aws-service-stack 0.18.372 → 0.18.374

package/dist/function/cognito/cognito.function.js.map

@@ -1 +1 @@
-{"version":3,"file":"cognito.function.js","sourceRoot":"","sources":["../../../src/function/cognito/cognito.function.ts"],"names":[],"mappings":";AAAA,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BtB,8CAkDC;AAED,8CAyDC;AAED,8CAIC;AAED,gDAIC;AAED,8CAOC;AAED,wCAuBC;AAED,oDAuCC;AAED,kDAUC;AAED,kDAcC;AAKD,wDAQC;AAMD,oCAcC;AAMD,wCAmBC;AAGD,gDAeC;AAED,0BA+CC;AAtXD,gGAUmD;AACnD,uEAA0F;AAE1F,SAAS,oBAAoB,CAAC,UAA4B;IACxD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,UAAU,IAAI,EAAE,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,aAAa,GAAG,IAAI,gEAA6B,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;AAErF,KAAK,UAAU,iBAAiB,CACrC,UAAkB,EAClB,IAAiB,EACjB,QAAiB;IAEjB,MAAM,cAAc,GAAoB,EAAE,CAAC;IAE3C,IAAI,IAAI,CAAC,KAAK;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1E,IAAI,IAAI,CAAC,OAAO;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,YAAY;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IAC/F,IAAI,IAAI,CAAC,SAAS;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACvF,IAAI,IAAI,CAAC,UAAU;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1F,IAAI,IAAI,CAAC,MAAM;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,QAAQ;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnF,IAAI,IAAI,CAAC,OAAO;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,SAAS;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACtF,IAAI,IAAI,CAAC,OAAO;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,kBAAkB;QACzB,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC5F,IAAI,IAAI,CAAC,OAAO;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,QAAQ;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAEnF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,GAAG,EAAE,CAAC;YACnE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,MAAM,aAAa,CAAC,IAAI,CACtB,IAAI,mEAAgC,CAAC;QACnC,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,cAAc,EAAE,cAAc;KAC/B,CAAC,CACH,CAAC;IAEF,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,EAAE,2BAA2B,EAAE,GAAG,wDAAa,2CAA2C,GAAC,CAAC;QAClG,MAAM,aAAa,CAAC,IAAI,CACtB,IAAI,2BAA2B,CAAC;YAC9B,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,QAAQ;YAClB,SAAS,EAAE,IAAI;SAChB,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;AACzD,CAAC;AAEM,KAAK,UAAU,iBAAiB,CACrC,UAAkB,EAClB,IAAiB,EACjB,QAAiB;IAEjB,MAAM,cAAc,GAAoB;QACtC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QACpC,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE;QACzC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE;QAC9C,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE,EAAE;QACnD,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE;QACrD,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE;QACrD,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE;QAC5C,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE;QAChD,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE;QAC9C,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE,EAAE;QAClD,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE;QAC9C,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE,EAAE;QACxD,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE;QACvF,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,IAAI,CAAC,kBAAkB,IAAI,EAAE,EAAE;QACpE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE;QAC9C,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE;KACjD,CAAC;IAEF,wBAAwB;IACxB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,GAAG,EAAE,CAAC;YACnE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,yDAAsB,CAAC;QACzC,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,cAAc,EAAE,cAAc;QAC9B,iBAAiB,EAAE,QAAQ;QAC3B,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,gDAAgD;KACnG,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAE9D,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ;QAClD,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,UAAU;QAC3B,UAAU,EAAE,KAAK,CAAC,WAAW;QAC7B,UAAU,EAAE,KAAK;QACjB,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,UAA+B;QAC1D,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO;QAC/B,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE;QACvD,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE;QAC7D,SAAS,EAAE,6BAAQ,CAAC,EAAE;KACvB,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,iBAAiB,CAAC,UAAU,EAAE,QAAQ;IAC1D,MAAM,OAAO,GAAG,IAAI,yDAAsB,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE3F,OAAO,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAEM,KAAK,UAAU,kBAAkB,CAAC,UAAU,EAAE,QAAQ;IAC3D,MAAM,OAAO,GAAG,IAAI,0DAAuB,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE5F,OAAO,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAEM,KAAK,UAAU,iBAAiB,CAAC,UAAkB,EAAE,QAAgB;IAC1E,MAAM,OAAO,GAAG,IAAI,yDAAsB,CAAC;QACzC,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,QAAQ;KACnB,CAAC,CAAC;IAEH,OAAO,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAEM,KAAK,UAAU,cAAc,CAAC,UAAkB,EAAE,QAAgB;IACvE,MAAM,OAAO,GAAG,IAAI,sDAAmB,CAAC;QACtC,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,QAAQ;KACnB,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAE5D,OAAO;QACL,QAAQ;QACR,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,UAAU;QAC3B,UAAU,EAAE,KAAK,CAAC,WAAW;QAC7B,UAAU,EAAE,KAAK;QACjB,UAAU,EAAE,QAAQ,CAAC,UAA+B;QACpD,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,SAAS,EAAE,QAAQ,CAAC,cAAc,EAAE,WAAW,EAAE;QACjD,SAAS,EAAE,QAAQ,CAAC,oBAAoB,EAAE,WAAW,EAAE;QACvD,SAAS,EAAE,6BAAQ,CAAC,EAAE;KACvB,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,oBAAoB,CACxC,UAAkB,EAClB,aAAqB,EACrB,cAAsB;IAEtB,MAAM,OAAO,GAAG,IAAI,mDAAgB,CAAC;QACnC,UAAU,EAAE,UAAU;QACtB,MAAM,EAAE,GAAG,aAAa,OAAO,cAAc,GAAG;KACjD,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,gBAAgB,GAAkB,EAAE,CAAC;QAE3C,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,gBAAgB,CAAC;QAElD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAEpD,gBAAgB,CAAC,IAAI,CAAC;gBACpB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,SAAS,EAAE,KAAK,CAAC,UAAU;gBAC3B,UAAU,EAAE,KAAK,CAAC,WAAW;gBAC7B,UAAU,EAAE,KAAK;gBACjB,UAAU,EAAE,IAAI,CAAC,UAA+B;gBAChD,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,SAAS,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE;gBAC7C,SAAS,EAAE,IAAI,CAAC,oBAAoB,EAAE,WAAW,EAAE;gBACnD,SAAS,EAAE,6BAAQ,CAAC,EAAE;aACvB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,mBAAmB,CAAC,UAAkB,EAAE,KAAa,EAAE,SAAiB;IAC5F,+BAA+B;IAC/B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,iCAAiC;IACnF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IAElD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,YAAY,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC;AAEM,KAAK,UAAU,mBAAmB,CACvC,UAAkB,EAClB,WAAmB,EACnB,SAAiB;IAEjB,sCAAsC;IACtC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,iCAAiC;IACnF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,WAAW,CAAC,CAAC;IAE/D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,0BAA0B,WAAW,YAAY,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC;AACD;;;GAGG;AACI,KAAK,UAAU,sBAAsB,CAC1C,UAAkB,EAClB,QAAgB,EAChB,SAAiB;IAEjB,qBAAqB;IACrB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACxD,OAAO,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,YAAY,CAAC,UAAkB,EAAE,IAAiB,EAAE,SAAiB;IACzF,0CAA0C;IAC1C,MAAM,kBAAkB,CAAC,UAAU,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,CAAC,CAAC;IAE1E,iCAAiC;IACjC,MAAM,aAAa,GAAG;QACpB,GAAG,IAAI,CAAC,UAAU;QAClB,kBAAkB,EAAE,SAAS;KAC9B,CAAC;IAEF,OAAO;QACL,GAAG,IAAI;QACP,UAAU,EAAE,aAAa;KAC1B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,cAAc,CAClC,UAAkB,EAClB,IAAiB,EACjB,eAAuB,EACvB,UAAe;IAEf,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,eAAe,EAAE,CAAC;IAEvG,0CAA0C;IAC1C,MAAM,kBAAkB,CAAC,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;IAExE,iCAAiC;IACjC,OAAO;QACL,GAAG,IAAI;QACP,UAAU,EAAE;YACV,GAAG,IAAI,CAAC,UAAU;YAClB,CAAC,QAAQ,CAAC,EAAE,UAAU;SACvB;KACF,CAAC;AACJ,CAAC;AAED,gDAAgD;AACzC,KAAK,UAAU,kBAAkB,CACtC,UAAkB,EAClB,IAAiB,EACjB,eAAuB,EACvB,UAAe;IAEf,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,eAAe,EAAE,CAAC;IAEvG,MAAM,aAAa,CAAC,IAAI,CACtB,IAAI,mEAAgC,CAAC;QACnC,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;KAChE,CAAC,CACH,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,OAAO,CAAC,UAAkB,EAAE,OAAe,CAAC,EAAE,OAAe,EAAE;IACnF,MAAM,MAAM,GAAG;QACb,UAAU,EAAE,UAAU;QACtB,KAAK,EAAE,IAAI;QACX,eAAe,EAAE,SAA+B;KACjD,CAAC;IAEF,0BAA0B;IAC1B,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,KAAK,GAAkB,EAAE,CAAC;IAE9B,OAAO,WAAW,IAAI,IAAI,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAI,mDAAgB,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAQ,CAAC;QAE5D,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,KAAK;gBACH,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE;oBAC7B,MAAM,KAAK,GAA2B,EAAE,CAAC;oBACzC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;wBACnC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK;4BAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;oBACjD,CAAC;oBAED,OAAO;wBACL,QAAQ,EAAE,CAAC,CAAC,QAAQ;wBACpB,GAAG,EAAE,KAAK,CAAC,GAAG;wBACd,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,WAAW,EAAE,KAAK,CAAC,YAAY;wBAC/B,SAAS,EAAE,KAAK,CAAC,UAAU;wBAC3B,UAAU,EAAE,KAAK,CAAC,WAAW;wBAC7B,UAAU,EAAE,KAAK;wBACjB,UAAU,EAAE,CAAC,CAAC,UAA+B;wBAC7C,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,SAAS,EAAE,CAAC,CAAC,cAAc,EAAE,WAAW,EAAE;wBAC1C,SAAS,EAAE,CAAC,CAAC,oBAAoB,EAAE,WAAW,EAAE;wBAChD,SAAS,EAAE,IAAI;qBACD,CAAC;gBACnB,CAAC,CAAC,IAAI,EAAE,CAAC;QACb,CAAC;QAED,MAAM,CAAC,eAAe,GAAG,QAAQ,CAAC,eAAe,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,eAAe;YAAE,MAAM;QAEnC,WAAW,EAAE,CAAC;IAChB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["// cognito.function.ts\n\nimport {\n  AdminCreateUserCommand,\n  AdminGetUserCommand,\n  AdminDeleteUserCommand,\n  AdminUpdateUserAttributesCommand,\n  AttributeType,\n  CognitoIdentityProviderClient,\n  ListUsersCommand,\n  AdminEnableUserCommand,\n  AdminDisableUserCommand,\n} from \"@aws-sdk/client-cognito-identity-provider\";\nimport { CognitoUser, CognitoUserStatus, TokenUse } from \"../../model/cognito-user.model\";\n\nfunction mapCognitoAttributes(attributes?: AttributeType[]): Record<string, string> {\n  const result: Record<string, string> = {};\n  for (const attr of attributes || []) {\n    if (attr.Name && attr.Value) {\n      result[attr.Name] = attr.Value;\n    }\n  }\n  return result;\n}\n\nconst cognitoClient = new CognitoIdentityProviderClient({ region: process.env.AWS_REGION });\n\nexport async function updateCognitoUser(\n  userPoolId: string,\n  user: CognitoUser,\n  password?: string,\n): Promise<CognitoUser> {\n  const userAttributes: AttributeType[] = [];\n\n  if (user.email) userAttributes.push({ Name: \"email\", Value: user.email });\n  if (user.profile) userAttributes.push({ Name: \"profile\", Value: user.profile });\n  if (user.phone_number) userAttributes.push({ Name: \"phone_number\", Value: user.phone_number });\n  if (user.givenName) userAttributes.push({ Name: \"given_name\", Value: user.givenName });\n  if (user.familyName) userAttributes.push({ Name: \"family_name\", Value: user.familyName });\n  if (user.gender) userAttributes.push({ Name: \"gender\", Value: user.gender });\n  if (user.nickname) userAttributes.push({ Name: \"nickname\", Value: user.nickname });\n  if (user.address) userAttributes.push({ Name: \"address\", Value: user.address });\n  if (user.birthdate) userAttributes.push({ Name: \"birthdate\", Value: user.birthdate });\n  if (user.picture) userAttributes.push({ Name: \"picture\", Value: user.picture });\n  if (user.preferred_username)\n    userAttributes.push({ Name: \"preff.preferred_username\", Value: user.preferred_username });\n  if (user.website) userAttributes.push({ Name: \"website\", Value: user.website });\n  if (user.zoneinfo) userAttributes.push({ Name: \"zoneinfo\", Value: user.zoneinfo });\n\n  if (user.attributes) {\n    for (const [key, value] of Object.entries(user.attributes)) {\n      const attrName = key.startsWith(\"custom:\") ? key : `custom:${key}`;\n      userAttributes.push({ Name: attrName, Value: String(value) });\n    }\n  }\n\n  await cognitoClient.send(\n    new AdminUpdateUserAttributesCommand({\n      UserPoolId: userPoolId,\n      Username: user.username,\n      UserAttributes: userAttributes,\n    }),\n  );\n\n  if (password) {\n    const { AdminSetUserPasswordCommand } = await import(\"@aws-sdk/client-cognito-identity-provider\");\n    await cognitoClient.send(\n      new AdminSetUserPasswordCommand({\n        UserPoolId: userPoolId,\n        Username: user.username,\n        Password: password,\n        Permanent: true,\n      }),\n    );\n  }\n\n  return await getCognitoUser(userPoolId, user.username);\n}\n\nexport async function createCognitoUser(\n  userPoolId: string,\n  user: CognitoUser,\n  password?: string,\n): Promise<CognitoUser> {\n  const userAttributes: AttributeType[] = [\n    { Name: \"email\", Value: user.email },\n    { Name: \"email_verified\", Value: \"true\" },\n    { Name: \"profile\", Value: user.profile ?? \"\" },\n    { Name: \"given_name\", Value: user.givenName ?? \"\" },\n    { Name: \"family_name\", Value: user.familyName ?? \"\" },\n    { Name: \"middle_name\", Value: user.middleName ?? \"\" },\n    { Name: \"gender\", Value: user.gender ?? \"\" },\n    { Name: \"nickname\", Value: user.nickname ?? \"\" },\n    { Name: \"address\", Value: user.address ?? \"\" },\n    { Name: \"birthdate\", Value: user.birthdate ?? \"\" },\n    { Name: \"picture\", Value: user.picture ?? \"\" },\n    { Name: \"phone_number\", Value: user.phone_number ?? \"\" },\n    { Name: \"phone_number_verified\", Value: user.phone_number_verified ? \"true\" : \"false\" },\n    { Name: \"preferred_username\", Value: user.preferred_username ?? \"\" },\n    { Name: \"website\", Value: user.website ?? \"\" },\n    { Name: \"zoneinfo\", Value: user.zoneinfo ?? \"\" },\n  ];\n\n  // Add custom attributes\n  if (user.attributes) {\n    for (const [key, value] of Object.entries(user.attributes)) {\n      const attrName = key.startsWith(\"custom:\") ? key : `custom:${key}`;\n      userAttributes.push({ Name: attrName, Value: value });\n    }\n  }\n\n  const command = new AdminCreateUserCommand({\n    UserPoolId: userPoolId,\n    Username: user.username,\n    UserAttributes: userAttributes,\n    TemporaryPassword: password,\n    MessageAction: password ? \"SUPPRESS\" : undefined, // Don't send welcome email if password provided\n  });\n\n  const response = await cognitoClient.send(command);\n  const attrs = mapCognitoAttributes(response.User?.Attributes);\n\n  return {\n    username: response.User?.Username || user.username,\n    sub: attrs.sub,\n    email: attrs.email,\n    phone_number: attrs.phone_number,\n    givenName: attrs.given_name,\n    familyName: attrs.family_name,\n    attributes: attrs,\n    userStatus: response.User?.UserStatus as CognitoUserStatus,\n    enabled: response.User?.Enabled,\n    createdAt: response.User?.UserCreateDate?.toISOString(),\n    updatedAt: response.User?.UserLastModifiedDate?.toISOString(),\n    token_use: TokenUse.ID,\n  };\n}\n\nexport async function enableCognitoUser(userPoolId, username) {\n  const command = new AdminEnableUserCommand({ UserPoolId: userPoolId, Username: username });\n\n  return cognitoClient.send(command);\n}\n\nexport async function disableCognitoUser(userPoolId, username) {\n  const command = new AdminDisableUserCommand({ UserPoolId: userPoolId, Username: username });\n\n  return cognitoClient.send(command);\n}\n\nexport async function deleteCognitoUser(userPoolId: string, username: string): Promise<any> {\n  const command = new AdminDeleteUserCommand({\n    UserPoolId: userPoolId,\n    Username: username,\n  });\n\n  return await cognitoClient.send(command);\n}\n\nexport async function getCognitoUser(userPoolId: string, username: string): Promise<CognitoUser> {\n  const command = new AdminGetUserCommand({\n    UserPoolId: userPoolId,\n    Username: username,\n  });\n\n  const response = await cognitoClient.send(command);\n  const attrs = mapCognitoAttributes(response.UserAttributes);\n\n  return {\n    username,\n    sub: attrs.sub,\n    email: attrs.email,\n    phone_number: attrs.phone_number,\n    givenName: attrs.given_name,\n    familyName: attrs.family_name,\n    attributes: attrs,\n    userStatus: response.UserStatus as CognitoUserStatus,\n    enabled: response.Enabled,\n    createdAt: response.UserCreateDate?.toISOString(),\n    updatedAt: response.UserLastModifiedDate?.toISOString(),\n    token_use: TokenUse.ID,\n  };\n}\n\nexport async function listUsersByAttribute(\n  userPoolId: string,\n  attributeName: string,\n  attributeValue: string,\n): Promise<CognitoUser[]> {\n  const command = new ListUsersCommand({\n    UserPoolId: userPoolId,\n    Filter: `${attributeName} = \"${attributeValue}\"`,\n  });\n\n  try {\n    const response = await cognitoClient.send(command);\n    const cognitoUsersList: CognitoUser[] = [];\n\n    if (response.Users.length === 0) cognitoUsersList;\n\n    for (const user of response.Users) {\n      const attrs = mapCognitoAttributes(user.Attributes);\n\n      cognitoUsersList.push({\n        username: user.Username,\n        sub: attrs.sub,\n        email: attrs.email,\n        