@tsg-dsp/tsg-sdk 0.0.0-stage → 0.20.1

package/dist/vendor/common-dtos/permissions.d.ts

@@ -0,0 +1,237 @@
+export declare enum Action {
+    CREATE = "create",
+    READ = "read",
+    UPDATE = "update",
+    DELETE = "delete",
+    EXECUTE = "execute",
+    MANAGE = "manage"
+}
+/**
+ * Resource namespaces to prevent permission collision across subprojects.
+ * Resources are namespaced by their service/component to ensure that
+ * permissions granted for one service don't accidentally grant access to another.
+ *
+ * Format: namespace.resource (e.g., "cp.catalog" for control plane catalog)
+ *
+ * Namespaces:
+ * - cp: Control Plane
+ * - adp: Analytics Data Plane
+ * - orch: Analytics Orchestration Application
+ * - hdp: HTTP Data Plane
+ * - w: Wallet
+ * - sso: SSO Bridge
+ * - (none): Shared resources that are truly global
+ */
+export declare enum Resource {
+    CP_CATALOG = "cp.catalog",
+    CP_DATASET = "cp.dataset",
+    CP_NEGOTIATION = "cp.negotiation",
+    CP_TRANSFER = "cp.transfer",
+    CP_AGREEMENT = "cp.agreement",
+    CP_DATAPLANE = "cp.dataplane",
+    CP_REGISTRY = "cp.registry",
+    CP_POLICY = "cp.policy",
+    CP_CONFIG = "cp.config",
+    CP_TENANT = "cp.tenant",
+    CP_AUDIT_LOG = "cp.audit_log",
+    DP_TRANSFER = "dp.transfer",
+    ADP_ALGORITHM = "adp.algorithm",
+    ADP_ORCHESTRATION = "adp.orchestration",
+    ADP_FILE = "adp.file",
+    ADP_DATAPLANE = "adp.dataplane",
+    ADP_CONFIG = "adp.config",
+    ADP_AUDIT_LOG = "adp.audit_log",
+    ORCH_PROJECT = "orch.project",
+    ORCH_DATASET = "orch.dataset",
+    ORCH_RUN = "orch.run",
+    ORCH_CONFIG = "orch.config",
+    ORCH_AUDIT_LOG = "orch.audit_log",
+    HDP_DATAPLANE = "hdp.dataplane",
+    HDP_CONFIG = "hdp.config",
+    HDP_LOGS = "hdp.logs",
+    HDP_AUDIT_LOG = "hdp.audit_log",
+    W_CREDENTIAL = "w.credential",
+    W_PRESENTATION = "w.presentation",
+    W_KEY = "w.key",
+    W_DID = "w.did",
+    W_ISSUE_CONFIG = "w.issue_config",
+    W_CONFIG = "w.config",
+    W_TENANT = "w.tenant",
+    W_AUDIT_LOG = "w.audit_log",
+    SSO_USER = "sso.user",
+    SSO_CLIENT = "sso.client",
+    SSO_ROLE = "sso.role",
+    SSO_CONFIG = "sso.config",
+    SSO_LOGS = "sso.logs",
+    SSO_AUDIT_LOG = "sso.audit_log"
+}
+export declare const RESERVED_SCOPES: {
+    readonly ALL: "*";
+    readonly OWN: "own";
+};
+export interface Permission {
+    action: Action;
+    resource: Resource;
+    scope?: string | string[];
+}
+export type PermissionString = `${Action}:${Resource}` | `${Action}:${Resource}:${string}`;
+export declare function permission(action: Action, resource: Resource, scope?: string | string[]): PermissionString;
+export declare function parsePermission(perm: PermissionString): Permission;
+export declare function permissionAllowsResourceId(perm: Permission, resourceId: string): boolean;
+export declare function isOwnScope(perm: Permission): boolean;
+export declare function isAllScope(perm: Permission): boolean;
+export declare function isSpecificScope(perm: Permission): boolean;
+export declare const Permissions: {
+    readonly CP_CATALOG_READ: PermissionString;
+    readonly CP_CATALOG_CREATE: PermissionString;
+    readonly CP_CATALOG_UPDATE: PermissionString;
+    readonly CP_CATALOG_DELETE: PermissionString;
+    readonly CP_CATALOG_MANAGE: PermissionString;
+    readonly CP_DATASET_READ: PermissionString;
+    readonly CP_DATASET_CREATE: PermissionString;
+    readonly CP_DATASET_UPDATE: PermissionString;
+    readonly CP_DATASET_DELETE: PermissionString;
+    readonly CP_DATASET_MANAGE: PermissionString;
+    readonly CP_NEGOTIATION_READ: PermissionString;
+    readonly CP_NEGOTIATION_CREATE: PermissionString;
+    readonly CP_NEGOTIATION_EXECUTE: PermissionString;
+    readonly CP_NEGOTIATION_MANAGE: PermissionString;
