@solidxai/core 0.1.12 → 0.1.13-beta.2

package/dist/jobs/redis/workflow-execution-subscriber-redis.service.js

@@ -0,0 +1,52 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+var WorkflowExecutionSubscriberRedis_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowExecutionSubscriberRedis = void 0;
+const common_1 = require("@nestjs/common");
+const mq_message_queue_service_1 = require("../../services/mq-message-queue.service");
+const mq_message_service_1 = require("../../services/mq-message.service");
+const redis_subscriber_service_1 = require("../../services/queues/redis-subscriber.service");
+const workflow_runtime_service_1 = require("../../services/workflow/workflow-runtime.service");
+const workflow_execution_queue_options_redis_1 = __importDefault(require("./workflow-execution-queue-options-redis"));
+let WorkflowExecutionSubscriberRedis = WorkflowExecutionSubscriberRedis_1 = class WorkflowExecutionSubscriberRedis extends redis_subscriber_service_1.RedisSubscriber {
+    constructor(mqMessageService, mqMessageQueueService, workflowRuntimeService) {
+        super(mqMessageService, mqMessageQueueService);
+        this.mqMessageService = mqMessageService;
+        this.mqMessageQueueService = mqMessageQueueService;
+        this.workflowRuntimeService = workflowRuntimeService;
+        this.workflowExecutionLogger = new common_1.Logger(WorkflowExecutionSubscriberRedis_1.name);
+    }
+    options() {
+        return {
+            ...workflow_execution_queue_options_redis_1.default,
+        };
+    }
+    async subscribe(message) {
+        const payload = message.payload;
+        this.workflowExecutionLogger.log(`Processing queued workflow execution message ${message.messageId ?? '<unknown>'}.`);
+        if (payload.executionId !== undefined && payload.executionId !== null) {
+            return this.workflowRuntimeService.executeEnqueuedExecution(payload.executionId);
+        }
+        throw new Error('Workflow execution queue payload must include executionId.');
+    }
+};
+exports.WorkflowExecutionSubscriberRedis = WorkflowExecutionSubscriberRedis;
+exports.WorkflowExecutionSubscriberRedis = WorkflowExecutionSubscriberRedis = WorkflowExecutionSubscriberRedis_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [mq_message_service_1.MqMessageService,
+        mq_message_queue_service_1.MqMessageQueueService,
+        workflow_runtime_service_1.WorkflowRuntimeService])
+], WorkflowExecutionSubscriberRedis);
+//# sourceMappingURL=workflow-execution-subscriber-redis.service.js.map

package/dist/jobs/redis/workflow-execution-subscriber-redis.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-execution-subscriber-redis.service.js","sourceRoot":"","sources":["../../../src/jobs/redis/workflow-execution-subscriber-redis.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAoD;AAKpD,sFAAgF;AAChF,0EAAqE;AACrE,6FAAiF;AACjF,+FAA0F;AAC1F,sHAAqF;AAG9E,IAAM,gCAAgC,wCAAtC,MAAM,gCAAiC,SAAQ,0CAA8C;IAGlG,YACW,gBAAkC,EAClC,qBAA4C,EACpC,sBAA8C;QAE/D,KAAK,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,CAAC;QAJtC,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,0BAAqB,GAArB,qBAAqB,CAAuB;QACpC,2BAAsB,GAAtB,sBAAsB,CAAwB;QALhD,4BAAuB,GAAG,IAAI,eAAM,CAAC,kCAAgC,CAAC,IAAI,CAAC,CAAC;IAQ7F,CAAC;IAED,OAAO;QACL,OAAO;YACL,GAAG,gDAA6B;SACjC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAoD;QAClE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAC9B,gDAAgD,OAAO,CAAC,SAAS,IAAI,WAAW,GAAG,CACpF,CAAC;QAEF,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YACtE,OAAO,IAAI,CAAC,sBAAsB,CAAC,wBAAwB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;CACF,CAAA;AA7BY,4EAAgC;2CAAhC,gCAAgC;IAD5C,IAAA,mBAAU,GAAE;qCAKkB,qCAAgB;QACX,gDAAqB;QACZ,iDAAsB;GANtD,gCAAgC,CA6B5C","sourcesContent":["import { Injectable, Logger } from '@nestjs/common';\n\nimport { QueueMessage } from '../../interfaces/mq';\nimport { QueuesModuleOptions } from '../../interfaces';\nimport { WorkflowExecutionQueuePayload } from '../../types/workflow-execution-queue.types';\nimport { MqMessageQueueService } from '../../services/mq-message-queue.service';\nimport { MqMessageService } from '../../services/mq-message.service';\nimport { RedisSubscriber } from '../../services/queues/redis-subscriber.service';\nimport { WorkflowRuntimeService } from '../../services/workflow/workflow-runtime.service';\nimport workflowExecutionQueueOptions from './workflow-execution-queue-options-redis';\n\n@Injectable()\nexport class WorkflowExecutionSubscriberRedis extends RedisSubscriber<WorkflowExecutionQueuePayload> {\n  private readonly workflowExecutionLogger = new Logger(WorkflowExecutionSubscriberRedis.name);\n\n  constructor(\n    readonly mqMessageService: MqMessageService,\n    readonly mqMessageQueueService: MqMessageQueueService,\n    private readonly workflowRuntimeService: WorkflowRuntimeService,\n  ) {\n    super(mqMessageService, mqMessageQueueService);\n  }\n\n  options(): QueuesModuleOptions {\n    return {\n      ...workflowExecutionQueueOptions,\n    };\n  }\n\n  async subscribe(message: QueueMessage<WorkflowExecutionQueuePayload>) {\n    const payload = message.payload;\n    this.workflowExecutionLogger.log(\n      `Processing queued workflow execution message ${message.messageId ?? '<unknown>'}.`,\n    );\n\n    if (payload.executionId !== undefined && payload.executionId !== null) {\n      return this.workflowRuntimeService.executeEnqueuedExecution(payload.executionId);\n    }\n\n    throw new Error('Workflow execution queue payload must include executionId.');\n  }\n}\n"]}

package/dist/repository/security-rule.repository.d.ts

@@ -14,6 +14,7 @@ export declare class SecurityRuleRepository extends SolidBaseRepository<Security
     constructor(dataSource: DataSource, solidRegistry: SolidRegistry, crudHelperService: CrudHelperService);
     applySecurityRules<T extends CommonEntity>(qb: SelectQueryBuilder<T>, modelSingularName: string, activeUser: ActiveUserData, securityRuleAlias?: string): Promise<SelectQueryBuilder<T>>;
     private resolveSecurityRuleConfig;
+    private hasFilterConditions;
     toDto(securityRule: SecurityRule): Promise<UpdateSecurityRuleDto>;
     upsertWithDto(createDto: CreateSecurityRuleDto): Promise<SecurityRule>;
 }

package/dist/repository/security-rule.repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"security-rule.repository.d.ts","sourceRoot":"","sources":["../../src/repository/security-rule.repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAE1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAG1D,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAY,UAAU,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE9D,qBACa,sBAAuB,SAAQ,mBAAmB,CAAC,YAAY,CAAC;IAErE,QAAQ,CAAC,UAAU,EAAE,UAAU;IAE/B,QAAQ,CAAC,aAAa,EAAE,aAAa;IACrC,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB;gBAHpC,UAAU,EAAE,UAAU,EAEtB,aAAa,EAAE,aAAa,EAC5B,iBAAiB,EAAE,iBAAiB;IAK3C,kBAAkB,CAAC,CAAC,SAAS,YAAY,EAAE,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,iBAAiB,GAAE,MAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAyDxM,OAAO,CAAC,yBAAyB;IAI3B,KAAK,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,qBAAqB,CAAC;IA6BjE,aAAa,CAAC,SAAS,EAAE,qBAAqB;CAyDvD"}
+{"version":3,"file":"security-rule.repository.d.ts","sourceRoot":"","sources":["../../src/repository/security-rule.repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAE1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAG1D,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAY,UAAU,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE9D,qBACa,sBAAuB,SAAQ,mBAAmB,CAAC,YAAY,CAAC;IAErE,QAAQ,CAAC,UAAU,EAAE,UAAU;IAE/B,QAAQ,CAAC,aAAa,EAAE,aAAa;IACrC,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB;gBAHpC,UAAU,EAAE,UAAU,EAEtB,aAAa,EAAE,aAAa,EAC5B,iBAAiB,EAAE,iBAAiB;IAK3C,kBAAkB,CAAC,CAAC,SAAS,YAAY,EAAE,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,iBAAiB,GAAE,MAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IA8ExM,OAAO,CAAC,yBAAyB;IAWjC,OAAO,CAAC,mBAAmB;IAcrB,KAAK,CAAC,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC,qBAAqB,CAAC;IA6BjE,aAAa,CAAC,SAAS,EAAE,qBAAqB;CAyDvD"}

