@servicelabsco/slabs-access-manager 2.0.2 → 2.0.4

package/CLAUDE.md

@@ -97,6 +97,35 @@ Every entity has a matching TypeORM subscriber in `subscribers/`. Subscribers ar
 - Sentry is optional on the HTTP process: set `SENTRY_DSN` (see NU `docs/sentry-reporting.md`). Do not init from `cli.ts` / `console.ts`.
 - The `'use cases'` layer lives in `libraries/` (`process.*.ts`, `send.*.ts`). Prefer adding one there over bloating a service when logic spans multiple entities.
 
+## Safe SQL (non-negotiable)
+
+All queries go through `sqlService`. The unsafe methods — `sql`, `read`, `readFirst`, `first` — take a
+single string and **must not** be called with a template literal containing `${}`, either inline or via a
+same-scope `const sql = \`...\``. ESLint enforces this with `finnoto/no-sql-template-literal`
+(`tools/eslint-plugin-finnoto/`, the same rule fn-expense-services uses).
+
+Use the bound variants with `$1, $2, ...` placeholders:
+
+```ts
+// ❌ a caller-supplied `str` breaks straight out of the string literal
+sql = `${sql} and (a.name ilike '%${str}%')`;
+return this.sqlService.read(`${sql} order by 2 asc limit ${limit}`);
+
+// ✅
+const values: any[] = [business.id];
+values.push(`%${str}%`);
+sql = `${sql} and a.name ilike $${values.length}`;
+values.push(limit);
+return this.sqlService.boundRead(`${sql} order by 2 asc limit $${values.length}`, values);
+```
+
+`boundSql`, `boundRead` and `boundReadFirst` all exist in nestjs-utility-services ≥ 3.0.9.
+
+**Existing violations** are recorded in `eslint-suppressions.json` at the repo root, so CI stays green
+while they are migrated. New code cannot add to it — an unsuppressed violation fails `yarn lint`. When
+you migrate a file, re-run `yarn eslint "src/**/*.ts" --suppress-rule finnoto/no-sql-template-literal`
+to refresh the baseline and commit the smaller file.
+
 ## Required env
 
 See `.env` for the local profile. Minimum to boot: `SERVER_PORT`, `APP_KEY`, `SERVER_URL`, `PG_DB_*` (host, read_host, port, username, password, database), `REDIS_HOST`/`REDIS_PORT`, `BULL_QUEUE_NAME`, `JWT_SECRET`, `JWT_EXPIRY`. `PG_DB_LOGGING=true` will write SQL to a file logger (not stdout).