+    readonly CP_TRANSFER_READ: PermissionString;
+    readonly CP_TRANSFER_CREATE: PermissionString;
+    readonly CP_TRANSFER_EXECUTE: PermissionString;
+    readonly CP_TRANSFER_MANAGE: PermissionString;
+    readonly CP_AGREEMENT_READ: PermissionString;
+    readonly CP_AGREEMENT_CREATE: PermissionString;
+    readonly CP_AGREEMENT_DELETE: PermissionString;
+    readonly CP_AGREEMENT_MANAGE: PermissionString;
+    readonly CP_POLICY_READ: PermissionString;
+    readonly CP_POLICY_CREATE: PermissionString;
+    readonly CP_POLICY_UPDATE: PermissionString;
+    readonly CP_POLICY_DELETE: PermissionString;
+    readonly CP_POLICY_EXECUTE: PermissionString;
+    readonly CP_POLICY_MANAGE: PermissionString;
+    readonly CP_DATAPLANE_READ: PermissionString;
+    readonly CP_DATAPLANE_CREATE: PermissionString;
+    readonly CP_DATAPLANE_UPDATE: PermissionString;
+    readonly CP_DATAPLANE_DELETE: PermissionString;
+    readonly CP_DATAPLANE_MANAGE: PermissionString;
+    readonly CP_CONFIG_READ: PermissionString;
+    readonly CP_CONFIG_MANAGE: PermissionString;
+    readonly CP_TENANT_READ: PermissionString;
+    readonly CP_TENANT_CREATE: PermissionString;
+    readonly CP_TENANT_UPDATE: PermissionString;
+    readonly CP_TENANT_DELETE: PermissionString;
+    readonly CP_TENANT_MANAGE: PermissionString;
+    readonly CP_AUDIT_LOG_READ: PermissionString;
+    readonly CP_AUDIT_LOG_MANAGE: PermissionString;
+    readonly DP_TRANSFER_READ: PermissionString;
+    readonly DP_TRANSFER_CREATE: PermissionString;
+    readonly DP_TRANSFER_UPDATE: PermissionString;
+    readonly DP_TRANSFER_DELETE: PermissionString;
+    readonly DP_TRANSFER_EXECUTE: PermissionString;
+    readonly DP_TRANSFER_MANAGE: PermissionString;
+    readonly ADP_ALGORITHM_READ: PermissionString;
+    readonly ADP_ALGORITHM_CREATE: PermissionString;
+    readonly ADP_ALGORITHM_UPDATE: PermissionString;
+    readonly ADP_ALGORITHM_DELETE: PermissionString;
+    readonly ADP_ALGORITHM_EXECUTE: PermissionString;
+    readonly ADP_ALGORITHM_MANAGE: PermissionString;
+    readonly ADP_ORCHESTRATION_READ: PermissionString;
+    readonly ADP_ORCHESTRATION_CREATE: PermissionString;
+    readonly ADP_ORCHESTRATION_UPDATE: PermissionString;
+    readonly ADP_ORCHESTRATION_DELETE: PermissionString;
+    readonly ADP_ORCHESTRATION_EXECUTE: PermissionString;
+    readonly ADP_ORCHESTRATION_MANAGE: PermissionString;
+    readonly ADP_FILE_READ: PermissionString;
+    readonly ADP_FILE_CREATE: PermissionString;
+    readonly ADP_FILE_UPDATE: PermissionString;
+    readonly ADP_FILE_DELETE: PermissionString;
+    readonly ADP_FILE_EXECUTE: PermissionString;
+    readonly ADP_FILE_MANAGE: PermissionString;
+    readonly ADP_DATAPLANE_READ: PermissionString;
+    readonly ADP_DATAPLANE_EXECUTE: PermissionString;
+    readonly ADP_DATAPLANE_MANAGE: PermissionString;
+    readonly ADP_CONFIG_READ: PermissionString;
+    readonly ADP_CONFIG_MANAGE: PermissionString;
+    readonly ADP_AUDIT_LOG_READ: PermissionString;
+    readonly ADP_AUDIT_LOG_MANAGE: PermissionString;
+    readonly ORCH_PROJECT_READ: PermissionString;
+    readonly ORCH_PROJECT_CREATE: PermissionString;
+    readonly ORCH_PROJECT_UPDATE: PermissionString;
+    readonly ORCH_PROJECT_DELETE: PermissionString;
+    readonly ORCH_PROJECT_EXECUTE: PermissionString;
+    readonly ORCH_PROJECT_MANAGE: PermissionString;
+    readonly ORCH_DATASET_READ: PermissionString;
+    readonly ORCH_DATASET_CREATE: PermissionString;
+    readonly ORCH_DATASET_UPDATE: PermissionString;
+    readonly ORCH_DATASET_DELETE: PermissionString;
+    readonly ORCH_DATASET_MANAGE: PermissionString;
+    readonly ORCH_RUN_READ: PermissionString;
+    readonly ORCH_RUN_CREATE: PermissionString;
+    readonly ORCH_RUN_DELETE: PermissionString;
+    readonly ORCH_RUN_EXECUTE: PermissionString;
