@spinajs/authz-http-admin 3.0.3 → 3.0.5

package/lib/cjs/controllers/AuthzAdminController.d.ts

@@ -16,8 +16,11 @@ import '../schemas/provider.js';
 export declare class AuthzAdminController extends BaseController {
     protected AdminDomain: string;
     protected Domains: AuthzDomains;
-    /** Runs a route on the domain's AuthzAdmin; an AuthzAdminFailure becomes its status with `{ error }`, anything else propagates. */
-    protected guarded(fn: (admin: AuthzAdmin) => Promise<Response>): Promise<Response>;
+    /**
+     * Runs a route on the AuthzAdmin of the domain the AuthzDomainResolver names for `req`, `authz.http.admin.domain` being its fallback and the domain without a request.
+     * An AuthzAdminFailure becomes its status with `{ error }`, a domain no live domain bears 403 `unknown_domain`, anything else propagates.
+     */
+    protected guarded(fn: (admin: AuthzAdmin) => Promise<Response>, req?: Request): Promise<Response>;
     /** One batch built from the route, with the options of the query string. */
     protected single(req: Request, build: () => AuthzCommand[]): Promise<Response<any>>;
     protected list(req: Request, build: () => AuthzAdminQuery): Promise<Response<any>>;
@@ -29,15 +32,16 @@ export declare class AuthzAdminController extends BaseController {
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     commands(req: Request): Promise<Response<any>>;
     /**
      * List assignments
      * Lists assignments, filtered by the query.
-     * Query: `scope` (`<type>` or `<type>:<id>`), `subject` (`<type>:<id>` or `set:<role>@<type>:<id>`), `role`, `includeExpired` (`true` or `false`), `limit`, `offset`.
+     * Query: `scope` (`<type>` or `<type>:<id>`), `subject` (`<type>:<id>` or `set:<role>@<type>:<id>`), `role`, `includeExpired` (`true` or `false`), `limit`, `offset` or `after` (the `next` of the previous page).
      * @response 200 {AuthzAdminPage} One page of rows
      * @response 400 {AuthzAdminError} invalid_query: a malformed query parameter
      * @response 401 Unauthorized: a valid session or token is required
@@ -47,7 +51,7 @@ export declare class AuthzAdminController extends BaseController {
     /**
      * List holders
      * Who holds a permission on a resource through role assignments on it, its ancestors or $global; each principal is verified by a fresh check.
-     * Query: `scope` (`<type>:<id>`), `permission`, `expandSets` (`true` or `false`), `limit`, `offset`.
+     * Query: `scope` (`<type>:<id>`), `permission`, `expandSets` (`true` or `false`), `limit`, `offset` or `after` (the `next` of the previous page).
      * @response 200 {AuthzAdminPage} One page of holders
      * @response 400 {AuthzAdminError} invalid_query: a malformed or missing query parameter
      * @response 401 Unauthorized: a valid session or token is required
@@ -62,9 +66,10 @@ export declare class AuthzAdminController extends BaseController {
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     grant(req: Request): Promise<Response<any>>;
     /**
@@ -75,9 +80,10 @@ export declare class AuthzAdminController extends BaseController {
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     patchAssignment(req: Request): Promise<Response<any>>;
     /**
@@ -87,15 +93,16 @@ export declare class AuthzAdminController extends BaseController {
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     revoke(req: Request): Promise<Response<any>>;
     /**
      * List share links
      * Lists the share links, filtered by the query. A listing never carries a token or its hash: the token is shown once, when the link is created.
-     * Query: `scope` (`<type>` or `<type>:<id>`), `limit`, `offset`.
+     * Query: `scope` (`<type>` or `<type>:<id>`), `limit`, `offset` or `after` (the `next` of the previous page).
      * @response 200 {AuthzAdminPage} One page of rows
      * @response 400 {AuthzAdminError} invalid_query: a malformed query parameter
      * @response 401 Unauthorized: a valid session or token is required
@@ -110,9 +117,10 @@ export declare class AuthzAdminController extends BaseController {
      * @response 200 {AuthzAdminResults} The link was created; results[0] holds its id and token
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     createLink(req: Request): Promise<Response<any>>;
     /**
@@ -123,9 +131,10 @@ export declare class AuthzAdminController extends BaseController {
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     patchLink(req: Request): Promise<Response<any>>;
     /**
@@ -135,15 +144,16 @@ export declare class AuthzAdminController extends BaseController {
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     revokeLink(req: Request): Promise<Response<any>>;
     /**
      * List rules
      * Lists the RBAC rules held as rows.
-     * Query: `scope` (`<type>` or `<type>:<id>`), `limit`, `offset`.
+     * Query: `scope` (`<type>` or `<type>:<id>`), `limit`, `offset` or `after` (the `next` of the previous page).