package/dist/repository/security-rule.repository.js

@@ -52,13 +52,19 @@ let SecurityRuleRepository = class SecurityRuleRepository extends solid_base_rep
                 throw error;
             }
         }
-        qb.andWhere(new typeorm_1.Brackets(async (outerQb) => {
-            for (const evaluatedRule of evaluatedRules) {
-                if (evaluatedRule && evaluatedRule.filters) {
-                    outerQb.orWhere(new typeorm_1.Brackets((innerQb) => {
-                        this.crudHelperService.applyFilters(innerQb, evaluatedRule.filters, securityRuleAlias, qb);
-                    }));
-                }
+        const applicableRules = evaluatedRules.filter(rule => rule && this.hasFilterConditions(rule.filters));
+        if (!applicableRules.length) {
+            const message = `Security rules for model '${modelSingularName}' produced no filter conditions. `
+                + `Check the securityRuleConfig / securityRuleConfigProvider for rules with empty filters. `
+                + `Denying access rather than returning unrestricted results.`;
+            this.logger.error(message);
+            throw new common_1.InternalServerErrorException(message);
+        }
+        qb.andWhere(new typeorm_1.Brackets((outerQb) => {
+            for (const evaluatedRule of applicableRules) {
+                outerQb.orWhere(new typeorm_1.Brackets((innerQb) => {
+                    this.crudHelperService.applyFilters(innerQb, evaluatedRule.filters, securityRuleAlias, qb);
+                }));
             }
         }));
         return qb;
@@ -66,6 +72,21 @@ let SecurityRuleRepository = class SecurityRuleRepository extends solid_base_rep
     resolveSecurityRuleConfig(configString, activeUser) {
         return configString.replace('$activeUserId', activeUser.sub.toString());
     }
+    hasFilterConditions(filters) {
+        if (filters === null || filters === undefined)
+            return false;
+        if (Array.isArray(filters))
+            return filters.some(filter => this.hasFilterConditions(filter));
+        if (typeof filters !== 'object')
+            return false;
+        return Object.keys(filters).some(key => {
+            const normalizedKey = key.replace(/^\[(.*)\]$/, '$1');
+            if (normalizedKey === '$and' || normalizedKey === '$or') {
+                return this.hasFilterConditions(filters[key]);
+            }
+            return true;
+        });
+    }
     async toDto(securityRule) {
         let populatedSecurityRule = securityRule;
         if (!securityRule.role || !securityRule.modelMetadata) {