+    readonly ORCH_RUN_MANAGE: PermissionString;
+    readonly ORCH_CONFIG_READ: PermissionString;
+    readonly ORCH_CONFIG_MANAGE: PermissionString;
+    readonly ORCH_AUDIT_LOG_READ: PermissionString;
+    readonly ORCH_AUDIT_LOG_MANAGE: PermissionString;
+    readonly HDP_DATAPLANE_READ: PermissionString;
+    readonly HDP_DATAPLANE_UPDATE: PermissionString;
+    readonly HDP_DATAPLANE_EXECUTE: PermissionString;
+    readonly HDP_DATAPLANE_MANAGE: PermissionString;
+    readonly HDP_CONFIG_READ: PermissionString;
+    readonly HDP_CONFIG_MANAGE: PermissionString;
+    readonly HDP_LOGS_READ: PermissionString;
+    readonly HDP_LOGS_MANAGE: PermissionString;
+    readonly HDP_AUDIT_LOG_READ: PermissionString;
+    readonly HDP_AUDIT_LOG_MANAGE: PermissionString;
+    readonly W_CREDENTIAL_READ_OWN: PermissionString;
+    readonly W_CREDENTIAL_READ: PermissionString;
+    readonly W_CREDENTIAL_CREATE: PermissionString;
+    readonly W_CREDENTIAL_UPDATE: PermissionString;
+    readonly W_CREDENTIAL_DELETE: PermissionString;
+    readonly W_CREDENTIAL_MANAGE_OWN: PermissionString;
+    readonly W_CREDENTIAL_MANAGE: PermissionString;
+    readonly W_KEY_READ: PermissionString;
+    readonly W_KEY_CREATE: PermissionString;
+    readonly W_KEY_UPDATE: PermissionString;
+    readonly W_KEY_DELETE: PermissionString;
+    readonly W_KEY_EXECUTE: PermissionString;
+    readonly W_KEY_MANAGE: PermissionString;
+    readonly W_DID_READ: PermissionString;
+    readonly W_DID_CREATE: PermissionString;
+    readonly W_DID_UPDATE: PermissionString;
+    readonly W_DID_DELETE: PermissionString;
+    readonly W_DID_MANAGE: PermissionString;
+    readonly W_PRESENTATION_READ: PermissionString;
+    readonly W_PRESENTATION_CREATE: PermissionString;
+    readonly W_PRESENTATION_MANAGE: PermissionString;
+    readonly W_ISSUE_CONFIG_READ: PermissionString;
+    readonly W_ISSUE_CONFIG_CREATE: PermissionString;
+    readonly W_ISSUE_CONFIG_UPDATE: PermissionString;
+    readonly W_ISSUE_CONFIG_DELETE: PermissionString;
+    readonly W_ISSUE_CONFIG_MANAGE: PermissionString;
+    readonly W_CONFIG_READ: PermissionString;
+    readonly W_CONFIG_MANAGE: PermissionString;
+    readonly W_AUDIT_LOG_READ: PermissionString;
+    readonly W_AUDIT_LOG_MANAGE: PermissionString;
+    readonly SSO_USER_READ: PermissionString;
+    readonly SSO_USER_CREATE: PermissionString;
+    readonly SSO_USER_UPDATE: PermissionString;
+    readonly SSO_USER_DELETE: PermissionString;
+    readonly SSO_USER_EXECUTE: PermissionString;
+    readonly SSO_USER_MANAGE: PermissionString;
+    readonly SSO_CLIENT_READ: PermissionString;
+    readonly SSO_CLIENT_CREATE: PermissionString;
+    readonly SSO_CLIENT_UPDATE: PermissionString;
+    readonly SSO_CLIENT_DELETE: PermissionString;
+    readonly SSO_CLIENT_MANAGE: PermissionString;
+    readonly SSO_ROLE_READ: PermissionString;
+    readonly SSO_ROLE_MANAGE: PermissionString;
+    readonly SSO_CONFIG_READ: PermissionString;
+    readonly SSO_CONFIG_MANAGE: PermissionString;
+    readonly SSO_LOGS_READ: PermissionString;
+    readonly SSO_AUDIT_LOG_READ: PermissionString;
+    readonly SSO_AUDIT_LOG_MANAGE: PermissionString;
+};
+//# sourceMappingURL=permissions.d.ts.map

package/dist/vendor/common-dtos/permissions.js

@@ -0,0 +1,337 @@
+export var Action;
+(function (Action) {
+    Action["CREATE"] = "create";
+    Action["READ"] = "read";
+    Action["UPDATE"] = "update";
+    Action["DELETE"] = "delete";
+    Action["EXECUTE"] = "execute";
+    Action["MANAGE"] = "manage";
+})(Action || (Action = {}));
+/**
+ * Resource namespaces to prevent permission collision across subprojects.
+ * Resources are namespaced by their service/component to ensure that
+ * permissions granted for one service don't accidentally grant access to another.