      * @response 200 {AuthzAdminPage} One page of rows
      * @response 400 {AuthzAdminError} invalid_query: a malformed query parameter
      * @response 401 Unauthorized: a valid session or token is required
@@ -158,9 +168,10 @@ export declare class AuthzAdminController extends BaseController {
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     putRule(req: Request): Promise<Response<any>>;
     /**
@@ -170,9 +181,10 @@ export declare class AuthzAdminController extends BaseController {
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     deleteRule(req: Request): Promise<Response<any>>;
     /**
@@ -193,9 +205,10 @@ export declare class AuthzAdminController extends BaseController {
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     putPolicy(req: Request): Promise<Response<any>>;
     /**
@@ -205,9 +218,10 @@ export declare class AuthzAdminController extends BaseController {
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     deletePolicy(req: Request): Promise<Response<any>>;
     /**
@@ -227,9 +241,10 @@ export declare class AuthzAdminController extends BaseController {
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     patchAttributes(req: Request): Promise<Response<any>>;
     /**
@@ -240,9 +255,10 @@ export declare class AuthzAdminController extends BaseController {
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     replaceAttributes(req: Request): Promise<Response<any>>;
 }

package/lib/cjs/controllers/AuthzAdminController.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthzAdminController.d.ts","sourceRoot":"","sources":["../../../src/controllers/AuthzAdminController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAGjE,OAAO,KAAK,EAAE,UAAU,EAAqB,eAAe,EAAE,YAAY,EAA0B,MAAM,gBAAgB,CAAC;AAC3H,OAAO,EAAsB,cAAc,EAAgG,MAAM,eAAe,CAAC;AACjK,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAIvD,OAAO,wBAAwB,CAAC;AAkEhC;;;;;;;;;GASG;AACH,qBAEa,oBAAqB,SAAQ,cAAc;IAEtD,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC;IAG9B,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC;IAEhC,mIAAmI;IACnI,UAAgB,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAQvF;IAED,4EAA4E;IAC5E,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,EAAE,0BAKzD;IAED,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,0BAExD;IAED;;;;;;;;;;;OAWG;IAEU,QAAQ,CAAQ,GAAG,EAAE,OAAO,0BAQxC;IAED;;;;;;;;OAQG;IAEU,eAAe,CAAQ,GAAG,EAAE,OAAO,0BAE/C;IAED;;;;;;;;OAQG;IAEU,WAAW,CAAQ,GAAG,EAAE,OAAO,0BAE3C;IAED;;;;;;;;;;;OAWG;IAEU,KAAK,CAAQ,GAAG,EAAE,OAAO,0BAErC;IAED;;;;;;;;;;;OAWG;IAEU,eAAe,CAAQ,GAAG,EAAE,OAAO,0BAY/C;IAED;;;;;;;;;;OAUG;IAEU,MAAM,CAAQ,GAAG,EAAE,OAAO,0BAEtC;IAED;;;;;;;;OAQG;IAEU,SAAS,CAAQ,GAAG,EAAE,OAAO,0BAEzC;IAED;;;;;;;;;;;OAWG;IAEU,UAAU,CAAQ,GAAG,EAAE,OAAO,0BAG1C;IAED;;;;;;;;;;;OAWG;IAEU,SAAS,CAAQ,GAAG,EAAE,OAAO,0BAEzC;IAED;;;;;;;;;;OAUG;IAEU,UAAU,CAAQ,GAAG,EAAE,OAAO,0BAE1C;IAED;;;;;;;;OAQG;IAEU,SAAS,CAAQ,GAAG,EAAE,OAAO,0BAEzC;IAED;;;;;;;;;;;OAWG;IAEU,OAAO,CAAQ,GAAG,EAAE,OAAO,0BAEvC;IAED;;;;;;;;;;OAUG;IAEU,UAAU,CAAQ,GAAG,EAAE,OAAO,0BAE1C;IAED;;;;;;;;OAQG;IAEU,YAAY,CAAQ,GAAG,EAAE,OAAO,0BAE5C;IAED;;;;;;;;;;;OAWG;IAEU,SAAS,CAAQ,GAAG,EAAE,OAAO,0BAEzC;IAED;;;;;;;;;;OAUG;IAEU,YAAY,CAAQ,GAAG,EAAE,OAAO,0BAE5C;IAED;;;;;;;OAOG;IAEU,UAAU,CAAQ,GAAG,EAAE,OAAO,0BAE1C;IAED;;;;;;;;;;;OAWG;IAEU,eAAe,CAAQ,GAAG,EAAE,OAAO,0BAE/C;IAED;;;;;;;;;;;OAWG;IAEU,iBAAiB,CAAQ,GAAG,EAAE,OAAO,0BAEjD;CACF"}
+{"version":3,"file":"AuthzAdminController.d.ts","sourceRoot":"","sources":["../../../src/controllers/AuthzAdminController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAGjE,OAAO,KAAK,EAAE,UAAU,EAAqB,eAAe,EAAE,YAAY,EAA0B,MAAM,gBAAgB,CAAC;AAC3H,OAAO,EAAsB,cAAc,EAA6G,MAAM,eAAe,CAAC;AAC9K,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAIvD,OAAO,wBAAwB,CAAC;AAuEhC;;;;;;;;;GASG;AACH,qBAEa,oBAAqB,SAAQ,cAAc;IAEtD,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC;IAG9B,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC;IAEhC;;;OAGG;IACH,UAAgB,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CActG;IAED,4EAA4E;IAC5E,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,EAAE,0BAKzD;IAED,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,0BAExD;IAED;;;;;;;;;;;;OAYG;IAEU,QAAQ,CAAQ,GAAG,EAAE,OAAO,0BAQxC;IAED;;;;;;;;OAQG;IAEU,eAAe,CAAQ,GAAG,EAAE,OAAO,0BAE/C;IAED;;;;;;;;OAQG;IAEU,WAAW,CAAQ,GAAG,EAAE,OAAO,0BAE3C;IAED;;;;;;;;;;;;OAYG;IAEU,KAAK,CAAQ,GAAG,EAAE,OAAO,0BAErC;IAED;;;;;;;;;;;;OAYG;IAEU,eAAe,CAAQ,GAAG,EAAE,OAAO,0BAY/C;IAED;;;;;;;;;;;OAWG;IAEU,MAAM,CAAQ,GAAG,EAAE,OAAO,0BAEtC;IAED;;;;;;;;OAQG;IAEU,SAAS,CAAQ,GAAG,EAAE,OAAO,0BAEzC;IAED;;;;;;;;;;;;OAYG;IAEU,UAAU,CAAQ,GAAG,EAAE,OAAO,0BAG1C;IAED;;;;;;;;;;;;OAYG;IAEU,SAAS,CAAQ,GAAG,EAAE,OAAO,0BAEzC;IAED;;;;;;;;;;;OAWG;IAEU,UAAU,CAAQ,GAAG,EAAE,OAAO,0BAE1C;IAED;;;;;;;;OAQG;IAEU,SAAS,CAAQ,GAAG,EAAE,OAAO,0BAEzC;IAED;;;;;;;;;;;;OAYG;IAEU,OAAO,CAAQ,GAAG,EAAE,OAAO,0BAEvC;IAED;;;;;;;;;;;OAWG;IAEU,UAAU,CAAQ,GAAG,EAAE,OAAO,0BAE1C;IAED;;;;;;;;OAQG;IAEU,YAAY,CAAQ,GAAG,EAAE,OAAO,0BAE5C;IAED;;;;;;;;;;;;OAYG;IAEU,SAAS,CAAQ,GAAG,EAAE,OAAO,0BAEzC;IAED;;;;;;;;;;;OAWG;IAEU,YAAY,CAAQ,GAAG,EAAE,OAAO,0BAE5C;IAED;;;;;;;OAOG;IAEU,UAAU,CAAQ,GAAG,EAAE,OAAO,0BAE1C;IAED;;;;;;;;;;;;OAYG;IAEU,eAAe,CAAQ,GAAG,EAAE,OAAO,0BAE/C;IAED;;;;;;;;;;;;OAYG;IAEU,iBAAiB,CAAQ,GAAG,EAAE,OAAO,0BAEjD;CACF"}

package/lib/cjs/controllers/AuthzAdminController.js

@@ -35,6 +35,8 @@ function respond(status, body) {
             return new http_1.NotFound(body);
         case 409:
             return new http_1.Conflict(body);
+        case 500:
+            return new http_1.ServerError(body);
         default:
             return new http_1.BadRequestResponse(body);
     }
@@ -57,6 +59,8 @@ function withPathId(body, id, what) {
         badRequest(`the body id ${JSON.stringify(o.id)} is not the path id ${JSON.stringify(id)}`, 'id');
     return { ...o, id };
 }
+// The routes serve the RBAC and ABAC commands, whose AuthzCommandMap entries this package does not import.