phone_number: attrs.phone_number,\n        givenName: attrs.given_name,\n        familyName: attrs.family_name,\n        attributes: attrs,\n        userStatus: user.UserStatus as CognitoUserStatus,\n        enabled: user.Enabled,\n        createdAt: user.UserCreateDate?.toISOString(),\n        updatedAt: user.UserLastModifiedDate?.toISOString(),\n        token_use: TokenUse.ID,\n      });\n    }\n\n    return cognitoUsersList;\n  } catch (err) {\n    console.error(\"Error listing users:\", err);\n  }\n}\n\nexport async function setProfileIdByEmail(userPoolId: string, email: string, profileId: string): Promise<CognitoUser> {\n  // Find the user by email first\n  const users = await findAll(userPoolId, 1, 1000); // Get all users to find by email\n  const user = users.find((u) => u.email === email);\n\n  if (!user) {\n    throw new Error(`User with email ${email} not found`);\n  }\n\n  return setProfileId(userPoolId, user, profileId);\n}\n\nexport async function setProfileIdByPhone(\n  userPoolId: string,\n  phoneNumber: string,\n  profileId: string,\n): Promise<CognitoUser> {\n  // Find the user by phone number first\n  const users = await findAll(userPoolId, 1, 1000); // Get all users to find by phone\n  const user = users.find((u) => u.phone_number === phoneNumber);\n\n  if (!user) {\n    throw new Error(`User with phone number ${phoneNumber} not found`);\n  }\n\n  return setProfileId(userPoolId, user, profileId);\n}\n/**\n * Sets a profileId as a Cognito custom attribute.\n * Returns a **new CognitoUser object** with the attribute updated.\n */\nexport async function setProfileIdByUsername(\n  userPoolId: string,\n  username: string,\n  profileId: string,\n): Promise<CognitoUser> {\n  // Get the user first\n  const user = await getCognitoUser(userPoolId, username);\n  return setProfileId(userPoolId, user, profileId);\n}\n\n/**\n * Sets a profileId as a Cognito custom attribute.\n * Saves the changes to the Cognito user pool and returns the updated CognitoUser object.\n */\nexport async function setProfileId(userPoolId: string, user: CognitoUser, profileId: string): Promise<CognitoUser> {\n  // Persist the custom attribute to Cognito\n  await persistCustomValue(userPoolId, user, \"custom:profileId\", profileId);\n\n  // Return the updated user object\n  const newAttributes = {\n    ...user.attributes,\n    \"custom:profileId\": profileId,\n  };\n\n  return {\n    ...user,\n    attributes: newAttributes,\n  };\n}\n\n/**\n * Sets a custom attribute on a CognitoUser object.\n * Saves the changes to the Cognito user pool and returns the updated CognitoUser object.\n */\nexport async function setCustomValue(\n  userPoolId: string,\n  user: CognitoUser,\n  customFieldName: string,\n  fieldValue: any,\n): Promise<CognitoUser> {\n  const attrName = customFieldName.startsWith(\"custom:\") ? customFieldName : `custom:${customFieldName}`;\n\n  // Persist the custom attribute to Cognito\n  await persistCustomValue(userPoolId, user, customFieldName, fieldValue);\n\n  // Return the updated user object\n  return {\n    ...user,\n    attributes: {\n      ...user.attributes,\n      [attrName]: fieldValue,\n    },\n  };\n}\n\n// Optional: Persist custom attribute to Cognito\nexport async function persistCustomValue(\n  userPoolId: string,\n  user: CognitoUser,\n  customFieldName: string,\n  fieldValue: any,\n): Promise<void> {\n  const attrName = customFieldName.startsWith(\"custom:\") ? customFieldName : `custom:${customFieldName}`;\n\n  await cognitoClient.send(\n    new AdminUpdateUserAttributesCommand({\n      UserPoolId: userPoolId,\n      Username: user.username,\n      UserAttributes: [{ Name: attrName, Value: String(fieldValue) }],\n    }),\n  );\n}\n\nexport async function findAll(userPoolId: string, page: number = 1, size: number = 50): Promise<CognitoUser[]> {\n  const params = {\n    UserPoolId: userPoolId,\n    Limit: size,\n    PaginationToken: undefined as string | undefined,\n  };\n\n  // simple pagination logic\n  let currentPage = 1;\n  let users: CognitoUser[] = [];\n\n  while (currentPage <= page) {\n    const command = new ListUsersCommand(params);\n    const response = (await cognitoClient.send(command)) as any;\n\n    if (currentPage === page) {\n      users =\n        response.Users?.map((u: any) => {\n          const attrs: Record<string, string> = {};\n          for (const a of u.Attributes || []) {\n            if (a.Name && a.Value) attrs[a.Name] = a.Value;\n          }\n\n          return {\n            username: u.Username,\n            sub: attrs.sub,\n            email: attrs.email,\n            phoneNumber: attrs.phone_number,\n            givenName: attrs.given_name,\n            familyName: attrs.family_name,\n            attributes: attrs,\n            userStatus: u.UserStatus as CognitoUserStatus,\n            enabled: u.Enabled,\n            createdAt: u.UserCreateDate?.toISOString(),\n            updatedAt: u.UserLastModifiedDate?.toISOString(),\n            token_use: \"id\",\n          } as CognitoUser;\n        }) || [];\n    }\n\n    params.PaginationToken = response.PaginationToken;\n    if (!params.PaginationToken) break;\n\n    currentPage++;\n  }\n\n  return users;\n}\n"]}