+ *
+ * Format: namespace.resource (e.g., "cp.catalog" for control plane catalog)
+ *
+ * Namespaces:
+ * - cp: Control Plane
+ * - adp: Analytics Data Plane
+ * - orch: Analytics Orchestration Application
+ * - hdp: HTTP Data Plane
+ * - w: Wallet
+ * - sso: SSO Bridge
+ * - (none): Shared resources that are truly global
+ */
+export var Resource;
+(function (Resource) {
+    // ===========================================
+    // Control Plane Resources (cp.*)
+    // ===========================================
+    Resource["CP_CATALOG"] = "cp.catalog";
+    Resource["CP_DATASET"] = "cp.dataset";
+    Resource["CP_NEGOTIATION"] = "cp.negotiation";
+    Resource["CP_TRANSFER"] = "cp.transfer";
+    Resource["CP_AGREEMENT"] = "cp.agreement";
+    Resource["CP_DATAPLANE"] = "cp.dataplane";
+    Resource["CP_REGISTRY"] = "cp.registry";
+    Resource["CP_POLICY"] = "cp.policy";
+    Resource["CP_CONFIG"] = "cp.config";
+    Resource["CP_TENANT"] = "cp.tenant";
+    Resource["CP_AUDIT_LOG"] = "cp.audit_log";
+    // ===========================================
+    // Common Data Plane Resources (no namespace)
+    // ===========================================
+    Resource["DP_TRANSFER"] = "dp.transfer";
+    // ===========================================
+    // Analytics Data Plane Resources (adp.*)
+    // ===========================================
+    Resource["ADP_ALGORITHM"] = "adp.algorithm";
+    Resource["ADP_ORCHESTRATION"] = "adp.orchestration";
+    Resource["ADP_FILE"] = "adp.file";
+    Resource["ADP_DATAPLANE"] = "adp.dataplane";
+    Resource["ADP_CONFIG"] = "adp.config";
+    Resource["ADP_AUDIT_LOG"] = "adp.audit_log";
+    // ===========================================
+    // Analytics Orchestration Resources (orch.*)
+    // ===========================================
+    Resource["ORCH_PROJECT"] = "orch.project";
+    Resource["ORCH_DATASET"] = "orch.dataset";
+    Resource["ORCH_RUN"] = "orch.run";
+    Resource["ORCH_CONFIG"] = "orch.config";
+    Resource["ORCH_AUDIT_LOG"] = "orch.audit_log";
+    // ===========================================
+    // HTTP Data Plane Resources (hdp.*)
+    // ===========================================
+    Resource["HDP_DATAPLANE"] = "hdp.dataplane";
+    Resource["HDP_CONFIG"] = "hdp.config";
+    Resource["HDP_LOGS"] = "hdp.logs";
+    Resource["HDP_AUDIT_LOG"] = "hdp.audit_log";
+    // ===========================================
+    // Wallet Resources (w.*)
+    // ===========================================
+    Resource["W_CREDENTIAL"] = "w.credential";
+    Resource["W_PRESENTATION"] = "w.presentation";
+    Resource["W_KEY"] = "w.key";
+    Resource["W_DID"] = "w.did";
+    Resource["W_ISSUE_CONFIG"] = "w.issue_config";
+    Resource["W_CONFIG"] = "w.config";
+    Resource["W_TENANT"] = "w.tenant";
+    Resource["W_AUDIT_LOG"] = "w.audit_log";
+    // ===========================================
+    // SSO Bridge Resources (sso.*)
+    // ===========================================
+    Resource["SSO_USER"] = "sso.user";
+    Resource["SSO_CLIENT"] = "sso.client";
+    Resource["SSO_ROLE"] = "sso.role";
+    Resource["SSO_CONFIG"] = "sso.config";
+    Resource["SSO_LOGS"] = "sso.logs";
+    Resource["SSO_AUDIT_LOG"] = "sso.audit_log";
+})(Resource || (Resource = {}));
+export const RESERVED_SCOPES = {
+    ALL: "*",
+    OWN: "own"
+};
+export function permission(action, resource, scope) {
+    if (!scope || scope === RESERVED_SCOPES.ALL) {
+        return `${action}:${resource}`;
+    }
+    if (Array.isArray(scope)) {
+        return `${action}:${resource}:${scope.join(",")}`;
+    }
+    return `${action}:${resource}:${scope}`;
+}
+export function parsePermission(perm) {
+    // Permission format: action:resource[:scope]
+    // Resource can be namespaced (e.g., cp.catalog, adp.algorithm)
+    // Examples:
+    //   - read:cp.catalog -> action=read, resource=cp.catalog
+    //   - manage:w.credential:own -> action=manage, resource=w.credential, scope=own
+    //   - read:catalog -> action=read, resource=catalog (legacy)
