@rockster/core 0.0.2 → 0.1.0

package/access/interfaces/scope-service-registry.d.ts

@@ -0,0 +1,21 @@
+import { ExecutorData } from "@rockster/class-injector/interfaces";
+import { Dictionary, Instantiable } from "@rockster/common";
+import { IScopeService } from "./scope-service";
+export interface IScopeServiceRegistry {
+    Service: Instantiable<IScopeService<any>>;
+    /** When false, scope has no context id (e.g. manager). */
+    withId?: boolean;
+    instance?: IScopeService<any>;
+    resolvers?: Dictionary<ExecutorData>;
+    /** Marks this scope as the hierarchy root (e.g. workspace). */
+    root?: boolean;
+    /** Context name of the root scope this scope descends from. */
+    rootScope?: string;
+    /**
+     * Key that, held at the ROOT context, grants everything in every descendant
+     * scope (platform master). Set on the root scope.
+     */
+    masterKey?: string;
+    /** Key that grants everything WITHIN this context (context admin). */
+    adminKey?: string;
+}

package/access/interfaces/scope-service-registry.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=scope-service-registry.js.map

package/access/interfaces/scope-service-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-service-registry.js","sourceRoot":"./","sources":["access/interfaces/scope-service-registry.ts"],"names":[],"mappings":""}

package/access/interfaces/scope-service.d.ts

@@ -0,0 +1,11 @@
+import { IScopeUserMapped } from "@rockster/common/access";
+import { GetConditionCallbackResult } from "../../database/interfaces/path";
+import { SelectQueryBuilder } from "../../database/extensions/select-query-builder";
+export interface IScopeService<_TCurrentSession = unknown> {
+    joinUser(rootAlias: string, contextId: string, queryBuilder: SelectQueryBuilder<IScopeUserMapped>): GetConditionCallbackResult;
+    /**
+     * Maps a context id to its hierarchy ROOT context id (e.g. account/project →
+     * workspace). The root scope returns the same id. Used by the master-key check.
+     */
+    resolveRootContextId?(contextId: string): Promise<string | undefined>;
+}

package/{database/interfaces/protector.js → access/interfaces/scope-service.js}

@@ -1,3 +1,3 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=protector.js.map
+//# sourceMappingURL=scope-service.js.map

package/access/interfaces/scope-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-service.js","sourceRoot":"./","sources":["access/interfaces/scope-service.ts"],"names":[],"mappings":""}

package/access/models/scope-access-profile-keys-update.d.ts

@@ -0,0 +1,5 @@
+import { IScopeAccessProfileKeysUpdate } from "@rockster/common/access";
+export declare class ScopeAccessProfileKeysUpdate implements IScopeAccessProfileKeysUpdate {
+    scopeAccessProfileId: string;
+    keys: string[];
+}

package/access/models/scope-access-profile-keys-update.js

@@ -0,0 +1,27 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScopeAccessProfileKeysUpdate = void 0;
+const class_pipe_1 = require("@rockster/class-pipe");
+class ScopeAccessProfileKeysUpdate {
+}
+exports.ScopeAccessProfileKeysUpdate = ScopeAccessProfileKeysUpdate;
+__decorate([
+    (0, class_pipe_1.IsRequired)(),
+    (0, class_pipe_1.IsString)(),
+    __metadata("design:type", String)
+], ScopeAccessProfileKeysUpdate.prototype, "scopeAccessProfileId", void 0);
+__decorate([
+    (0, class_pipe_1.IsRequired)(),
+    (0, class_pipe_1.IsArray)(),
+    __metadata("design:type", Array)
+], ScopeAccessProfileKeysUpdate.prototype, "keys", void 0);
+//# sourceMappingURL=scope-access-profile-keys-update.js.map

package/access/models/scope-access-profile-keys-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-access-profile-keys-update.js","sourceRoot":"./","sources":["access/models/scope-access-profile-keys-update.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAAqE;AAGrE,MAAa,4BAA4B;CASxC;AATD,oEASC;AALE;IAFC,IAAA,uBAAU,GAAE;IACZ,IAAA,qBAAQ,GAAE;;0EACkB;AAI7B;IAFC,IAAA,uBAAU,GAAE;IACZ,IAAA,oBAAO,GAAE;;0DACK"}