package/dist/repository/security-rule.repository.js.map

@@ -1 +1 @@
-{"version":3,"file":"security-rule.repository.js","sourceRoot":"","sources":["../../src/repository/security-rule.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAK5C,6EAAmE;AACnE,2EAAiE;AACjE,2EAAiE;AACjE,8DAA2D;AAE3D,yEAAqE;AACrE,qCAAmE;AACnE,mEAA8D;AAGvD,IAAM,sBAAsB,GAA5B,MAAM,sBAAuB,SAAQ,2CAAiC;IACzE,YACa,UAAsB,EAEtB,aAA4B,EAC5B,iBAAoC;QAE7C,KAAK,CAAC,mCAAY,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QALnC,eAAU,GAAV,UAAU,CAAY;QAEtB,kBAAa,GAAb,aAAa,CAAe;QAC5B,sBAAiB,GAAjB,iBAAiB,CAAmB;IAGjD,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAyB,EAAyB,EAAE,iBAAyB,EAAE,UAA0B,EAAE,oBAA4B,EAAE,CAAC,KAAK;QAEnK,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;QAG/F,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;YACxB,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,cAAc,GAAG,EAAE,CAAC;QAE1B,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YAE/B,IAAI,aAAa,GAAG,IAAI,CAAC;YAEzB,IAAI,CAAC;gBAED,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;oBAElC,MAAM,kCAAkC,GAAG,IAAI,CAAC,aAAa,CAAC,qCAAqC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;oBACrI,IAAI,CAAC,kCAAkC,EAAE,CAAC;wBACtC,MAAM,IAAI,KAAK,CAAC,iEAAiE,IAAI,CAAC,0BAA0B,EAAE,CAAC,CAAC;oBACxH,CAAC;oBACD,aAAa,GAAG,MAAM,kCAAkC,CAAC,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBAClG,CAAC;qBACI,CAAC;oBACF,aAAa,GAAG,IAAI,CAAC,KAAK,CACtB,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAChD,CAAC;gBAC5B,CAAC;gBAED,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAEvC,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBAClB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,IAAI,CAAC,kBAAkB,EAAE,EAAE,KAAK,CAAC,CAAC;gBACpF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC/B,MAAM,KAAK,CAAC;YAChB,CAAC;QACL,CAAC;QAID,EAAE,CAAC,QAAQ,CAAC,IAAI,kBAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACvC,KAAK,MAAM,aAAa,IAAI,cAAc,EAAE,CAAC;gBACzC,IAAI,aAAa,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;oBACzC,OAAO,CAAC,OAAO,CACX,IAAI,kBAAQ,CAAC,CAAC,OAAO,EAAE,EAAE;wBACrB,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;oBAC/F,CAAC,CAAC,CACL,CAAC;gBACN,CAAC;YACL,CAAC;QACL,CAAC,CAAC,CAAC,CAAC;QAEJ,OAAO,EAAE,CAAC;IACd,CAAC;IAEO,yBAAyB,CAAC,YAAoB,EAAE,UAA0B;QAC9E,OAAO,YAAY,CAAC,OAAO,CAAC,eAAe,EAAE,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,YAA0B;QAElC,IAAI,qBAAqB,GAAiB,YAAY,CAAC;QAEvD,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;YACpD,qBAAqB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;gBACvC,KAAK,EAAE;oBACH,EAAE,EAAE,YAAY,CAAC,EAAE;iBACtB;gBACD,SAAS,EAAE;oBACP,IAAI,EAAE,IAAI;oBACV,aAAa,EAAE,IAAI;iBACtB;aACJ,CAAC,CAAC;QACP,CAAC;QAED,OAAO;YACH,EAAE,EAAE,qBAAqB,CAAC,EAAE;YAC5B,IAAI,EAAE,qBAAqB,CAAC,IAAI;YAChC,WAAW,EAAE,qBAAqB,CAAC,WAAW;YAC9C,MAAM,EAAE,qBAAqB,CAAC,IAAI,CAAC,EAAE;YACrC,WAAW,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI;YAC5C,eAAe,EAAE,qBAAqB,CAAC,aAAa,CAAC,EAAE;YACvD,oBAAoB,EAAE,qBAAqB,CAAC,aAAa,CAAC,YAAY;YACtE,kBAAkB,EAAE,qBAAqB,CAAC,kBAAkB;YAC5D,0BAA0B,EAAE,qBAAqB,CAAC,0BAA0B;SAC/E,CAAC;IACN,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAgC;QAEhD,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,mCAAY,CAAC,CAAC;QACnE,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC;gBACtC,KAAK,EAAE;oBACH,EAAE,EAAE,SAAS,CAAC,MAAM;iBACvB;aACJ,CAAC,CAAC;YACH,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;QAC7B,CAAC;QAED,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC;gBACtC,KAAK,EAAE;oBACH,IAAI,EAAE,SAAS,CAAC,WAAW;iBAC9B;aACJ,CAAC,CAAC;YACH,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;QAC7B,CAAC;QAGD,MAAM,uBAAuB,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,qCAAa,CAAC,CAAC;QAC7E,IAAI,SAAS,CAAC,eAAe,EAAE,CAAC;YAC5B,MAAM,aAAa,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC;gBACxD,KAAK,EAAE;oBACH,EAAE,EAAE,SAAS,CAAC,eAAe;iBAChC;aACJ,CAAC,CAAC;YACH,SAAS,CAAC,eAAe,CAAC,GAAG,aAAa,CAAC;QAC/C,CAAC;QACD,IAAI,SAAS,CAAC,oBAAoB,EAAE,CAAC;YACjC,MAAM,aAAa,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC;gBACxD,KAAK,EAAE;oBACH,YAAY,EAAE,SAAS,CAAC,oBAAoB;iBAC/C;aACJ,CAAC,CAAC;YACH,SAAS,CAAC,eAAe,CAAC,GAAG,aAAa,CAAC;QAC/C,CAAC;QAGD,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAC5C,KAAK,EAAE;gBACH,IAAI,EAAE,SAAS,CAAC,IAAI;aACvB;SACJ,CAAC,CAAC;QAEH,IAAI,oBAAoB,EAAE,CAAC;YACvB,MAAM,mBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;YACxE,OAAO,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC1C,CAAC;aACI,CAAC;YACF,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACnC,CAAC;IACL,CAAC;CAEJ,CAAA;AA7JY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,mBAAU,GAAE;qCAGgB,oBAAU;QAEP,8BAAa;QACT,uCAAiB;GALxC,sBAAsB,CA6JlC","sourcesContent":["import { Injectable } from '@nestjs/common';\nimport { CreateSecurityRuleDto } from 'src/dtos/create-security-rule.dto';\nimport { SecurityRuleConfig } from 'src/dtos/security-rule-config.dto';\nimport { UpdateSecurityRuleDto } from 'src/dtos/update-security-rule.dto';\nimport { CommonEntity } from 'src/entities/common.entity';\nimport { ModelMetadata } from 'src/entities/model-metadata.entity';\nimport { RoleMetadata } from 'src/entities/role-metadata.entity';\nimport { SecurityRule } from 'src/entities/security-rule.entity';\nimport { SolidRegistry } from 'src/helpers/solid-registry';\nimport { ActiveUserData } from 'src/interfaces/active-user-data.interface';\nimport { CrudHelperService } from 'src/services/crud-helper.service';\nimport { Brackets, DataSource, SelectQueryBuilder } from 'typeorm';\nimport { SolidBaseRepository } from './solid-base.repository';\n\n@Injectable()\nexport class SecurityRuleRepository extends SolidBaseRepository<SecurityRule> {\n    constructor(\n        readonly dataSource: DataSource,\n        // readonly requestContextService: RequestContextService,\n        readonly solidRegistry: SolidRegistry,\n        readonly crudHelperService: CrudHelperService,\n    ) {\n        super(SecurityRule, dataSource, null, null);\n    }\n\n    async applySecurityRules<T extends CommonEntity>(qb: SelectQueryBuilder<T>, modelSingularName: string, activeUser: ActiveUserData, securityRuleAlias: string = qb.alias): Promise<SelectQueryBuilder<T>> {\n        // Fetch the security rules for the model and roles\n        const securityRules = this.solidRegistry.getSecurityRules(modelSingularName, activeUser.roles);\n\n        // If no security rules, return the original query builder\n        if (!securityRules.length) {\n            return qb;\n        }\n\n        const evaluatedRules = [];\n\n        for (const rule of securityRules) {\n\n            let evaluatedRule = null;\n\n            try {\n                // First check if the rule has a \"dynamic\" security rule config provider. \n                if (rule.securityRuleConfigProvider) {\n                    // TODO: Evaluation of the securityRuleConfig Provider should happen outside first...\n                    const securityRuleConfigProviderInstance = this.solidRegistry.getSecurityRuleConfigProviderInstance(rule.securityRuleConfigProvider);\n                    if (!securityRuleConfigProviderInstance) {\n                        throw new Error(`Unable to resolve instance for security rule config provider: ${rule.securityRuleConfigProvider}`);\n                    }\n                    evaluatedRule = await securityRuleConfigProviderInstance.securityRuleConfig(activeUser, rule);\n                }\n                else {\n                    evaluatedRule = JSON.parse(\n                        this.resolveSecurityRuleConfig(rule.securityRuleConfig, activeUser)\n                    ) as SecurityRuleConfig;\n                }\n\n                evaluatedRules.push(evaluatedRule);\n\n            } catch (error: any) {\n                this.logger.error(`Error parsing security rule: ${rule.securityRuleConfig}`, error);\n                this.logger.error(error.stack);\n                throw error;\n            }\n        }\n\n\n        // Apply each security rule to the query builder. The rules are combined with OR logic at the top level.\n        qb.andWhere(new Brackets(async (outerQb) => {\n            for (const evaluatedRule of evaluatedRules) {\n                if (evaluatedRule && evaluatedRule.filters) {\n                    outerQb.orWhere( // combine each rule-group with OR at the outer level\n                        new Brackets((innerQb) => {\n                            this.crudHelperService.applyFilters(innerQb, evaluatedRule.filters, securityRuleAlias, qb); // AND within a rule\n                        })\n                    );\n                }\n            }\n        }));\n\n        return qb;\n    }\n\n    private resolveSecurityRuleConfig(configString: string, activeUser: ActiveUserData) {\n        return configString.replace('$activeUserId', activeUser.sub.toString());\n    }\n\n    async toDto(securityRule: SecurityRule): Promise<UpdateSecurityRuleDto> {\n        // load the role and model relations for the security rule\n        let populatedSecurityRule: SecurityRule = securityRule;\n        // If the security rule does not have the role and model relations loaded, load them\n        if (!securityRule.role || !securityRule.modelMetadata) {\n            populatedSecurityRule = await this.findOne({\n                where: {\n                    id: securityRule.id,\n                },\n                relations: {\n                    role: true,\n                    modelMetadata: true,\n                },\n            });\n        }\n\n        return {\n            id: populatedSecurityRule.id,\n            name: populatedSecurityRule.name,\n            description: populatedSecurityRule.description,\n            roleId: populatedSecurityRule.role.id,\n            roleUserKey: populatedSecurityRule.role.name,\n            modelMetadataId: populatedSecurityRule.modelMetadata.id,\n            modelMetadataUserKey: populatedSecurityRule.modelMetadata.singularName,\n            securityRuleConfig: populatedSecurityRule.securityRuleConfig,\n            securityRuleConfigProvider: populatedSecurityRule.securityRuleConfigProvider,\n        };\n    }\n\n    async upsertWithDto(createDto: CreateSecurityRuleDto) {\n        // Populate the role from roleId or roleUserKey\n        const roleRepository = this.dataSource.getRepository(RoleMetadata);\n        if (createDto.roleId) {\n            const role = await roleRepository.findOne({\n                where: {\n                    id: createDto.roleId,\n                },\n            });\n            createDto['role'] = role;\n        }\n\n        if (createDto.roleUserKey) {\n            const role = await roleRepository.findOne({\n                where: {\n                    name: createDto.roleUserKey,\n                },\n            });\n            createDto['role'] = role;\n        }\n\n        // Populate the model from modelMetadataId or modelMetadataUserKey\n        const modelMetadataRepository = this.dataSource.getRepository(ModelMetadata);\n        if (createDto.modelMetadataId) {\n            const modelMetadata = await modelMetadataRepository.findOne({\n                where: {\n                    id: createDto.modelMetadataId,\n                },\n            });\n            createDto['modelMetadata'] = modelMetadata;\n        }\n        if (createDto.modelMetadataUserKey) {\n            const modelMetadata = await modelMetadataRepository.findOne({\n                where: {\n                    singularName: createDto.modelMetadataUserKey,\n                },\n            });\n            createDto['modelMetadata'] = modelMetadata;\n        }\n\n        // First check if module already exists using name\n        const existingSecurityRule = await this.findOne({\n            where: {\n                name: createDto.name,\n            },\n        });\n\n        if (existingSecurityRule) {\n            const updatedSecurityRule = this.merge(existingSecurityRule, createDto);\n            return this.save(updatedSecurityRule);\n        }\n        else {\n            const securityRule = this.create(createDto);\n            return this.save(securityRule);\n        }\n    }\n\n}"]}