+    const parts = perm.split(":");
+    if (parts.length < 2) {
+        throw new Error(`Invalid permission format: ${perm}`);
+    }
+    const result = {
+        action: parts[0],
+        resource: parts[1]
+    };
+    if (parts.length > 2) {
+        const scopePart = parts.slice(2).join(":"); // Rejoin in case scope contains colons
+        if (scopePart === RESERVED_SCOPES.ALL) {
+            result.scope = RESERVED_SCOPES.ALL;
+        }
+        else if (scopePart === RESERVED_SCOPES.OWN) {
+            result.scope = RESERVED_SCOPES.OWN;
+        }
+        else if (scopePart.includes(",")) {
+            result.scope = scopePart.split(",");
+        }
+        else {
+            result.scope = scopePart;
+        }
+    }
+    return result;
+}
+export function permissionAllowsResourceId(perm, resourceId) {
+    if (!perm.scope || perm.scope === RESERVED_SCOPES.ALL) {
+        return true;
+    }
+    if (perm.scope === RESERVED_SCOPES.OWN) {
+        return false;
+    }
+    if (Array.isArray(perm.scope)) {
+        return perm.scope.includes(resourceId);
+    }
+    return perm.scope === resourceId;
+}
+export function isOwnScope(perm) {
+    return perm.scope === RESERVED_SCOPES.OWN;
+}
+export function isAllScope(perm) {
+    return !perm.scope || perm.scope === RESERVED_SCOPES.ALL;
+}
+export function isSpecificScope(perm) {
+    if (!perm.scope)
+        return false;
+    if (perm.scope === RESERVED_SCOPES.ALL)
+        return false;
+    if (perm.scope === RESERVED_SCOPES.OWN)
+        return false;
+    return true;
+}
+export const Permissions = {
+    // ===========================================
+    // Control Plane Permissions (cp.*)
+    // ===========================================
+    CP_CATALOG_READ: permission(Action.READ, Resource.CP_CATALOG),
+    CP_CATALOG_CREATE: permission(Action.CREATE, Resource.CP_CATALOG),
+    CP_CATALOG_UPDATE: permission(Action.UPDATE, Resource.CP_CATALOG),
+    CP_CATALOG_DELETE: permission(Action.DELETE, Resource.CP_CATALOG),
+    CP_CATALOG_MANAGE: permission(Action.MANAGE, Resource.CP_CATALOG),
+    CP_DATASET_READ: permission(Action.READ, Resource.CP_DATASET),
+    CP_DATASET_CREATE: permission(Action.CREATE, Resource.CP_DATASET),
+    CP_DATASET_UPDATE: permission(Action.UPDATE, Resource.CP_DATASET),
+    CP_DATASET_DELETE: permission(Action.DELETE, Resource.CP_DATASET),
+    CP_DATASET_MANAGE: permission(Action.MANAGE, Resource.CP_DATASET),
+    CP_NEGOTIATION_READ: permission(Action.READ, Resource.CP_NEGOTIATION),
+    CP_NEGOTIATION_CREATE: permission(Action.CREATE, Resource.CP_NEGOTIATION),
+    CP_NEGOTIATION_EXECUTE: permission(Action.EXECUTE, Resource.CP_NEGOTIATION),
+    CP_NEGOTIATION_MANAGE: permission(Action.MANAGE, Resource.CP_NEGOTIATION),
+    CP_TRANSFER_READ: permission(Action.READ, Resource.CP_TRANSFER),
+    CP_TRANSFER_CREATE: permission(Action.CREATE, Resource.CP_TRANSFER),
+    CP_TRANSFER_EXECUTE: permission(Action.EXECUTE, Resource.CP_TRANSFER),
+    CP_TRANSFER_MANAGE: permission(Action.MANAGE, Resource.CP_TRANSFER),
+    CP_AGREEMENT_READ: permission(Action.READ, Resource.CP_AGREEMENT),
+    CP_AGREEMENT_CREATE: permission(Action.CREATE, Resource.CP_AGREEMENT),
+    CP_AGREEMENT_DELETE: permission(Action.DELETE, Resource.CP_AGREEMENT),
+    CP_AGREEMENT_MANAGE: permission(Action.MANAGE, Resource.CP_AGREEMENT),
+    CP_POLICY_READ: permission(Action.READ, Resource.CP_POLICY),
+    CP_POLICY_CREATE: permission(Action.CREATE, Resource.CP_POLICY),
+    CP_POLICY_UPDATE: permission(Action.UPDATE, Resource.CP_POLICY),
+    CP_POLICY_DELETE: permission(Action.DELETE, Resource.CP_POLICY),
+    CP_POLICY_EXECUTE: permission(Action.EXECUTE, Resource.CP_POLICY),
+    CP_POLICY_MANAGE: permission(Action.MANAGE, Resource.CP_POLICY),
+    CP_DATAPLANE_READ: permission(Action.READ, Resource.CP_DATAPLANE),
+    CP_DATAPLANE_CREATE: permission(Action.CREATE, Resource.CP_DATAPLANE),
+    CP_DATAPLANE_UPDATE: permission(Action.UPDATE, Resource.CP_DATAPLANE),