package/access/models/scope-context.d.ts

@@ -0,0 +1,4 @@
+export declare class ScopeContext {
+    $contextName: string;
+    $contextId: string;
+}

package/access/models/scope-context.js

@@ -0,0 +1,27 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScopeContext = void 0;
+const class_pipe_1 = require("@rockster/class-pipe");
+class ScopeContext {
+}
+exports.ScopeContext = ScopeContext;
+__decorate([
+    (0, class_pipe_1.IsRequired)(),
+    (0, class_pipe_1.IsString)(),
+    __metadata("design:type", String)
+], ScopeContext.prototype, "$contextName", void 0);
+__decorate([
+    (0, class_pipe_1.IsOptional)(),
+    (0, class_pipe_1.IsString)(),
+    __metadata("design:type", String)
+], ScopeContext.prototype, "$contextId", void 0);
+//# sourceMappingURL=scope-context.js.map

package/access/models/scope-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-context.js","sourceRoot":"./","sources":["access/models/scope-context.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAAwE;AAExE,MAAa,YAAY;CASxB;AATD,oCASC;AALE;IAFC,IAAA,uBAAU,GAAE;IACZ,IAAA,qBAAQ,GAAE;;kDACU;AAIrB;IAFC,IAAA,uBAAU,GAAE;IACZ,IAAA,qBAAQ,GAAE;;gDACQ"}

package/access/models/scope-group-apply-access-profile.d.ts

@@ -0,0 +1,6 @@
+import { IScopeGroupApplyAccessProfile } from "@rockster/common/access";
+export declare class ScopeGroupApplyAccessProfile implements IScopeGroupApplyAccessProfile {
+    groupId: string;
+    contextName: string;
+    contextId: string;
+}

package/access/models/scope-group-apply-access-profile.js

@@ -0,0 +1,32 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScopeGroupApplyAccessProfile = void 0;
+const class_pipe_1 = require("@rockster/class-pipe");
+class ScopeGroupApplyAccessProfile {
+}
+exports.ScopeGroupApplyAccessProfile = ScopeGroupApplyAccessProfile;
+__decorate([
+    (0, class_pipe_1.IsRequired)(),
+    (0, class_pipe_1.IsString)(),
+    __metadata("design:type", String)
+], ScopeGroupApplyAccessProfile.prototype, "groupId", void 0);
+__decorate([
+    (0, class_pipe_1.IsRequired)(),
+    (0, class_pipe_1.IsString)(),
+    __metadata("design:type", String)
+], ScopeGroupApplyAccessProfile.prototype, "contextName", void 0);
+__decorate([
+    (0, class_pipe_1.IsRequired)(),
+    (0, class_pipe_1.IsString)(),
+    __metadata("design:type", String)
+], ScopeGroupApplyAccessProfile.prototype, "contextId", void 0);
+//# sourceMappingURL=scope-group-apply-access-profile.js.map

package/access/models/scope-group-apply-access-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-group-apply-access-profile.js","sourceRoot":"./","sources":["access/models/scope-group-apply-access-profile.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAA4D;AAG5D,MAAa,4BAA4B;CAaxC;AAbD,oEAaC;AATE;IAFC,IAAA,uBAAU,GAAE;IACZ,IAAA,qBAAQ,GAAE;;6DACK;AAIhB;IAFC,IAAA,uBAAU,GAAE;IACZ,IAAA,qBAAQ,GAAE;;iEACS;AAIpB;IAFC,IAAA,uBAAU,GAAE;IACZ,IAAA,qBAAQ,GAAE;;+DACO"}

package/access/models/scope-keys-update.d.ts

@@ -0,0 +1,7 @@
+import { IScopeKeysUpdate } from '@rockster/common/access';
+export declare class ScopeKeysUpdate implements IScopeKeysUpdate {
+    contextId: string;
+    contextName: string;
+    targetId: string;
+    keys: string[];
+}