+{"version":3,"file":"security-rule.repository.js","sourceRoot":"","sources":["../../src/repository/security-rule.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA0E;AAK1E,6EAAmE;AACnE,2EAAiE;AACjE,2EAAiE;AACjE,8DAA2D;AAE3D,yEAAqE;AACrE,qCAAmE;AACnE,mEAA8D;AAGvD,IAAM,sBAAsB,GAA5B,MAAM,sBAAuB,SAAQ,2CAAiC;IACzE,YACa,UAAsB,EAEtB,aAA4B,EAC5B,iBAAoC;QAE7C,KAAK,CAAC,mCAAY,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QALnC,eAAU,GAAV,UAAU,CAAY;QAEtB,kBAAa,GAAb,aAAa,CAAe;QAC5B,sBAAiB,GAAjB,iBAAiB,CAAmB;IAGjD,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAyB,EAAyB,EAAE,iBAAyB,EAAE,UAA0B,EAAE,oBAA4B,EAAE,CAAC,KAAK;QAEnK,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,iBAAiB,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;QAG/F,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;YACxB,OAAO,EAAE,CAAC;QACd,CAAC;QAED,MAAM,cAAc,GAAG,EAAE,CAAC;QAE1B,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YAE/B,IAAI,aAAa,GAAG,IAAI,CAAC;YAEzB,IAAI,CAAC;gBAED,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;oBAElC,MAAM,kCAAkC,GAAG,IAAI,CAAC,aAAa,CAAC,qCAAqC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;oBACrI,IAAI,CAAC,kCAAkC,EAAE,CAAC;wBACtC,MAAM,IAAI,KAAK,CAAC,iEAAiE,IAAI,CAAC,0BAA0B,EAAE,CAAC,CAAC;oBACxH,CAAC;oBACD,aAAa,GAAG,MAAM,kCAAkC,CAAC,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBAClG,CAAC;qBACI,CAAC;oBACF,aAAa,GAAG,IAAI,CAAC,KAAK,CACtB,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAChD,CAAC;gBAC5B,CAAC;gBAED,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAEvC,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBAClB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,IAAI,CAAC,kBAAkB,EAAE,EAAE,KAAK,CAAC,CAAC;gBACpF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC/B,MAAM,KAAK,CAAC;YAChB,CAAC;QACL,CAAC;QAOD,MAAM,eAAe,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAEtG,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;YAK1B,MAAM,OAAO,GAAG,6BAA6B,iBAAiB,mCAAmC;kBAC3F,0FAA0F;kBAC1F,4DAA4D,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3B,MAAM,IAAI,qCAA4B,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC;QAGD,EAAE,CAAC,QAAQ,CAAC,IAAI,kBAAQ,CAAC,CAAC,OAAO,EAAE,EAAE;YACjC,KAAK,MAAM,aAAa,IAAI,eAAe,EAAE,CAAC;gBAC1C,OAAO,CAAC,OAAO,CACX,IAAI,kBAAQ,CAAC,CAAC,OAAO,EAAE,EAAE;oBAMrB,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;gBAC/F,CAAC,CAAC,CACL,CAAC;YACN,CAAC;QACL,CAAC,CAAC,CAAC,CAAC;QAEJ,OAAO,EAAE,CAAC;IACd,CAAC;IAEO,yBAAyB,CAAC,YAAoB,EAAE,UAA0B;QAC9E,OAAO,YAAY,CAAC,OAAO,CAAC,eAAe,EAAE,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5E,CAAC;IASO,mBAAmB,CAAC,OAAY;QACpC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5F,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAE9C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YACnC,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YACtD,IAAI,aAAa,KAAK,MAAM,IAAI,aAAa,KAAK,KAAK,EAAE,CAAC;gBACtD,OAAO,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAClD,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,YAA0B;QAElC,IAAI,qBAAqB,GAAiB,YAAY,CAAC;QAEvD,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;YACpD,qBAAqB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;gBACvC,KAAK,EAAE;oBACH,EAAE,EAAE,YAAY,CAAC,EAAE;iBACtB;gBACD,SAAS,EAAE;oBACP,IAAI,EAAE,IAAI;oBACV,aAAa,EAAE,IAAI;iBACtB;aACJ,CAAC,CAAC;QACP,CAAC;QAED,OAAO;YACH,EAAE,EAAE,qBAAqB,CAAC,EAAE;YAC5B,IAAI,EAAE,qBAAqB,CAAC,IAAI;YAChC,WAAW,EAAE,qBAAqB,CAAC,WAAW;YAC9C,MAAM,EAAE,qBAAqB,CAAC,IAAI,CAAC,EAAE;YACrC,WAAW,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI;YAC5C,eAAe,EAAE,qBAAqB,CAAC,aAAa,CAAC,EAAE;YACvD,oBAAoB,EAAE,qBAAqB,CAAC,aAAa,CAAC,YAAY;YACtE,kBAAkB,EAAE,qBAAqB,CAAC,kBAAkB;YAC5D,0BAA0B,EAAE,qBAAqB,CAAC,0BAA0B;SAC/E,CAAC;IACN,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAgC;QAEhD,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,mCAAY,CAAC,CAAC;QACnE,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC;gBACtC,KAAK,EAAE;oBACH,EAAE,EAAE,SAAS,CAAC,MAAM;iBACvB;aACJ,CAAC,CAAC;YACH,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;QAC7B,CAAC;QAED,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC;gBACtC,KAAK,EAAE;oBACH,IAAI,EAAE,SAAS,CAAC,WAAW;iBAC9B;aACJ,CAAC,CAAC;YACH,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;QAC7B,CAAC;QAGD,MAAM,uBAAuB,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,qCAAa,CAAC,CAAC;QAC7E,IAAI,SAAS,CAAC,eAAe,EAAE,CAAC;YAC5B,MAAM,aAAa,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC;gBACxD,KAAK,EAAE;oBACH,EAAE,EAAE,SAAS,CAAC,eAAe;iBAChC;aACJ,CAAC,CAAC;YACH,SAAS,CAAC,eAAe,CAAC,GAAG,aAAa,CAAC;QAC/C,CAAC;QACD,IAAI,SAAS,CAAC,oBAAoB,EAAE,CAAC;YACjC,MAAM,aAAa,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC;gBACxD,KAAK,EAAE;oBACH,YAAY,EAAE,SAAS,CAAC,oBAAoB;iBAC/C;aACJ,CAAC,CAAC;YACH,SAAS,CAAC,eAAe,CAAC,GAAG,aAAa,CAAC;QAC/C,CAAC;QAGD,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAC5C,KAAK,EAAE;gBACH,IAAI,EAAE,SAAS,CAAC,IAAI;aACvB;SACJ,CAAC,CAAC;QAEH,IAAI,oBAAoB,EAAE,CAAC;YACvB,MAAM,mBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;YACxE,OAAO,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC1C,CAAC;aACI,CAAC;YACF,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACnC,CAAC;IACL,CAAC;CAEJ,CAAA;AAvMY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,mBAAU,GAAE;qCAGgB,oBAAU;QAEP,8BAAa;QACT,uCAAiB;GALxC,sBAAsB,CAuMlC","sourcesContent":["import { Injectable, InternalServerErrorException } from '@nestjs/common';\nimport { CreateSecurityRuleDto } from 'src/dtos/create-security-rule.dto';\nimport { SecurityRuleConfig } from 'src/dtos/security-rule-config.dto';\nimport { UpdateSecurityRuleDto } from 'src/dtos/update-security-rule.dto';\nimport { CommonEntity } from 'src/entities/common.entity';\nimport { ModelMetadata } from 'src/entities/model-metadata.entity';\nimport { RoleMetadata } from 'src/entities/role-metadata.entity';\nimport { SecurityRule } from 'src/entities/security-rule.entity';\nimport { SolidRegistry } from 'src/helpers/solid-registry';\nimport { ActiveUserData } from 'src/interfaces/active-user-data.interface';\nimport { CrudHelperService } from 'src/services/crud-helper.service';\nimport { Brackets, DataSource, SelectQueryBuilder } from 'typeorm';\nimport { SolidBaseRepository } from './solid-base.repository';\n\n@Injectable()\nexport class SecurityRuleRepository extends SolidBaseRepository<SecurityRule> {\n    constructor(\n        readonly dataSource: DataSource,\n        // readonly requestContextService: RequestContextService,\n        readonly solidRegistry: SolidRegistry,\n        readonly crudHelperService: CrudHelperService,\n    ) {\n        super(SecurityRule, dataSource, null, null);\n    }\n\n    async applySecurityRules<T extends CommonEntity>(qb: SelectQueryBuilder<T>, modelSingularName: string, activeUser: ActiveUserData, securityRuleAlias: string = qb.alias): Promise<SelectQueryBuilder<T>> {\n        // Fetch the security rules for the model and roles\n        const securityRules = this.solidRegistry.getSecurityRules(modelSingularName, activeUser.roles);\n\n        // If no security rules, return the original query builder\n        if (!securityRules.length) {\n            return qb;\n        }\n\n        const evaluatedRules = [];\n\n        for (const rule of securityRules) {\n\n            let evaluatedRule = null;\n\n            try {\n                // First check if the rule has a \"dynamic\" security rule config provider. \n                if (rule.securityRuleConfigProvider) {\n                    // TODO: Evaluation of the securityRuleConfig Provider should happen outside first...\n                    const securityRuleConfigProviderInstance = this.solidRegistry.getSecurityRuleConfigProviderInstance(rule.securityRuleConfigProvider);\n                    if (!securityRuleConfigProviderInstance) {\n                        throw new Error(`Unable to resolve instance for security rule config provider: ${rule.securityRuleConfigProvider}`);\n                    }\n                    evaluatedRule = await securityRuleConfigProviderInstance.securityRuleConfig(activeUser, rule);\n                }\n                else {\n                    evaluatedRule = JSON.parse(\n                        this.resolveSecurityRuleConfig(rule.securityRuleConfig, activeUser)\n                    ) as SecurityRuleConfig;\n                }\n\n                evaluatedRules.push(evaluatedRule);\n\n            } catch (error: any) {\n                this.logger.error(`Error parsing security rule: ${rule.securityRuleConfig}`, error);\n                this.logger.error(error.stack);\n                throw error;\n            }\n        }\n\n\n        // A rule whose filters contribute no conditions is dangerous here: TypeORM renders an empty\n        // Brackets as \"1=1\" (always true), so such a rule would be OR'd in as \"match everything\" and\n        // silently void the entire security filter. Test emptiness explicitly -- {} and [] are both\n        // truthy, so the previous `if (evaluatedRule.filters)` check let them through.\n        const applicableRules = evaluatedRules.filter(rule => rule && this.hasFilterConditions(rule.filters));\n\n        if (!applicableRules.length) {\n            // We only reach here when security rules exist for this model/role (there is an early\n            // return above otherwise), so a restriction WAS intended. Fail closed and be loud:\n            // denying silently would surface as a mysteriously empty list, and allowing would be a\n            // full row-level-security bypass.\n            const message = `Security rules for model '${modelSingularName}' produced no filter conditions. `\n                + `Check the securityRuleConfig / securityRuleConfigProvider for rules with empty filters. `\n                + `Denying access rather than returning unrestricted results.`;\n            this.logger.error(message);\n            throw new InternalServerErrorException(message);\n        }\n\n        // Apply each security rule to the query builder. The rules are combined with OR logic at the top level.\n        qb.andWhere(new Brackets((outerQb) => {\n            for (const evaluatedRule of applicableRules) {\n                outerQb.orWhere( // combine each rule-group with OR at the outer level\n                    new Brackets((innerQb) => {\n                        // NOTE: do NOT wrap this in try/catch. Field validation inside applyFilters\n                        // throws on an invalid rule field, and letting it propagate aborts the\n                        // request with no rows -- i.e. it fails closed. Swallowing it would leave\n                        // this Brackets empty, which TypeORM renders as \"1=1\", turning the rule into\n                        // \"match everything\" and voiding row-level security entirely.\n                        this.crudHelperService.applyFilters(innerQb, evaluatedRule.filters, securityRuleAlias, qb); // AND within a rule\n                    })\n                );\n            }\n        }));\n\n        return qb;\n    }\n\n    private resolveSecurityRuleConfig(configString: string, activeUser: ActiveUserData) {\n        return configString.replace('$activeUserId', activeUser.sub.toString());\n    }\n\n    /**\n     * Does this filter object actually produce at least one WHERE condition?\n     *\n     * Truthiness is not enough: `{}` and `[]` are truthy but contribute nothing, and an empty\n     * Brackets is rendered by TypeORM as \"1=1\" -- which inside the security rules' OR chain means\n     * \"match every row\". Recurses through $and/$or so `{ $and: [] }` is treated as empty too.\n     */\n    private hasFilterConditions(filters: any): boolean {\n        if (filters === null || filters === undefined) return false;\n        if (Array.isArray(filters)) return filters.some(filter => this.hasFilterConditions(filter));\n        if (typeof filters !== 'object') return false;\n\n        return Object.keys(filters).some(key => {\n            const normalizedKey = key.replace(/^\\[(.*)\\]$/, '$1');\n            if (normalizedKey === '$and' || normalizedKey === '$or') {\n                return this.hasFilterConditions(filters[key]);\n            }\n            return true; // any other key is a field condition\n        });\n    }\n\n    async toDto(securityRule: SecurityRule): Promise<UpdateSecurityRuleDto> {\n        // load the role and model relations for the security rule\n        let populatedSecurityRule: SecurityRule = securityRule;\n        // If the security rule does not have the role and model relations loaded, load them\n        if (!securityRule.role || !securityRule.modelMetadata) {\n            populatedSecurityRule = await this.findOne({\n                where: {\n                    id: securityRule.id,\n                },\n                relations: {\n                    role: true,\n                    modelMetadata: true,\n                },\n            });\n        }\n\n        return {\n            id: populatedSecurityRule.id,\n            name: populatedSecurityRule.name,\n            description: populatedSecurityRule.description,\n            roleId: populatedSecurityRule.role.id,\n            roleUserKey: populatedSecurityRule.role.name,\n            modelMetadataId: populatedSecurityRule.modelMetadata.id,\n            modelMetadataUserKey: populatedSecurityRule.modelMetadata.singularName,\n            securityRuleConfig: populatedSecurityRule.securityRuleConfig,\n            securityRuleConfigProvider: populatedSecurityRule.securityRuleConfigProvider,\n        };\n    }\n\n    async upsertWithDto(createDto: CreateSecurityRuleDto) {\n        // Populate the role from roleId or roleUserKey\n        const roleRepository = this.dataSource.getRepository(RoleMetadata);\n        if (createDto.roleId) {\n            const role = await roleRepository.findOne({\n                where: {\n                    id: createDto.roleId,\n                },\n            });\n            createDto['role'] = role;\n        }\n\n        if (createDto.roleUserKey) {\n            const role = await roleRepository.findOne({\n                where: {\n                    name: createDto.roleUserKey,\n                },\n            });\n            createDto['role'] = role;\n        }\n\n        // Populate the model from modelMetadataId or modelMetadataUserKey\n        const modelMetadataRepository = this.dataSource.getRepository(ModelMetadata);\n        if (createDto.modelMetadataId) {\n            const modelMetadata = await modelMetadataRepository.findOne({\n                where: {\n                    id: createDto.modelMetadataId,\n                },\n            });\n            createDto['modelMetadata'] = modelMetadata;\n        }\n        if (createDto.modelMetadataUserKey) {\n            const modelMetadata = await modelMetadataRepository.findOne({\n                where: {\n                    singularName: createDto.modelMetadataUserKey,\n                },\n            });\n            createDto['modelMetadata'] = modelMetadata;\n        }\n\n        // First check if module already exists using name\n        const existingSecurityRule = await this.findOne({\n            where: {\n                name: createDto.name,\n            },\n        });\n\n        if (existingSecurityRule) {\n            const updatedSecurityRule = this.merge(existingSecurityRule, createDto);\n            return this.save(updatedSecurityRule);\n        }\n        else {\n            const securityRule = this.create(createDto);\n            return this.save(securityRule);\n        }\n    }\n\n}"]}