+    CP_DATAPLANE_DELETE: permission(Action.DELETE, Resource.CP_DATAPLANE),
+    CP_DATAPLANE_MANAGE: permission(Action.MANAGE, Resource.CP_DATAPLANE),
+    CP_CONFIG_READ: permission(Action.READ, Resource.CP_CONFIG),
+    CP_CONFIG_MANAGE: permission(Action.MANAGE, Resource.CP_CONFIG),
+    CP_TENANT_READ: permission(Action.READ, Resource.CP_TENANT),
+    CP_TENANT_CREATE: permission(Action.CREATE, Resource.CP_TENANT),
+    CP_TENANT_UPDATE: permission(Action.UPDATE, Resource.CP_TENANT),
+    CP_TENANT_DELETE: permission(Action.DELETE, Resource.CP_TENANT),
+    CP_TENANT_MANAGE: permission(Action.MANAGE, Resource.CP_TENANT),
+    CP_AUDIT_LOG_READ: permission(Action.READ, Resource.CP_AUDIT_LOG),
+    CP_AUDIT_LOG_MANAGE: permission(Action.MANAGE, Resource.CP_AUDIT_LOG),
+    // ===========================================
+    // Common Data Plane Permissions (dp.*)
+    // ===========================================
+    DP_TRANSFER_READ: permission(Action.READ, Resource.DP_TRANSFER),
+    DP_TRANSFER_CREATE: permission(Action.CREATE, Resource.DP_TRANSFER),
+    DP_TRANSFER_UPDATE: permission(Action.UPDATE, Resource.DP_TRANSFER),
+    DP_TRANSFER_DELETE: permission(Action.DELETE, Resource.DP_TRANSFER),
+    DP_TRANSFER_EXECUTE: permission(Action.EXECUTE, Resource.DP_TRANSFER),
+    DP_TRANSFER_MANAGE: permission(Action.MANAGE, Resource.DP_TRANSFER),
+    // ===========================================
+    // Analytics Data Plane Permissions (adp.*)
+    // ===========================================
+    ADP_ALGORITHM_READ: permission(Action.READ, Resource.ADP_ALGORITHM),
+    ADP_ALGORITHM_CREATE: permission(Action.CREATE, Resource.ADP_ALGORITHM),
+    ADP_ALGORITHM_UPDATE: permission(Action.UPDATE, Resource.ADP_ALGORITHM),
+    ADP_ALGORITHM_DELETE: permission(Action.DELETE, Resource.ADP_ALGORITHM),
+    ADP_ALGORITHM_EXECUTE: permission(Action.EXECUTE, Resource.ADP_ALGORITHM),
+    ADP_ALGORITHM_MANAGE: permission(Action.MANAGE, Resource.ADP_ALGORITHM),
+    ADP_ORCHESTRATION_READ: permission(Action.READ, Resource.ADP_ORCHESTRATION),
+    ADP_ORCHESTRATION_CREATE: permission(Action.CREATE, Resource.ADP_ORCHESTRATION),
+    ADP_ORCHESTRATION_UPDATE: permission(Action.UPDATE, Resource.ADP_ORCHESTRATION),
+    ADP_ORCHESTRATION_DELETE: permission(Action.DELETE, Resource.ADP_ORCHESTRATION),
+    ADP_ORCHESTRATION_EXECUTE: permission(Action.EXECUTE, Resource.ADP_ORCHESTRATION),
+    ADP_ORCHESTRATION_MANAGE: permission(Action.MANAGE, Resource.ADP_ORCHESTRATION),
+    ADP_FILE_READ: permission(Action.READ, Resource.ADP_FILE),
+    ADP_FILE_CREATE: permission(Action.CREATE, Resource.ADP_FILE),
+    ADP_FILE_UPDATE: permission(Action.UPDATE, Resource.ADP_FILE),
+    ADP_FILE_DELETE: permission(Action.DELETE, Resource.ADP_FILE),
+    ADP_FILE_EXECUTE: permission(Action.EXECUTE, Resource.ADP_FILE),
+    ADP_FILE_MANAGE: permission(Action.MANAGE, Resource.ADP_FILE),
+    ADP_DATAPLANE_READ: permission(Action.READ, Resource.ADP_DATAPLANE),
+    ADP_DATAPLANE_EXECUTE: permission(Action.EXECUTE, Resource.ADP_DATAPLANE),
+    ADP_DATAPLANE_MANAGE: permission(Action.MANAGE, Resource.ADP_DATAPLANE),
+    ADP_CONFIG_READ: permission(Action.READ, Resource.ADP_CONFIG),
+    ADP_CONFIG_MANAGE: permission(Action.MANAGE, Resource.ADP_CONFIG),
+    ADP_AUDIT_LOG_READ: permission(Action.READ, Resource.ADP_AUDIT_LOG),
+    ADP_AUDIT_LOG_MANAGE: permission(Action.MANAGE, Resource.ADP_AUDIT_LOG),
+    // ===========================================
+    // Analytics Orchestration Permissions (orch.*)
+    // ===========================================
+    ORCH_PROJECT_READ: permission(Action.READ, Resource.ORCH_PROJECT),
+    ORCH_PROJECT_CREATE: permission(Action.CREATE, Resource.ORCH_PROJECT),
+    ORCH_PROJECT_UPDATE: permission(Action.UPDATE, Resource.ORCH_PROJECT),
+    ORCH_PROJECT_DELETE: permission(Action.DELETE, Resource.ORCH_PROJECT),
+    ORCH_PROJECT_EXECUTE: permission(Action.EXECUTE, Resource.ORCH_PROJECT),
+    ORCH_PROJECT_MANAGE: permission(Action.MANAGE, Resource.ORCH_PROJECT),
