUnitOfMeasureDto, BotService, CONFIGURATION_SERVICE, CkExtensionUpdateOperationsDto, CkModelService, CkTypeAttributeService, CkTypeMetaData, CkTypeSelectorService, CommunicationService, DeleteStrategiesDto, DeploymentState, EnergyCommunityBillingCycleDto, EnergyCommunityBillingDocumentStateDto, EnergyCommunityBillingTypeDto, EnergyCommunityDataQualityDto, EnergyCommunityFacilityTypeDto, EnergyCommunityProductionTypeDto, EnergyCommunityStateDto, EnergyCommunityTaxProcedureCreditNoteDto, EnvironmentGoalStateDto, FieldFilterOperatorsDto, GetCkModelByIdDocumentDto, GetCkModelByIdDtoGQL, GetCkRecordAttributesDocumentDto, GetCkRecordAttributesDtoGQL, GetCkTypeAttributesDocumentDto, GetCkTypeAttributesDtoGQL, GetCkTypeAvailableQueryColumnsDocumentDto, GetCkTypeAvailableQueryColumnsDtoGQL, GetCkTypesDocumentDto, GetCkTypesDtoGQL, GetDerivedCkTypesDocumentDto, GetDerivedCkTypesDtoGQL, GetEntitiesByCkTypeDocumentDto, GetEntitiesByCkTypeDtoGQL, GraphDirectionDto, GraphQL, GraphQLCloneIgnoredProperties, GraphQLCommonIgnoredProperties, GraphQlDataSource, HealthService, HealthStatus, IDENTITY_PROVIDER_TYPE_LABELS, IdentityProviderType, IdentityService, ImportStrategyDto, IndustryBasicAlarmPriorityDto, IndustryBasicAlarmSourceTypeDto, IndustryBasicAlarmStateDto, IndustryBasicAlarmTypeDto, IndustryBasicIecDataTypeDto, IndustryBasicMachineCapabilitiesDto, IndustryBasicMachineStateDto, IndustryMaintenanceAggregationTypeDto, IndustryMaintenanceCostCategoryDto, IndustryMaintenanceEnergyBalanceGroupDto, IndustryMaintenanceEnergyBalanceProductDto, IndustryMaintenanceEnergyBalanceUnitDto, IndustryMaintenanceOrderPriorityDto, IndustryMaintenanceOrderStateDto, IndustryMaintenanceOrderTypeDto, IndustryMaintenanceServiceTypeDto, JobManagementService, LevelMetaData, LoggerSeverity, ModelStateDto, MultiplicitiesDto, NavigationFilterModeDto, OctoErrorLink, OctoGraphQLServiceBase, OctoSdkDemoCustomerStatusDto, OctoSdkDemoNetworkOperatorDto, OctoSdkDemoOperatingStatusDto, OctoServiceOptions, OctoServicesModule, PagedGraphResultDto, ProgressValue, ProgressWindowService, QueryModeDto, RtAssociationMetaData, RuntimeEntityDialogDataSource, RuntimeEntitySelectDataSource, SearchFilterTypesDto, SortOrderDto, SortOrdersDto, SystemAggregationTypesDto, SystemCommunicationCommunicationStateDto, SystemCommunicationConfigurationStateDto, SystemCommunicationDeploymentStateDto, SystemCommunicationPipelineExecutionStatusDto, SystemCommunicationPipelineTriggerTypeDto, SystemEnvironmentModesDto, SystemFieldFilterOperatorDto, SystemIdentityTokenExpirationDto, SystemIdentityTokenTypeDto, SystemIdentityTokenUsageDto, SystemMaintenanceLevelsDto, SystemNavigationFilterModesDto, SystemNotificationEventLevelsDto, SystemNotificationEventSourcesDto, SystemNotificationEventStatesDto, SystemNotificationNotificationTypesDto, SystemNotificationRenderingTypesDto, SystemQueryTypesDto, SystemSortOrdersDto, TENANT_ID_PROVIDER, TusUploadService, UpdateTypeDto, result as possibleTypes, provideOctoServices };
 //# sourceMappingURL=meshmakers-octo-services.mjs.map