+{"version":3,"file":"cognito.function.js","sourceRoot":"","sources":["../../../src/function/cognito/cognito.function.ts"],"names":[],"mappings":";AAAA,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BtB,8CAkDC;AAED,8CAyDC;AAED,8CAIC;AAED,gDAIC;AAED,8CAOC;AAED,wCAuBC;AAED,oDAuCC;AAED,kDAUC;AAED,kDAcC;AAKD,wDAQC;AAMD,oCAcC;AAMD,wCAmBC;AAGD,gDAeC;AAED,0BA+CC;AAED,kCAiBC;AAED,wCAiBC;AAED,kCAYC;AAED,kDAcC;AA9bD,gGAcmD;AACnD,uEAA0F;AAE1F,SAAS,oBAAoB,CAAC,UAA4B;IACxD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,UAAU,IAAI,EAAE,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,aAAa,GAAG,IAAI,gEAA6B,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;AAErF,KAAK,UAAU,iBAAiB,CACrC,UAAkB,EAClB,IAAiB,EACjB,QAAiB;IAEjB,MAAM,cAAc,GAAoB,EAAE,CAAC;IAE3C,IAAI,IAAI,CAAC,KAAK;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1E,IAAI,IAAI,CAAC,OAAO;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,YAAY;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IAC/F,IAAI,IAAI,CAAC,SAAS;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACvF,IAAI,IAAI,CAAC,UAAU;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1F,IAAI,IAAI,CAAC,MAAM;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,QAAQ;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnF,IAAI,IAAI,CAAC,OAAO;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,SAAS;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACtF,IAAI,IAAI,CAAC,OAAO;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,kBAAkB;QACzB,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC5F,IAAI,IAAI,CAAC,OAAO;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,QAAQ;QAAE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAEnF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,GAAG,EAAE,CAAC;YACnE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,MAAM,aAAa,CAAC,IAAI,CACtB,IAAI,mEAAgC,CAAC;QACnC,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,cAAc,EAAE,cAAc;KAC/B,CAAC,CACH,CAAC;IAEF,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,EAAE,2BAA2B,EAAE,GAAG,wDAAa,2CAA2C,GAAC,CAAC;QAClG,MAAM,aAAa,CAAC,IAAI,CACtB,IAAI,2BAA2B,CAAC;YAC9B,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,QAAQ;YAClB,SAAS,EAAE,IAAI;SAChB,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;AACzD,CAAC;AAEM,KAAK,UAAU,iBAAiB,CACrC,UAAkB,EAClB,IAAiB,EACjB,QAAiB;IAEjB,MAAM,cAAc,GAAoB;QACtC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;QACpC,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE;QACzC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE;QAC9C,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE,EAAE;QACnD,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE;QACrD,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE;QACrD,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE;QAC5C,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE;QAChD,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE;QAC9C,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE,EAAE;QAClD,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE;QAC9C,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE,EAAE;QACxD,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE;QACvF,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,IAAI,CAAC,kBAAkB,IAAI,EAAE,EAAE;QACpE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE;QAC9C,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE;KACjD,CAAC;IAEF,wBAAwB;IACxB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,GAAG,EAAE,CAAC;YACnE,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,yDAAsB,CAAC;QACzC,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,cAAc,EAAE,cAAc;QAC9B,iBAAiB,EAAE,QAAQ;QAC3B,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,gDAAgD;KACnG,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAE9D,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ;QAClD,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,UAAU;QAC3B,UAAU,EAAE,KAAK,CAAC,WAAW;QAC7B,UAAU,EAAE,KAAK;QACjB,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,UAA+B;QAC1D,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO;QAC/B,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE;QACvD,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE;QAC7D,SAAS,EAAE,6BAAQ,CAAC,EAAE;KACvB,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,iBAAiB,CAAC,UAAU,EAAE,QAAQ;IAC1D,MAAM,OAAO,GAAG,IAAI,yDAAsB,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE3F,OAAO,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAEM,KAAK,UAAU,kBAAkB,CAAC,UAAU,EAAE,QAAQ;IAC3D,MAAM,OAAO,GAAG,IAAI,0DAAuB,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE5F,OAAO,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAEM,KAAK,UAAU,iBAAiB,CAAC,UAAkB,EAAE,QAAgB;IAC1E,MAAM,OAAO,GAAG,IAAI,yDAAsB,CAAC;QACzC,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,QAAQ;KACnB,CAAC,CAAC;IAEH,OAAO,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAEM,KAAK,UAAU,cAAc,CAAC,UAAkB,EAAE,QAAgB;IACvE,MAAM,OAAO,GAAG,IAAI,sDAAmB,CAAC;QACtC,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,QAAQ;KACnB,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAE5D,OAAO;QACL,QAAQ;QACR,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,UAAU;QAC3B,UAAU,EAAE,KAAK,CAAC,WAAW;QAC7B,UAAU,EAAE,KAAK;QACjB,UAAU,EAAE,QAAQ,CAAC,UAA+B;QACpD,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,SAAS,EAAE,QAAQ,CAAC,cAAc,EAAE,WAAW,EAAE;QACjD,SAAS,EAAE,QAAQ,CAAC,oBAAoB,EAAE,WAAW,EAAE;QACvD,SAAS,EAAE,6BAAQ,CAAC,EAAE;KACvB,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,oBAAoB,CACxC,UAAkB,EAClB,aAAqB,EACrB,cAAsB;IAEtB,MAAM,OAAO,GAAG,IAAI,mDAAgB,CAAC;QACnC,UAAU,EAAE,UAAU;QACtB,MAAM,EAAE,GAAG,aAAa,OAAO,cAAc,GAAG;KACjD,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,gBAAgB,GAAkB,EAAE,CAAC;QAE3C,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,gBAAgB,CAAC;QAElD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAEpD,gBAAgB,CAAC,IAAI,CAAC;gBACpB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,SAAS,EAAE,KAAK,CAAC,UAAU;gBAC3B,UAAU,EAAE,KAAK,CAAC,WAAW;gBAC7B,UAAU,EAAE,KAAK;gBACjB,UAAU,EAAE,IAAI,CAAC,UAA+B;gBAChD,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,SAAS,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE;gBAC7C,SAAS,EAAE,IAAI,CAAC,oBAAoB,EAAE,WAAW,EAAE;gBACnD,SAAS,EAAE,6BAAQ,CAAC,EAAE;aACvB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