package/access/models/scope-keys-update.js

@@ -0,0 +1,38 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScopeKeysUpdate = void 0;
+const class_pipe_1 = require("@rockster/class-pipe");
+class ScopeKeysUpdate {
+}
+exports.ScopeKeysUpdate = ScopeKeysUpdate;
+__decorate([
+    (0, class_pipe_1.IsOptional)(),
+    (0, class_pipe_1.IsString)(),
+    __metadata("design:type", String)
+], ScopeKeysUpdate.prototype, "contextId", void 0);
+__decorate([
+    (0, class_pipe_1.IsRequired)(),
+    (0, class_pipe_1.IsString)(),
+    __metadata("design:type", String)
+], ScopeKeysUpdate.prototype, "contextName", void 0);
+__decorate([
+    (0, class_pipe_1.IsRequired)(),
+    (0, class_pipe_1.IsString)(),
+    __metadata("design:type", String)
+], ScopeKeysUpdate.prototype, "targetId", void 0);
+__decorate([
+    (0, class_pipe_1.IsRequired)(),
+    (0, class_pipe_1.IsString)(),
+    (0, class_pipe_1.IsArray)(),
+    __metadata("design:type", Array)
+], ScopeKeysUpdate.prototype, "keys", void 0);
+//# sourceMappingURL=scope-keys-update.js.map

package/access/models/scope-keys-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-keys-update.js","sourceRoot":"./","sources":["access/models/scope-keys-update.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAAiF;AAGjF,MAAa,eAAe;CAkB3B;AAlBD,0CAkBC;AAdE;IAFC,IAAA,uBAAU,GAAE;IACZ,IAAA,qBAAQ,GAAE;;kDACO;AAIlB;IAFC,IAAA,uBAAU,GAAE;IACZ,IAAA,qBAAQ,GAAE;;oDACS;AAIpB;IAFC,IAAA,uBAAU,GAAE;IACZ,IAAA,qBAAQ,GAAE;;iDACM;AAKjB;IAHC,IAAA,uBAAU,GAAE;IACZ,IAAA,qBAAQ,GAAE;IACV,IAAA,oBAAO,GAAE;;6CACK"}

package/access/models/scope-owner.d.ts

@@ -0,0 +1,5 @@
+export declare class ScopeOwner {
+    contextName: string;
+    userId: string;
+    contextId?: string;
+}

package/access/models/scope-owner.js

@@ -0,0 +1,32 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScopeOwner = void 0;
+const class_pipe_1 = require("@rockster/class-pipe");
+class ScopeOwner {
+}
+exports.ScopeOwner = ScopeOwner;
+__decorate([
+    (0, class_pipe_1.IsRequired)(),
+    (0, class_pipe_1.IsString)(),
+    __metadata("design:type", String)
+], ScopeOwner.prototype, "contextName", void 0);
+__decorate([
+    (0, class_pipe_1.IsRequired)(),
+    (0, class_pipe_1.IsString)(),
+    __metadata("design:type", String)
+], ScopeOwner.prototype, "userId", void 0);
+__decorate([
+    (0, class_pipe_1.IsOptional)(),
+    (0, class_pipe_1.IsString)(),
+    __metadata("design:type", String)
+], ScopeOwner.prototype, "contextId", void 0);
+//# sourceMappingURL=scope-owner.js.map

package/access/models/scope-owner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-owner.js","sourceRoot":"./","sources":["access/models/scope-owner.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAAwE;AAExE,MAAa,UAAU;CAatB;AAbD,gCAaC;AATE;IAFC,IAAA,uBAAU,GAAE;IACZ,IAAA,qBAAQ,GAAE;;+CACS;AAIpB;IAFC,IAAA,uBAAU,GAAE;IACZ,IAAA,qBAAQ,GAAE;;0CACI;AAIf;IAFC,IAAA,uBAAU,GAAE;IACZ,IAAA,qBAAQ,GAAE;;6CACQ"}