package/dist/repository/workflow-definition.repository.d.ts

@@ -0,0 +1,12 @@
+import { SecurityRuleRepository } from './security-rule.repository';
+import { SolidBaseRepository } from './solid-base.repository';
+import { RequestContextService } from '../services/request-context.service';
+import { DataSource } from 'typeorm';
+import { WorkflowDefinition } from '../entities/workflow-definition.entity';
+export declare class WorkflowDefinitionRepository extends SolidBaseRepository<WorkflowDefinition> {
+    readonly dataSource: DataSource;
+    readonly requestContextService: RequestContextService;
+    readonly securityRuleRepository: SecurityRuleRepository;
+    constructor(dataSource: DataSource, requestContextService: RequestContextService, securityRuleRepository: SecurityRuleRepository);
+}
+//# sourceMappingURL=workflow-definition.repository.d.ts.map

package/dist/repository/workflow-definition.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-definition.repository.d.ts","sourceRoot":"","sources":["../../src/repository/workflow-definition.repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAE5E,qBACa,4BAA6B,SAAQ,mBAAmB,CAAC,kBAAkB,CAAC;IAGjF,QAAQ,CAAC,UAAU,EAAE,UAAU;IAC/B,QAAQ,CAAC,qBAAqB,EAAE,qBAAqB;IACrD,QAAQ,CAAC,sBAAsB,EAAE,sBAAsB;gBAF9C,UAAU,EAAE,UAAU,EACtB,qBAAqB,EAAE,qBAAqB,EAC5C,sBAAsB,EAAE,sBAAsB;CAI9D"}

package/dist/repository/workflow-definition.repository.js

@@ -0,0 +1,39 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowDefinitionRepository = void 0;
+const common_1 = require("@nestjs/common");
+const security_rule_repository_1 = require("./security-rule.repository");
+const solid_base_repository_1 = require("./solid-base.repository");
+const request_context_service_1 = require("../services/request-context.service");
+const typeorm_1 = require("typeorm");
+const typeorm_2 = require("@nestjs/typeorm");
+const workflow_definition_entity_1 = require("../entities/workflow-definition.entity");
+let WorkflowDefinitionRepository = class WorkflowDefinitionRepository extends solid_base_repository_1.SolidBaseRepository {
+    constructor(dataSource, requestContextService, securityRuleRepository) {
+        super(workflow_definition_entity_1.WorkflowDefinition, dataSource, requestContextService, securityRuleRepository);
+        this.dataSource = dataSource;
+        this.requestContextService = requestContextService;
+        this.securityRuleRepository = securityRuleRepository;
+    }
+};
+exports.WorkflowDefinitionRepository = WorkflowDefinitionRepository;
+exports.WorkflowDefinitionRepository = WorkflowDefinitionRepository = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, typeorm_2.InjectDataSource)("default")),
+    __metadata("design:paramtypes", [typeorm_1.DataSource,
+        request_context_service_1.RequestContextService,
+        security_rule_repository_1.SecurityRuleRepository])
+], WorkflowDefinitionRepository);
+//# sourceMappingURL=workflow-definition.repository.js.map

package/dist/repository/workflow-definition.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-definition.repository.js","sourceRoot":"","sources":["../../src/repository/workflow-definition.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,yEAAoE;AACpE,mEAA8D;AAC9D,iFAA6E;AAC7E,qCAAqC;AACrC,6CAAmD;AACnD,uFAA4E;AAGrE,IAAM,4BAA4B,GAAlC,MAAM,4BAA6B,SAAQ,2CAAuC;IACrF,YAEa,UAAsB,EACtB,qBAA4C,EAC5C,sBAA8C;QAEvD,KAAK,CAAC,+CAAkB,EAAE,UAAU,EAAE,qBAAqB,EAAE,sBAAsB,CAAC,CAAC;QAJ5E,eAAU,GAAV,UAAU,CAAY;QACtB,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,2BAAsB,GAAtB,sBAAsB,CAAwB;IAG3D,CAAC;CACJ,CAAA;AATY,oEAA4B;uCAA5B,4BAA4B;IADxC,IAAA,mBAAU,GAAE;IAGJ,WAAA,IAAA,0BAAgB,EAAC,SAAS,CAAC,CAAA;qCACP,oBAAU;QACC,+CAAqB;QACpB,iDAAsB;GALlD,4BAA4B,CASxC","sourcesContent":["import { Injectable } from '@nestjs/common';\nimport { SecurityRuleRepository } from './security-rule.repository';\nimport { SolidBaseRepository } from './solid-base.repository';\nimport { RequestContextService } from 'src/services/request-context.service';\nimport { DataSource } from 'typeorm';\nimport { InjectDataSource } from '@nestjs/typeorm';\nimport { WorkflowDefinition } from '../entities/workflow-definition.entity';\n\n@Injectable()\nexport class WorkflowDefinitionRepository extends SolidBaseRepository<WorkflowDefinition> {\n    constructor(\n        @InjectDataSource(\"default\")\n        readonly dataSource: DataSource,\n        readonly requestContextService: RequestContextService,\n        readonly securityRuleRepository: SecurityRuleRepository,\n    ) {\n        super(WorkflowDefinition, dataSource, requestContextService, securityRuleRepository);\n    }\n}"]}