package/CODEBASE-REVIEW.md

@@ -0,0 +1,129 @@
+# CODEBASE-REVIEW — @servicelabsco/slabs-access-manager
+
+## Snapshot
+
+- **Branch:** `main`
+- **HEAD:** `983e5aa5ea1714c98d8ca1074b124d5294fc90d3` (Merge PR #343, custom-field update endpoint)
+- **Worktree:** clean at audit start
+- **Version:** 1.0.73
+- **Scope:** first-party TypeScript under `src/` — 1,265 non-migration files + 265 migration files; `test/` e2e; root config. `node_modules`, `dist`, `coverage`, `graphify-out` out of scope (generated/third-party).
+
+## Repository map → audit buckets
+
+| Bucket | Scope | Files (approx.) |
+|---|---|---|
+| B1 access-api | `src/access/controllers`, `src/access/services` | 114 |
+| B2 access-usecases | `src/access/libraries`, `src/access/jobs`, `src/access/commands` | 235 |
+| B3 access-data | `src/access/entities`, `src/access/subscribers`, `src/access/dtos`, `src/access/enums` | 422 |
+| B4 access-utility | `src/accessUtility/**` | 200 |
+| B5 access-workflow | `src/accessWorkflow/**` | 86 |
+| B6 auth-boundary | `src/access/middlewares`, `src/development/middlewares`, `src/auth.controller.ts`, `src/login.service.ts`, `src/app.module.ts` | ~15 |
+| B7 mcp | `src/mcp/**` | ~135 |
+| B8 platform | `src/development/**` (minus middlewares), `src/config/**`, `src/main.ts`, `src/cli.ts`, `src/console.ts`, `src/app.controller.ts`, `src/app.service.ts`, `src/migrations` (spot-check) | ~300 |
+| B9 package-quality | `package.json`, tsconfig(s), `es6.classes.ts` wiring completeness, jest config, `test/`, export surface | ~10 + cross-checks |
+
+Every first-party `src/` file belongs to exactly one of B1–B8; B9 is cross-cutting metadata.
+
+## Contracts and boundaries (established Stage 1)
+
+- Publishable npm package **and** runnable NestJS server; public surface = dist exports, controllers, DTOs, entities (CLAUDE.md / AGENTS.md).
+- Auth prefixes: `api/*` (JWT + business), `internal/*` (server-to-server), `v1/*` (API key + idempotency), `ai-server/*` (client-connect), `mcp` (soft gate + rate limit), `mcp/admin` + `development/*` (DevelopmentMiddleware). `Auth.user()` canonical principal; tenant = `Auth.user().auth_attributes.business_id`.
+- Two Postgres datasources (`default`, `read`), optional Mongo (`MONGO_URL`), BullMQ, Redis WebSocket adapter.
+- `es6.classes.ts` barrels are the DI/TypeORM registry — unregistered classes silently don't run.
+- **Stage-1 flag (to verify in B9):** `package.json` `main: dist/index.js` but no `src/index.ts` exists; `dist/index.js` present only as a stale artifact and `nest build` uses `deleteOutDir: true`.
+
+## Findings
+
+Nine parallel read-only audits completed; findings below are deduplicated and reconciled. IDs are stable: **S**=security, **B**=bug/correctness, **A**=architecture/release, **E**=efficiency/quality. "Buckets" lists every audit that independently reported the issue (≥3 ⇒ **systemic**). Lead verified S1, S2, S3, S9, and A1 directly against source.
+
+### Systemic (reported by ≥3 buckets)
+
+**S1 — SQL injection across the listing/find/report framework — CRITICAL.** Free-text `str`/`search`, `order`, `limit`, and `ids` are string-interpolated into SQL with no binding or escaping; the shared `SqlService.guardQuery` only blocks a narrow "high-confidence" set (`pg_sleep`, `pg_read_file`, long hex) and does **not** stop quote-breakout, `UNION SELECT`, `--`, or `;`. Verified at `src/access/libraries/process.db.find.ts:75,90,95,107`. Same pattern in `process.common.list.ts` (ORDER BY via `getOrder`), `process.report.data.ts:185,190,208,274`, `process.dashboard.report.data.ts:139,190`, `accessWorkflow/libraries/process.authority.delegation.list.ts:90`, `process.limit.config.list.ts:71`. Reachable from 22+ authenticated `api/*` controllers (B1) plus B4/B5 endpoints; `business_id` tenant scoping is AND-ed and thus bypassable once a `UNION`/`OR` is injected → cross-tenant read of secrets. Buckets: B1, B2, B4, B5. Root fix: parameterize `str`/`limit`/`ids` in the shared processors via `SqlService.boundRead`, whitelist `order` columns with `isSafeOrderBy`.
+
+**S2 — Raw-SQL passthrough DTO fields `filter_query`/`injected_query`/`clauses` — CRITICAL.** These are declared `@Expose() @IsOptional()` on `CommonListFilterDto` (so `whitelist:true` keeps them) and concatenated verbatim into report SQL WHERE clauses (`process.report.data.ts:190,208`; `process.dashboard.report.data.ts:139,190`) with no guard — unlike `listing.service.ts:344`/`process.listing.page.query.ts:21`, which DO call `assertSafeFilterQuery`. Worse, `dashboard.report.controller.ts:42,61` bind `@Body() body: any`, bypassing the DTO entirely. Payload `{"filter_query":"1=1 union select client_secret,client_id from bz_user_secrets --"}` exfiltrates secrets. Buckets: B1, B3, B5 (and cross-noted by B7 for the MCP report tools). Fix: remove these from the client DTO or force every consumer through `assertSafeFilterQuery`; stop binding report bodies as `any`.
+
+**S3 — Unsandboxed `eval()` of stored scripts (RCE) — HIGH.** Business/email-rule/event-trigger/bulk/PDF scripts run through bare `eval` (or utility `CodeEvaluator.execute` = `await eval`) in-process with full `require`/`process`/DB access, no sandbox. Sites: `access/libraries/execute.business.script.ts:30`, `evaluate.email.rule.ts:53`, `jobs/capture.event.trigger.job.ts:114,153`, `accessUtility/libraries/read.xls.file.ts:645`, `process.manual.pdf.document.ts:38`, `accessUtility/services/pdf.document.service.ts:99`. Whoever can author a script (see S6/S7 for how a plain business user can) gets cross-tenant RCE on the shared worker. Buckets: B2, B4. Fix: run in `isolated-vm` with a frozen minimal context + timeout; gate script authorship to trusted operators.
+
+**S4 — `X-Forwarded-For` spoofing defeats every IP-based control — HIGH.** Security decisions read the raw, client-controlled `x-forwarded-for` header (leftmost entry) instead of the framework-computed `req.ip` (which is correct under `trust proxy=1`). A stolen IP-restricted API key is usable from anywhere by sending `X-Forwarded-For: <allowed ip>`; the dev-console IP allowlist and the anonymous MCP rate-limit bucket fall the same way. Sites: `external.access.middleware.ts:19`, `mcp.access.middleware.ts:22`, `mcp.rate.limit.middleware.ts:75`, `development/middlewares/development.middleware.ts:52`, `credential.resolve.service.ts:122`, enforced in `api.account.service.ts:30`/`user.business.access.service.ts:33`. Buckets: B6, B7, B8. Fix: derive client IP from `req.ip` with a known proxy hop count everywhere; never parse raw XFF for auth.
+
+### Security — single/dual bucket
+
+**S5 — Unauthenticated root ops endpoints; `/clean-jobs` wipes all queues — CRITICAL.** Verified: `app.controller.ts` is `@Controller()` (root, no prefix); `RestrictedMiddleware` is mounted only on `api/*`, and the global Jwt/Basic middlewares are parse-only. So `GET /clean-jobs` (`:102`) drops all delayed/waiting/active/completed/failed BullMQ jobs (silent data loss + DoS), `GET /queue` + `/failed-jobs` leak job payloads (business data), `POST /sets` writes a DB row — all anonymous. Buckets: B6, B8. Fix: move under `internal/*` or add an admin guard on `AppController`; make `/clean-jobs` POST; delete dead `/set`,`/sets`.
+
+**S6 — Device-auth approval mints a personal key for a non-member business — HIGH.** Verified `device.auth.service.ts:150-158`: `resolveBusinessForApprove` loads the business by client-supplied `business_id` (`device.decide.dto.ts:20`) with **no** `assertActiveMembership` — the OAuth sibling (`oauth.as.service.ts:322`) does check. An authenticated user approves a device login with an arbitrary `business_id`, minting a `bz_user_secrets` key scoped to a tenant they don't belong to; downstream services trust `auth_attributes.business_id`. Buckets: B1, B3. Fix: call `assertActiveMembership(user.id, businessId)` in both `resolveBusinessForApprove` and `mintPersonalKey`.
+
+**S7 — Any business user can create/overwrite GLOBAL executable form/menu config — HIGH.** (a) `form.script.service.ts:86-89` explicitly exempts `business_id === null` from its ownership guard, so a business user posts `{business_id:null, script:...}` and injects a global form script that runs in every tenant's form lifecycle (compounds S3). (b) `add.menu.dto.ts:13`/`add.module.dto.ts:13` require a client `business_id` that `process.menu.creation.ts:15` writes verbatim, with only `validateAccess()` (no cross-check against the session business) — cross-tenant menu/module write, and updates aren't business-scoped either. Buckets: B1, B3. Fix: derive `business_id` from the resolved session business; reject `null`/foreign ids from the business API; scope update lookups.
+
+**S8 — Plaintext OAuth tokens & webhook secrets serialized by default — HIGH.** `slack.integration.entity.ts:19`, `business.email.entity.ts:37-40`, `business.app.integration.credential.entity.ts:18-21`, `business.webhook.entity.ts:22`, `fcm.token.entity.ts` hold `access_token`/`refresh_token`/`secret`/`token` with no `@Exclude({toPlainOnly:true})` or `select:false`, so `CommonEntity.toJSON()` emits them. `GET /api/b/business-email/:id` returns a live Gmail refresh token to any business member; they also ride inside job payloads. Bucket: B3. Fix: `@Exclude` the columns (base `UserEntity.password` already does this).
+
+**S9 — Predictable API credentials from `Math.random()` — HIGH.** `create.user.business.secret.ts:107,162` builds `client_id`/`client_secret` via utility `generateRandomAlpha` → `Math.random()` (not CSPRNG, seed-recoverable) and force-lowercases, shrinking a 32-char secret to 26^32. These authenticate `v1/*` and personal-token access. Bucket: B2. Fix: `crypto.randomBytes(...).toString('base64url')`; stop lowercasing. (Contrast: `oauth.pkce.ts` correctly uses `crypto`.)
+
+**S10 — Rotated user-business secret stored in plaintext, then auth breaks — HIGH (bug+security).** Hashing lives only in the subscriber's `beforeInsert`; the MCP-key rotation path `create.user.business.secret.ts:69-71` reassigns `client_secret` and calls `existing.save()` (an UPDATE → no `beforeUpdate` hook), so the raw secret is persisted and later `Hash.compare(plaintext, plaintext)` fails. Re-authorizing an existing client silently bricks the key while leaking it at rest. Bucket: B3. Fix: add a `beforeUpdate` re-hash guarded by `Hash.needsRehash`.
+
+**S11 — `v1/*` REST surface ignores `read_only`/`access_scopes` — HIGH.** The MCP transport enforces scope (`McpScopePolicy`), but the equivalent REST transport sharing the same credentials does not: `listing.controller.ts` is dual-mounted on `api/b/listing-page` AND `v1/b/listing-page` and exposes `@Post(':slug')`, `@Delete(':slug/:id')`, `@Post(':slug/hard-reset-columns')`. A key minted `reporting:read` (→ `read_only`) can `DELETE /v1/b/listing-page/:slug/:id`. Bucket: B6. Fix: enforce `read_only`/scope in a `v1/*` guard, or stop dual-mounting mutating routes under `v1`.
+
+**S12 — Unauthenticated `POST /webhook/html-to-pdf` → SSRF + cross-tenant overwrite — HIGH.** The `webhook/*` prefix has only parse-only global auth. `common.webhook.controller.ts:93` → `pdf.document.service.ts:34` trusts caller `document_id` (sequential, enumerable) and `pdf_url`, then server-side-fetches `pdf_url` (`uploadFromUrl`) and overwrites any tenant's `pdf_url`. Enables SSRF to cloud metadata and IDOR document replacement. Buckets: B4, B6 (B6 rated medium; reconciled up to HIGH for the SSRF+IDOR combination). Fix: authenticate via signed callback token/HMAC (constant-time), allowlist the fetch host, verify `document_id` awaits this callback.
+
+**S13 — Hardcoded long-lived JWT bearer token committed in source — HIGH.** `accessUtility/services/file.upload.service.ts:134` hardcodes an `exp:2036` bearer for the unzip Lambda (replacing a `propertyService.get(...)` lookup); it ships in the published `dist/`. Bucket: B4. Fix: restore the property/env lookup; revoke and rotate the token; add a CI grep guard for `eyJ…` literals.
+
+**S14 — MCP scope fails OPEN; API accounts can't be read-only — MEDIUM.** `mcp.execution.context.ts:44-50` maps an absent/empty scope to `MCP_FULL_SCOPE`, and `credential.resolve.service.ts:106` hardcodes `['mcp']` for every `api`-kind credential — so a user-secret minted without `access_scopes`, or any business API account, silently gets write tools. Bucket: B7. Fix: default absent scope to `reporting:read`/deny; honor a per-account scope column.
+
+**S15 — Forgeable Slack OAuth `state` (CSRF/account-linking) — MEDIUM.** `process.slack.integration.ts:80-90` treats `state` as plaintext `"<businessId>,<userId>"` (sequential ids), unsigned and not session-bound, then binds the Slack token to those ids. Bucket: B2. Fix: HMAC-signed/random single-use nonce persisted against the initiating session.
+
+**S16 — SSRF via user-configured outbound URLs — MEDIUM.** Business-supplied webhook/notification/bulk-upload URLs are fetched server-side with no host allowlist or private-range block: `send.webhook.request.ts:64`, `send.slack.webhook.notification..ts:47`, `send.gchat.webhook.notification.ts:44`, `bulk.upload.service.ts:25` (client `document_url`) → `read.xls.file.ts` fetch, `data.access.service.ts:28` (also raw-SQL interpolation). Buckets: B2, B4. Fix: scheme+host allowlist, block loopback/link-local, parameterize the `data.access` query.
+
+**S17 — Idempotency & ORDER-BY / listing mass-assignment gaps — MEDIUM.** (a) `IdempotencyMiddleware` has no in-flight lock — two concurrent identical mutating requests both execute (B6). (b) `listing.controller.ts:124-172` `setDefaultColumn`/`hardResetColumns` take `@Body() body: any` (unwhitelistable) and rewrite global (non-tenant-scoped) `ListingColumnEntity`, with a floating unawaited `save()` (B1). Buckets: B1, B6. Fix: typed DTOs + admin gate + await; add an idempotency in-flight lock.
+
+**S18 — Secrets/PII to stdout; `credential` hash & unencoded paths — LOW.** `login.service.ts:16,23,26` and `auth.controller.ts:23` `console.log` the full user/token; `api.account.controller.ts:81` returns the `credential` column (reconciled: it's bcrypt-hashed per B3, so leak is of a hash — LOW, still gate it); `read.xls.file.ts:36,80` debug logs; 3 MCP admin catalog tools interpolate `table_name` into a loopback path without `encodeURIComponent`. `PG_DB_LOGGING=true` writes SQL+params (PII) to a file. Buckets: B1, B4, B6, B7, B8.
+
+### Architecture / release
+
+**A1 — Repo cannot reproduce its own published package; next publish ships a broken `main`/`types` — CRITICAL.** Verified: no `src/index.ts` (nor any sub-barrel) exists, yet `package.json` `main:dist/index.js`, and `nest build` runs `deleteOutDir:true`. Barrels are produced by an uninstalled, undocumented external generator (`slnu syncClassess`); `src/index.ts` was deleted as collateral in commit `dfef6c3`. Published 1.0.73 is intact (built from untracked local files, now gone), but a fresh `npm run build && npm publish` emits no `index.js` → every downstream `require()` fails MODULE_NOT_FOUND and TS builds break. Bucket: B9. Fix: commit the generated barrels (or add a `prebuild`/`prepublishOnly` generation step) and add a CI gate `npm run build && node -e "require('./dist/index.js')"`.
+
+**A2 — Runtime dependencies live in devDependencies or are absent — HIGH.** Shipped `dist/**` requires `typeorm` (339×), `@nestjs/common` (334×), `class-transformer`/`class-validator`, `@nestjs/core` — all in devDependencies — plus `jsonwebtoken`, `helmet`, `express-rate-limit`, `pg`, `typeorm-naming-strategies`, `dotenv`, `handlebars`, `rxjs`, `reflect-metadata`, `@nestjs/bullmq`, `@nestjs/config` that are **absent** entirely. Works today only via transitive hoisting from `@servicelabsco/nestjs-utility-services`; pnpm/npm-dedupe/dep-cleanup breaks consumers at require-time, and split `typeorm` copies would break decorator/`instanceof` registries. Bucket: B9. Fix: move single-instance-critical packages to `peerDependencies`, the rest to `dependencies`; add `publint`/require-walk in CI.
+
+**A3 — Dead & divergent module `SomethingModule` on the public surface — MEDIUM.** `accessUtility/accessUtility.module.ts` exports `class SomethingModule` (wires only `TypeOrmModule.forFeature`, missing Auth/Platform/forwardRef), is imported nowhere, but the published barrel re-exports it — a consumer mounting it gets accessUtility controllers with no auth. Buckets: B4, B9. Fix: delete the file.
+
+**A4 — `ReportingCatalogGate` never registered as a provider — MEDIUM.** `development.module.ts:14` spreads services/registries/commands but omits `es6Classes.gates`, so the gate's `onModuleInit` (demotes invalid agent-visible catalog views at boot) never runs — the documented safety net is dead code. Bucket: B8. Fix: add `...es6Classes.gates` to `providers`.
+
+**A5 — `engines: node>=24.11.0` stricter than the core sibling — MEDIUM.** utility-services allows `^22 || ^24.11`; downstream on Node 22 hits EBADENGINE / hard failure under engine-strict. Bucket: B9. Fix: align the range.
+
+### Bugs / correctness
+
+**B1f — `numeric`→`parseFloat` precision loss on money — MEDIUM.** `typeorm.config.ts:12` (and read/orm configs) parse pg `numeric` (arbitrary precision) as IEEE-754 double process-wide — silent rounding on invoice/expense totals and SUM drift. `bigint`→`parseInt` (`:7`) is a latent >2^53 overflow. Bucket: B8. Fix: parse money `numeric` as string + decimal math; return string for out-of-safe-range bigint.
+
+**B2f — Authority-delegation IDOR + force-activate — HIGH/MEDIUM.** `process.authority.delegation.data.ts:45-58`: `update()` loads by `{id, business_id}` only (no `user_id`), so any business user edits/reactivates another user's delegation window (approval-authority integrity); `record.active = payload.active || true` (`:55,75`) always forces active. `authority.delegation.controller.ts:42` `search` also lacks the manager-role gate its own contract requires (enumerates all delegators/delegates). Bucket: B5. Fix: scope update by `user_id`, use `?? true`, gate `search` by manager role.
+
+**B3f — Delegation window uses a hardcoded IST offset — LOW.** `process.authority.delegation.data.ts:135-138` subtracts fixed 329/331 minutes (start vs end differ by 2 for no reason) despite the "business offset" name — wrong windows for non-IST tenants. Bucket: B5. Fix: derive from business timezone.
+
+**B4f — Silent error swallowing masks job failures; missing idempotency — MEDIUM.** `process.whatsapp.message.ts:49,119` and `process.slack.integration.ts:151` catch→return undefined; `SendBusinessReportNotificationJob` catches→logs so a failed email marks the BullMQ job successful (no retry). Only `EvaluateEmailRuleJob` sets `noDuplicate`; script/trigger/report jobs re-run side effects (duplicate emails, double execution) on retry. `email.message.subscriber.ts:21` `.toLowerCase()` with no null guard throws on missing `from_email`. Buckets: B2, B4. Fix: rethrow to let BullMQ retry; add idempotency keys; null-guard.
+
+**B5f — Excel/CSV formula injection on export; cross-tenant trigger fan-out — LOW.** `generate.bulk.upload.sheet.ts:363,370` writes stored values without neutralizing leading `= + - @` (import path strips `=`, export doesn't — asymmetric). `capture.event.trigger.job` runs all businesses' triggers when the source row lacks `business_id`. Buckets: B2, B4.
+
+### Efficiency / quality
+
+**E1 — Test gaps on the security-critical paths — MEDIUM.** 458 tests pass with no infra, but zero specs for the tenant-boundary middlewares (`business.middleware`, `external.access.middleware`, `user.business.access.middleware`), ~14/15 workflow approval libraries, and the injection-prone `process.db.find`/`process.report.data`; e2e is the untouched Nest scaffold needing live PG+Redis; `collectCoverageFrom` sweeps 266 migrations; `isolatedModules:true` disables type-checking in tests; `test:db` points at a missing file. Bucket: B9.
+
+**E2 — Duplication & dead code — LOW.** The `ProcessDbFind`/find-search config is copy-pasted across 22+ controllers (one parameterization fix lands everywhere once S1 is fixed); `listing.service.ts:146-160` cache path fully commented; several workflow DB-event jobs are no-ops; `tslint.json` is dead (TSLint EOL); pg-parser boilerplate triplicated across the three orm configs; jest worker-leak warning; `strict:false` in tsconfig ships non-strict `.d.ts`. Buckets: B1, B5, B8, B9.
+
+### Coverage gaps / unverified (carry into remediation)
+
+- **Self-approval / approver-identity check lives outside the workflow bucket** (whatever sets `wf_workflow_users.activity_id`). B5 could not confirm a requester can't approve their own document, nor that the approver id comes from `Auth.user()`. Must be verified in the access-module approval controller before sign-off.
+- **`Auth.user()`/`Auth.login()` request-scoping** (utility-services AsyncLocalStorage) is assumed by every MCP/middleware enforcement decision; if it's a mutable singleton, concurrent requests cross principals — verify upstream.
+- B4 F8 (path traversal via crafted `.xlsx` sheet name → temp path) and Handlebars custom-helper injection are unverified.
+- Synthetic **user id 2** is shared by `internal/*` and all `v1` api-account keys, collapsing idempotency namespaces (B7 M3) and identity — confirm it isn't over-privileged.
+
+## Remediation order
+
+Severity × blast-radius, dependencies noted. Lead-owned items (public surface, auth architecture, shared base) are marked ⚑.
+
+1. **A1 ⚑** — restore/commit barrel generation + CI build-require gate. Blocks any release; do first so fixes can ship.
+2. **S1 + S2** — parameterize the shared listing/find/report SQL processors and remove the raw-SQL passthrough DTO fields. One coordinated change closes the largest attack surface across 4 modules; touches shared libraries ⚑.
+3. **S5 ⚑** — guard/relocate the root `AppController` ops endpoints.
+4. **S4 ⚑** — replace raw-XFF IP reads with `req.ip` across all five middlewares/services.
+5. **S6, S7, S11, S12** — tenant/authorization gaps (device-auth membership, global form/menu writes, `v1` scope enforcement, webhook auth). Independent files, parallelizable.
+6. **S8, S9, S10, S13, S15** — credential handling (serialize-exclude, CSPRNG secrets, rotation re-hash, remove hardcoded token, sign OAuth state). S9/S10 touch the same secret library — sequence together.
+7. **S3** — sandbox the `eval` sites (larger design change; gate authorship as an interim mitigation once S6/S7 land).
+8. **A2 ⚑, A3, A4, A5** — package/dependency/module hygiene.
+9. **S14, S16, S17, B1f, B2f, B4f** — medium security + correctness.
+10. **B3f, B5f, S18, E1, E2** — low-severity + quality; E1 (tests) should accompany each fix above as its regression proof.