package/access/models/scope-user-mapped.d.ts

@@ -0,0 +1,9 @@
+import { IScopeUserMapped } from "@rockster/common/access";
+export declare class ScopeUserMapped implements IScopeUserMapped {
+    id: string;
+    name: string;
+    email: string;
+    imageUrl?: string;
+    active?: boolean;
+    isScopeOwner?: boolean;
+}

package/access/models/scope-user-mapped.js

@@ -0,0 +1,48 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScopeUserMapped = void 0;
+const class_pipe_1 = require("@rockster/class-pipe");
+class ScopeUserMapped {
+}
+exports.ScopeUserMapped = ScopeUserMapped;
+__decorate([
+    (0, class_pipe_1.Expose)(),
+    (0, class_pipe_1.IsString)(),
+    __metadata("design:type", String)
+], ScopeUserMapped.prototype, "id", void 0);
+__decorate([
+    (0, class_pipe_1.Expose)(),
+    (0, class_pipe_1.IsString)(),
+    __metadata("design:type", String)
+], ScopeUserMapped.prototype, "name", void 0);
+__decorate([
+    (0, class_pipe_1.Expose)(),
+    (0, class_pipe_1.IsString)(),
+    __metadata("design:type", String)
+], ScopeUserMapped.prototype, "email", void 0);
+__decorate([
+    (0, class_pipe_1.Expose)(),
+    (0, class_pipe_1.IsString)(),
+    __metadata("design:type", String)
+], ScopeUserMapped.prototype, "imageUrl", void 0);
+__decorate([
+    (0, class_pipe_1.Expose)(),
+    (0, class_pipe_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], ScopeUserMapped.prototype, "active", void 0);
+__decorate([
+    (0, class_pipe_1.Expose)(),
+    (0, class_pipe_1.IsBoolean)(),
+    (0, class_pipe_1.IsOptional)(),
+    __metadata("design:type", Boolean)
+], ScopeUserMapped.prototype, "isScopeOwner", void 0);
+//# sourceMappingURL=scope-user-mapped.js.map

package/access/models/scope-user-mapped.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-user-mapped.js","sourceRoot":"./","sources":["access/models/scope-user-mapped.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAA+E;AAG/E,MAAa,eAAe;CA2B3B;AA3BD,0CA2BC;AAtBE;IAFC,IAAA,mBAAM,GAAE;IACR,IAAA,qBAAQ,GAAE;;2CACA;AAIX;IAFC,IAAA,mBAAM,GAAE;IACR,IAAA,qBAAQ,GAAE;;6CACE;AAIb;IAFC,IAAA,mBAAM,GAAE;IACR,IAAA,qBAAQ,GAAE;;8CACG;AAId;IAFC,IAAA,mBAAM,GAAE;IACR,IAAA,qBAAQ,GAAE;;iDACO;AAIlB;IAFC,IAAA,mBAAM,GAAE;IACR,IAAA,sBAAS,GAAE;;+CACK;AAKjB;IAHC,IAAA,mBAAM,GAAE;IACR,IAAA,sBAAS,GAAE;IACX,IAAA,uBAAU,GAAE;;qDACU"}

package/access/models/scope-user.d.ts

@@ -0,0 +1,9 @@
+import { IScopeAccess, IScopeGroup, IScopeUser } from "@rockster/common/access";
+export declare class ScopeUser implements IScopeUser {
+    isOwner?: boolean;
+    userId: string;
+    contextName: string;
+    contextId?: string;
+    groups?: IScopeGroup[];
+    keys?: IScopeAccess[];
+}