+const byId = (kind, id) => ({ kind, id });
 const LINK_PATCH_KEYS = ['expiresAt', 'attributes', 'role', 'tags'];
 /** PATCH /authz/links/:id as one link.update; like the assignment patch, a key it does not serve is refused, not ignored. */
 function linkUpdate(body, id) {
@@ -88,9 +92,20 @@ const scopeOf = (req) => ({ type: param(req, 'type'), id: param(req, 'id') });
  * @tags Authz admin
  */
 let AuthzAdminController = class AuthzAdminController extends http_1.BaseController {
-    /** Runs a route on the domain's AuthzAdmin; an AuthzAdminFailure becomes its status with `{ error }`, anything else propagates. */
-    async guarded(fn) {
-        const admin = (await this.Domains.service(this.AdminDomain)).admin();
+    /**
+     * Runs a route on the AuthzAdmin of the domain the AuthzDomainResolver names for `req`, `authz.http.admin.domain` being its fallback and the domain without a request.
+     * An AuthzAdminFailure becomes its status with `{ error }`, a domain no live domain bears 403 `unknown_domain`, anything else propagates.
+     */
+    async guarded(fn, req) {
+        let admin;
+        try {
+            admin = (await this.Domains.service(req ? await (0, authz_http_1.resolveAuthzDomain)(req, this.AdminDomain) : this.AdminDomain)).admin();
+        }
+        catch (e) {
+            if (e instanceof authz_http_1.UnknownAuthzDomain)
+                return respond(403, { error: { code: 'unknown_domain', message: e.message } });
+            throw e;
+        }
         try {
             return await fn(admin);
         }
@@ -105,10 +120,10 @@ let AuthzAdminController = class AuthzAdminController extends http_1.BaseControl
         return this.guarded(async (admin) => {
             const opts = (0, query_js_1.readWriteOptions)(query(req));
             return results(await admin.execute(actorOf(req), build(), opts));
-        });
+        }, req);
     }
     list(req, build) {
-        return this.guarded(async (admin) => respond(200, await admin.list(actorOf(req), build())));
+        return this.guarded(async (admin) => respond(200, await admin.list(actorOf(req), build())), req);
     }
     /**
      * Run a batch of commands
@@ -118,9 +133,10 @@ let AuthzAdminController = class AuthzAdminController extends http_1.BaseControl
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     async commands(req) {
         noStore(req);
@@ -131,12 +147,12 @@ let AuthzAdminController = class AuthzAdminController extends http_1.BaseControl
                 if (key in body)
                     opts[key] = body[key];
             return results(await admin.execute(actorOf(req), (0, decode_js_1.decodeCommands)(body.commands), opts));
-        });
+        }, req);
     }
     /**
      * List assignments
      * Lists assignments, filtered by the query.
-     * Query: `scope` (`<type>` or `<type>:<id>`), `subject` (`<type>:<id>` or `set:<role>@<type>:<id>`), `role`, `includeExpired` (`true` or `false`), `limit`, `offset`.
+     * Query: `scope` (`<type>` or `<type>:<id>`), `subject` (`<type>:<id>` or `set:<role>@<type>:<id>`), `role`, `includeExpired` (`true` or `false`), `limit`, `offset` or `after` (the `next` of the previous page).
      * @response 200 {AuthzAdminPage} One page of rows
      * @response 400 {AuthzAdminError} invalid_query: a malformed query parameter
      * @response 401 Unauthorized: a valid session or token is required
@@ -148,7 +164,7 @@ let AuthzAdminController = class AuthzAdminController extends http_1.BaseControl
     /**
      * List holders
      * Who holds a permission on a resource through role assignments on it, its ancestors or $global; each principal is verified by a fresh check.
-     * Query: `scope` (`<type>:<id>`), `permission`, `expandSets` (`true` or `false`), `limit`, `offset`.
+     * Query: `scope` (`<type>:<id>`), `permission`, `expandSets` (`true` or `false`), `limit`, `offset` or `after` (the `next` of the previous page).
      * @response 200 {AuthzAdminPage} One page of holders
      * @response 400 {AuthzAdminError} invalid_query: a malformed or missing query parameter
      * @response 401 Unauthorized: a valid session or token is required
@@ -165,9 +181,10 @@ let AuthzAdminController = class AuthzAdminController extends http_1.BaseControl
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     async grant(req) {
         return this.single(req, () => [(0, decode_js_1.decodeCommand)({ ...objectBody(req.body, 'the fields of assignment.grant'), kind: 'assignment.grant' })]);
@@ -180,9 +197,10 @@ let AuthzAdminController = class AuthzAdminController extends http_1.BaseControl
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     async patchAssignment(req) {
         return this.single(req, () => {
@@ -209,17 +227,18 @@ let AuthzAdminController = class AuthzAdminController extends http_1.BaseControl
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     async revoke(req) {
-        return this.single(req, () => [{ kind: 'assignment.revoke', id: param(req, 'id') }]);
+        return this.single(req, () => [byId('assignment.revoke', param(req, 'id'))]);
     }
     /**
      * List share links
      * Lists the share links, filtered by the query. A listing never carries a token or its hash: the token is shown once, when the link is created.
-     * Query: `scope` (`<type>` or `<type>:<id>`), `limit`, `offset`.
+     * Query: `scope` (`<type>` or `<type>:<id>`), `limit`, `offset` or `after` (the `next` of the previous page).
      * @response 200 {AuthzAdminPage} One page of rows
      * @response 400 {AuthzAdminError} invalid_query: a malformed query parameter
      * @response 401 Unauthorized: a valid session or token is required
@@ -236,9 +255,10 @@ let AuthzAdminController = class AuthzAdminController extends http_1.BaseControl
      * @response 200 {AuthzAdminResults} The link was created; results[0] holds its id and token
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     async createLink(req) {
         noStore(req);
@@ -252,9 +272,10 @@ let AuthzAdminController = class AuthzAdminController extends http_1.BaseControl
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     async patchLink(req) {
         return this.single(req, () => [linkUpdate(req.body, param(req, 'id'))]);
@@ -266,17 +287,18 @@ let AuthzAdminController = class AuthzAdminController extends http_1.BaseControl
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     async revokeLink(req) {
-        return this.single(req, () => [{ kind: 'link.revoke', id: param(req, 'id') }]);
+        return this.single(req, () => [byId('link.revoke', param(req, 'id'))]);
     }
     /**
      * List rules
      * Lists the RBAC rules held as rows.