,mBAAmB,CAAC,UAAkB,EAAE,KAAa,EAAE,SAAiB;IAC5F,+BAA+B;IAC/B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,iCAAiC;IACnF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IAElD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,YAAY,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC;AAEM,KAAK,UAAU,mBAAmB,CACvC,UAAkB,EAClB,WAAmB,EACnB,SAAiB;IAEjB,sCAAsC;IACtC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,iCAAiC;IACnF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,WAAW,CAAC,CAAC;IAE/D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,0BAA0B,WAAW,YAAY,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC;AACD;;;GAGG;AACI,KAAK,UAAU,sBAAsB,CAC1C,UAAkB,EAClB,QAAgB,EAChB,SAAiB;IAEjB,qBAAqB;IACrB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACxD,OAAO,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,YAAY,CAAC,UAAkB,EAAE,IAAiB,EAAE,SAAiB;IACzF,0CAA0C;IAC1C,MAAM,kBAAkB,CAAC,UAAU,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,CAAC,CAAC;IAE1E,iCAAiC;IACjC,MAAM,aAAa,GAAG;QACpB,GAAG,IAAI,CAAC,UAAU;QAClB,kBAAkB,EAAE,SAAS;KAC9B,CAAC;IAEF,OAAO;QACL,GAAG,IAAI;QACP,UAAU,EAAE,aAAa;KAC1B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,cAAc,CAClC,UAAkB,EAClB,IAAiB,EACjB,eAAuB,EACvB,UAAe;IAEf,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,eAAe,EAAE,CAAC;IAEvG,0CAA0C;IAC1C,MAAM,kBAAkB,CAAC,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;IAExE,iCAAiC;IACjC,OAAO;QACL,GAAG,IAAI;QACP,UAAU,EAAE;YACV,GAAG,IAAI,CAAC,UAAU;YAClB,CAAC,QAAQ,CAAC,EAAE,UAAU;SACvB;KACF,CAAC;AACJ,CAAC;AAED,gDAAgD;AACzC,KAAK,UAAU,kBAAkB,CACtC,UAAkB,EAClB,IAAiB,EACjB,eAAuB,EACvB,UAAe;IAEf,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,eAAe,EAAE,CAAC;IAEvG,MAAM,aAAa,CAAC,IAAI,CACtB,IAAI,mEAAgC,CAAC;QACnC,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;KAChE,CAAC,CACH,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,OAAO,CAAC,UAAkB,EAAE,OAAe,CAAC,EAAE,OAAe,EAAE;IACnF,MAAM,MAAM,GAAG;QACb,UAAU,EAAE,UAAU;QACtB,KAAK,EAAE,IAAI;QACX,eAAe,EAAE,SAA+B;KACjD,CAAC;IAEF,0BAA0B;IAC1B,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,KAAK,GAAkB,EAAE,CAAC;IAE9B,OAAO,WAAW,IAAI,IAAI,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAI,mDAAgB,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAQ,CAAC;QAE5D,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,KAAK;gBACH,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE;oBAC7B,MAAM,KAAK,GAA2B,EAAE,CAAC;oBACzC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;wBACnC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK;4BAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;oBACjD,CAAC;oBAED,OAAO;wBACL,QAAQ,EAAE,CAAC,CAAC,QAAQ;wBACpB,GAAG,EAAE,KAAK,CAAC,GAAG;wBACd,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,WAAW,EAAE,KAAK,CAAC,YAAY;wBAC/B,SAAS,EAAE,KAAK,CAAC,UAAU;wBAC3B,UAAU,EAAE,KAAK,CAAC,WAAW;wBAC7B,UAAU,EAAE,KAAK;wBACjB,UAAU,EAAE,CAAC,CAAC,UAA+B;wBAC7C,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,SAAS,EAAE,CAAC,CAAC,cAAc,EAAE,WAAW,EAAE;wBAC1C,SAAS,EAAE,CAAC,CAAC,oBAAoB,EAAE,WAAW,EAAE;wBAChD,SAAS,EAAE,IAAI;qBACD,CAAC;gBACnB,CAAC,CAAC,IAAI,EAAE,CAAC;QACb,CAAC;QAED,MAAM,CAAC,eAAe,GAAG,QAAQ,CAAC,eAAe,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,eAAe;YAAE,MAAM;QAEnC,WAAW,EAAE,CAAC;IAChB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAEM,KAAK,UAAU,WAAW,CAC/B,UAAkB,EAClB,SAAiB,EACjB,WAAoB;IAEpB,MAAM,OAAO,GAAG,IAAI,qDAAkB,CAAC;QACrC,UAAU,EAAE,UAAU;QACtB,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,WAAW;KACzB,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEnD,OAAO;QACL,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,SAAS;QACpC,WAAW,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW;KACzC,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,cAAc,CAClC,UAAkB,EAClB,QAAgB,EAChB,SAAiB;IAEjB,MAAM,OAAO,GAAG,IAAI,6DAA0B,CAAC;QAC7C,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,SAAS;KACrB,CAAC,CAAC;IAEH,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAElC,OAAO;QACL,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,SAAS;KACrB,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,WAAW,CAC/B,UAAkB,EAClB,SAAiB;IAEjB,MAAM,OAAO,GAAG,IAAI,qDAAkB,CAAC;QACrC,UAAU,EAAE,UAAU;QACtB,SAAS,EAAE,SAAS;KACrB,CAAC,CAAC;IAEH,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAElC,OAAO,EAAE,SAAS,EAAE,CAAC;AACvB,CAAC;AAEM,KAAK,UAAU,mBAAmB,CACvC,UAAkB,EAClB,QAAgB,EAChB,SAAiB;IAEjB,MAAM,OAAO,GAAG,IAAI,kEAA+B,CAAC;QAClD,UAAU,EAAE,UAAU;QACtB,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,SAAS;KACrB,CAAC,CAAC;IAEH,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAElC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC","sourcesContent":["// cognito.function.ts\n\nimport {\n  AdminCreateUserCommand,\n  AdminGetUserCommand,\n  AdminDeleteUserCommand,\n  AdminUpdateUserAttributesCommand,\n  CreateGroupCommand,\n  DeleteGroupCommand,\n  AdminAddUserToGroupCommand,\n  AdminRemoveUserFromGroupCommand,\n  AttributeType,\n  CognitoIdentityProviderClient,\n  ListUsersCommand,\n  AdminEnableUserCommand,\n  AdminDisableUserCommand,\n} from \"@aws-sdk/client-cognito-identity-provider\";\nimport { CognitoUser, CognitoUserStatus, TokenUse } from \"../../model/cognito-user.model\";\n\nfunction mapCognitoAttributes(attributes?: AttributeType[]): Record<string, string> {\n  const result: Record<string, string> = {};\n  for (const attr of attributes || []) {\n    if (attr.Name && attr.Value) {\n      result[attr.Name] = attr.Value;\n    }\n  }\n  return result;\n}\n\nconst cognitoClient = new CognitoIdentityProviderClient({ region: process.env.AWS_REGION });\n\nexport async function updateCognitoUser(\n  userPoolId: string,\n  user: CognitoUser,\n  password?: string,\n): Promise<CognitoUser> {\n  const userAttributes: AttributeType[] = [];\n\n  if (user.email) userAttributes.push({ Name: \"email\", Value: user.email });\n  if (user.profile) userAttributes.push({ Name: \"profile\", Value: user.profile });\n  if (user.phone_number) userAttributes.push({ Name: \"phone_number\", Value: user.phone_number });\n  if (user.givenName) userAttributes.push({ Name: \"given_name\", Value: user.givenName });\n  if (user.familyName) userAttributes.push({ Name: \"family_name\", Value: user.familyName });\n  if (user.gender) userAttributes.push({ Name: \"gender\", Value: user.gender });\n  if (user.nickname) userAttributes.push({ Name: \"nickname\", Value: user.nickname });\n  if (user.address) userAttributes.push({ Name: \"address\", Value: user.address });\n  if (user.birthdate) userAttributes.push({ Name: \"birthdate\", Value: user.birthdate });\n  if (user.picture) userAttributes.push({ Name: \"picture\", Value: user.picture });\n  if (user.preferred_username)\n    userAttributes.push({ Name: \"preff.preferred_username\", Value: user.preferred_username });\n  if (user.website) userAttributes.push({ Name: \"website\", Value: user.website });\n  if (user.zoneinfo) userAttributes.push({ Name: \"zoneinfo\", Value: user.zoneinfo });\n\n  if (user.attributes) {\n    for (const [key, value] of Object.entries(user.attributes)) {\n      const attrName = key.startsWith(\"custom:\") ? key : `custom:${key}`;\n      userAttributes.push({ Name: attrName, Value: String(value) });\n    }\n  }\n\n  await cognitoClient.send(\n    new AdminUpdateUserAttributesCommand({\n      UserPoolId: userPoolId,\n      Username: user.username,\n      UserAttributes: userAttributes,\n    }),\n  );\n\n  if (password) {\n    const { AdminSetUserPasswordCommand } = await import(\"@aws-sdk/client-cognito-identity-provider\");\n    await cognitoClient.send(\n      new AdminSetUserPasswordCommand({\n        UserPoolId: userPoolId,\n        Username: user.username,\n        Password: password,\n        Permanent: true,\n      }),\n    );\n  }\n\n  return await getCognitoUser(userPoolId, user.username);\n}\n\nexport async function createCognitoUser(\n  userPoolId: string,\n  user: CognitoUser,\n  password?: string,\n): Promise<CognitoUser> {\n  const userAttributes: AttributeType[] = [\n    { Name: \"email\", Value: user.email },\n    { Name: \"email_verified\", Value: \"true\" },\n    { Name: \"profile\", Value: user.profile ?? \"\" },\n    { Name: \"given_name\", Value: user.givenName ?? \"\" },\n    { Name: \"family_name\", Value: user.familyName ?? \"\" },\n    { Name: \"middle_name\", Value: user.middleName ?? \"\" },\n    { Name: \"gender\", Value: user.gender ?? \"\" },\n    { Name: \"nickname\", Value: user.nickname ?? \"\" },\n    { Name: \"address\", Value: user.address ?? \"\" },\n    { Name: \"birthdate\", Value: user.birthdate ?? \"\" },\n    { Name: \"picture\", Value: user.picture ?? \"\" },\n    { Name: \"phone_number\", Value: user.phone_number ?? \"\" },\n    { Name: \"phone_number_verified\", Value: user.phone_number_verified ? \"true\" : \"false\" },\n    { Name: \"preferred_username\", Value: user.preferred_username ?? \"\" },\n    { Name: \"website\", Value: user.website ?? \"\" },\n    { Name: \"zoneinfo\", Value: user.zoneinfo ?? \"\" },\n  ];\n\n  // Add custom attributes\n  if (user.attributes) {\n    for (const [key, value] of Object.entries(user.attributes)) {\n      const attrName = key.startsWith(\"custom:\") ? key : `custom:${key}`;\n      userAttributes.push({ Name: attrName, Value: value });\n    }\n  }\n\n  const command = new AdminCreateUserCommand({\n    UserPoolId: userPoolId,\n    Username: user.username,\n    UserAttributes: userAttributes,\n    TemporaryPassword: password,\n    MessageAction: password ? \"SUPPRESS\" : undefined, // Don't send welcome email if password provided\n  });\n\n  const response = await cognitoClient.send(command);\n  const attrs = mapCognitoAttributes(response.User?.Attributes);\n\n  return {\n    username: response.User?.Username || user.username,\n    sub: attrs.sub,\n    email: attrs.email,\n    phone_number: attrs.phone_number,\n    givenName: attrs.given_name,\n    familyName: attrs.family_name,\n    attributes: attrs,\n    userStatus: response.User?.UserStatus as CognitoUserStatus,\n    enabled: response.User?.Enabled,\n    createdAt: response.User?.UserCreateDate?.toISOString(),\n    updatedAt: response.User?.UserLastModifiedDate?.toISOString(),\n    token_use: TokenUse.ID,\n  };\n}\n\nexport async function enableCognitoUser(userPoolId, username) {\n  const command = new AdminEnableUserCommand({ UserPoolId: userPoolId, Username: username });\n\n  return cognitoClient.send(command);\n}\n\nexport async function disableCognitoUser(userPoolId, username) {\n  const command = new AdminDisableUserCommand({ UserPoolId: userPoolId, Username: username });\n\n  return cognitoClient.send(command);\n}\n\nexport async function deleteCognitoUser(userPoolId: string, username: string): Promise<any> {\n  const command = new AdminDeleteUserCommand({\n    UserPoolId: userPoolId,\n    Username: username,\n  });\n\n  return await cognitoClient.send(command);\n}\n\nexport async function getCognitoUser(userPoolId: string, username: string): Promise<CognitoUser> {\n  const command = new AdminGetUserCommand({\n    UserPoolId: userPoolId,\n    Username: username,\n  });\n\n  const response = await cognitoClient.send(command);\n  const attrs = mapCognitoAttributes(response.UserAttributes);\n\n  return {\n    username,\n    sub: attrs.sub,\n    email: attrs.email,\n    phone_number: attrs.phone_number,\n    givenName: attrs.given_name,\n    familyName: attrs.family_name,\n    attributes: attrs,\n    userStatus: response.UserStatus as CognitoUserStatus,\n    