package/dist/access/commands/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/access/commands/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yDAAsC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/access/commands/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAGA,yDAAuC"}

package/dist/access/controllers/dashboard.controller.js

@@ -26,17 +26,20 @@ let DashboardController = class DashboardController {
     async getDashboards(params) {
         const user = nestjs_utility_services_1.Auth.user();
         const businessId = user.auth_attributes?.business_id;
-        const sql = `select a.* from utl_dashboards a where a.deleted_at is null and a.product_id = ${params.id} and  (a.business_id is null or a.business_id = ${businessId}) and (a.user_id is null or a.user_id = ${user.id})`;
-        return this.sqlService.read(sql);
+        const sql = `select a.* from utl_dashboards a where a.deleted_at is null and a.product_id = $1 and  (a.business_id is null or a.business_id = $2) and (a.user_id is null or a.user_id = $3)`;
+        return this.sqlService.boundRead(sql, [params.id, businessId, user.id]);
     }
     async getReports(params, body) {
         const str = body.str;
         const limit = body.limit || 10;
-        let sql = `select b.* from utl_dashboards a, utl_dashboard_components b where a.identifier = '${params.slug}' and a.id = b.dashboard_id and a.deleted_at is null and not EXISTS (select 1 from sys_report_details c where b.identifier = c.name and c.deleted_at is null)`;
+        const values = [params.slug];
+        let sql = `select b.* from utl_dashboards a, utl_dashboard_components b where a.identifier = $1 and a.id = b.dashboard_id and a.deleted_at is null and not EXISTS (select 1 from sys_report_details c where b.identifier = c.name and c.deleted_at is null)`;
         if (str) {
-            sql = `${sql} and (b.name ilike '%${str}%')`;
+            values.push(`%${str}%`);
+            sql = `${sql} and (b.name ilike $${values.length})`;
         }
-        return this.sqlService.read(`${sql} order by b.name asc limit ${limit}`);
+        values.push(limit);
+        return this.sqlService.boundRead(`${sql} order by b.name asc limit $${values.length}`, values);
     }
     async getDashboardDetails(params) {
         return new process_dashboard_report_1.ProcessDashboardReport(this.accessService).process(params.slug);

package/dist/access/controllers/dashboard.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard.controller.js","sourceRoot":"","sources":["../../../src/access/controllers/dashboard.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoE;AACpE,oFAAyF;AACzF,iFAA2E;AAC3E,iEAA4D;AAE5D,oFAA+E;AAgBxE,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC5B,YACqB,UAAsB,EACtB,aAA4B;QAD5B,eAAU,GAAV,UAAU,CAAY;QACtB,kBAAa,GAAb,aAAa,CAAe;IAC9C,CAAC;IAYE,AAAN,KAAK,CAAC,aAAa,CAAU,MAA8B;QACvD,MAAM,IAAI,GAAG,8BAAI,CAAC,IAAI,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC;QAErD,MAAM,GAAG,GAAG,kFAAkF,MAAM,CAAC,EAAE,mDAAmD,UAAU,2CAA2C,IAAI,CAAC,EAAE,GAAG,CAAC;QAE1N,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IAaK,AAAN,KAAK,CAAC,UAAU,CAAU,MAA8B,EAAU,IAAqB;QACnF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAE/B,IAAI,GAAG,GAAG,sFAAsF,MAAM,CAAC,IAAI,+JAA+J,CAAC;QAE3Q,IAAI,GAAG,EAAE,CAAC;YACN,GAAG,GAAG,GAAG,GAAG,wBAAwB,GAAG,KAAK,CAAC;QACjD,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,8BAA8B,KAAK,EAAE,CAAC,CAAC;IAC7E,CAAC;IAYK,AAAN,KAAK,CAAC,mBAAmB,CAAU,MAA8B;QAC7D,OAAO,IAAI,iDAAsB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/E,CAAC;CACJ,CAAA;AA9DY,kDAAmB;AAgBtB;IADL,IAAA,YAAG,GAAE;IACe,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,kDAAsB;;wDAO1D;AAaK;IADL,IAAA,aAAI,EAAC,eAAe,CAAC;IACJ,WAAA,IAAA,cAAK,GAAE,CAAA;IAAkC,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAA/B,kDAAsB,EAAgB,mCAAe;;qDAWtF;AAYK;IADL,IAAA,YAAG,EAAC,OAAO,CAAC;IACc,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,kDAAsB;;8DAEhE;8BA7DQ,mBAAmB;IAD/B,IAAA,mBAAU,EAAC,2BAA2B,CAAC;qCAGH,oCAAU;QACP,uCAAa;GAHxC,mBAAmB,CA8D/B"}
+{"version":3,"file":"dashboard.controller.js","sourceRoot":"","sources":["../../../src/access/controllers/dashboard.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoE;AACpE,oFAAyF;AACzF,iFAA2E;AAC3E,iEAA4D;AAE5D,oFAA+E;AAgBxE,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC5B,YACqB,UAAsB,EACtB,aAA4B;QAD5B,eAAU,GAAV,UAAU,CAAY;QACtB,kBAAa,GAAb,aAAa,CAAe;IAC9C,CAAC;IAYE,AAAN,KAAK,CAAC,aAAa,CAAU,MAA8B;QACvD,MAAM,IAAI,GAAG,8BAAI,CAAC,IAAI,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC;QAGrD,MAAM,GAAG,GAAG,gLAAgL,CAAC;QAE7L,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC;IAaK,AAAN,KAAK,CAAC,UAAU,CAAU,MAA8B,EAAU,IAAqB;QACnF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAG/B,MAAM,MAAM,GAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEpC,IAAI,GAAG,GAAG,kPAAkP,CAAC;QAE7P,IAAI,GAAG,EAAE,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;YACxB,GAAG,GAAG,GAAG,GAAG,uBAAuB,MAAM,CAAC,MAAM,GAAG,CAAC;QACxD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnB,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,GAAG,+BAA+B,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;IACnG,CAAC;IAYK,AAAN,KAAK,CAAC,mBAAmB,CAAU,MAA8B;QAC7D,OAAO,IAAI,iDAAsB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/E,CAAC;CACJ,CAAA;AArEY,kDAAmB;AAgBtB;IADL,IAAA,YAAG,GAAE;IACe,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,kDAAsB;;wDAQ1D;AAaK;IADL,IAAA,aAAI,EAAC,eAAe,CAAC;IACJ,WAAA,IAAA,cAAK,GAAE,CAAA;IAAkC,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAA/B,kDAAsB,EAAgB,mCAAe;;qDAiBtF;AAYK;IADL,IAAA,YAAG,EAAC,OAAO,CAAC;IACc,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,kDAAsB;;8DAEhE;8BApEQ,mBAAmB;IAD/B,IAAA,mBAAU,EAAC,2BAA2B,CAAC;qCAGH,oCAAU;QACP,uCAAa;GAHxC,mBAAmB,CAqE/B"}

package/dist/access/controllers/group.member.controller.js

@@ -72,11 +72,17 @@ let GroupMemberController = class GroupMemberController {
         const validation = await this.validate(params);
         const str = body.str;
         const limit = body.limit || 10;
-        let sql = `select a.id, a.name, b.email, a.identifier, a.user_id, a.department_id, c.name designation_name from emp_employee_details a left join sys_users b on a.user_id = b.id left join emp_designation_details c on a.designation_id = c.id where a.business_id = ${validation.business.id} and a.user_id = b.id and not exists(select 1 from bz_group_members d where d.deleted_at is null and d.group_id = ${validation.group.id} and d.user_id = a.user_id) `;
+        const values = [validation.business.id, validation.group.id];
+        let sql = `select a.id, a.name, b.email, a.identifier, a.user_id, a.department_id, c.name designation_name from emp_employee_details a left join sys_users b on a.user_id = b.id left join emp_designation_details c on a.designation_id = c.id where a.business_id = $1 and a.user_id = b.id and not exists(select 1 from bz_group_members d where d.deleted_at is null and d.group_id = $2 and d.user_id = a.user_id) `;
         if (str) {
-            sql = `${sql} and (a.name ilike '%${str}%' or a.identifier ilike '${str}' or b.email ilike '%${str}%')`;
+            values.push(`%${str}%`);
+            const contains = `$${values.length}`;
+            values.push(str);
+            const exact = `$${values.length}`;
+            sql = `${sql} and (a.name ilike ${contains} or a.identifier ilike ${exact} or b.email ilike ${contains})`;
         }
-        return this.sqlService.read(`${sql} order by 2 asc limit ${limit}`);
+        values.push(limit);
+        return this.sqlService.boundRead(`${sql} order by 2 asc limit $${values.length}`, values);
     }
     async show(params) {
         await this.validate(params);