-     * Query: `scope` (`<type>` or `<type>:<id>`), `limit`, `offset`.
+     * Query: `scope` (`<type>` or `<type>:<id>`), `limit`, `offset` or `after` (the `next` of the previous page).
      * @response 200 {AuthzAdminPage} One page of rows
      * @response 400 {AuthzAdminError} invalid_query: a malformed query parameter
      * @response 401 Unauthorized: a valid session or token is required
@@ -293,9 +315,10 @@ let AuthzAdminController = class AuthzAdminController extends http_1.BaseControl
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     async putRule(req) {
         return this.single(req, () => [(0, decode_js_1.decodeCommand)({ kind: 'rule.put', rule: withPathId(req.body, param(req, 'id'), 'a rule') })]);
@@ -307,12 +330,13 @@ let AuthzAdminController = class AuthzAdminController extends http_1.BaseControl
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     async deleteRule(req) {
-        return this.single(req, () => [{ kind: 'rule.delete', id: param(req, 'id') }]);
+        return this.single(req, () => [byId('rule.delete', param(req, 'id'))]);
     }
     /**
      * List policies
@@ -334,9 +358,10 @@ let AuthzAdminController = class AuthzAdminController extends http_1.BaseControl
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     async putPolicy(req) {
         return this.single(req, () => [(0, decode_js_1.decodeCommand)({ kind: 'policy.put', policy: withPathId(req.body, param(req, 'id'), 'a policy') })]);
@@ -348,12 +373,13 @@ let AuthzAdminController = class AuthzAdminController extends http_1.BaseControl
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     async deletePolicy(req) {
-        return this.single(req, () => [{ kind: 'policy.delete', id: param(req, 'id') }]);
+        return this.single(req, () => [byId('policy.delete', param(req, 'id'))]);
     }
     /**
      * Read scope attributes
@@ -374,9 +400,10 @@ let AuthzAdminController = class AuthzAdminController extends http_1.BaseControl
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     async patchAttributes(req) {
         return this.single(req, () => [{ kind: 'scope.setAttributes', scope: scopeOf(req), patch: req.body }]);
@@ -389,9 +416,10 @@ let AuthzAdminController = class AuthzAdminController extends http_1.BaseControl
      * @response 200 {AuthzAdminResults} Every command succeeded
      * @response 400 {AuthzAdminError} invalid_request, invalid_query (an option of the query string), invalid_batch or a validation code of the command
      * @response 401 Unauthorized: a valid session or token is required
-     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout or protected_role
+     * @response 403 {AuthzAdminError} forbidden, escalation, last_holder, self_lockout, protected_role or hook:<code> (an action hook refused)
      * @response 404 {AuthzAdminError} not_found: a row the command names does not exist
      * @response 409 {AuthzAdminError} conflict: the row changed or exists already
+     * @response 500 {AuthzAdminError} hook_error: an action hook threw or timed out
      */
     async replaceAttributes(req) {
         return this.single(req, () => [{ kind: 'scope.replaceAttributes', scope: scopeOf(req), attributes: req.body }]);
@@ -541,7 +569,7 @@ __decorate([
 ], AuthzAdminController.prototype, "replaceAttributes", null);
 exports.AuthzAdminController = AuthzAdminController = __decorate([
     (0, http_1.Policy)(authz_http_1.IsAuthenticated),
-    (0, http_1.BasePath)('authz')
+    (0, http_1.BasePath)({ config: 'authz.http.admin.basePath', default: 'authz' })
 ], AuthzAdminController);
 function results(r) {
     return respond((0, status_js_1.resultsStatus)(r), { results: r });

package/lib/cjs/controllers/AuthzAdminController.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthzAdminController.js","sourceRoot":"","sources":["../../../src/controllers/AuthzAdminController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,0CAAiE;AACjE,0DAAgD;AAChD,oCAAyC;AAEzC,wCAAiK;AAEjK,oDAAsD;AACtD,wCAA8C;AAE9C,kCAAgC;AAChC,mDAAoE;AACpE,iDAA6G;AAE7G,mDAAsE;AAEtE,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,CAAU,CAAC;AAC3E,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,uBAAuB,EAAW,CAAC;AAEhI,SAAS,OAAO,CAAC,MAAc,EAAE,IAAa;IAC5C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,GAAG;YACN,OAAO,IAAI,SAAE,CAAC,IAAI,CAAC,CAAC;QACtB,KAAK,GAAG;YACN,OAAO,IAAI,wBAAiB,CAAC,IAAI,CAAC,CAAC;QACrC,KAAK,GAAG;YACN,OAAO,IAAI,eAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B,KAAK,GAAG;YACN,OAAO,IAAI,eAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B;YACE,OAAO,IAAI,yBAAkB,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,CAAoB;IACnC,OAAO,OAAO,CAAC,IAAA,4BAAgB,EAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAClJ,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,KAAc;IACjD,MAAM,IAAI,yBAAiB,CAAC,iBAAiB,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,UAAU,CAAC,IAAa,EAAE,IAAY;IAC7C,IAAI,CAAC,IAAA,oBAAa,EAAC,IAAI,CAAC;QAAE,UAAU,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;IACjE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iHAAiH;AACjH,SAAS,UAAU,CAAC,IAAa,EAAE,EAAU,EAAE,IAAY;IACzD,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC,EAAE,KAAK,SAAS,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE;QAAE,UAAU,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACxI,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,eAAe,GAAG,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAE7E,6HAA6H;AAC7H,SAAS,UAAU,CAAC,IAAa,EAAE,EAAU;IAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,qDAAqD,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAE,eAAqC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAClH,IAAI,OAAO,KAAK,SAAS;QAAE,UAAU,CAAC,sBAAsB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACnI,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC;QAAE,UAAU,CAAC,6BAA6B,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpH,OAAO,IAAA,yBAAa,EAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,CAAiB,CAAC;AAC1E,CAAC;AAED,iJAAiJ;AACjJ,SAAS,OAAO,CAAC,GAAY;IAC3B,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IAChD,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,GAAY,EAAc,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAe,CAAC;AAC5E,MAAM,KAAK,GAAG,CAAC,GAAY,EAAE,IAAY,EAAU,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAW,CAAC;AACjF,MAAM,OAAO,GAAG,CAAC,GAAY,EAAa,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,SAAU,CAAC;AACpE,MAAM,OAAO,GAAG,CAAC,GAAY,EAAe,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;AAEpG;;;;;;;;;GASG;AAGI,IAAM,oBAAoB,GAA1B,MAAM,oBAAqB,SAAQ,qBAAc;IAOtD,mIAAmI;IACzH,KAAK,CAAC,OAAO,CAAC,EAA4C;QAClE,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;QACrE,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,yBAAiB;gBAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;YACtD,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IAED,4EAA4E;IAClE,MAAM,CAAC,GAAY,EAAE,KAA2B;QACxD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAClC,MAAM,IAAI,GAAG,IAAA,2BAAgB,EAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1C,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC;IAES,IAAI,CAAC,GAAY,EAAE,KAA4B;QACvD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED;;;;;;;;;;;OAWG;IAEU,AAAN,KAAK,CAAC,QAAQ,CAAQ,GAAY;QACvC,OAAO,CAAC,GAAG,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAClC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,2DAA2D,CAAC,CAAC;YAC/F,MAAM,IAAI,GAA4B,EAAE,CAAC;YACzC,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,CAAU;gBAAE,IAAI,GAAG,IAAI,IAAI;oBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1G,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAA,0BAAc,EAAC,IAAI,CAAC,QAAQ,CAAmB,EAAE,IAAyB,CAAC,CAAC,CAAC;QAChI,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IAEU,AAAN,KAAK,CAAC,eAAe,CAAQ,GAAY;QAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAA,+BAAoB,EAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IAED;;;;;;;;OAQG;IAEU,AAAN,KAAK,CAAC,WAAW,CAAQ,GAAY;QAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAA,2BAAgB,EAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;;;;;;;OAWG;IAEU,AAAN,KAAK,CAAC,KAAK,CAAQ,GAAY;QACpC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,IAAA,yBAAa,EAAC,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,gCAAgC,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAiB,CAAC,CAAC,CAAC;IAC1J,CAAC;IAED;;;;;;;;;;;OAWG;IAEU,AAAN,KAAK,CAAC,eAAe,CAAQ,GAAY;QAC9C,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE;YAC3B,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,wDAAwD,CAAC,CAAC;YAC5F,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAE,UAAgC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9F,IAAI,OAAO,KAAK,SAAS;gBAAE,UAAU,CAAC,6BAA6B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YACrI,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC5B,MAAM,QAAQ,GAAc,EAAE,CAAC;YAC/B,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,CAAU;gBAAE,IAAI,GAAG,IAAI,IAAI;oBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9I,IAAI,WAAW,IAAI,IAAI;gBAAE,QAAQ,CAAC,IAAI,CAAC,IAAA,yBAAa,EAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YACvH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,UAAU,CAAC,oCAAoC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnG,OAAO,QAA0B,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;OAUG;IAEU,AAAN,KAAK,CAAC,MAAM,CAAQ,GAAY;QACrC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACvF,CAAC;IAED;;;;;;;;OAQG;IAEU,AAAN,KAAK,CAAC,SAAS,CAAQ,GAAY;QACxC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAA,wBAAa,EAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IAED;;;;;;;;;;;OAWG;IAEU,AAAN,KAAK,CAAC,UAAU,CAAQ,GAAY;QACzC,OAAO,CAAC,GAAG,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,IAAA,yBAAa,EAAC,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,2BAA2B,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAiB,CAAC,CAAC,CAAC;IAChJ,CAAC;IAED;;;;;;;;;;;OAWG;IAEU,AAAN,KAAK,CAAC,SAAS,CAAQ,GAAY;QACxC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED;;;;;;;;;;OAUG;IAEU,AAAN,KAAK,CAAC,UAAU,CAAQ,GAAY;QACzC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACjF,CAAC;IAED;;;;;;;;OAQG;IAEU,AAAN,KAAK,CAAC,SAAS,CAAQ,GAAY;QACxC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAA,wBAAa,EAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IAED;;;;;;;;;;;OAWG;IAEU,AAAN,KAAK,CAAC,OAAO,CAAQ,GAAY;QACtC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,IAAA,yBAAa,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAiB,CAAC,CAAC,CAAC;IAC/I,CAAC;IAED;;;;;;;;;;OAUG;IAEU,AAAN,KAAK,CAAC,UAAU,CAAQ,GAAY;QACzC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACjF,CAAC;IAED;;;;;;;;OAQG;IAEU,AAAN,KAAK,CAAC,YAAY,CAAQ,GAAY;QAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAA,wBAAa,EAAC,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IAED;;;;;;;;;;;OAWG;IAEU,AAAN,KAAK,CAAC,SAAS,CAAQ,GAAY;QACxC