package/access/models/scope-user.js

@@ -0,0 +1,51 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScopeUser = void 0;
+const class_pipe_1 = require("@rockster/class-pipe");
+const scope_group_1 = require("../entities/scope-group");
+const scope_access_1 = require("../entities/scope-access");
+class ScopeUser {
+}
+exports.ScopeUser = ScopeUser;
+__decorate([
+    (0, class_pipe_1.Expose)(),
+    (0, class_pipe_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], ScopeUser.prototype, "isOwner", void 0);
+__decorate([
+    (0, class_pipe_1.Expose)(),
+    (0, class_pipe_1.IsString)(),
+    __metadata("design:type", String)
+], ScopeUser.prototype, "userId", void 0);
+__decorate([
+    (0, class_pipe_1.Expose)(),
+    (0, class_pipe_1.IsString)(),
+    __metadata("design:type", String)
+], ScopeUser.prototype, "contextName", void 0);
+__decorate([
+    (0, class_pipe_1.Expose)(),
+    (0, class_pipe_1.IsString)(),
+    __metadata("design:type", String)
+], ScopeUser.prototype, "contextId", void 0);
+__decorate([
+    (0, class_pipe_1.Expose)(),
+    (0, class_pipe_1.IsArray)(),
+    (0, class_pipe_1.IsType)(() => scope_group_1.ScopeGroup),
+    __metadata("design:type", Array)
+], ScopeUser.prototype, "groups", void 0);
+__decorate([
+    (0, class_pipe_1.Expose)(),
+    (0, class_pipe_1.IsArray)(),
+    (0, class_pipe_1.IsType)(() => scope_access_1.ScopeAccess),
+    __metadata("design:type", Array)
+], ScopeUser.prototype, "keys", void 0);
+//# sourceMappingURL=scope-user.js.map

package/access/models/scope-user.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-user.js","sourceRoot":"./","sources":["access/models/scope-user.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDAM8B;AAM9B,yDAAqD;AAErD,2DAAuD;AAEvD,MAAa,SAAS;CA2BrB;AA3BD,8BA2BC;AAvBE;IAFC,IAAA,mBAAM,GAAE;IACR,IAAA,sBAAS,GAAE;;0CACM;AAIlB;IAFC,IAAA,mBAAM,GAAE;IACR,IAAA,qBAAQ,GAAE;;yCACI;AAIf;IAFC,IAAA,mBAAM,GAAE;IACR,IAAA,qBAAQ,GAAE;;8CACS;AAIpB;IAFC,IAAA,mBAAM,GAAE;IACR,IAAA,qBAAQ,GAAE;;4CACQ;AAKnB;IAHC,IAAA,mBAAM,GAAE;IACR,IAAA,oBAAO,GAAE;IACT,IAAA,mBAAM,EAAC,GAAG,EAAE,CAAC,wBAAU,CAAC;;yCACF;AAKvB;IAHC,IAAA,mBAAM,GAAE;IACR,IAAA,oBAAO,GAAE;IACT,IAAA,mBAAM,EAAC,GAAG,EAAE,CAAC,0BAAW,CAAC;;uCACJ"}

package/access/queries/scope-access-profile.query.d.ts

@@ -0,0 +1 @@
+export declare const ScopeAccessProfileQuery: import("../../query/functions/create-query").QueryDecoratorFactory;

package/access/queries/scope-access-profile.query.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScopeAccessProfileQuery = void 0;
+const create_query_1 = require("../../query/functions/create-query");
+const scope_access_profile_1 = require("../entities/scope-access-profile");
+exports.ScopeAccessProfileQuery = (0, create_query_1.createQuery)({
+    alias: "scopeAccessProfile",
+    target: () => scope_access_profile_1.ScopeAccessProfile,
+});
+//# sourceMappingURL=scope-access-profile.query.js.map

package/access/queries/scope-access-profile.query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-access-profile.query.js","sourceRoot":"./","sources":["access/queries/scope-access-profile.query.ts"],"names":[],"mappings":";;;AAAA,qEAAiE;AACjE,2EAAsE;AAEzD,QAAA,uBAAuB,GAAG,IAAA,0BAAW,EAAC;IAChD,KAAK,EAAE,oBAAoB;IAC3B,MAAM,EAAE,GAAG,EAAE,CAAC,yCAAkB;CAClC,CAAC,CAAC"}

package/access/queries/scope-group-user.query.d.ts

@@ -0,0 +1 @@
+export declare const ScopeGroupUserQuery: import("../../query/functions/create-query").QueryDecoratorFactory;