package/dist/repository/workflow-execution-artifact.repository.d.ts

@@ -0,0 +1,12 @@
+import { SecurityRuleRepository } from './security-rule.repository';
+import { SolidBaseRepository } from './solid-base.repository';
+import { RequestContextService } from '../services/request-context.service';
+import { DataSource } from 'typeorm';
+import { WorkflowExecutionArtifact } from '../entities/workflow-execution-artifact.entity';
+export declare class WorkflowExecutionArtifactRepository extends SolidBaseRepository<WorkflowExecutionArtifact> {
+    readonly dataSource: DataSource;
+    readonly requestContextService: RequestContextService;
+    readonly securityRuleRepository: SecurityRuleRepository;
+    constructor(dataSource: DataSource, requestContextService: RequestContextService, securityRuleRepository: SecurityRuleRepository);
+}
+//# sourceMappingURL=workflow-execution-artifact.repository.d.ts.map

package/dist/repository/workflow-execution-artifact.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-execution-artifact.repository.d.ts","sourceRoot":"","sources":["../../src/repository/workflow-execution-artifact.repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,yBAAyB,EAAE,MAAM,gDAAgD,CAAC;AAE3F,qBACa,mCAAoC,SAAQ,mBAAmB,CAAC,yBAAyB,CAAC;IAG/F,QAAQ,CAAC,UAAU,EAAE,UAAU;IAC/B,QAAQ,CAAC,qBAAqB,EAAE,qBAAqB;IACrD,QAAQ,CAAC,sBAAsB,EAAE,sBAAsB;gBAF9C,UAAU,EAAE,UAAU,EACtB,qBAAqB,EAAE,qBAAqB,EAC5C,sBAAsB,EAAE,sBAAsB;CAI9D"}

package/dist/repository/workflow-execution-artifact.repository.js

@@ -0,0 +1,39 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowExecutionArtifactRepository = void 0;
+const common_1 = require("@nestjs/common");
+const security_rule_repository_1 = require("./security-rule.repository");
+const solid_base_repository_1 = require("./solid-base.repository");
+const request_context_service_1 = require("../services/request-context.service");
+const typeorm_1 = require("typeorm");
+const typeorm_2 = require("@nestjs/typeorm");
+const workflow_execution_artifact_entity_1 = require("../entities/workflow-execution-artifact.entity");
+let WorkflowExecutionArtifactRepository = class WorkflowExecutionArtifactRepository extends solid_base_repository_1.SolidBaseRepository {
+    constructor(dataSource, requestContextService, securityRuleRepository) {
+        super(workflow_execution_artifact_entity_1.WorkflowExecutionArtifact, dataSource, requestContextService, securityRuleRepository);
+        this.dataSource = dataSource;
+        this.requestContextService = requestContextService;
+        this.securityRuleRepository = securityRuleRepository;
+    }
+};
+exports.WorkflowExecutionArtifactRepository = WorkflowExecutionArtifactRepository;
+exports.WorkflowExecutionArtifactRepository = WorkflowExecutionArtifactRepository = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, typeorm_2.InjectDataSource)("default")),
+    __metadata("design:paramtypes", [typeorm_1.DataSource,
+        request_context_service_1.RequestContextService,
+        security_rule_repository_1.SecurityRuleRepository])
+], WorkflowExecutionArtifactRepository);
+//# sourceMappingURL=workflow-execution-artifact.repository.js.map

package/dist/repository/workflow-execution-artifact.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-execution-artifact.repository.js","sourceRoot":"","sources":["../../src/repository/workflow-execution-artifact.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,yEAAoE;AACpE,mEAA8D;AAC9D,iFAA6E;AAC7E,qCAAqC;AACrC,6CAAmD;AACnD,uGAA2F;AAGpF,IAAM,mCAAmC,GAAzC,MAAM,mCAAoC,SAAQ,2CAA8C;IACnG,YAEa,UAAsB,EACtB,qBAA4C,EAC5C,sBAA8C;QAEvD,KAAK,CAAC,8DAAyB,EAAE,UAAU,EAAE,qBAAqB,EAAE,sBAAsB,CAAC,CAAC;QAJnF,eAAU,GAAV,UAAU,CAAY;QACtB,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,2BAAsB,GAAtB,sBAAsB,CAAwB;IAG3D,CAAC;CACJ,CAAA;AATY,kFAAmC;8CAAnC,mCAAmC;IAD/C,IAAA,mBAAU,GAAE;IAGJ,WAAA,IAAA,0BAAgB,EAAC,SAAS,CAAC,CAAA;qCACP,oBAAU;QACC,+CAAqB;QACpB,iDAAsB;GALlD,mCAAmC,CAS/C","sourcesContent":["import { Injectable } from '@nestjs/common';\nimport { SecurityRuleRepository } from './security-rule.repository';\nimport { SolidBaseRepository } from './solid-base.repository';\nimport { RequestContextService } from 'src/services/request-context.service';\nimport { DataSource } from 'typeorm';\nimport { InjectDataSource } from '@nestjs/typeorm';\nimport { WorkflowExecutionArtifact } from '../entities/workflow-execution-artifact.entity';\n\n@Injectable()\nexport class WorkflowExecutionArtifactRepository extends SolidBaseRepository<WorkflowExecutionArtifact> {\n    constructor(\n        @InjectDataSource(\"default\")\n        readonly dataSource: DataSource,\n        readonly requestContextService: RequestContextService,\n        readonly securityRuleRepository: SecurityRuleRepository,\n    ) {\n        super(WorkflowExecutionArtifact, dataSource, requestContextService, securityRuleRepository);\n    }\n}"]}

package/dist/repository/workflow-execution-log.repository.d.ts

@@ -0,0 +1,12 @@
+import { SecurityRuleRepository } from './security-rule.repository';
+import { SolidBaseRepository } from './solid-base.repository';
+import { RequestContextService } from '../services/request-context.service';
+import { DataSource } from 'typeorm';
+import { WorkflowExecutionLog } from '../entities/workflow-execution-log.entity';
+export declare class WorkflowExecutionLogRepository extends SolidBaseRepository<WorkflowExecutionLog> {
+    readonly dataSource: DataSource;
+    readonly requestContextService: RequestContextService;
+    readonly securityRuleRepository: SecurityRuleRepository;
+    constructor(dataSource: DataSource, requestContextService: RequestContextService, securityRuleRepository: SecurityRuleRepository);
+}
+//# sourceMappingURL=workflow-execution-log.repository.d.ts.map

package/dist/repository/workflow-execution-log.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-execution-log.repository.d.ts","sourceRoot":"","sources":["../../src/repository/workflow-execution-log.repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,qBACa,8BAA+B,SAAQ,mBAAmB,CAAC,oBAAoB,CAAC;IAGrF,QAAQ,CAAC,UAAU,EAAE,UAAU;IAC/B,QAAQ,CAAC,qBAAqB,EAAE,qBAAqB;IACrD,QAAQ,CAAC,sBAAsB,EAAE,sBAAsB;gBAF9C,UAAU,EAAE,UAAU,EACtB,qBAAqB,EAAE,qBAAqB,EAC5C,sBAAsB,EAAE,sBAAsB;CAI9D"}

package/dist/repository/workflow-execution-log.repository.js

@@ -0,0 +1,39 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowExecutionLogRepository = void 0;
+const common_1 = require("@nestjs/common");
+const security_rule_repository_1 = require("./security-rule.repository");
+const solid_base_repository_1 = require("./solid-base.repository");
+const request_context_service_1 = require("../services/request-context.service");
+const typeorm_1 = require("typeorm");
+const typeorm_2 = require("@nestjs/typeorm");
+const workflow_execution_log_entity_1 = require("../entities/workflow-execution-log.entity");
+let WorkflowExecutionLogRepository = class WorkflowExecutionLogRepository extends solid_base_repository_1.SolidBaseRepository {
+    constructor(dataSource, requestContextService, securityRuleRepository) {
+        super(workflow_execution_log_entity_1.WorkflowExecutionLog, dataSource, requestContextService, securityRuleRepository);
+        this.dataSource = dataSource;
+        this.requestContextService = requestContextService;
+        this.securityRuleRepository = securityRuleRepository;
+    }
+};
+exports.WorkflowExecutionLogRepository = WorkflowExecutionLogRepository;
+exports.WorkflowExecutionLogRepository = WorkflowExecutionLogRepository = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, typeorm_2.InjectDataSource)("default")),
+    __metadata("design:paramtypes", [typeorm_1.DataSource,
+        request_context_service_1.RequestContextService,
+        security_rule_repository_1.SecurityRuleRepository])
+], WorkflowExecutionLogRepository);
+//# sourceMappingURL=workflow-execution-log.repository.js.map