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,IAAA,yBAAa,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,UAAU,CAAC,EAAE,CAAiB,CAAC,CAAC,CAAC;IACrJ,CAAC;IAED;;;;;;;;;;OAUG;IAEU,AAAN,KAAK,CAAC,YAAY,CAAQ,GAAY;QAC3C,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACnF,CAAC;IAED;;;;;;;OAOG;IAEU,AAAN,KAAK,CAAC,UAAU,CAAQ,GAAY;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED;;;;;;;;;;;OAWG;IAEU,AAAN,KAAK,CAAC,eAAe,CAAQ,GAAY;QAC9C,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACzG,CAAC;IAED;;;;;;;;;;;OAWG;IAEU,AAAN,KAAK,CAAC,iBAAiB,CAAQ,GAAY;QAChD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAClH,CAAC;CACF,CAAA;;AAxVW;IADT,IAAA,sBAAM,EAAC,yBAAyB,CAAC;;yDACJ;AAGpB;IADT,IAAA,eAAU,EAAC,oBAAY,CAAC;8BACN,oBAAY;qDAAC;AAsCnB;IADZ,IAAA,WAAI,EAAC,UAAU,CAAC;IACM,WAAA,IAAA,UAAG,GAAE,CAAA;;;;oDAQ3B;AAYY;IADZ,IAAA,UAAG,EAAC,aAAa,CAAC;IACW,WAAA,IAAA,UAAG,GAAE,CAAA;;;;2DAElC;AAYY;IADZ,IAAA,UAAG,EAAC,SAAS,CAAC;IACW,WAAA,IAAA,UAAG,GAAE,CAAA;;;;uDAE9B;AAeY;IADZ,IAAA,WAAI,EAAC,aAAa,CAAC;IACA,WAAA,IAAA,UAAG,GAAE,CAAA;;;;iDAExB;AAeY;IADZ,IAAA,YAAK,EAAC,iBAAiB,CAAC;IACK,WAAA,IAAA,UAAG,GAAE,CAAA;;;;2DAYlC;AAcY;IADZ,IAAA,UAAG,EAAC,iBAAiB,CAAC;IACF,WAAA,IAAA,UAAG,GAAE,CAAA;;;;kDAEzB;AAYY;IADZ,IAAA,UAAG,EAAC,OAAO,CAAC;IACW,WAAA,IAAA,UAAG,GAAE,CAAA;;;;qDAE5B;AAeY;IADZ,IAAA,WAAI,EAAC,OAAO,CAAC;IACW,WAAA,IAAA,UAAG,GAAE,CAAA;;;;sDAG7B;AAeY;IADZ,IAAA,YAAK,EAAC,WAAW,CAAC;IACK,WAAA,IAAA,UAAG,GAAE,CAAA;;;;qDAE5B;AAcY;IADZ,IAAA,UAAG,EAAC,WAAW,CAAC;IACQ,WAAA,IAAA,UAAG,GAAE,CAAA;;;;sDAE7B;AAYY;IADZ,IAAA,UAAG,EAAC,OAAO,CAAC;IACW,WAAA,IAAA,UAAG,GAAE,CAAA;;;;qDAE5B;AAeY;IADZ,IAAA,UAAG,EAAC,WAAW,CAAC;IACK,WAAA,IAAA,UAAG,GAAE,CAAA;;;;mDAE1B;AAcY;IADZ,IAAA,UAAG,EAAC,WAAW,CAAC;IACQ,WAAA,IAAA,UAAG,GAAE,CAAA;;;;sDAE7B;AAYY;IADZ,IAAA,UAAG,EAAC,UAAU,CAAC;IACW,WAAA,IAAA,UAAG,GAAE,CAAA;;;;wDAE/B;AAeY;IADZ,IAAA,UAAG,EAAC,cAAc,CAAC;IACI,WAAA,IAAA,UAAG,GAAE,CAAA;;;;qDAE5B;AAcY;IADZ,IAAA,UAAG,EAAC,cAAc,CAAC;IACO,WAAA,IAAA,UAAG,GAAE,CAAA;;;;wDAE/B;AAWY;IADZ,IAAA,UAAG,EAAC,6BAA6B,CAAC;IACV,WAAA,IAAA,UAAG,GAAE,CAAA;;;;sDAE7B;AAeY;IADZ,IAAA,YAAK,EAAC,6BAA6B,CAAC;IACP,WAAA,IAAA,UAAG,GAAE,CAAA;;;;2DAElC;AAeY;IADZ,IAAA,UAAG,EAAC,6BAA6B,CAAC;IACH,WAAA,IAAA,UAAG,GAAE,CAAA;;;;6DAEpC;+BAzVU,oBAAoB;IAFhC,IAAA,aAAM,EAAC,4BAAe,CAAC;IACvB,IAAA,eAAQ,EAAC,OAAO,CAAC;GACL,oBAAoB,CA0VhC;AAED,SAAS,OAAO,CAAC,CAA6C;IAC5D,OAAO,OAAO,CAAC,IAAA,yBAAa,EAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;AACnD,CAAC"}
+{"version":3,"file":"AuthzAdminController.js","sourceRoot":"","sources":["../../../src/controllers/AuthzAdminController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,0CAAiE;AACjE,0DAAgD;AAChD,oCAAyC;AAEzC,wCAA8K;AAE9K,oDAA8F;AAC9F,wCAA8C;AAE9C,kCAAgC;AAChC,mDAAoE;AACpE,iDAA6G;AAE7G,mDAAsE;AAEtE,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,CAAU,CAAC;AAC3E,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,uBAAuB,EAAW,CAAC;AAEhI,SAAS,OAAO,CAAC,MAAc,EAAE,IAAa;IAC5C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,GAAG;YACN,OAAO,IAAI,SAAE,CAAC,IAAI,CAAC,CAAC;QACtB,KAAK,GAAG;YACN,OAAO,IAAI,wBAAiB,CAAC,IAAI,CAAC,CAAC;QACrC,KAAK,GAAG;YACN,OAAO,IAAI,eAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B,KAAK,GAAG;YACN,OAAO,IAAI,eAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B,KAAK,GAAG;YACN,OAAO,IAAI,kBAAW,CAAC,IAAI,CAAC,CAAC;QAC/B;YACE,OAAO,IAAI,yBAAkB,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,CAAoB;IACnC,OAAO,OAAO,CAAC,IAAA,4BAAgB,EAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAClJ,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,KAAc;IACjD,MAAM,IAAI,yBAAiB,CAAC,iBAAiB,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,UAAU,CAAC,IAAa,EAAE,IAAY;IAC7C,IAAI,CAAC,IAAA,oBAAa,EAAC,IAAI,CAAC;QAAE,UAAU,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;IACjE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iHAAiH;AACjH,SAAS,UAAU,CAAC,IAAa,EAAE,EAAU,EAAE,IAAY;IACzD,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC,EAAE,KAAK,SAAS,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE;QAAE,UAAU,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACxI,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;AACtB,CAAC;AAED,2GAA2G;AAC3G,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAU,EAAgB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAA4B,CAAC;AAEnG,MAAM,eAAe,GAAG,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAE7E,6HAA6H;AAC7H,SAAS,UAAU,CAAC,IAAa,EAAE,EAAU;IAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,qDAAqD,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAE,eAAqC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAClH,IAAI,OAAO,KAAK,SAAS;QAAE,UAAU,CAAC,sBAAsB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACnI,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC;QAAE,UAAU,CAAC,6BAA6B,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpH,OAAO,IAAA,yBAAa,EAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,CAAiB,CAAC;AAC1E,CAAC;AAED,iJAAiJ;AACjJ,SAAS,OAAO,CAAC,GAAY;IAC3B,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IAChD,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,GAAY,EAAc,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAe,CAAC;AAC5E,MAAM,KAAK,GAAG,CAAC,GAAY,EAAE,IAAY,EAAU,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAW,CAAC;AACjF,MAAM,OAAO,GAAG,CAAC,GAAY,EAAa,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,SAAU,CAAC;AACpE,MAAM,OAAO,GAAG,CAAC,GAAY,EAAe,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;AAEpG;;;;;;;;;GASG;AAGI,IAAM,oBAAoB,GAA1