package/access/queries/scope-group-user.query.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScopeGroupUserQuery = void 0;
+const create_query_1 = require("../../query/functions/create-query");
+const scope_group_user_1 = require("../entities/scope-group-user");
+const env_1 = require("../env");
+const scope_context_1 = require("../models/scope-context");
+const scope_user_mapped_1 = require("../models/scope-user-mapped");
+exports.ScopeGroupUserQuery = (0, create_query_1.createQuery)({
+    alias: 'scopeGroupUser',
+    target: () => scope_group_user_1.ScopeGroupUser,
+    context: () => scope_context_1.ScopeContext,
+    paths: {
+        user: (0, create_query_1.joinOne)({
+            alias: 'user',
+            target: () => scope_user_mapped_1.ScopeUserMapped,
+            condition: (queryBuilder, queryContent) => {
+                const contextId = queryContent.context.$contextId;
+                const contextName = queryContent.context.$contextName;
+                const service = env_1.env.scopeServiceRegistry.get(contextName);
+                return service.instance.joinUser('"scopeGroupUser"', contextId, queryBuilder);
+            }
+        })
+    }
+});
+//# sourceMappingURL=scope-group-user.query.js.map

package/access/queries/scope-group-user.query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-group-user.query.js","sourceRoot":"./","sources":["access/queries/scope-group-user.query.ts"],"names":[],"mappings":";;;AAAA,qEAA0E;AAC1E,mEAA8D;AAC9D,gCAA6B;AAC7B,2DAAuD;AACvD,mEAA8D;AAEjD,QAAA,mBAAmB,GAAG,IAAA,0BAAW,EAAC;IAC5C,KAAK,EAAE,gBAAgB;IACvB,MAAM,EAAE,GAAG,EAAE,CAAC,iCAAc;IAC5B,OAAO,EAAE,GAAG,EAAE,CAAC,4BAAY;IAC3B,KAAK,EAAE;QACJ,IAAI,EAAE,IAAA,sBAAO,EAAC;YACX,KAAK,EAAE,MAAM;YACb,MAAM,EAAE,GAAG,EAAE,CAAC,mCAAe;YAC7B,SAAS,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,EAAE;gBACvC,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC;gBAClD,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC;gBACtD,MAAM,OAAO,GAAG,SAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAC1D,OAAO,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;YACjF,CAAC;SACH,CAAC;KACJ;CACH,CAAC,CAAA"}

package/access/queries/scope-group.query.d.ts

@@ -0,0 +1 @@
+export declare const ScopeGroupQuery: import("../../query/functions/create-query").QueryDecoratorFactory;

package/access/queries/scope-group.query.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScopeGroupQuery = void 0;
+const create_query_1 = require("../../query/functions/create-query");
+const scope_access_profile_1 = require("../entities/scope-access-profile");
+const scope_group_1 = require("../entities/scope-group");
+const scope_context_1 = require("../models/scope-context");
+exports.ScopeGroupQuery = (0, create_query_1.createQuery)({
+    alias: "scopeGroup",
+    target: () => scope_group_1.ScopeGroup,
+    context: () => scope_context_1.ScopeContext,
+    paths: {
+        scopeAccessProfile: (0, create_query_1.joinOne)({
+            alias: "scopeAccessProfile",
+            target: () => scope_access_profile_1.ScopeAccessProfile,
+        }),
+    },
+});
+//# sourceMappingURL=scope-group.query.js.map

package/access/queries/scope-group.query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-group.query.js","sourceRoot":"./","sources":["access/queries/scope-group.query.ts"],"names":[],"mappings":";;;AAAA,qEAA0E;AAC1E,2EAAsE;AACtE,yDAAqD;AACrD,2DAAuD;AAE1C,QAAA,eAAe,GAAG,IAAA,0BAAW,EAAC;IACxC,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE,GAAG,EAAE,CAAC,wBAAU;IACxB,OAAO,EAAE,GAAG,EAAE,CAAC,4BAAY;IAC3B,KAAK,EAAE;QACJ,kBAAkB,EAAE,IAAA,sBAAO,EAAC;YACzB,KAAK,EAAE,oBAAoB;YAC3B,MAAM,EAAE,GAAG,EAAE,CAAC,yCAAkB;SAClC,CAAC;KACJ;CACH,CAAC,CAAC"}