package/dist/access/controllers/group.member.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"group.member.controller.js","sourceRoot":"","sources":["../../../src/access/controllers/group.member.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4E;AAC5E,oFAA0H;AAC1H,mEAA8D;AAC9D,qDAAgD;AAEhD,uFAAgF;AAChF,uFAAiF;AACjF,yEAAoE;AACpE,kEAA6D;AAC7D,sFAAgF;AAChF,iFAA4E;AAC5E,iEAA6D;AAC7D,uEAAiE;AAe1D,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAC9B,YACqB,qBAA4C,EAC5C,UAAsB,EACtB,cAA8B;QAF9B,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,eAAU,GAAV,UAAU,CAAY;QACtB,mBAAc,GAAd,cAAc,CAAgB;IAChD,CAAC;IAUE,AAAN,KAAK,CAAC,MAAM,CAAU,MAAwB,EAAU,IAA8B;QAClF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE/C,OAAO,IAAI,kDAAsB,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChH,CAAC;IAUK,AAAN,KAAK,CAAC,IAAI,CAAU,MAAwB,EAAU,IAAe;QACjE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE/C,MAAM,MAAM,GAAqB;YAC7B,gBAAgB,EAAE,8DAA8D,MAAM,CAAC,EAAE,6CAA6C,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE;YAC9J,iBAAiB,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;YACxC,SAAS,EAAE,yDAAyD;YACpE,OAAO,EAAE;gBACL,MAAM;gBACN,QAAQ;gBACR,SAAS;gBACT,gBAAgB;gBAChB,UAAU;gBACV,YAAY;gBACZ,aAAa;gBACb,qBAAqB;gBACrB,sBAAsB;gBACtB,gCAAgC;gBAChC,cAAc;gBACd,cAAc;gBACd,cAAc;gBACd,cAAc;gBACd,YAAY;gBACZ,kBAAkB;gBAClB,kBAAkB;gBAClB,0BAA0B;aAC7B;YACD,KAAK,EAAE,UAAU;YACjB,iBAAiB,EAAE,CAAC,UAAU,CAAC;YAC/B,aAAa,EAAE,EAAE;YACjB,GAAG,IAAI;SACV,CAAC;QAEF,OAAO,IAAI,+BAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,CAAC;IAWK,AAAN,KAAK,CAAC,UAAU,CAAU,MAAwB,EAAU,IAAqB;QAC7E,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAE/B,IAAI,GAAG,GAAG,8PAA8P,UAAU,CAAC,QAAQ,CAAC,EAAE,qHAAqH,UAAU,CAAC,KAAK,CAAC,EAAE,8BAA8B,CAAC;QAErc,IAAI,GAAG,EAAE,CAAC;YACN,GAAG,GAAG,GAAG,GAAG,wBAAwB,GAAG,6BAA6B,GAAG,wBAAwB,GAAG,KAAK,CAAC;QAC5G,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,yBAAyB,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;IASK,AAAN,KAAK,CAAC,IAAI,CAAU,MAAwB;QACxC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE5B,OAAO,uCAAiB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACxI,CAAC;IAWK,AAAN,KAAK,CAAC,MAAM,CAAU,MAAwB,EAAU,IAAuB;QAC3E,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE5B,MAAM,CAAC,GAAG,MAAM,uCAAiB,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAE7F,IAAI,CAAC,EAAE,EAAE;YAAE,OAAO,CAAC,CAAC;QAEpB,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAWK,AAAN,KAAK,CAAC,MAAM,CAAU,MAAwB;QAC1C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE/C,MAAM,MAAM,GAAG,MAAM,uCAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,MAAM,EAAE,QAAQ,KAAK,UAAU,CAAC,KAAK,CAAC,EAAE;YAAE,MAAM,IAAI,yCAAe,EAAE,CAAC;QAC1E,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU,CAAC,KAAK,CAAC,UAAU;YAAE,MAAM,IAAI,4CAAkB,CAAC,qCAAqC,CAAC,CAAC;QAExH,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;IAC/B,CAAC;IASO,KAAK,CAAC,QAAQ,CAAC,MAAwB;QAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,cAAc,EAAE,CAAC;QACnE,MAAM,KAAK,GAAG,MAAM,oDAAuB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAE7D,IAAI,KAAK,EAAE,WAAW,KAAK,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,yCAAe,EAAE,CAAC;QAEpE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;CACJ,CAAA;AA3JY,sDAAqB;AAexB;IADL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACD,WAAA,IAAA,cAAK,GAAE,CAAA;IAA4B,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAzB,qCAAgB,EAAgB,uDAAwB;;mDAIrF;AAUK;IADL,IAAA,aAAI,EAAC,MAAM,CAAC;IACD,WAAA,IAAA,cAAK,GAAE,CAAA;IAA4B,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAzB,qCAAgB,EAAgB,uBAAS;;iDAkCpE;AAWK;IADL,IAAA,aAAI,EAAC,aAAa,CAAC;IACF,WAAA,IAAA,cAAK,GAAE,CAAA;IAA4B,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAzB,qCAAgB,EAAgB,yCAAe;;uDAahF;AASK;IADL,IAAA,YAAG,EAAC,YAAY,CAAC;IACN,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,qCAAgB;;iDAI3C;AAWK;IADL,IAAA,aAAI,GAAE;IACO,WAAA,IAAA,cAAK,GAAE,CAAA;IAA4B,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAzB,qCAAgB,EAAgB,wCAAiB;;mDAQ9E;AAWK;IADL,IAAA,eAAM,EAAC,YAAY,CAAC;IACP,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,qCAAgB;;mDAQ7C;gCA1IQ,qBAAqB;IADjC,IAAA,mBAAU,EAAC,6BAA6B,CAAC;qCAGM,+CAAqB;QAChC,oCAAU;QACN,gCAAc;GAJ1C,qBAAqB,CA2JjC"}
+{"version":3,"file":"group.member.controller.js","sourceRoot":"","sources":["../../../src/access/controllers/group.member.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4E;AAC5E,oFAA0H;AAC1H,mEAA8D;AAC9D,qDAAgD;AAEhD,uFAAgF;AAChF,uFAAiF;AACjF,yEAAoE;AACpE,kEAA6D;AAC7D,sFAAgF;AAChF,iFAA4E;AAC5E,iEAA6D;AAC7D,uEAAiE;AAe1D,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAC9B,YACqB,qBAA4C,EAC5C,UAAsB,EACtB,cAA8B;QAF9B,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,eAAU,GAAV,UAAU,CAAY;QACtB,mBAAc,GAAd,cAAc,CAAgB;IAChD,CAAC;IAUE,AAAN,KAAK,CAAC,MAAM,CAAU,MAAwB,EAAU,IAA8B;QAClF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE/C,OAAO,IAAI,kDAAsB,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChH,CAAC;IAUK,AAAN,KAAK,CAAC,IAAI,CAAU,MAAwB,EAAU,IAAe;QACjE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE/C,MAAM,MAAM,GAAqB;YAC7B,gBAAgB,EAAE,8DAA8D,MAAM,CAAC,EAAE,6CAA6C,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE;YAC9J,iBAAiB,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;YACxC,SAAS,EAAE,yDAAyD;YACpE,OAAO,EAAE;gBACL,MAAM;gBACN,QAAQ;gBACR,SAAS;gBACT,gBAAgB;gBAChB,UAAU;gBACV,YAAY;gBACZ,aAAa;gBACb,qBAAqB;gBACrB,sBAAsB;gBACtB,gCAAgC;gBAChC,cAAc;gBACd,cAAc;gBACd,cAAc;gBACd,cAAc;gBACd,YAAY;gBACZ,kBAAkB;gBAClB,kBAAkB;gBAClB,0BAA0B;aAC7B;YACD,KAAK,EAAE,UAAU;YACjB,iBAAiB,EAAE,CAAC,UAAU,CAAC;YAC/B,aAAa,EAAE,EAAE;YACjB,GAAG,IAAI;SACV,CAAC;QAEF,OAAO,IAAI,+BAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,CAAC;IAWK,AAAN,KAAK,CAAC,UAAU,CAAU,MAAwB,EAAU,IAAqB;QAC7E,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAG/B,MAAM,MAAM,GAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAEpE,IAAI,GAAG,GAAG,+YAA+Y,CAAC;QAE1Z,IAAI,GAAG,EAAE,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;YACxB,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAErC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAElC,GAAG,GAAG,GAAG,GAAG,sBAAsB,QAAQ,0BAA0B,KAAK,qBAAqB,QAAQ,GAAG,CAAC;QAC9G,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnB,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,GAAG,0BAA0B,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;IAC9F,CAAC;IASK,AAAN,KAAK,CAAC,IAAI,CAAU,MAAwB;QACxC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE5B,OAAO,uCAAiB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACxI,CAAC;IAWK,AAAN,KAAK,CAAC,MAAM,CAAU,MAAwB,EAAU,IAAuB;QAC3E,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE5B,MAAM,CAAC,GAAG,MAAM,uCAAiB,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAE7F,IAAI,CAAC,EAAE,EAAE;YAAE,OAAO,CAAC,CAAC;QAEpB,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAWK,AAAN,KAAK,CAAC,MAAM,CAAU,MAAwB;QAC1C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAE/C,MAAM,MAAM,GAAG,MAAM,uCAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,MAAM,EAAE,QAAQ,KAAK,UAAU,CAAC,KAAK,CAAC,EAAE;YAAE,MAAM,IAAI,yCAAe,EAAE,CAAC;QAC1E,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU,CAAC,KAAK,CAAC,UAAU;YAAE,MAAM,IAAI,4CAAkB,CAAC,qCAAqC,CAAC,CAAC;QAExH,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;IAC/B,CAAC;IASO,KAAK,CAAC,QAAQ,CAAC,MAAwB;QAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,cAAc,EAAE,CAAC;QACnE,MAAM,KAAK,GAAG,MAAM,oDAAuB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAE7D,IAAI,KAAK,EAAE,WAAW,KAAK,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,yCAAe,EAAE,CAAC;QAEpE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;CACJ,CAAA;AAtKY,sDAAqB;AAexB;IADL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACD,WAAA,IAAA,cAAK,GAAE,CAAA;IAA4B,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAzB,qCAAgB,EAAgB,uDAAwB;;mDAIrF;AAUK;IADL,IAAA,aAAI,EAAC,MAAM,CAAC;IACD,WAAA,IAAA,cAAK,GAAE,CAAA;IAA4B,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAzB,qCAAgB,EAAgB,uBAAS;;iDAkCpE;AAWK;IADL,IAAA,aAAI,EAAC,aAAa,CAAC;IACF,WAAA,IAAA,cAAK,GAAE,CAAA;IAA4B,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAzB,qCAAgB,EAAgB,yCAAe;;uDAwBhF;AASK;IADL,IAAA,YAAG,EAAC,YAAY,CAAC;IACN,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,qCAAgB;;iDAI3C;AAWK;IADL,IAAA,aAAI,GAAE;IACO,WAAA,IAAA,cAAK,GAAE,CAAA;IAA4B,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAzB,qCAAgB,EAAgB,wCAAiB;;mDAQ9E;AAWK;IADL,IAAA,eAAM,EAAC,YAAY,CAAC;IACP,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,qCAAgB;;mDAQ7C;gCArJQ,qBAAqB;IADjC,IAAA,mBAAU,EAAC,6BAA6B,CAAC;qCAGM,+CAAqB;QAChC,oCAAU;QACN,gCAAc;GAJ1C,qBAAqB,CAsKjC"}

package/dist/access/controllers/group.role.controller.js

@@ -42,11 +42,15 @@ let GroupRoleController = class GroupRoleController {
         const validation = await this.validate(params.id);
         const str = body.str;
         const limit = body.limit || 10;
-        let sql = `select a.id, a.name, a.identifier from sys_roles a where a.deleted_at is null and a.identifier ilike 'ua_%' and not exists(select 1 from bz_group_roles b where b.deleted_at is null and b.group_id = ${validation.entity.id} and a.id = b.role_id) `;
+        const values = [validation.entity.id];
+        let sql = `select a.id, a.name, a.identifier from sys_roles a where a.deleted_at is null and a.identifier ilike 'ua_%' and not exists(select 1 from bz_group_roles b where b.deleted_at is null and b.group_id = $1 and a.id = b.role_id) `;
         if (str) {
-            sql = `${sql} and (a.name ilike '%${str}%' or a.identifier ilike '%${str}%')`;
+            values.push(`%${str}%`);
+            const contains = `$${values.length}`;
+            sql = `${sql} and (a.name ilike ${contains} or a.identifier ilike ${contains})`;
         }
-        return this.sqlService.read(`${sql} order by 2 asc limit ${limit}`);
+        values.push(limit);
+        return this.sqlService.boundRead(`${sql} order by 2 asc limit $${values.length}`, values);
     }
     async create(params, body) {
         const validation = await this.validate(params.id);

package/dist/access/controllers/group.role.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"group.role.controller.js","sourceRoot":"","sources":["../../../src/access/controllers/group.role.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4E;AAC5E,oFAAsI;AACtI,uDAAkD;AAClD,mEAA8D;AAC9D,mFAA4E;AAC5E,uFAAiF;AACjF,uFAAiF;AACjF,kFAA4E;AAC5E,iFAA4E;AAC5E,iEAA6D;AActD,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC5B,YACqB,qBAA4C,EAC5C,UAAsB,EACtB,cAA8B;QAF9B,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,eAAU,GAAV,UAAU,CAAY;QACtB,mBAAc,GAAd,cAAc,CAAgB;IAChD,CAAC;IAWE,AAAN,KAAK,CAAC,MAAM,CAAU,MAAwB,EAAU,IAA4B;QAChF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC;QAE1B,OAAO,IAAI,8CAAoB,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5F,CAAC;IAUK,AAAN,KAAK,CAAC,IAAI,CAAU,MAAwB;QACxC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAElD,OAAO,oDAAuB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAChH,CAAC;IAcK,AAAN,KAAK,CAAC,UAAU,CAAU,MAAwB,EAAU,IAAqB;QAC7E,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAElD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAE/B,IAAI,GAAG,GAAG,yMAAyM,UAAU,CAAC,MAAM,CAAC,EAAE,yBAAyB,CAAC;QAEjQ,IAAI,GAAG,EAAE,CAAC;YACN,GAAG,GAAG,GAAG,GAAG,wBAAwB,GAAG,8BAA8B,GAAG,KAAK,CAAC;QAClF,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,yBAAyB,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;IAcK,AAAN,KAAK,CAAC,MAAM,CAAU,MAAwB,EAAU,IAAgB;QACpE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,oCAAU,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAElD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,4CAAkB,CAAC,qBAAqB,CAAC,CAAC;QAE/D,OAAO,oDAAuB,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IACvG,CAAC;IAYK,AAAN,KAAK,CAAC,MAAM,CAAU,MAAwB;QAC1C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,GAAG,MAAM,oDAAuB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAErH,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,yCAAe,EAAE,CAAC;QAEpC,OAAO,CAAC,CAAC,UAAU,EAAE,CAAC;IAC1B,CAAC;IAYD,KAAK,CAAC,QAAQ,CAAC,EAAU;QACrB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,cAAc,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,oDAAuB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAElG,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,yCAAe,EAAE,CAAC;QAEzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAChC,CAAC;CACJ,CAAA;AA1HY,kDAAmB;AAgBtB;IADL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACD,WAAA,IAAA,cAAK,GAAE,CAAA;IAA4B,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAzB,qCAAgB,EAAgB,mDAAsB;;iDAKnF;AAUK;IADL,IAAA,YAAG,EAAC,YAAY,CAAC;IACN,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,qCAAgB;;+CAI3C;AAcK;IADL,IAAA,aAAI,EAAC,WAAW,CAAC;IACA,WAAA,IAAA,cAAK,GAAE,CAAA;IAA4B,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAzB,qCAAgB,EAAgB,yCAAe;;qDAahF;AAcK;IADL,IAAA,aAAI,GAAE;IACO,WAAA,IAAA,cAAK,GAAE,CAAA;IAA4B,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAzB,qCAAgB,EAAgB,yBAAU;;iDAOvE;AAYK;IADL,IAAA,eAAM,EAAC,YAAY,CAAC;IACP,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,qCAAgB;;iDAO7C;8BAtGQ,mBAAmB;IAD/B,IAAA,mBAAU,EAAC,2BAA2B,CAAC;qCAGQ,+CAAqB;QAChC,oCAAU;QACN,gCAAc;GAJ1C,mBAAmB,CA0H/B"}
+{"version":3,"file":"group.role.controller.js","sourceRoot":"","sources":["../../../src/access/controllers/group.role.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4E;AAC5E,oFAAsI;AACtI,uDAAkD;AAClD,mEAA8D;AAC9D,mFAA4E;AAC5E,uFAAiF;AACjF,uFAAiF;AACjF,kFAA4E;AAC5E,iFAA4E;AAC5E,iEAA6D;AActD,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC5B,YACqB,qBAA4C,EAC5C,UAAsB,EACtB,cAA8B;QAF9B,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,eAAU,GAAV,UAAU,CAAY;QACtB,mBAAc,GAAd,cAAc,CAAgB;IAChD,CAAC;IAWE,AAAN,KAAK,CAAC,MAAM,CAAU,MAAwB,EAAU,IAA4B;QAChF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC;QAE1B,OAAO,IAAI,8CAAoB,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5F,CAAC;IAUK,AAAN,KAAK,CAAC,IAAI,CAAU,MAAwB;QACxC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAElD,OAAO,oDAAuB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAChH,CAAC;IAcK,AAAN,KAAK,CAAC,UAAU,CAAU,MAAwB,EAAU,IAAqB;QAC7E,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAElD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAG/B,MAAM,MAAM,GAAU,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAE7C,IAAI,GAAG,GAAG,iOAAiO,CAAC;QAE5O,IAAI,GAAG,EAAE,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;YACxB,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAErC,GAAG,GAAG,GAAG,GAAG,sBAAsB,QAAQ,0BAA0B,QAAQ,GAAG,CAAC;QACpF,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnB,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,GAAG,0BAA0B,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;IAC9F,CAAC;IAcK,AAAN,KAAK,CAAC,MAAM,CAAU,MAAwB,EAAU,IAAgB;QACpE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,oCAAU,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAElD,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,4CAAkB,CAAC,qBAAqB,CAAC,CAAC;QAE/D,OAAO,oDAAuB,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IACvG,CAAC;IAYK,AAAN,KAAK,CAAC,MAAM,CAAU,MAAwB;QAC1C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,GAAG,MAAM,oDAAuB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAErH,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,yCAAe,EAAE,CAAC;QAEpC,OAAO,CAAC,CAAC,UAAU,EAAE,CAAC;IAC1B,CAAC;IAYD,KAAK,CAAC,QAAQ,CAAC,EAAU;QACrB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,cAAc,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,oDAAuB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAElG,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,yCAAe,EAAE,CAAC;QAEzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAChC,CAAC;CACJ,CAAA;AAlIY,kDAAmB;AAgBtB;IADL,IAAA,aAAI,EAAC,QAAQ,CAAC;IACD,WAAA,IAAA,cAAK,GAAE,CAAA;IAA4B,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAzB,qCAAgB,EAAgB,mDAAsB;;iDAKnF;AAUK;IADL,IAAA,YAAG,EAAC,YAAY,CAAC;IACN,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,qCAAgB;;+CAI3C;AAcK;IADL,IAAA,aAAI,EAAC,WAAW,CAAC;IACA,WAAA,IAAA,cAAK,GAAE,CAAA;IAA4B,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAzB,qCAAgB,EAAgB,yCAAe;;qDAqBhF;AAcK;IADL,IAAA,aAAI,GAAE;IACO,WAAA,IAAA,cAAK,GAAE,CAAA;IAA4B,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAzB,qCAAgB,EAAgB,yBAAU;;iDAOvE;AAYK;IADL,IAAA,eAAM,EAAC,YAAY,CAAC;IACP,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAS,qCAAgB;;iDAO7C;8BA9GQ,mBAAmB;IAD/B,IAAA,mBAAU,EAAC,2BAA2B,CAAC;qCAGQ,+CAAqB;QAChC,oCAAU;QACN,gCAAc;GAJ1C,mBAAmB,CAkI/B"}