package/dist/repository/workflow-execution-log.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-execution-log.repository.js","sourceRoot":"","sources":["../../src/repository/workflow-execution-log.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,yEAAoE;AACpE,mEAA8D;AAC9D,iFAA6E;AAC7E,qCAAqC;AACrC,6CAAmD;AACnD,6FAAiF;AAG1E,IAAM,8BAA8B,GAApC,MAAM,8BAA+B,SAAQ,2CAAyC;IACzF,YAEa,UAAsB,EACtB,qBAA4C,EAC5C,sBAA8C;QAEvD,KAAK,CAAC,oDAAoB,EAAE,UAAU,EAAE,qBAAqB,EAAE,sBAAsB,CAAC,CAAC;QAJ9E,eAAU,GAAV,UAAU,CAAY;QACtB,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,2BAAsB,GAAtB,sBAAsB,CAAwB;IAG3D,CAAC;CACJ,CAAA;AATY,wEAA8B;yCAA9B,8BAA8B;IAD1C,IAAA,mBAAU,GAAE;IAGJ,WAAA,IAAA,0BAAgB,EAAC,SAAS,CAAC,CAAA;qCACP,oBAAU;QACC,+CAAqB;QACpB,iDAAsB;GALlD,8BAA8B,CAS1C","sourcesContent":["import { Injectable } from '@nestjs/common';\nimport { SecurityRuleRepository } from './security-rule.repository';\nimport { SolidBaseRepository } from './solid-base.repository';\nimport { RequestContextService } from 'src/services/request-context.service';\nimport { DataSource } from 'typeorm';\nimport { InjectDataSource } from '@nestjs/typeorm';\nimport { WorkflowExecutionLog } from '../entities/workflow-execution-log.entity';\n\n@Injectable()\nexport class WorkflowExecutionLogRepository extends SolidBaseRepository<WorkflowExecutionLog> {\n    constructor(\n        @InjectDataSource(\"default\")\n        readonly dataSource: DataSource,\n        readonly requestContextService: RequestContextService,\n        readonly securityRuleRepository: SecurityRuleRepository,\n    ) {\n        super(WorkflowExecutionLog, dataSource, requestContextService, securityRuleRepository);\n    }\n}"]}

package/dist/repository/workflow-execution.repository.d.ts

@@ -0,0 +1,12 @@
+import { SecurityRuleRepository } from './security-rule.repository';
+import { SolidBaseRepository } from './solid-base.repository';
+import { RequestContextService } from '../services/request-context.service';
+import { DataSource } from 'typeorm';
+import { WorkflowExecution } from '../entities/workflow-execution.entity';
+export declare class WorkflowExecutionRepository extends SolidBaseRepository<WorkflowExecution> {
+    readonly dataSource: DataSource;
+    readonly requestContextService: RequestContextService;
+    readonly securityRuleRepository: SecurityRuleRepository;
+    constructor(dataSource: DataSource, requestContextService: RequestContextService, securityRuleRepository: SecurityRuleRepository);
+}
+//# sourceMappingURL=workflow-execution.repository.d.ts.map

package/dist/repository/workflow-execution.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-execution.repository.d.ts","sourceRoot":"","sources":["../../src/repository/workflow-execution.repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAE1E,qBACa,2BAA4B,SAAQ,mBAAmB,CAAC,iBAAiB,CAAC;IAG/E,QAAQ,CAAC,UAAU,EAAE,UAAU;IAC/B,QAAQ,CAAC,qBAAqB,EAAE,qBAAqB;IACrD,QAAQ,CAAC,sBAAsB,EAAE,sBAAsB;gBAF9C,UAAU,EAAE,UAAU,EACtB,qBAAqB,EAAE,qBAAqB,EAC5C,sBAAsB,EAAE,sBAAsB;CAI9D"}

package/dist/repository/workflow-execution.repository.js

@@ -0,0 +1,39 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowExecutionRepository = void 0;
+const common_1 = require("@nestjs/common");
+const security_rule_repository_1 = require("./security-rule.repository");
+const solid_base_repository_1 = require("./solid-base.repository");
+const request_context_service_1 = require("../services/request-context.service");
+const typeorm_1 = require("typeorm");
+const typeorm_2 = require("@nestjs/typeorm");
+const workflow_execution_entity_1 = require("../entities/workflow-execution.entity");
+let WorkflowExecutionRepository = class WorkflowExecutionRepository extends solid_base_repository_1.SolidBaseRepository {
+    constructor(dataSource, requestContextService, securityRuleRepository) {
+        super(workflow_execution_entity_1.WorkflowExecution, dataSource, requestContextService, securityRuleRepository);
+        this.dataSource = dataSource;
+        this.requestContextService = requestContextService;
+        this.securityRuleRepository = securityRuleRepository;
+    }
+};
+exports.WorkflowExecutionRepository = WorkflowExecutionRepository;
+exports.WorkflowExecutionRepository = WorkflowExecutionRepository = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, typeorm_2.InjectDataSource)("default")),
+    __metadata("design:paramtypes", [typeorm_1.DataSource,
+        request_context_service_1.RequestContextService,
+        security_rule_repository_1.SecurityRuleRepository])
+], WorkflowExecutionRepository);
+//# sourceMappingURL=workflow-execution.repository.js.map

package/dist/repository/workflow-execution.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-execution.repository.js","sourceRoot":"","sources":["../../src/repository/workflow-execution.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,yEAAoE;AACpE,mEAA8D;AAC9D,iFAA6E;AAC7E,qCAAqC;AACrC,6CAAmD;AACnD,qFAA0E;AAGnE,IAAM,2BAA2B,GAAjC,MAAM,2BAA4B,SAAQ,2CAAsC;IACnF,YAEa,UAAsB,EACtB,qBAA4C,EAC5C,sBAA8C;QAEvD,KAAK,CAAC,6CAAiB,EAAE,UAAU,EAAE,qBAAqB,EAAE,sBAAsB,CAAC,CAAC;QAJ3E,eAAU,GAAV,UAAU,CAAY;QACtB,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,2BAAsB,GAAtB,sBAAsB,CAAwB;IAG3D,CAAC;CACJ,CAAA;AATY,kEAA2B;sCAA3B,2BAA2B;IADvC,IAAA,mBAAU,GAAE;IAGJ,WAAA,IAAA,0BAAgB,EAAC,SAAS,CAAC,CAAA;qCACP,oBAAU;QACC,+CAAqB;QACpB,iDAAsB;GALlD,2BAA2B,CASvC","sourcesContent":["import { Injectable } from '@nestjs/common';\nimport { SecurityRuleRepository } from './security-rule.repository';\nimport { SolidBaseRepository } from './solid-base.repository';\nimport { RequestContextService } from 'src/services/request-context.service';\nimport { DataSource } from 'typeorm';\nimport { InjectDataSource } from '@nestjs/typeorm';\nimport { WorkflowExecution } from '../entities/workflow-execution.entity';\n\n@Injectable()\nexport class WorkflowExecutionRepository extends SolidBaseRepository<WorkflowExecution> {\n    constructor(\n        @InjectDataSource(\"default\")\n        readonly dataSource: DataSource,\n        readonly requestContextService: RequestContextService,\n        readonly securityRuleRepository: SecurityRuleRepository,\n    ) {\n        super(WorkflowExecution, dataSource, requestContextService, securityRuleRepository);\n    }\n}"]}

package/dist/repository/workflow-secret.repository.d.ts

@@ -0,0 +1,12 @@
+import { SecurityRuleRepository } from './security-rule.repository';
+import { SolidBaseRepository } from './solid-base.repository';
+import { RequestContextService } from '../services/request-context.service';
+import { DataSource } from 'typeorm';
+import { WorkflowSecret } from '../entities/workflow-secret.entity';
+export declare class WorkflowSecretRepository extends SolidBaseRepository<WorkflowSecret> {
+    readonly dataSource: DataSource;
+    readonly requestContextService: RequestContextService;
+    readonly securityRuleRepository: SecurityRuleRepository;
+    constructor(dataSource: DataSource, requestContextService: RequestContextService, securityRuleRepository: SecurityRuleRepository);
+}
+//# sourceMappingURL=workflow-secret.repository.d.ts.map

package/dist/repository/workflow-secret.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-secret.repository.d.ts","sourceRoot":"","sources":["../../src/repository/workflow-secret.repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAEpE,qBACa,wBAAyB,SAAQ,mBAAmB,CAAC,cAAc,CAAC;IAGzE,QAAQ,CAAC,UAAU,EAAE,UAAU;IAC/B,QAAQ,CAAC,qBAAqB,EAAE,qBAAqB;IACrD,QAAQ,CAAC,sBAAsB,EAAE,sBAAsB;gBAF9C,UAAU,EAAE,UAAU,EACtB,qBAAqB,EAAE,qBAAqB,EAC5C,sBAAsB,EAAE,sBAAsB;CAI9D"}