package/access/services/index.d.ts

@@ -0,0 +1,7 @@
+export * from './scope-access.service';
+export * from './scope-access-profile.service';
+export * from './scope-group-user.service';
+export * from './scope-group.service';
+export * from './scope-key.service';
+export * from './scope-owner.service';
+export * from './scope-service';

package/access/services/index.js

@@ -0,0 +1,24 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./scope-access.service"), exports);
+__exportStar(require("./scope-access-profile.service"), exports);
+__exportStar(require("./scope-group-user.service"), exports);
+__exportStar(require("./scope-group.service"), exports);
+__exportStar(require("./scope-key.service"), exports);
+__exportStar(require("./scope-owner.service"), exports);
+__exportStar(require("./scope-service"), exports);
+//# sourceMappingURL=index.js.map

package/access/services/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"./","sources":["access/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yDAAuC;AACvC,iEAA+C;AAC/C,6DAA2C;AAC3C,wDAAsC;AACtC,sDAAoC;AACpC,wDAAsC;AACtC,kDAAgC"}

package/access/services/scope-access-profile.service.d.ts

@@ -0,0 +1,13 @@
+import { IScopeAccessProfile, IScopeAccessProfileKey } from "@rockster/common/access";
+import { RepositoryService } from "../../database/services/repository.service";
+import { Repository } from "../../database/interfaces/repository";
+import { ScopeKey } from "../entities/scope-key";
+export declare class ScopeAccessProfileService extends RepositoryService<IScopeAccessProfile> {
+    protected repository: Repository<IScopeAccessProfile>;
+    protected profileKeyRepository: Repository<IScopeAccessProfileKey>;
+    protected scopeKeyRepository: Repository<ScopeKey>;
+    updateKeys(scopeAccessProfileId: string, keys: string[]): Promise<IScopeAccessProfileKey[]>;
+    getProfileKeys(scopeAccessProfileId: string): Promise<IScopeAccessProfileKey[]>;
+    /** Keys from the profile whose scope_key.context_name matches the given context. */
+    getKeysForContext(scopeAccessProfileId: string, contextName: string): Promise<string[]>;
+}

package/access/services/scope-access-profile.service.js

@@ -0,0 +1,75 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScopeAccessProfileService = void 0;
+const class_injector_1 = require("@rockster/class-injector");
+const repository_service_1 = require("../../database/services/repository.service");
+const inject_repository_decorator_1 = require("../../database/decorators/inject-repository.decorator");
+const scope_access_profile_1 = require("../entities/scope-access-profile");
+const scope_access_profile_key_1 = require("../entities/scope-access-profile-key");
+const scope_key_1 = require("../entities/scope-key");
+const generate_entity_id_1 = require("../../database/functions/generate-entity-id");
+const normalize_scope_keys_1 = require("../functions/normalize-scope-keys");
+let ScopeAccessProfileService = class ScopeAccessProfileService extends repository_service_1.RepositoryService {
+    async updateKeys(scopeAccessProfileId, keys) {
+        await this.profileKeyRepository.delete({ scopeAccessProfileId });
+        const validKeys = (0, normalize_scope_keys_1.normalizeScopeKeys)(keys);
+        if (!validKeys.length) {
+            return [];
+        }
+        const rows = validKeys.map((key) => ({
+            id: (0, generate_entity_id_1.generateEntityId)(scope_access_profile_key_1.ScopeAccessProfileKey),
+            scopeAccessProfileId,
+            key,
+        }));
+        return this.profileKeyRepository.save(rows);
+    }
+    async getProfileKeys(scopeAccessProfileId) {
+        return this.profileKeyRepository.find({
+            where: { scopeAccessProfileId },
+        });
+    }
+    /** Keys from the profile whose scope_key.context_name matches the given context. */
+    async getKeysForContext(scopeAccessProfileId, contextName) {
+        const profileKeys = await this.getProfileKeys(scopeAccessProfileId);
+        if (!profileKeys.length) {
+            return [];
+        }
+        const keyNames = profileKeys
+            .map((row) => row.key)
+            .filter((key) => Boolean(key));
+        if (!keyNames.length) {
+            return [];
+        }
+        const scopeKeys = await this.scopeKeyRepository.find({
+            where: { contextName },
+        });
+        const allowed = new Set(scopeKeys.map((row) => row.name));
+        return (0, normalize_scope_keys_1.normalizeScopeKeys)(keyNames.filter((key) => allowed.has(key)));
+    }
+};
+exports.ScopeAccessProfileService = ScopeAccessProfileService;
+__decorate([
+    (0, inject_repository_decorator_1.InjectRepository)(() => scope_access_profile_1.ScopeAccessProfile),
+    __metadata("design:type", Object)
+], ScopeAccessProfileService.prototype, "repository", void 0);
+__decorate([
+    (0, inject_repository_decorator_1.InjectRepository)(() => scope_access_profile_key_1.ScopeAccessProfileKey),
+    __metadata("design:type", Object)
+], ScopeAccessProfileService.prototype, "profileKeyRepository", void 0);
+__decorate([
+    (0, inject_repository_decorator_1.InjectRepository)(() => scope_key_1.ScopeKey),
+    __metadata("design:type", Object)
+], ScopeAccessProfileService.prototype, "scopeKeyRepository", void 0);
+exports.ScopeAccessProfileService = ScopeAccessProfileService = __decorate([
+    (0, class_injector_1.Injectable)()
+], ScopeAccessProfileService);
+//# sourceMappingURL=scope-access-profile.service.js.map