package/dist/access/controllers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/access/controllers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2DAAyC;AAAA,2DAAyC;AAAA,2DAAyC;AAAA,gEAA8C;AAAA,wEAAsD;AAAA,iEAA+C;AAAA,8DAA4C;AAAA,wFAAsE;AAAA,mEAAiD;AAAA,iEAA+C;AAAA,+DAA6C;AAAA,+DAA6C;AAAA,mEAAiD;AAAA,qFAAmE;AAAA,gEAA8C;AAAA,2DAAyC;AAAA,2DAAyC;AAAA,8DAA4C;AAAA,6DAA2C;AAAA,4DAA0C;AAAA,iEAA+C;AAAA,mEAAiD;AAAA,yDAAuC;AAAA,gEAA8C;AAAA,8DAA4C;AAAA,2DAAyC;AAAA,4DAA0C;AAAA,0DAAwC;AAAA,6DAA2C;AAAA,iEAA+C;AAAA,yDAAuC;AAAA,2DAAyC;AAAA,4DAA0C;AAAA,0DAAwC;AAAA,2DAAyC;AAAA,uDAAqC;AAAA,4DAA0C;AAAA,kEAAgD;AAAA,2DAAyC;AAAA,2DAAyC;AAAA,oDAAkC;AAAA,sDAAoC;AAAA,2DAAyC;AAAA,wDAAsC;AAAA,+DAA6C;AAAA,iEAA+C;AAAA,2DAAyC;AAAA,gEAA8C;AAAA,qEAAmD;AAAA,mDAAiC;AAAA,yDAAuC;AAAA,oEAAkD;AAAA,iEAA+C;AAAA,+DAA6C;AAAA,sDAAmC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/access/controllers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAGA,2DAAyC;AACzC,2DAAyC;AACzC,2DAAyC;AACzC,gEAA8C;AAC9C,wEAAsD;AACtD,iEAA+C;AAC/C,8DAA4C;AAC5C,wFAAsE;AACtE,mEAAiD;AACjD,iEAA+C;AAC/C,+DAA6C;AAC7C,+DAA6C;AAC7C,mEAAiD;AACjD,qFAAmE;AACnE,gEAA8C;AAC9C,2DAAyC;AACzC,2DAAyC;AACzC,8DAA4C;AAC5C,6DAA2C;AAC3C,4DAA0C;AAC1C,iEAA+C;AAC/C,mEAAiD;AACjD,yDAAuC;AACvC,gEAA8C;AAC9C,8DAA4C;AAC5C,2DAAyC;AACzC,4DAA0C;AAC1C,0DAAwC;AACxC,6DAA2C;AAC3C,iEAA+C;AAC/C,yDAAuC;AACvC,2DAAyC;AACzC,4DAA0C;AAC1C,0DAAwC;AACxC,2DAAyC;AACzC,uDAAqC;AACrC,4DAA0C;AAC1C,kEAAgD;AAChD,2DAAyC;AACzC,2DAAyC;AACzC,oDAAkC;AAClC,sDAAoC;AACpC,2DAAyC;AACzC,wDAAsC;AACtC,+DAA6C;AAC7C,iEAA+C;AAC/C,2DAAyC;AACzC,gEAA8C;AAC9C,qEAAmD;AACnD,mDAAiC;AACjC,yDAAuC;AACvC,oEAAkD;AAClD,iEAA+C;AAC/C,+DAA6C;AAC7C,sDAAoC"}

package/dist/access/controllers/tag.controller.js

@@ -26,14 +26,18 @@ let TagController = class TagController {
         const str = body.str;
         const sourceType = body.source_type;
         const limit = body.limit || 10;
-        let sql = `select name, count(1) from utl_tag_assignments a where a.deleted_at is null and a.business_id = ${business.id}`;
+        const values = [business.id];
+        let sql = `select name, count(1) from utl_tag_assignments a where a.deleted_at is null and a.business_id = $1`;
         if (sourceType) {
-            sql = `${sql} and a.source_type = '${sourceType}'`;
+            values.push(sourceType);
+            sql = `${sql} and a.source_type = $${values.length}`;
         }
         if (str) {
-            sql = `${sql} and (a.name ilike '%${str}%')`;
+            values.push(`%${str}%`);
+            sql = `${sql} and (a.name ilike $${values.length})`;
         }
-        return this.sqlService.read(`${sql} group by 1 order by name asc limit ${limit}`);
+        values.push(limit);
+        return this.sqlService.boundRead(`${sql} group by 1 order by name asc limit $${values.length}`, values);
     }
 };
 exports.TagController = TagController;

package/dist/access/controllers/tag.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"tag.controller.js","sourceRoot":"","sources":["../../../src/access/controllers/tag.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAwD;AACxD,iFAA4E;AAC5E,oFAAoE;AAa7D,IAAM,aAAa,GAAnB,MAAM,aAAa;IACtB,YACqB,qBAA4C,EAC5C,UAAsB;QADtB,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,eAAU,GAAV,UAAU,CAAY;IACxC,CAAC;IAaE,AAAN,KAAK,CAAC,IAAI,CAAS,IAA+C;QAC9D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,cAAc,EAAE,CAAC;QAEnE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAE/B,IAAI,GAAG,GAAG,mGAAmG,QAAQ,CAAC,EAAE,EAAE,CAAC;QAE3H,IAAI,UAAU,EAAE,CAAC;YACb,GAAG,GAAG,GAAG,GAAG,yBAAyB,UAAU,GAAG,CAAC;QACvD,CAAC;QAED,IAAI,GAAG,EAAE,CAAC;YACN,GAAG,GAAG,GAAG,GAAG,wBAAwB,GAAG,KAAK,CAAC;QACjD,CAAC;QAED,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,uCAAuC,KAAK,EAAE,CAAC,CAAC;IACtF,CAAC;CACJ,CAAA;AApCY,sCAAa;AAiBhB;IADL,IAAA,aAAI,EAAC,MAAM,CAAC;IACD,WAAA,IAAA,aAAI,GAAE,CAAA;;;;yCAkBjB;wBAnCQ,aAAa;IADzB,IAAA,mBAAU,EAAC,WAAW,CAAC;qCAGwB,+CAAqB;QAChC,oCAAU;GAHlC,aAAa,CAoCzB"}
+{"version":3,"file":"tag.controller.js","sourceRoot":"","sources":["../../../src/access/controllers/tag.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAwD;AACxD,iFAA4E;AAC5E,oFAAoE;AAa7D,IAAM,aAAa,GAAnB,MAAM,aAAa;IACtB,YACqB,qBAA4C,EAC5C,UAAsB;QADtB,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,eAAU,GAAV,UAAU,CAAY;IACxC,CAAC;IAaE,AAAN,KAAK,CAAC,IAAI,CAAS,IAA+C;QAC9D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,cAAc,EAAE,CAAC;QAEnE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAG/B,MAAM,MAAM,GAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAEpC,IAAI,GAAG,GAAG,oGAAoG,CAAC;QAE/G,IAAI,UAAU,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACxB,GAAG,GAAG,GAAG,GAAG,yBAAyB,MAAM,CAAC,MAAM,EAAE,CAAC;QACzD,CAAC;QAED,IAAI,GAAG,EAAE,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;YACxB,GAAG,GAAG,GAAG,GAAG,uBAAuB,MAAM,CAAC,MAAM,GAAG,CAAC;QACxD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnB,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,GAAG,wCAAwC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;IAC5G,CAAC;CACJ,CAAA;AA3CY,sCAAa;AAiBhB;IADL,IAAA,aAAI,EAAC,MAAM,CAAC;IACD,WAAA,IAAA,aAAI,GAAE,CAAA;;;;yCAyBjB;wBA1CQ,aAAa;IADzB,IAAA,mBAAU,EAAC,WAAW,CAAC;qCAGwB,+CAAqB;QAChC,oCAAU;GAHlC,aAAa,CA2CzB"}