+    ORCH_DATASET_READ: permission(Action.READ, Resource.ORCH_DATASET),
+    ORCH_DATASET_CREATE: permission(Action.CREATE, Resource.ORCH_DATASET),
+    ORCH_DATASET_UPDATE: permission(Action.UPDATE, Resource.ORCH_DATASET),
+    ORCH_DATASET_DELETE: permission(Action.DELETE, Resource.ORCH_DATASET),
+    ORCH_DATASET_MANAGE: permission(Action.MANAGE, Resource.ORCH_DATASET),
+    ORCH_RUN_READ: permission(Action.READ, Resource.ORCH_RUN),
+    ORCH_RUN_CREATE: permission(Action.CREATE, Resource.ORCH_RUN),
+    ORCH_RUN_DELETE: permission(Action.DELETE, Resource.ORCH_RUN),
+    ORCH_RUN_EXECUTE: permission(Action.EXECUTE, Resource.ORCH_RUN),
+    ORCH_RUN_MANAGE: permission(Action.MANAGE, Resource.ORCH_RUN),
+    ORCH_CONFIG_READ: permission(Action.READ, Resource.ORCH_CONFIG),
+    ORCH_CONFIG_MANAGE: permission(Action.MANAGE, Resource.ORCH_CONFIG),
+    ORCH_AUDIT_LOG_READ: permission(Action.READ, Resource.ORCH_AUDIT_LOG),
+    ORCH_AUDIT_LOG_MANAGE: permission(Action.MANAGE, Resource.ORCH_AUDIT_LOG),
+    // ===========================================
+    // HTTP Data Plane Permissions (hdp.*)
+    // ===========================================
+    HDP_DATAPLANE_READ: permission(Action.READ, Resource.HDP_DATAPLANE),
+    HDP_DATAPLANE_UPDATE: permission(Action.UPDATE, Resource.HDP_DATAPLANE),
+    HDP_DATAPLANE_EXECUTE: permission(Action.EXECUTE, Resource.HDP_DATAPLANE),
+    HDP_DATAPLANE_MANAGE: permission(Action.MANAGE, Resource.HDP_DATAPLANE),
+    HDP_CONFIG_READ: permission(Action.READ, Resource.HDP_CONFIG),
+    HDP_CONFIG_MANAGE: permission(Action.MANAGE, Resource.HDP_CONFIG),
+    HDP_LOGS_READ: permission(Action.READ, Resource.HDP_LOGS),
+    HDP_LOGS_MANAGE: permission(Action.MANAGE, Resource.HDP_LOGS),
+    HDP_AUDIT_LOG_READ: permission(Action.READ, Resource.HDP_AUDIT_LOG),
+    HDP_AUDIT_LOG_MANAGE: permission(Action.MANAGE, Resource.HDP_AUDIT_LOG),
+    // ===========================================
+    // Wallet Permissions (w.*)
+    // ===========================================
+    W_CREDENTIAL_READ_OWN: permission(Action.READ, Resource.W_CREDENTIAL, RESERVED_SCOPES.OWN),
+    W_CREDENTIAL_READ: permission(Action.READ, Resource.W_CREDENTIAL),
+    W_CREDENTIAL_CREATE: permission(Action.CREATE, Resource.W_CREDENTIAL),
+    W_CREDENTIAL_UPDATE: permission(Action.UPDATE, Resource.W_CREDENTIAL),
+    W_CREDENTIAL_DELETE: permission(Action.DELETE, Resource.W_CREDENTIAL),
+    W_CREDENTIAL_MANAGE_OWN: permission(Action.MANAGE, Resource.W_CREDENTIAL, RESERVED_SCOPES.OWN),
+    W_CREDENTIAL_MANAGE: permission(Action.MANAGE, Resource.W_CREDENTIAL),
+    W_KEY_READ: permission(Action.READ, Resource.W_KEY),
+    W_KEY_CREATE: permission(Action.CREATE, Resource.W_KEY),
+    W_KEY_UPDATE: permission(Action.UPDATE, Resource.W_KEY),
+    W_KEY_DELETE: permission(Action.DELETE, Resource.W_KEY),
+    W_KEY_EXECUTE: permission(Action.EXECUTE, Resource.W_KEY),
+    W_KEY_MANAGE: permission(Action.MANAGE, Resource.W_KEY),
+    W_DID_READ: permission(Action.READ, Resource.W_DID),
+    W_DID_CREATE: permission(Action.CREATE, Resource.W_DID),
+    W_DID_UPDATE: permission(Action.UPDATE, Resource.W_DID),
+    W_DID_DELETE: permission(Action.DELETE, Resource.W_DID),
+    W_DID_MANAGE: permission(Action.MANAGE, Resource.W_DID),
+    W_PRESENTATION_READ: permission(Action.READ, Resource.W_PRESENTATION),
+    W_PRESENTATION_CREATE: permission(Action.CREATE, Resource.W_PRESENTATION),
+    W_PRESENTATION_MANAGE: permission(Action.MANAGE, Resource.W_PRESENTATION),
+    W_ISSUE_CONFIG_READ: permission(Action.READ, Resource.W_ISSUE_CONFIG),
+    W_ISSUE_CONFIG_CREATE: permission(Action.CREATE, Resource.W_ISSUE_CONFIG),
+    W_ISSUE_CONFIG_UPDATE: permission(Action.UPDATE, Resource.W_ISSUE_CONFIG),
+    W_ISSUE_CONFIG_DELETE: permission(Action.DELETE, Resource.W_ISSUE_CONFIG),
+    W_ISSUE_CONFIG_MANAGE: permission(Action.MANAGE, Resource.W_ISSUE_CONFIG),
+    W_CONFIG_READ: permission(Action.READ, Resource.W_CONFIG),
+    W_CONFIG_MANAGE: permission(Action.MANAGE, Resource.W_CONFIG),