package/access/services/scope-access-profile.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-access-profile.service.js","sourceRoot":"./","sources":["access/services/scope-access-profile.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6DAAsD;AAKtD,mFAA+E;AAC/E,uGAAyF;AAEzF,2EAAsE;AACtE,mFAA6E;AAC7E,qDAAiD;AACjD,oFAA+E;AAC/E,4EAAuE;AAGhE,IAAM,yBAAyB,GAA/B,MAAM,yBAA0B,SAAQ,sCAAsC;IAWlF,KAAK,CAAC,UAAU,CAAC,oBAA4B,EAAE,IAAc;QAC1D,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAEjE,MAAM,SAAS,GAAG,IAAA,yCAAkB,EAAC,IAAI,CAAC,CAAC;QAE3C,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YACrB,OAAO,EAAE,CAAC;QACb,CAAC;QAED,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAClC,EAAE,EAAE,IAAA,qCAAgB,EAAC,gDAAqB,CAAC;YAC3C,oBAAoB;YACpB,GAAG;SACsB,CAAA,CAAC,CAAC;QAE9B,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,oBAA4B;QAC9C,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC;YACnC,KAAK,EAAE,EAAE,oBAAoB,EAAE;SACjC,CAAC,CAAC;IACN,CAAC;IAED,oFAAoF;IACpF,KAAK,CAAC,iBAAiB,CAAC,oBAA4B,EAAE,WAAmB;QACtE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC;QACpE,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;YACvB,OAAO,EAAc,CAAC;QACzB,CAAC;QAED,MAAM,QAAQ,GAAG,WAAW;aACxB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;aACrB,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAEjD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,EAAE,CAAC;QACb,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;YAClD,KAAK,EAAE,EAAE,WAAW,EAAE;SACxB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,OAAO,IAAA,yCAAkB,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;CACH,CAAA;AAzDY,8DAAyB;AAGzB;IADT,IAAA,8CAAgB,EAAC,GAAG,EAAE,CAAC,yCAAkB,CAAC;;6DACW;AAG5C;IADT,IAAA,8CAAgB,EAAC,GAAG,EAAE,CAAC,gDAAqB,CAAC;;uEACqB;AAGzD;IADT,IAAA,8CAAgB,EAAC,GAAG,EAAE,CAAC,oBAAQ,CAAC;;qEACkB;oCATzC,yBAAyB;IADrC,IAAA,2BAAU,GAAE;GACA,yBAAyB,CAyDrC"}