package/dist/access/dtos/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/access/dtos/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8DAA4C;AAAA,mEAAiD;AAAA,wDAAsC;AAAA,qEAAmD;AAAA,8DAA4C;AAAA,gEAA8C;AAAA,8DAA4C;AAAA,4DAA0C;AAAA,gEAA8C;AAAA,kFAAgE;AAAA,wDAAsC;AAAA,wDAAsC;AAAA,yDAAuC;AAAA,0DAAwC;AAAA,yDAAuC;AAAA,gEAA8C;AAAA,2EAAyD;AAAA,uDAAqC;AAAA,0DAAwC;AAAA,wDAAsC;AAAA,yDAAuC;AAAA,wDAAsC;AAAA,mEAAiD;AAAA,yDAAuC;AAAA,+DAA6C;AAAA,wDAAsC;AAAA,iDAA+B;AAAA,mDAAiC;AAAA,wDAAsC;AAAA,4EAA0D;AAAA,8DAA4C;AAAA,iDAA+B;AAAA,6DAA2C;AAAA,sDAAoC;AAAA,gDAA8B;AAAA,4DAA0C;AAAA,wDAAsC;AAAA,oDAAkC;AAAA,+DAA6C;AAAA,gEAA8C;AAAA,mEAAiD;AAAA,6DAA2C;AAAA,2EAAyD;AAAA,qEAAmD;AAAA,gEAA8C;AAAA,4EAA0D;AAAA,uFAAqE;AAAA,iFAA+D;AAAA,qFAAmE;AAAA,qEAAmD;AAAA,sEAAoD;AAAA,kEAAgD;AAAA,mEAAiD;AAAA,oEAAkD;AAAA,iEAA+C;AAAA,6FAA2E;AAAA,uDAAqC;AAAA,uEAAqD;AAAA,qEAAmD;AAAA,sEAAoD;AAAA,mEAAiD;AAAA,oEAAkD;AAAA,iEAA+C;AAAA,uEAAqD;AAAA,wEAAsD;AAAA,yFAAuE;AAAA,0FAAwE;AAAA,sEAAoD;AAAA,oEAAkD;AAAA,sFAAoE;AAAA,8DAA4C;AAAA,+DAA6C;AAAA,gEAA8C;AAAA,+DAA6C;AAAA,gEAA8C;AAAA,2DAAyC;AAAA,gEAA8C;AAAA,mEAAiD;AAAA,iEAA+C;AAAA,kEAAgD;AAAA,gEAA8C;AAAA,iEAA+C;AAAA,iEAA+C;AAAA,6DAA2C;AAAA,uEAAqD;AAAA,oDAAkC;AAAA,0DAAwC;AAAA,gDAA8B;AAAA,wDAAsC;AAAA,mEAAiD;AAAA,sDAAoC;AAAA,oDAAkC;AAAA,gEAA8C;AAAA,iEAA+C;AAAA,mDAAiC;AAAA,oEAAkD;AAAA,iEAA+C;AAAA,iEAA+C;AAAA,mEAAiD;AAAA,mEAAiD;AAAA,2DAAyC;AAAA,8DAA4C;AAAA,+DAA6C;AAAA,+DAA6C;AAAA,sEAAoD;AAAA,4EAA0D;AAAA,iEAA+C;AAAA,kEAAgD;AAAA,qEAAmD;AAAA,sEAAoD;AAAA,iEAA+C;AAAA,+DAA6C;AAAA,gEAA8C;AAAA,6DAA2C;AAAA,2DAAyC;AAAA,gEAA8C;AAAA,+DAA6C;AAAA,gEAA8C;AAAA,iEAA+C;AAAA,8DAA4C;AAAA,kEAAgD;AAAA,8DAA4C;AAAA,iEAA+C;AAAA,yEAAuD;AAAA,iEAA+C;AAAA,wDAAsC;AAAA,mEAAiD;AAAA,0DAAwC;AAAA,0DAAwC;AAAA,0DAAwC;AAAA,gEAA8C;AAAA,gEAA8C;AAAA,iEAA+C;AAAA,8DAA4C;AAAA,+DAA6C;AAAA,+DAA6C;AAAA,yDAAuC;AAAA,gEAA8C;AAAA,mEAAiD;AAAA,sDAAoC;AAAA,6DAA2C;AAAA,kEAAgD;AAAA,gEAA8C;AAAA,sEAAoD;AAAA,+DAA6C;AAAA,gEAA8C;AAAA,+DAA6C;AAAA,wDAAsC;AAAA,6DAA2C;AAAA,4DAA0C;AAAA,mEAAiD;AAAA,0DAAwC;AAAA,+DAA6C;AAAA,6DAA2C;AAAA,4DAA0C;AAAA,6DAA2C;AAAA,uDAAqC;AAAA,mEAAiD;AAAA,qEAAmD;AAAA,sEAAoD;AAAA,oDAAkC;AAAA,yEAAuD;AAAA,oEAAkD;AAAA,mEAAiD;AAAA,gEAA8C;AAAA,2DAAyC;AAAA,6DAA2C;AAAA,8DAA4C;AAAA,0DAAwC;AAAA,+DAA6C;AAAA,4DAA0C;AAAA,8DAA4C;AAAA,oEAAkD;AAAA,0EAAwD;AAAA,yEAAuD;AAAA,0EAAwD;AAAA,qEAAmD;AAAA,qEAAmD;AAAA,iEAA+C;AAAA,sEAAoD;AAAA,gEAA8C;AAAA,6DAA2C;AAAA,+DAA6C;AAAA,gEAA8C;AAAA,qEAAmD;AAAA,iEAA+C;AAAA,2DAAyC;AAAA,8DAA4C;AAAA,kEAAgD;AAAA,8DAA4C;AAAA,iEAA+C;AAAA,yEAAuD;AAAA,sDAAoC;AAAA,oDAAkC;AAAA,sDAAoC;AAAA,6DAA2C;AAAA,kEAAgD;AAAA,oEAAkD;AAAA,2DAAyC;AAAA,wDAAsC;AAAA,wEAAsD;AAAA,qEAAmD;AAAA,sEAAoD;AAAA,mEAAiD;AAAA,6DAA2C;AAAA,wEAAsD;AAAA,iEAA+C;AAAA,+DAA6C;AAAA,gEAA8C;AAAA,gEAA8C;AAAA,oEAAkD;AAAA,iEAA+C;AAAA,qEAAmD;AAAA,+EAA4D"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/access/dtos/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAGA,8DAA4C;AAC5C,mEAAiD;AACjD,wDAAsC;AACtC,qEAAmD;AACnD,8DAA4C;AAC5C,gEAA8C;AAC9C,8DAA4C;AAC5C,4DAA0C;AAC1C,gEAA8C;AAC9C,kFAAgE;AAChE,wDAAsC;AACtC,wDAAsC;AACtC,yDAAuC;AACvC,0DAAwC;AACxC,yDAAuC;AACvC,gEAA8C;AAC9C,2EAAyD;AACzD,uDAAqC;AACrC,0DAAwC;AACxC,wDAAsC;AACtC,yDAAuC;AACvC,wDAAsC;AACtC,mEAAiD;AACjD,yDAAuC;AACvC,+DAA6C;AAC7C,wDAAsC;AACtC,iDAA+B;AAC/B,mDAAiC;AACjC,wDAAsC;AACtC,4EAA0D;AAC1D,8DAA4C;AAC5C,iDAA+B;AAC/B,6DAA2C;AAC3C,sDAAoC;AACpC,gDAA8B;AAC9B,4DAA0C;AAC1C,wDAAsC;AACtC,oDAAkC;AAClC,+DAA6C;AAC7C,gEAA8C;AAC9C,mEAAiD;AACjD,6DAA2C;AAC3C,2EAAyD;AACzD,qEAAmD;AACnD,gEAA8C;AAC9C,4EAA0D;AAC1D,uFAAqE;AACrE,iFAA+D;AAC/D,qFAAmE;AACnE,qEAAmD;AACnD,sEAAoD;AACpD,kEAAgD;AAChD,mEAAiD;AACjD,oEAAkD;AAClD,iEAA+C;AAC/C,6FAA2E;AAC3E,uDAAqC;AACrC,uEAAqD;AACrD,qEAAmD;AACnD,sEAAoD;AACpD,mEAAiD;AACjD,oEAAkD;AAClD,iEAA+C;AAC/C,uEAAqD;AACrD,wEAAsD;AACtD,yFAAuE;AACvE,0FAAwE;AACxE,sEAAoD;AACpD,oEAAkD;AAClD,sFAAoE;AACpE,8DAA4C;AAC5C,+DAA6C;AAC7C,gEAA8C;AAC9C,+DAA6C;AAC7C,gEAA8C;AAC9C,2DAAyC;AACzC,gEAA8C;AAC9C,mEAAiD;AACjD,iEAA+C;AAC/C,kEAAgD;AAChD,gEAA8C;AAC9C,iEAA+C;AAC/C,iEAA+C;AAC/C,6DAA2C;AAC3C,uEAAqD;AACrD,oDAAkC;AAClC,0DAAwC;AACxC,gDAA8B;AAC9B,wDAAsC;AACtC,mEAAiD;AACjD,sDAAoC;AACpC,oDAAkC;AAClC,gEAA8C;AAC9C,iEAA+C;AAC/C,mDAAiC;AACjC,oEAAkD;AAClD,iEAA+C;AAC/C,iEAA+C;AAC/C,mEAAiD;AACjD,mEAAiD;AACjD,2DAAyC;AACzC,8DAA4C;AAC5C,+DAA6C;AAC7C,+DAA6C;AAC7C,sEAAoD;AACpD,4EAA0D;AAC1D,iEAA+C;AAC/C,kEAAgD;AAChD,qEAAmD;AACnD,sEAAoD;AACpD,iEAA+C;AAC/C,+DAA6C;AAC7C,gEAA8C;AAC9C,6DAA2C;AAC3C,2DAAyC;AACzC,gEAA8C;AAC9C,+DAA6C;AAC7C,gEAA8C;AAC9C,iEAA+C;AAC/C,8DAA4C;AAC5C,kEAAgD;AAChD,8DAA4C;AAC5C,iEAA+C;AAC/C,yEAAuD;AACvD,iEAA+C;AAC/C,wDAAsC;AACtC,mEAAiD;AACjD,0DAAwC;AACxC,0DAAwC;AACxC,0DAAwC;AACxC,gEAA8C;AAC9C,gEAA8C;AAC9C,iEAA+C;AAC/C,8DAA4C;AAC5C,+DAA6C;AAC7C,+DAA6C;AAC7C,yDAAuC;AACvC,gEAA8C;AAC9C,mEAAiD;AACjD,sDAAoC;AACpC,6DAA2C;AAC3C,kEAAgD;AAChD,gEAA8C;AAC9C,sEAAoD;AACpD,+DAA6C;AAC7C,gEAA8C;AAC9C,+DAA6C;AAC7C,wDAAsC;AACtC,6DAA2C;AAC3C,4DAA0C;AAC1C,mEAAiD;AACjD,0DAAwC;AACxC,+DAA6C;AAC7C,6DAA2C;AAC3C,4DAA0C;AAC1C,6DAA2C;AAC3C,uDAAqC;AACrC,mEAAiD;AACjD,qEAAmD;AACnD,sEAAoD;AACpD,oDAAkC;AAClC,yEAAuD;AACvD,oEAAkD;AAClD,mEAAiD;AACjD,gEAA8C;AAC9C,2DAAyC;AACzC,6DAA2C;AAC3C,8DAA4C;AAC5C,0DAAwC;AACxC,+DAA6C;AAC7C,4DAA0C;AAC1C,8DAA4C;AAC5C,oEAAkD;AAClD,0EAAwD;AACxD,yEAAuD;AACvD,0EAAwD;AACxD,qEAAmD;AACnD,qEAAmD;AACnD,iEAA+C;AAC/C,sEAAoD;AACpD,gEAA8C;AAC9C,6DAA2C;AAC3C,+DAA6C;AAC7C,gEAA8C;AAC9C,qEAAmD;AACnD,iEAA+C;AAC/C,2DAAyC;AACzC,8DAA4C;AAC5C,kEAAgD;AAChD,8DAA4C;AAC5C,iEAA+C;AAC/C,yEAAuD;AACvD,sDAAoC;AACpC,oDAAkC;AAClC,sDAAoC;AACpC,6DAA2C;AAC3C,kEAAgD;AAChD,oEAAkD;AAClD,2DAAyC;AACzC,wDAAsC;AACtC,wEAAsD;AACtD,qEAAmD;AACnD,sEAAoD;AACpD,mEAAiD;AACjD,6DAA2C;AAC3C,wEAAsD;AACtD,iEAA+C;AAC/C,+DAA6C;AAC7C,gEAA8C;AAC9C,gEAA8C;AAC9C,oEAAkD;AAClD,iEAA+C;AAC/C,qEAAmD;AACnD,+EAA6D"}

package/dist/access/entities/access.employee.entity.js

@@ -46,7 +46,7 @@ __decorate([
     __metadata("design:type", Boolean)
 ], AccessEmployeeEntity.prototype, "active", void 0);
 __decorate([
-    (0, typeorm_1.Column)('json'),
+    (0, typeorm_1.Column)('jsonb'),
     __metadata("design:type", access_employee_attributes_dto_1.AccessEmployeeAttributesDto)
 ], AccessEmployeeEntity.prototype, "attributes", void 0);
 __decorate([

package/dist/access/entities/access.employee.entity.js.map

@@ -1 +1 @@
-{"version":3,"file":"access.employee.entity.js","sourceRoot":"","sources":["../../../src/access/entities/access.employee.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oFAAkF;AAClF,qCAAgE;AAChE,2FAAqF;AACrF,qEAAgE;AASzD,IAAM,oBAAoB,GAA1B,MAAM,oBAAqB,SAAQ,sCAAY;CA8BrD,CAAA;AA9BY,oDAAoB;AAE7B;IADC,IAAA,gBAAM,GAAE;;yDACW;AAGpB;IADC,IAAA,gBAAM,GAAE;;qDACO;AAGhB;IADC,IAAA,gBAAM,GAAE;;wDACU;AAGnB;IADC,IAAA,gBAAM,GAAE;;iEACmB;AAG5B;IADC,IAAA,gBAAM,GAAE;;kDACI;AAGb;IADC,IAAA,gBAAM,GAAE;;wDACU;AAGnB;IADC,IAAA,gBAAM,GAAE;;oDACO;AAGhB;IADC,IAAA,gBAAM,EAAC,MAAM,CAAC;8BACH,4DAA2B;wDAAC;AAGoC;IAA3E,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,6CAAoB,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BAAW,6CAAoB;sDAAC;AAC7C;IAA7D,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,oCAAU,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;8BAAO,oCAAU;kDAAC;AACJ;IAA1E,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;8BAAU,oBAAoB;qDAAC;AACrB;IAAnF,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;8BAAmB,oBAAoB;8DAAC;+BA7BlH,oBAAoB;IADhC,IAAA,gBAAM,EAAC,sBAAsB,CAAC;GAClB,oBAAoB,CA8BhC"}
+{"version":3,"file":"access.employee.entity.js","sourceRoot":"","sources":["../../../src/access/entities/access.employee.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oFAAkF;AAClF,qCAAgE;AAChE,2FAAqF;AACrF,qEAAgE;AASzD,IAAM,oBAAoB,GAA1B,MAAM,oBAAqB,SAAQ,sCAAY;CA8BrD,CAAA;AA9BY,oDAAoB;AAE7B;IADC,IAAA,gBAAM,GAAE;;yDACW;AAGpB;IADC,IAAA,gBAAM,GAAE;;qDACO;AAGhB;IADC,IAAA,gBAAM,GAAE;;wDACU;AAGnB;IADC,IAAA,gBAAM,GAAE;;iEACmB;AAG5B;IADC,IAAA,gBAAM,GAAE;;kDACI;AAGb;IADC,IAAA,gBAAM,GAAE;;wDACU;AAGnB;IADC,IAAA,gBAAM,GAAE;;oDACO;AAGhB;IADC,IAAA,gBAAM,EAAC,OAAO,CAAC;8BACJ,4DAA2B;wDAAC;AAGoC;IAA3E,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,6CAAoB,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BAAW,6CAAoB;sDAAC;AAC7C;IAA7D,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,oCAAU,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;8BAAO,oCAAU;kDAAC;AACJ;IAA1E,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;8BAAU,oBAAoB;qDAAC;AACrB;IAAnF,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;8BAAmB,oBAAoB;8DAAC;+BA7BlH,oBAAoB;IADhC,IAAA,gBAAM,EAAC,sBAAsB,CAAC;GAClB,oBAAoB,CA8BhC"}

package/dist/access/entities/access.whatsapp.template.entity.js

@@ -29,7 +29,7 @@ __decorate([
     __metadata("design:type", Boolean)
 ], AccessWhatsappTemplateEntity.prototype, "active", void 0);
 __decorate([
-    (0, typeorm_1.Column)('json'),
+    (0, typeorm_1.Column)('jsonb'),
     __metadata("design:type", whatsapp_template_attributes_dto_1.WhatsappTemplateAttributesDto)
 ], AccessWhatsappTemplateEntity.prototype, "attributes", void 0);
 exports.AccessWhatsappTemplateEntity = AccessWhatsappTemplateEntity = __decorate([