B,MAAM,oBAAqB,SAAQ,qBAAc;IAOtD;;;OAGG;IACO,KAAK,CAAC,OAAO,CAAC,EAA4C,EAAE,GAAa;QACjF,IAAI,KAAiB,CAAC;QACtB,IAAI,CAAC;YACH,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAA,+BAAkB,EAAC,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;QACzH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,+BAAkB;gBAAE,OAAO,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACpH,MAAM,CAAC,CAAC;QACV,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,yBAAiB;gBAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;YACtD,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IAED,4EAA4E;IAClE,MAAM,CAAC,GAAY,EAAE,KAA2B;QACxD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAClC,MAAM,IAAI,GAAG,IAAA,2BAAgB,EAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1C,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;QACnE,CAAC,EAAE,GAAG,CAAC,CAAC;IACV,CAAC;IAES,IAAI,CAAC,GAAY,EAAE,KAA4B;QACvD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnG,CAAC;IAED;;;;;;;;;;;;OAYG;IAEU,AAAN,KAAK,CAAC,QAAQ,CAAQ,GAAY;QACvC,OAAO,CAAC,GAAG,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAClC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,2DAA2D,CAAC,CAAC;YAC/F,MAAM,IAAI,GAA4B,EAAE,CAAC;YACzC,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,CAAU;gBAAE,IAAI,GAAG,IAAI,IAAI;oBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1G,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAA,0BAAc,EAAC,IAAI,CAAC,QAAQ,CAAmB,EAAE,IAAyB,CAAC,CAAC,CAAC;QAChI,CAAC,EAAE,GAAG,CAAC,CAAC;IACV,CAAC;IAED;;;;;;;;OAQG;IAEU,AAAN,KAAK,CAAC,eAAe,CAAQ,GAAY;QAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAA,+BAAoB,EAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IAED;;;;;;;;OAQG;IAEU,AAAN,KAAK,CAAC,WAAW,CAAQ,GAAY;QAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAA,2BAAgB,EAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;;;;;;;;OAYG;IAEU,AAAN,KAAK,CAAC,KAAK,CAAQ,GAAY;QACpC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,IAAA,yBAAa,EAAC,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,gCAAgC,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAiB,CAAC,CAAC,CAAC;IAC1J,CAAC;IAED;;;;;;;;;;;;OAYG;IAEU,AAAN,KAAK,CAAC,eAAe,CAAQ,GAAY;QAC9C,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE;YAC3B,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,wDAAwD,CAAC,CAAC;YAC5F,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAE,UAAgC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9F,IAAI,OAAO,KAAK,SAAS;gBAAE,UAAU,CAAC,6BAA6B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YACrI,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC5B,MAAM,QAAQ,GAAc,EAAE,CAAC;YAC/B,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,CAAU;gBAAE,IAAI,GAAG,IAAI,IAAI;oBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9I,IAAI,WAAW,IAAI,IAAI;gBAAE,QAAQ,CAAC,IAAI,CAAC,IAAA,yBAAa,EAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YACvH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,UAAU,CAAC,oCAAoC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnG,OAAO,QAA0B,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;OAWG;IAEU,AAAN,KAAK,CAAC,MAAM,CAAQ,GAAY;QACrC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED;;;;;;;;OAQG;IAEU,AAAN,KAAK,CAAC,SAAS,CAAQ,GAAY;QACxC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAA,wBAAa,EAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IAED;;;;;;;;;;;;OAYG;IAEU,AAAN,KAAK,CAAC,UAAU,CAAQ,GAAY;QACzC,OAAO,CAAC,GAAG,CAAC,CAAC;QACb,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,IAAA,yBAAa,EAAC,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,2BAA2B,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAiB,CAAC,CAAC,CAAC;IAChJ,CAAC;IAED;;;;;;;;;;;;OAYG;IAEU,AAAN,KAAK,CAAC,SAAS,CAAQ,GAAY;QACxC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED;;;;;;;;;;;OAWG;IAEU,AAAN,KAAK,CAAC,UAAU,CAAQ,GAAY;QACzC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;IAED;;;;;;;;OAQG;IAEU,AAAN,KAAK,CAAC,SAAS,CAAQ,GAAY;QACxC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAA,wBAAa,EAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IAED;;;;;;;;;;;;OAYG;IAEU,AAAN,KAAK,CAAC,OAAO,CAAQ,GAAY;QACtC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,IAAA,yBAAa,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAiB,CAAC,CAAC,CAAC;IAC/I,CAAC;IAED;;;;;;;;;;;OAWG;IAEU,AAAN,KAAK,CAAC,UAAU,CAAQ,GAAY;QACzC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;IAED;;;;;;;;OAQG;IAEU,AAAN,KAAK,CAAC,YAAY,CAAQ,GAAY;QAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAA,wBAAa,EAAC,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IAED;;;;;;;;;;;;OAYG;IAEU,AAAN,KAAK,CAAC,SAAS,CAAQ,GAAY;QACxC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,IAAA,yBAAa,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,UAAU,CAAC,EAAE,CAAiB,CAAC,CAAC,CAAC;IACrJ,CAAC;IAED;;;;;;;;;;;OAWG;IAEU,AAAN,KAAK,CAAC,YAAY,CAAQ,GAAY;QAC3C,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC;IAED;;;;;;;OAOG;IAEU,AAAN,KAAK,CAAC,UAAU,CAAQ,GAAY;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED;;;;;;;;;;;;OAYG;IAEU,AAAN,KAAK,CAAC,eAAe,CAAQ,GAAY;QAC9C,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACzG,CAAC;IAED;;;;;;;;;;;;OAYG;IAEU,AAAN,KAAK,CAAC,iBAAiB,CAAQ,GAAY;QAChD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAClH,CAAC;CACF,CAAA;;AA9WW;IADT,IAAA,sBAAM,EAAC,yBAAyB,CAAC;;yDACJ;AAGpB;IADT,IAAA,eAAU,EAAC,oBAAY,CAAC;8BACN,oBAAY;qDAAC;AAgDnB;IADZ,IAAA,WAAI,EAAC,UAAU,CAAC;IACM,WAAA,IAAA,UAAG,GAAE,CAAA;;;;oDAQ3B;AAYY;IADZ,IAAA,