package/dist/repository/workflow-secret.repository.js

@@ -0,0 +1,39 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowSecretRepository = void 0;
+const common_1 = require("@nestjs/common");
+const security_rule_repository_1 = require("./security-rule.repository");
+const solid_base_repository_1 = require("./solid-base.repository");
+const request_context_service_1 = require("../services/request-context.service");
+const typeorm_1 = require("typeorm");
+const typeorm_2 = require("@nestjs/typeorm");
+const workflow_secret_entity_1 = require("../entities/workflow-secret.entity");
+let WorkflowSecretRepository = class WorkflowSecretRepository extends solid_base_repository_1.SolidBaseRepository {
+    constructor(dataSource, requestContextService, securityRuleRepository) {
+        super(workflow_secret_entity_1.WorkflowSecret, dataSource, requestContextService, securityRuleRepository);
+        this.dataSource = dataSource;
+        this.requestContextService = requestContextService;
+        this.securityRuleRepository = securityRuleRepository;
+    }
+};
+exports.WorkflowSecretRepository = WorkflowSecretRepository;
+exports.WorkflowSecretRepository = WorkflowSecretRepository = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, typeorm_2.InjectDataSource)("default")),
+    __metadata("design:paramtypes", [typeorm_1.DataSource,
+        request_context_service_1.RequestContextService,
+        security_rule_repository_1.SecurityRuleRepository])
+], WorkflowSecretRepository);
+//# sourceMappingURL=workflow-secret.repository.js.map

package/dist/repository/workflow-secret.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-secret.repository.js","sourceRoot":"","sources":["../../src/repository/workflow-secret.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,yEAAoE;AACpE,mEAA8D;AAC9D,iFAA6E;AAC7E,qCAAqC;AACrC,6CAAmD;AACnD,+EAAoE;AAG7D,IAAM,wBAAwB,GAA9B,MAAM,wBAAyB,SAAQ,2CAAmC;IAC7E,YAEa,UAAsB,EACtB,qBAA4C,EAC5C,sBAA8C;QAEvD,KAAK,CAAC,uCAAc,EAAE,UAAU,EAAE,qBAAqB,EAAE,sBAAsB,CAAC,CAAC;QAJxE,eAAU,GAAV,UAAU,CAAY;QACtB,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,2BAAsB,GAAtB,sBAAsB,CAAwB;IAG3D,CAAC;CACJ,CAAA;AATY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;IAGJ,WAAA,IAAA,0BAAgB,EAAC,SAAS,CAAC,CAAA;qCACP,oBAAU;QACC,+CAAqB;QACpB,iDAAsB;GALlD,wBAAwB,CASpC","sourcesContent":["import { Injectable } from '@nestjs/common';\nimport { SecurityRuleRepository } from './security-rule.repository';\nimport { SolidBaseRepository } from './solid-base.repository';\nimport { RequestContextService } from 'src/services/request-context.service';\nimport { DataSource } from 'typeorm';\nimport { InjectDataSource } from '@nestjs/typeorm';\nimport { WorkflowSecret } from '../entities/workflow-secret.entity';\n\n@Injectable()\nexport class WorkflowSecretRepository extends SolidBaseRepository<WorkflowSecret> {\n    constructor(\n        @InjectDataSource(\"default\")\n        readonly dataSource: DataSource,\n        readonly requestContextService: RequestContextService,\n        readonly securityRuleRepository: SecurityRuleRepository,\n    ) {\n        super(WorkflowSecret, dataSource, requestContextService, securityRuleRepository);\n    }\n}\n"]}

package/dist/repository/workflow-step-execution.repository.d.ts

@@ -0,0 +1,12 @@
+import { SecurityRuleRepository } from './security-rule.repository';
+import { SolidBaseRepository } from './solid-base.repository';
+import { RequestContextService } from '../services/request-context.service';
+import { DataSource } from 'typeorm';
+import { WorkflowStepExecution } from '../entities/workflow-step-execution.entity';
+export declare class WorkflowStepExecutionRepository extends SolidBaseRepository<WorkflowStepExecution> {
+    readonly dataSource: DataSource;
+    readonly requestContextService: RequestContextService;
+    readonly securityRuleRepository: SecurityRuleRepository;
+    constructor(dataSource: DataSource, requestContextService: RequestContextService, securityRuleRepository: SecurityRuleRepository);
+}
+//# sourceMappingURL=workflow-step-execution.repository.d.ts.map

package/dist/repository/workflow-step-execution.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-step-execution.repository.d.ts","sourceRoot":"","sources":["../../src/repository/workflow-step-execution.repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AAEnF,qBACa,+BAAgC,SAAQ,mBAAmB,CAAC,qBAAqB,CAAC;IAGvF,QAAQ,CAAC,UAAU,EAAE,UAAU;IAC/B,QAAQ,CAAC,qBAAqB,EAAE,qBAAqB;IACrD,QAAQ,CAAC,sBAAsB,EAAE,sBAAsB;gBAF9C,UAAU,EAAE,UAAU,EACtB,qBAAqB,EAAE,qBAAqB,EAC5C,sBAAsB,EAAE,sBAAsB;CAI9D"}

package/dist/repository/workflow-step-execution.repository.js

@@ -0,0 +1,39 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowStepExecutionRepository = void 0;
+const common_1 = require("@nestjs/common");
+const security_rule_repository_1 = require("./security-rule.repository");
+const solid_base_repository_1 = require("./solid-base.repository");
+const request_context_service_1 = require("../services/request-context.service");
+const typeorm_1 = require("typeorm");
+const typeorm_2 = require("@nestjs/typeorm");
+const workflow_step_execution_entity_1 = require("../entities/workflow-step-execution.entity");
+let WorkflowStepExecutionRepository = class WorkflowStepExecutionRepository extends solid_base_repository_1.SolidBaseRepository {
+    constructor(dataSource, requestContextService, securityRuleRepository) {
+        super(workflow_step_execution_entity_1.WorkflowStepExecution, dataSource, requestContextService, securityRuleRepository);
+        this.dataSource = dataSource;
+        this.requestContextService = requestContextService;
+        this.securityRuleRepository = securityRuleRepository;
+    }
+};
+exports.WorkflowStepExecutionRepository = WorkflowStepExecutionRepository;
+exports.WorkflowStepExecutionRepository = WorkflowStepExecutionRepository = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, typeorm_2.InjectDataSource)("default")),
+    __metadata("design:paramtypes", [typeorm_1.DataSource,
+        request_context_service_1.RequestContextService,
+        security_rule_repository_1.SecurityRuleRepository])
+], WorkflowStepExecutionRepository);
+//# sourceMappingURL=workflow-step-execution.repository.js.map

package/dist/repository/workflow-step-execution.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-step-execution.repository.js","sourceRoot":"","sources":["../../src/repository/workflow-step-execution.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,yEAAoE;AACpE,mEAA8D;AAC9D,iFAA6E;AAC7E,qCAAqC;AACrC,6CAAmD;AACnD,+FAAmF;AAG5E,IAAM,+BAA+B,GAArC,MAAM,+BAAgC,SAAQ,2CAA0C;IAC3F,YAEa,UAAsB,EACtB,qBAA4C,EAC5C,sBAA8C;QAEvD,KAAK,CAAC,sDAAqB,EAAE,UAAU,EAAE,qBAAqB,EAAE,sBAAsB,CAAC,CAAC;QAJ/E,eAAU,GAAV,UAAU,CAAY;QACtB,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,2BAAsB,GAAtB,sBAAsB,CAAwB;IAG3D,CAAC;CACJ,CAAA;AATY,0EAA+B;0CAA/B,+BAA+B;IAD3C,IAAA,mBAAU,GAAE;IAGJ,WAAA,IAAA,0BAAgB,EAAC,SAAS,CAAC,CAAA;qCACP,oBAAU;QACC,+CAAqB;QACpB,iDAAsB;GALlD,+BAA+B,CAS3C","sourcesContent":["import { Injectable } from '@nestjs/common';\nimport { SecurityRuleRepository } from './security-rule.repository';\nimport { SolidBaseRepository } from './solid-base.repository';\nimport { RequestContextService } from 'src/services/request-context.service';\nimport { DataSource } from 'typeorm';\nimport { InjectDataSource } from '@nestjs/typeorm';\nimport { WorkflowStepExecution } from '../entities/workflow-step-execution.entity';\n\n@Injectable()\nexport class WorkflowStepExecutionRepository extends SolidBaseRepository<WorkflowStepExecution> {\n    constructor(\n        @InjectDataSource(\"default\")\n        readonly dataSource: DataSource,\n        readonly requestContextService: RequestContextService,\n        readonly securityRuleRepository: SecurityRuleRepository,\n    ) {\n        super(WorkflowStepExecution, dataSource, requestContextService, securityRuleRepository);\n    }\n}"]}

package/dist/repository/workflow-trigger-execution.repository.d.ts

@@ -0,0 +1,12 @@
+import { SecurityRuleRepository } from './security-rule.repository';
+import { SolidBaseRepository } from './solid-base.repository';
+import { RequestContextService } from '../services/request-context.service';
+import { DataSource } from 'typeorm';
+import { WorkflowTriggerExecution } from '../entities/workflow-trigger-execution.entity';
+export declare class WorkflowTriggerExecutionRepository extends SolidBaseRepository<WorkflowTriggerExecution> {
+    readonly dataSource: DataSource;
+    readonly requestContextService: RequestContextService;
+    readonly securityRuleRepository: SecurityRuleRepository;
+    constructor(dataSource: DataSource, requestContextService: RequestContextService, securityRuleRepository: SecurityRuleRepository);
+}
+//# sourceMappingURL=workflow-trigger-execution.repository.d.ts.map