package/dist/access/entities/access.whatsapp.template.entity.js.map

@@ -1 +1 @@
-{"version":3,"file":"access.whatsapp.template.entity.js","sourceRoot":"","sources":["../../../src/access/entities/access.whatsapp.template.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oFAAgF;AAChF,qCAAyC;AACzC,+FAAyF;AAOlF,IAAM,4BAA4B,GAAlC,MAAM,4BAA6B,SAAQ,gDAAsB;CAcvE,CAAA;AAdY,oEAA4B;AAErC;IADC,IAAA,gBAAM,GAAE;;6DACO;AAGhB;IADC,IAAA,gBAAM,EAAC,MAAM,CAAC;;+DACA;AAGf;IADC,IAAA,gBAAM,GAAE;;4DACO;AAGhB;IADC,IAAA,gBAAM,EAAC,MAAM,CAAC;8BACH,gEAA6B;gEAAC;uCAXjC,4BAA4B;IADxC,IAAA,gBAAM,EAAC,wBAAwB,CAAC;GACpB,4BAA4B,CAcxC"}
+{"version":3,"file":"access.whatsapp.template.entity.js","sourceRoot":"","sources":["../../../src/access/entities/access.whatsapp.template.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oFAAgF;AAChF,qCAAyC;AACzC,+FAAyF;AAOlF,IAAM,4BAA4B,GAAlC,MAAM,4BAA6B,SAAQ,gDAAsB;CAgBvE,CAAA;AAhBY,oEAA4B;AAErC;IADC,IAAA,gBAAM,GAAE;;6DACO;AAGhB;IADC,IAAA,gBAAM,EAAC,MAAM,CAAC;;+DACA;AAGf;IADC,IAAA,gBAAM,GAAE;;4DACO;AAKhB;IADC,IAAA,gBAAM,EAAC,OAAO,CAAC;8BACJ,gEAA6B;gEAAC;uCAbjC,4BAA4B;IADxC,IAAA,gBAAM,EAAC,wBAAwB,CAAC;GACpB,4BAA4B,CAgBxC"}

package/dist/access/entities/api.account.entity.js

@@ -34,7 +34,7 @@ __decorate([
     __metadata("design:type", Date)
 ], ApiAccountEntity.prototype, "last_activity_at", void 0);
 __decorate([
-    (0, typeorm_1.Column)('json'),
+    (0, typeorm_1.Column)('jsonb'),
     __metadata("design:type", Object)
 ], ApiAccountEntity.prototype, "ips", void 0);
 __decorate([
@@ -42,11 +42,11 @@ __decorate([
     __metadata("design:type", Boolean)
 ], ApiAccountEntity.prototype, "active", void 0);
 __decorate([
-    (0, typeorm_1.Column)('json'),
+    (0, typeorm_1.Column)('jsonb'),
     __metadata("design:type", Object)
 ], ApiAccountEntity.prototype, "access_scopes", void 0);
 __decorate([
-    (0, typeorm_1.Column)('json'),
+    (0, typeorm_1.Column)('jsonb'),
     __metadata("design:type", api_account_attributes_dto_1.ApiAccountAttributesDto)
 ], ApiAccountEntity.prototype, "attributes", void 0);
 __decorate([

package/dist/access/entities/api.account.entity.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.account.entity.js","sourceRoot":"","sources":["../../../src/access/entities/api.account.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oFAAsE;AACtE,qCAAgE;AAChE,mFAA6E;AAC7E,qEAAgE;AASzD,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,sCAAY;CA2BjD,CAAA;AA3BY,4CAAgB;AAEzB;IADC,IAAA,gBAAM,GAAE;;qDACW;AAGpB;IADC,IAAA,gBAAM,GAAE;;oDACU;AAGnB;IADC,IAAA,gBAAM,GAAE;;oDACU;AAGnB;IADC,IAAA,gBAAM,GAAE;8BACS,IAAI;0DAAC;AAGvB;IADC,IAAA,gBAAM,EAAC,MAAM,CAAC;;6CACN;AAGT;IADC,IAAA,gBAAM,GAAE;;gDACO;AAGhB;IADC,IAAA,gBAAM,EAAC,MAAM,CAAC;;uDACI;AAGnB;IADC,IAAA,gBAAM,EAAC,MAAM,CAAC;8BACH,oDAAuB;oDAAC;AAGwC;IAA3E,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,6CAAoB,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BAAW,6CAAoB;kDAAC;2BA1BlG,gBAAgB;IAD5B,IAAA,gBAAM,EAAC,iBAAiB,CAAC;GACb,gBAAgB,CA2B5B"}
+{"version":3,"file":"api.account.entity.js","sourceRoot":"","sources":["../../../src/access/entities/api.account.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oFAAsE;AACtE,qCAAgE;AAChE,mFAA6E;AAC7E,qEAAgE;AASzD,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,sCAAY;CA2BjD,CAAA;AA3BY,4CAAgB;AAEzB;IADC,IAAA,gBAAM,GAAE;;qDACW;AAGpB;IADC,IAAA,gBAAM,GAAE;;oDACU;AAGnB;IADC,IAAA,gBAAM,GAAE;;oDACU;AAGnB;IADC,IAAA,gBAAM,GAAE;8BACS,IAAI;0DAAC;AAGvB;IADC,IAAA,gBAAM,EAAC,OAAO,CAAC;;6CACP;AAGT;IADC,IAAA,gBAAM,GAAE;;gDACO;AAGhB;IADC,IAAA,gBAAM,EAAC,OAAO,CAAC;;uDACG;AAGnB;IADC,IAAA,gBAAM,EAAC,OAAO,CAAC;8BACJ,oDAAuB;oDAAC;AAGwC;IAA3E,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,6CAAoB,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BAAW,6CAAoB;kDAAC;2BA1BlG,gBAAgB;IAD5B,IAAA,gBAAM,EAAC,iBAAiB,CAAC;GACb,gBAAgB,CA2B5B"}

package/dist/access/entities/app.integration.entity.js

@@ -41,7 +41,7 @@ __decorate([
     __metadata("design:type", String)
 ], AppIntegrationEntity.prototype, "description", void 0);
 __decorate([
-    (0, typeorm_1.Column)('json'),
+    (0, typeorm_1.Column)('jsonb'),
     __metadata("design:type", app_integration_attributes_dto_1.AppIntegrationAttributesDto)
 ], AppIntegrationEntity.prototype, "attributes", void 0);
 exports.AppIntegrationEntity = AppIntegrationEntity = __decorate([

package/dist/access/entities/app.integration.entity.js.map

@@ -1 +1 @@
-{"version":3,"file":"app.integration.entity.js","sourceRoot":"","sources":["../../../src/access/entities/app.integration.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oFAAsE;AACtE,qCAAyC;AACzC,2FAAqF;AAS9E,IAAM,oBAAoB,GAA1B,MAAM,oBAAqB,SAAQ,sCAAY;CAqBrD,CAAA;AArBY,oDAAoB;AAE7B;IADC,IAAA,gBAAM,GAAE;;kDACI;AAGb;IADC,IAAA,gBAAM,GAAE;;oDACO;AAGhB;IADC,IAAA,gBAAM,EAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;;oEACM;AAG/B;IADC,IAAA,gBAAM,GAAE;;iDACG;AAGZ;IADC,IAAA,gBAAM,GAAE;;mDACK;AAGd;IADC,IAAA,gBAAM,GAAE;;yDACW;AAGpB;IADC,IAAA,gBAAM,EAAC,MAAM,CAAC;8BACH,4DAA2B;wDAAC;+BApB/B,oBAAoB;IADhC,IAAA,gBAAM,EAAC,sBAAsB,CAAC;GAClB,oBAAoB,CAqBhC"}
+{"version":3,"file":"app.integration.entity.js","sourceRoot":"","sources":["../../../src/access/entities/app.integration.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oFAAsE;AACtE,qCAAyC;AACzC,2FAAqF;AAS9E,IAAM,oBAAoB,GAA1B,MAAM,oBAAqB,SAAQ,sCAAY;CAqBrD,CAAA;AArBY,oDAAoB;AAE7B;IADC,IAAA,gBAAM,GAAE;;kDACI;AAGb;IADC,IAAA,gBAAM,GAAE;;oDACO;AAGhB;IADC,IAAA,gBAAM,EAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;;oEACM;AAG/B;IADC,IAAA,gBAAM,GAAE;;iDACG;AAGZ;IADC,IAAA,gBAAM,GAAE;;mDACK;AAGd;IADC,IAAA,gBAAM,GAAE;;yDACW;AAGpB;IADC,IAAA,gBAAM,EAAC,OAAO,CAAC;8BACJ,4DAA2B;wDAAC;+BApB/B,oBAAoB;IADhC,IAAA,gBAAM,EAAC,sBAAsB,CAAC;GAClB,oBAAoB,CAqBhC"}

package/dist/access/entities/business.app.integration.credential.entity.js

@@ -34,7 +34,7 @@ __decorate([
     __metadata("design:type", Date)
 ], BusinessAppIntegrationCredentialEntity.prototype, "expiry_at", void 0);
 __decorate([
-    (0, typeorm_1.Column)('json'),
+    (0, typeorm_1.Column)('jsonb'),
     __metadata("design:type", business_app_integration_credential_attributes_dto_1.BusinessAppIntegrationCredentialAttributesDto)
 ], BusinessAppIntegrationCredentialEntity.prototype, "attributes", void 0);
 __decorate([

package/dist/access/entities/business.app.integration.credential.entity.js.map

@@ -1 +1 @@
-{"version":3,"file":"business.app.integration.credential.entity.js","sourceRoot":"","sources":["../../../src/access/entities/business.app.integration.credential.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oFAAsE;AACtE,qCAAgE;AAChE,mIAA2H;AAC3H,uFAAiF;AAS1E,IAAM,sCAAsC,GAA5C,MAAM,sCAAuC,SAAQ,sCAAY;CAoBvE,CAAA;AApBY,wFAAsC;AAE/C;IADC,IAAA,gBAAM,GAAE;;uFACuB;AAGhC;IADC,IAAA,gBAAM,GAAE;;6EACa;AAGtB;IADC,IAAA,gBAAM,GAAE;;4EACY;AAGrB;IADC,IAAA,gBAAM,GAAE;8BACE,IAAI;yEAAC;AAGhB;IADC,IAAA,gBAAM,EAAC,MAAM,CAAC;8BACH,kGAA6C;0EAAC;AAK1D;IAFC,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,8DAA4B,CAAC;IAC7C,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;8BAC1B,8DAA4B;oFAAC;iDAnB1C,sCAAsC;IADlD,IAAA,gBAAM,EAAC,gCAAgC,CAAC;GAC5B,sCAAsC,CAoBlD"}
+{"version":3,"file":"business.app.integration.credential.entity.js","sourceRoot":"","sources":["../../../src/access/entities/business.app.integration.credential.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oFAAsE;AACtE,qCAAgE;AAChE,mIAA2H;AAC3H,uFAAiF;AAS1E,IAAM,sCAAsC,GAA5C,MAAM,sCAAuC,SAAQ,sCAAY;CAoBvE,CAAA;AApBY,wFAAsC;AAE/C;IADC,IAAA,gBAAM,GAAE;;uFACuB;AAGhC;IADC,IAAA,gBAAM,GAAE;;6EACa;AAGtB;IADC,IAAA,gBAAM,GAAE;;4EACY;AAGrB;IADC,IAAA,gBAAM,GAAE;8BACE,IAAI;yEAAC;AAGhB;IADC,IAAA,gBAAM,EAAC,OAAO,CAAC;8BACJ,kGAA6C;0EAAC;AAK1D;IAFC,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,8DAA4B,CAAC;IAC7C,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;8BAC1B,8DAA4B;oFAAC;iDAnB1C,sCAAsC;IADlD,IAAA,gBAAM,EAAC,gCAAgC,CAAC;GAC5B,sCAAsC,CAoBlD"}

package/dist/access/entities/business.app.integration.entity.js

@@ -43,7 +43,7 @@ __decorate([
     __metadata("design:type", Boolean)
 ], BusinessAppIntegrationEntity.prototype, "enabled_globally", void 0);
 __decorate([
-    (0, typeorm_1.Column)('json'),
+    (0, typeorm_1.Column)('jsonb'),
     __metadata("design:type", business_app_integration_attributes_dto_1.BusinessAppIntegrationAttributesDto)
 ], BusinessAppIntegrationEntity.prototype, "attributes", void 0);
 __decorate([