UAAG,EAAC,aAAa,CAAC;IACW,WAAA,IAAA,UAAG,GAAE,CAAA;;;;2DAElC;AAYY;IADZ,IAAA,UAAG,EAAC,SAAS,CAAC;IACW,WAAA,IAAA,UAAG,GAAE,CAAA;;;;uDAE9B;AAgBY;IADZ,IAAA,WAAI,EAAC,aAAa,CAAC;IACA,WAAA,IAAA,UAAG,GAAE,CAAA;;;;iDAExB;AAgBY;IADZ,IAAA,YAAK,EAAC,iBAAiB,CAAC;IACK,WAAA,IAAA,UAAG,GAAE,CAAA;;;;2DAYlC;AAeY;IADZ,IAAA,UAAG,EAAC,iBAAiB,CAAC;IACF,WAAA,IAAA,UAAG,GAAE,CAAA;;;;kDAEzB;AAYY;IADZ,IAAA,UAAG,EAAC,OAAO,CAAC;IACW,WAAA,IAAA,UAAG,GAAE,CAAA;;;;qDAE5B;AAgBY;IADZ,IAAA,WAAI,EAAC,OAAO,CAAC;IACW,WAAA,IAAA,UAAG,GAAE,CAAA;;;;sDAG7B;AAgBY;IADZ,IAAA,YAAK,EAAC,WAAW,CAAC;IACK,WAAA,IAAA,UAAG,GAAE,CAAA;;;;qDAE5B;AAeY;IADZ,IAAA,UAAG,EAAC,WAAW,CAAC;IACQ,WAAA,IAAA,UAAG,GAAE,CAAA;;;;sDAE7B;AAYY;IADZ,IAAA,UAAG,EAAC,OAAO,CAAC;IACW,WAAA,IAAA,UAAG,GAAE,CAAA;;;;qDAE5B;AAgBY;IADZ,IAAA,UAAG,EAAC,WAAW,CAAC;IACK,WAAA,IAAA,UAAG,GAAE,CAAA;;;;mDAE1B;AAeY;IADZ,IAAA,UAAG,EAAC,WAAW,CAAC;IACQ,WAAA,IAAA,UAAG,GAAE,CAAA;;;;sDAE7B;AAYY;IADZ,IAAA,UAAG,EAAC,UAAU,CAAC;IACW,WAAA,IAAA,UAAG,GAAE,CAAA;;;;wDAE/B;AAgBY;IADZ,IAAA,UAAG,EAAC,cAAc,CAAC;IACI,WAAA,IAAA,UAAG,GAAE,CAAA;;;;qDAE5B;AAeY;IADZ,IAAA,UAAG,EAAC,cAAc,CAAC;IACO,WAAA,IAAA,UAAG,GAAE,CAAA;;;;wDAE/B;AAWY;IADZ,IAAA,UAAG,EAAC,6BAA6B,CAAC;IACV,WAAA,IAAA,UAAG,GAAE,CAAA;;;;sDAE7B;AAgBY;IADZ,IAAA,YAAK,EAAC,6BAA6B,CAAC;IACP,WAAA,IAAA,UAAG,GAAE,CAAA;;;;2DAElC;AAgBY;IADZ,IAAA,UAAG,EAAC,6BAA6B,CAAC;IACH,WAAA,IAAA,UAAG,GAAE,CAAA;;;;6DAEpC;+BA/WU,oBAAoB;IAFhC,IAAA,aAAM,EAAC,4BAAe,CAAC;IACvB,IAAA,eAAQ,EAAC,EAAE,MAAM,EAAE,2BAA2B,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;GACvD,oBAAoB,CAgXhC;AAED,SAAS,OAAO,CAAC,CAA6C;IAC5D,OAAO,OAAO,CAAC,IAAA,yBAAa,EAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;AACnD,CAAC"}

package/lib/cjs/routes/query.d.ts

@@ -1,16 +1,24 @@
-import type { AssignmentSubject, AuthzAdminOptions, AuthzAdminQuery, ResourceRef } from '@spinajs/authz';
+import type { AuthzAdminOptions, AuthzAdminQuery, PrincipalRef, ResourceRef } from '@spinajs/authz';
 /** A parsed query string (express: string, string[] or a nested object per key). */
 export type QueryInput = Readonly<Record<string, unknown>>;
+/** authz-rbac's AssignmentSubject; the list queries belong to models this package does not import. */
+type AssignmentSubject = PrincipalRef | {
+    readonly set: {
+        readonly role: string;
+        readonly scope: ResourceRef;
+    };
+};
 /** `<type>` or `<type>:<id>`, split at the first `:` (ids may hold more); `$global` is GLOBAL. */
 export declare function parseResourceRef(value: string, field: string): ResourceRef;
 /** `<type>:<id>` (a principal) or `set:<role>@<type>:<id>` (a subject set). */
 export declare function parseAssignmentSubject(value: string, field?: string): AssignmentSubject;
-/** GET /authz/assignments: `scope`, `subject`, `role`, `includeExpired`, `limit`, `offset`. */
+/** GET /authz/assignments: `scope`, `subject`, `role`, `includeExpired`, `limit`, `offset` or `after`. */
 export declare function readAssignmentsQuery(q: QueryInput): AuthzAdminQuery;
-/** GET /authz/holders: `scope` and `permission` (both required), `expandSets`, `limit`, `offset`. */
+/** GET /authz/holders: `scope` and `permission` (both required), `expandSets`, `limit`, `offset` or `after`. */
 export declare function readHoldersQuery(q: QueryInput): AuthzAdminQuery;
-/** GET /authz/links, /authz/rules and /authz/policies: `scope`, `limit`, `offset`. */
+/** GET /authz/links and /authz/rules: `scope`, `limit`, `offset` or `after`; GET /authz/policies has no `after`. */
 export declare function readPageQuery(kind: 'links' | 'rules' | 'policies', q: QueryInput): AuthzAdminQuery;
 /** The AuthzAdminOptions of a single-command route: `reason`, `idempotencyKey`, `dryRun`. */
 export declare function readWriteOptions(q: QueryInput): AuthzAdminOptions;
+export {};
 //# sourceMappingURL=query.d.ts.map

package/lib/cjs/routes/query.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"query.d.ts","sourceRoot":"","sources":["../../../src/routes/query.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAEzG,oFAAoF;AACpF,MAAM,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAe3D,kGAAkG;AAClG,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,CAS1E;AAED,+EAA+E;AAC/E,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAY,GAAG,iBAAiB,CAa1F;AA6BD,+FAA+F;AAC/F,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,UAAU,GAAG,eAAe,CAYnE;AAED,qGAAqG;AACrG,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,UAAU,GAAG,eAAe,CAa/D;AAED,sFAAsF;AACtF,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,eAAe,CAElG;AAED,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,UAAU,GAAG,iBAAiB,CASjE"}
+{"version":3,"file":"query.d.ts","sourceRoot":"","sources":["../../../src/routes/query.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAEpG,oFAAoF;AACpF,MAAM,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAI3D,sGAAsG;AACtG,KAAK,iBAAiB,GAAG,YAAY,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAA;KAAE,CAAA;CAAE,CAAC;AAajH,kGAAkG;AAClG,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,CAS1E;AAED,+EAA+E;AAC/E,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAY,GAAG,iBAAiB,CAa1F;AAsCD,0GAA0G;AAC1G,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,UAAU,GAAG,eAAe,CAYnE;AAED,gHAAgH;AAChH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,UAAU,GAAG,eAAe,CAa/D;AAED,oHAAoH;AACpH,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,eAAe,CAGlG;AAED,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,UAAU,GAAG,iBAAiB,CASjE"}