+    W_AUDIT_LOG_READ: permission(Action.READ, Resource.W_AUDIT_LOG),
+    W_AUDIT_LOG_MANAGE: permission(Action.MANAGE, Resource.W_AUDIT_LOG),
+    // ===========================================
+    // SSO Bridge Permissions (sso.*)
+    // ===========================================
+    SSO_USER_READ: permission(Action.READ, Resource.SSO_USER),
+    SSO_USER_CREATE: permission(Action.CREATE, Resource.SSO_USER),
+    SSO_USER_UPDATE: permission(Action.UPDATE, Resource.SSO_USER),
+    SSO_USER_DELETE: permission(Action.DELETE, Resource.SSO_USER),
+    SSO_USER_EXECUTE: permission(Action.EXECUTE, Resource.SSO_USER),
+    SSO_USER_MANAGE: permission(Action.MANAGE, Resource.SSO_USER),
+    SSO_CLIENT_READ: permission(Action.READ, Resource.SSO_CLIENT),
+    SSO_CLIENT_CREATE: permission(Action.CREATE, Resource.SSO_CLIENT),
+    SSO_CLIENT_UPDATE: permission(Action.UPDATE, Resource.SSO_CLIENT),
+    SSO_CLIENT_DELETE: permission(Action.DELETE, Resource.SSO_CLIENT),
+    SSO_CLIENT_MANAGE: permission(Action.MANAGE, Resource.SSO_CLIENT),
+    SSO_ROLE_READ: permission(Action.READ, Resource.SSO_ROLE),
+    SSO_ROLE_MANAGE: permission(Action.MANAGE, Resource.SSO_ROLE),
+    SSO_CONFIG_READ: permission(Action.READ, Resource.SSO_CONFIG),
+    SSO_CONFIG_MANAGE: permission(Action.MANAGE, Resource.SSO_CONFIG),
+    SSO_LOGS_READ: permission(Action.READ, Resource.SSO_LOGS),
+    SSO_AUDIT_LOG_READ: permission(Action.READ, Resource.SSO_AUDIT_LOG),
+    SSO_AUDIT_LOG_MANAGE: permission(Action.MANAGE, Resource.SSO_AUDIT_LOG)
+};
+//# sourceMappingURL=permissions.js.map

package/dist/vendor/common-dtos/presentation.request.dto.d.ts

@@ -0,0 +1,9 @@
+export declare class CreatePresentationJwtRequest {
+    credentials: string[];
+    audience: string;
+    keyId?: string;
+    unwrap?: boolean;
+    format?: "vp+jwt" | "enveloped" | "jwt_vp";
+    nonce?: string;
+}
+//# sourceMappingURL=presentation.request.dto.d.ts.map

package/dist/vendor/common-dtos/presentation.request.dto.js

@@ -0,0 +1,55 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { ApiProperty, ApiPropertyOptional } from "@nestjs/swagger";
+import { IsArray, IsBoolean, IsIn, IsOptional, IsString } from "class-validator";
+export class CreatePresentationJwtRequest {
+    credentials;
+    audience;
+    keyId;
+    unwrap;
+    format;
+    nonce;
+}
+__decorate([
+    ApiProperty({ type: [String] }),
+    IsArray(),
+    IsString({ each: true }),
+    __metadata("design:type", Array)
+], CreatePresentationJwtRequest.prototype, "credentials", void 0);
+__decorate([
+    ApiProperty(),
+    IsString(),
+    __metadata("design:type", String)
+], CreatePresentationJwtRequest.prototype, "audience", void 0);
+__decorate([
+    ApiPropertyOptional(),
+    IsString(),
+    IsOptional(),
+    __metadata("design:type", String)
+], CreatePresentationJwtRequest.prototype, "keyId", void 0);
+__decorate([
+    ApiPropertyOptional(),
+    IsBoolean(),
+    IsOptional(),
+    __metadata("design:type", Boolean)
+], CreatePresentationJwtRequest.prototype, "unwrap", void 0);
+__decorate([
+    ApiPropertyOptional({ enum: ["vp+jwt", "enveloped", "jwt_vp"] }),
+    IsIn(["vp+jwt", "enveloped", "jwt_vp"]),
+    IsOptional(),
+    __metadata("design:type", String)
+], CreatePresentationJwtRequest.prototype, "format", void 0);
+__decorate([
+    ApiPropertyOptional(),
+    IsString(),
+    IsOptional(),
+    __metadata("design:type", String)
+], CreatePresentationJwtRequest.prototype, "nonce", void 0);
+//# sourceMappingURL=presentation.request.dto.js.map

package/dist/vendor/common-dtos/presentation.status.dto.d.ts

@@ -0,0 +1,13 @@
+export declare class CredentialStatusRequest {
+    statusListCredential: string;
+    statusListIndex: string;
+    optionalField?: string;
+}
+export declare class VerifiedCredentialStatus {
+    statusListCredential: string;
+    statusListIndex: string;
+    statusPurpose: "refresh" | "revocation" | "suspension" | "message";
+    status: boolean;
+    message?: string;
+}
+//# sourceMappingURL=presentation.status.dto.d.ts.map