package/dist/access/entities/business.app.integration.entity.js.map

@@ -1 +1 @@
-{"version":3,"file":"business.app.integration.entity.js","sourceRoot":"","sources":["../../../src/access/entities/business.app.integration.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oFAAsE;AACtE,qCAAgE;AAChE,6GAAsG;AACtG,qEAAgE;AAChE,qEAAgE;AASzD,IAAM,4BAA4B,GAAlC,MAAM,4BAA6B,SAAQ,sCAAY;CAyB7D,CAAA;AAzBY,oEAA4B;AAErC;IADC,IAAA,gBAAM,GAAE;;iEACW;AAGpB;IADC,IAAA,gBAAM,GAAE;;oEACc;AAGvB;IADC,IAAA,gBAAM,GAAE;;0DACI;AAGb;IADC,IAAA,gBAAM,GAAE;;iEACW;AAGpB;IADC,IAAA,gBAAM,GAAE;;4DACO;AAGhB;IADC,IAAA,gBAAM,GAAE;;sEACiB;AAG1B;IADC,IAAA,gBAAM,EAAC,MAAM,CAAC;8BACH,6EAAmC;gEAAC;AAG4B;IAA3E,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,6CAAoB,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BAAW,6CAAoB;8DAAC;AAC5B;IAA9E,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,6CAAoB,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;8BAAc,6CAAoB;iEAAC;uCAxBxG,4BAA4B;IADxC,IAAA,gBAAM,EAAC,qBAAqB,CAAC;GACjB,4BAA4B,CAyBxC"}
+{"version":3,"file":"business.app.integration.entity.js","sourceRoot":"","sources":["../../../src/access/entities/business.app.integration.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oFAAsE;AACtE,qCAAgE;AAChE,6GAAsG;AACtG,qEAAgE;AAChE,qEAAgE;AASzD,IAAM,4BAA4B,GAAlC,MAAM,4BAA6B,SAAQ,sCAAY;CAyB7D,CAAA;AAzBY,oEAA4B;AAErC;IADC,IAAA,gBAAM,GAAE;;iEACW;AAGpB;IADC,IAAA,gBAAM,GAAE;;oEACc;AAGvB;IADC,IAAA,gBAAM,GAAE;;0DACI;AAGb;IADC,IAAA,gBAAM,GAAE;;iEACW;AAGpB;IADC,IAAA,gBAAM,GAAE;;4DACO;AAGhB;IADC,IAAA,gBAAM,GAAE;;sEACiB;AAG1B;IADC,IAAA,gBAAM,EAAC,OAAO,CAAC;8BACJ,6EAAmC;gEAAC;AAG4B;IAA3E,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,6CAAoB,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BAAW,6CAAoB;8DAAC;AAC5B;IAA9E,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,6CAAoB,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;8BAAc,6CAAoB;iEAAC;uCAxBxG,4BAA4B;IADxC,IAAA,gBAAM,EAAC,qBAAqB,CAAC;GACjB,4BAA4B,CAyBxC"}

package/dist/access/entities/business.app.integration.messages.entity.js

@@ -59,7 +59,7 @@ __decorate([
     __metadata("design:type", Date)
 ], BusinessAppIntegrationMessagesEntity.prototype, "activity_at", void 0);
 __decorate([
-    (0, typeorm_1.Column)('json'),
+    (0, typeorm_1.Column)('jsonb'),
     __metadata("design:type", business_app_integration_messages_attributes_dto_1.BusinessAppIntegrationMessagesAttributesDto)
 ], BusinessAppIntegrationMessagesEntity.prototype, "attributes", void 0);
 __decorate([

package/dist/access/entities/business.app.integration.messages.entity.js.map

@@ -1 +1 @@
-{"version":3,"file":"business.app.integration.messages.entity.js","sourceRoot":"","sources":["../../../src/access/entities/business.app.integration.messages.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oFAAkF;AAClF,qCAAgE;AAChE,+HAAuH;AACvH,qEAAgE;AAChE,uFAAiF;AAS1E,IAAM,oCAAoC,GAA1C,MAAM,oCAAqC,SAAQ,sCAAY;CA0CrE,CAAA;AA1CY,oFAAoC;AAE7C;IADC,IAAA,gBAAM,GAAE;;yEACW;AAGpB;IADC,IAAA,gBAAM,GAAE;;qFACuB;AAGhC;IADC,IAAA,gBAAM,GAAE;;qEACO;AAGhB;IADC,IAAA,gBAAM,GAAE;;yEACW;AAGpB;IADC,IAAA,gBAAM,GAAE;;uEACS;AAGlB;IADC,IAAA,gBAAM,GAAE;;gFACkB;AAG3B;IADC,IAAA,gBAAM,GAAE;;oEACO;AAGhB;IADC,IAAA,gBAAM,GAAE;;2EACa;AAGtB;IADC,IAAA,gBAAM,GAAE;;yEACW;AAGpB;IADC,IAAA,gBAAM,GAAE;8BACI,IAAI;yEAAC;AAGlB;IADC,IAAA,gBAAM,EAAC,MAAM,CAAC;8BACH,8FAA2C;wEAAC;AAGoB;IAA3E,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,6CAAoB,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BAAW,6CAAoB;sEAAC;AAI3G;IAFC,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,8DAA4B,CAAC;IAC7C,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;8BAC1B,8DAA4B;kFAAC;AAEW;IAA7D,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,oCAAU,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;8BAAO,oCAAU;kEAAC;+CAzCtE,oCAAoC;IADhD,IAAA,gBAAM,EAAC,6BAA6B,CAAC;GACzB,oCAAoC,CA0ChD"}
+{"version":3,"file":"business.app.integration.messages.entity.js","sourceRoot":"","sources":["../../../src/access/entities/business.app.integration.messages.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oFAAkF;AAClF,qCAAgE;AAChE,+HAAuH;AACvH,qEAAgE;AAChE,uFAAiF;AAS1E,IAAM,oCAAoC,GAA1C,MAAM,oCAAqC,SAAQ,sCAAY;CA0CrE,CAAA;AA1CY,oFAAoC;AAE7C;IADC,IAAA,gBAAM,GAAE;;yEACW;AAGpB;IADC,IAAA,gBAAM,GAAE;;qFACuB;AAGhC;IADC,IAAA,gBAAM,GAAE;;qEACO;AAGhB;IADC,IAAA,gBAAM,GAAE;;yEACW;AAGpB;IADC,IAAA,gBAAM,GAAE;;uEACS;AAGlB;IADC,IAAA,gBAAM,GAAE;;gFACkB;AAG3B;IADC,IAAA,gBAAM,GAAE;;oEACO;AAGhB;IADC,IAAA,gBAAM,GAAE;;2EACa;AAGtB;IADC,IAAA,gBAAM,GAAE;;yEACW;AAGpB;IADC,IAAA,gBAAM,GAAE;8BACI,IAAI;yEAAC;AAGlB;IADC,IAAA,gBAAM,EAAC,OAAO,CAAC;8BACJ,8FAA2C;wEAAC;AAGoB;IAA3E,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,6CAAoB,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BAAW,6CAAoB;sEAAC;AAI3G;IAFC,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,8DAA4B,CAAC;IAC7C,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;8BAC1B,8DAA4B;kFAAC;AAEW;IAA7D,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,oCAAU,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;8BAAO,oCAAU;kEAAC;+CAzCtE,oCAAoC;IADhD,IAAA,gBAAM,EAAC,6BAA6B,CAAC;GACzB,oCAAoC,CA0ChD"}

package/dist/access/entities/business.currency.entity.js

@@ -39,7 +39,7 @@ __decorate([
     __metadata("design:type", Boolean)
 ], BusinessCurrencyEntity.prototype, "sync", void 0);
 __decorate([
-    (0, typeorm_1.Column)('json'),
+    (0, typeorm_1.Column)('jsonb'),
     __metadata("design:type", business_currency_attributes_dto_1.BusinessCurrencyAttributesDto)
 ], BusinessCurrencyEntity.prototype, "attributes", void 0);
 __decorate([

package/dist/access/entities/business.currency.entity.js.map

@@ -1 +1 @@
-{"version":3,"file":"business.currency.entity.js","sourceRoot":"","sources":["../../../src/access/entities/business.currency.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oFAAsE;AACtE,qCAAgE;AAChE,kFAA8E;AAC9E,+FAAyF;AACzF,qEAAgE;AASzD,IAAM,sBAAsB,GAA5B,MAAM,sBAAuB,SAAQ,sCAAY;CAqBvD,CAAA;AArBY,wDAAsB;AAE/B;IADC,IAAA,gBAAM,GAAE;;2DACW;AAGpB;IADC,IAAA,gBAAM,GAAE;;2DACW;AAGpB;IADC,IAAA,gBAAM,GAAE;;sDACO;AAEoC;IAAnD,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;;oDAAc;AAGjE;IADC,IAAA,gBAAM,GAAE;;oDACK;AAGd;IADC,IAAA,gBAAM,EAAC,MAAM,CAAC;8BACH,gEAA6B;0DAAC;AAGkC;IAA3E,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,6CAAoB,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BAAW,6CAAoB;wDAAC;AACrC;IAArE,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,gCAAc,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BAAW,gCAAc;wDAAC;iCApBtF,sBAAsB;IADlC,IAAA,gBAAM,EAAC,wBAAwB,CAAC;GACpB,sBAAsB,CAqBlC"}
+{"version":3,"file":"business.currency.entity.js","sourceRoot":"","sources":["../../../src/access/entities/business.currency.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oFAAsE;AACtE,qCAAgE;AAChE,kFAA8E;AAC9E,+FAAyF;AACzF,qEAAgE;AASzD,IAAM,sBAAsB,GAA5B,MAAM,sBAAuB,SAAQ,sCAAY;CAqBvD,CAAA;AArBY,wDAAsB;AAE/B;IADC,IAAA,gBAAM,GAAE;;2DACW;AAGpB;IADC,IAAA,gBAAM,GAAE;;2DACW;AAGpB;IADC,IAAA,gBAAM,GAAE;;sDACO;AAEoC;IAAnD,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;;oDAAc;AAGjE;IADC,IAAA,gBAAM,GAAE;;oDACK;AAGd;IADC,IAAA,gBAAM,EAAC,OAAO,CAAC;8BACJ,gEAA6B;0DAAC;AAGkC;IAA3E,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,6CAAoB,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BAAW,6CAAoB;wDAAC;AACrC;IAArE,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,gCAAc,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BAAW,gCAAc;wDAAC;iCApBtF,sBAAsB;IADlC,IAAA,gBAAM,EAAC,wBAAwB,CAAC;GACpB,sBAAsB,CAqBlC"}

package/dist/access/entities/business.downloadable.report.entity.js

@@ -29,11 +29,11 @@ __decorate([
     __metadata("design:type", Boolean)
 ], BusinessDownloadableReportEntity.prototype, "active", void 0);
 __decorate([
-    (0, typeorm_1.Column)('json'),
+    (0, typeorm_1.Column)('jsonb'),
     __metadata("design:type", nestjs_utility_services_1.CommonAttributesDto)
 ], BusinessDownloadableReportEntity.prototype, "attributes", void 0);
 __decorate([
-    (0, typeorm_1.Column)('json'),
+    (0, typeorm_1.Column)('jsonb'),
     __metadata("design:type", Array)
 ], BusinessDownloadableReportEntity.prototype, "emails", void 0);
 __decorate([

package/dist/access/entities/business.downloadable.report.entity.js.map

@@ -1 +1 @@
-{"version":3,"file":"business.downloadable.report.entity.js","sourceRoot":"","sources":["../../../src/access/entities/business.downloadable.report.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oFAAyG;AACzG,qCAAgE;AAChE,qEAAgE;AASzD,IAAM,gCAAgC,GAAtC,MAAM,gCAAiC,SAAQ,sCAAY;CAmBjE,CAAA;AAnBY,4EAAgC;AAEzC;IADC,IAAA,gBAAM,GAAE;;uEACa;AAGtB;IADC,IAAA,gBAAM,GAAE;;qEACW;AAGpB;IADC,IAAA,gBAAM,GAAE;;gEACO;AAGhB;IADC,IAAA,gBAAM,EAAC,MAAM,CAAC;8BACH,6CAAmB;oEAAC;AAGhC;IADC,IAAA,gBAAM,EAAC,MAAM,CAAC;;gEACE;AAGqD;IAArE,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,sCAAY,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;8BAAa,sCAAY;oEAAC;AACnB;IAA3E,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,6CAAoB,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BAAW,6CAAoB;kEAAC;2CAlBlG,gCAAgC;IAD5C,IAAA,gBAAM,EAAC,mCAAmC,CAAC;GAC/B,gCAAgC,CAmB5C"}
+{"version":3,"file":"business.downloadable.report.entity.js","sourceRoot":"","sources":["../../../src/access/entities/business.downloadable.report.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oFAAyG;AACzG,qCAAgE;AAChE,qEAAgE;AASzD,IAAM,gCAAgC,GAAtC,MAAM,gCAAiC,SAAQ,sCAAY;CAmBjE,CAAA;AAnBY,4EAAgC;AAEzC;IADC,IAAA,gBAAM,GAAE;;uEACa;AAGtB;IADC,IAAA,gBAAM,GAAE;;qEACW;AAGpB;IADC,IAAA,gBAAM,GAAE;;gEACO;AAGhB;IADC,IAAA,gBAAM,EAAC,OAAO,CAAC;8BACJ,6CAAmB;oEAAC;AAGhC;IADC,IAAA,gBAAM,EAAC,OAAO,CAAC;;gEACC;AAGqD;IAArE,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,sCAAY,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;8BAAa,sCAAY;oEAAC;AACnB;IAA3E,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,6CAAoB,CAAC;IAAE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;8BAAW,6CAAoB;kEAAC;2CAlBlG,gCAAgC;IAD5C,IAAA,gBAAM,EAAC,mCAAmC,CAAC;GAC/B,gCAAgC,CAmB5C"}

package/dist/access/entities/business.email.entity.js

@@ -63,7 +63,7 @@ __decorate([
     __metadata("design:type", Boolean)
 ], BusinessEmailEntity.prototype, "active", void 0);
 __decorate([
-    (0, typeorm_1.Column)('json'),
+    (0, typeorm_1.Column)('jsonb'),
     __metadata("design:type", business_email_attributes_dto_1.BusinessEmailAttributesDto)
 ], BusinessEmailEntity.prototype, "attributes", void 0);
 __decorate([