enabled: response.Enabled,\n    createdAt: response.UserCreateDate?.toISOString(),\n    updatedAt: response.UserLastModifiedDate?.toISOString(),\n    token_use: TokenUse.ID,\n  };\n}\n\nexport async function listUsersByAttribute(\n  userPoolId: string,\n  attributeName: string,\n  attributeValue: string,\n): Promise<CognitoUser[]> {\n  const command = new ListUsersCommand({\n    UserPoolId: userPoolId,\n    Filter: `${attributeName} = \"${attributeValue}\"`,\n  });\n\n  try {\n    const response = await cognitoClient.send(command);\n    const cognitoUsersList: CognitoUser[] = [];\n\n    if (response.Users.length === 0) cognitoUsersList;\n\n    for (const user of response.Users) {\n      const attrs = mapCognitoAttributes(user.Attributes);\n\n      cognitoUsersList.push({\n        username: user.Username,\n        sub: attrs.sub,\n        email: attrs.email,\n        phone_number: attrs.phone_number,\n        givenName: attrs.given_name,\n        familyName: attrs.family_name,\n        attributes: attrs,\n        userStatus: user.UserStatus as CognitoUserStatus,\n        enabled: user.Enabled,\n        createdAt: user.UserCreateDate?.toISOString(),\n        updatedAt: user.UserLastModifiedDate?.toISOString(),\n        token_use: TokenUse.ID,\n      });\n    }\n\n    return cognitoUsersList;\n  } catch (err) {\n    console.error(\"Error listing users:\", err);\n  }\n}\n\nexport async function setProfileIdByEmail(userPoolId: string, email: string, profileId: string): Promise<CognitoUser> {\n  // Find the user by email first\n  const users = await findAll(userPoolId, 1, 1000); // Get all users to find by email\n  const user = users.find((u) => u.email === email);\n\n  if (!user) {\n    throw new Error(`User with email ${email} not found`);\n  }\n\n  return setProfileId(userPoolId, user, profileId);\n}\n\nexport async function setProfileIdByPhone(\n  userPoolId: string,\n  phoneNumber: string,\n  profileId: string,\n): Promise<CognitoUser> {\n  // Find the user by phone number first\n  const users = await findAll(userPoolId, 1, 1000); // Get all users to find by phone\n  const user = users.find((u) => u.phone_number === phoneNumber);\n\n  if (!user) {\n    throw new Error(`User with phone number ${phoneNumber} not found`);\n  }\n\n  return setProfileId(userPoolId, user, profileId);\n}\n/**\n * Sets a profileId as a Cognito custom attribute.\n * Returns a **new CognitoUser object** with the attribute updated.\n */\nexport async function setProfileIdByUsername(\n  userPoolId: string,\n  username: string,\n  profileId: string,\n): Promise<CognitoUser> {\n  // Get the user first\n  const user = await getCognitoUser(userPoolId, username);\n  return setProfileId(userPoolId, user, profileId);\n}\n\n/**\n * Sets a profileId as a Cognito custom attribute.\n * Saves the changes to the Cognito user pool and returns the updated CognitoUser object.\n */\nexport async function setProfileId(userPoolId: string, user: CognitoUser, profileId: string): Promise<CognitoUser> {\n  // Persist the custom attribute to Cognito\n  await persistCustomValue(userPoolId, user, \"custom:profileId\", profileId);\n\n  // Return the updated user object\n  const newAttributes = {\n    ...user.attributes,\n    \"custom:profileId\": profileId,\n  };\n\n  return {\n    ...user,\n    attributes: newAttributes,\n  };\n}\n\n/**\n * Sets a custom attribute on a CognitoUser object.\n * Saves the changes to the Cognito user pool and returns the updated CognitoUser object.\n */\nexport async function setCustomValue(\n  userPoolId: string,\n  user: CognitoUser,\n  customFieldName: string,\n  fieldValue: any,\n): Promise<CognitoUser> {\n  const attrName = customFieldName.startsWith(\"custom:\") ? customFieldName : `custom:${customFieldName}`;\n\n  // Persist the custom attribute to Cognito\n  await persistCustomValue(userPoolId, user, customFieldName, fieldValue);\n\n  // Return the updated user object\n  return {\n    ...user,\n    attributes: {\n      ...user.attributes,\n      [attrName]: fieldValue,\n    },\n  };\n}\n\n// Optional: Persist custom attribute to Cognito\nexport async function persistCustomValue(\n  userPoolId: string,\n  user: CognitoUser,\n  customFieldName: string,\n  fieldValue: any,\n): Promise<void> {\n  const attrName = customFieldName.startsWith(\"custom:\") ? customFieldName : `custom:${customFieldName}`;\n\n  await cognitoClient.send(\n    new AdminUpdateUserAttributesCommand({\n      UserPoolId: userPoolId,\n      Username: user.username,\n      UserAttributes: [{ Name: attrName, Value: String(fieldValue) }],\n    }),\n  );\n}\n\nexport async function findAll(userPoolId: string, page: number = 1, size: number = 50): Promise<CognitoUser[]> {\n  const params = {\n    UserPoolId: userPoolId,\n    Limit: size,\n    PaginationToken: undefined as string | undefined,\n  };\n\n  // simple pagination logic\n  let currentPage = 1;\n  let users: CognitoUser[] = [];\n\n  while (currentPage <= page) {\n    const command = new ListUsersCommand(params);\n    const response = (await cognitoClient.send(command)) as any;\n\n    if (currentPage === page) {\n      users =\n        response.Users?.map((u: any) => {\n          const attrs: Record<string, string> = {};\n          for (const a of u.Attributes || []) {\n            if (a.Name && a.Value) attrs[a.Name] = a.Value;\n          }\n\n          return {\n            username: u.Username,\n            sub: attrs.sub,\n            email: attrs.email,\n            phoneNumber: attrs.phone_number,\n            givenName: attrs.given_name,\n            familyName: attrs.family_name,\n            attributes: attrs,\n            userStatus: u.UserStatus as CognitoUserStatus,\n            enabled: u.Enabled,\n            createdAt: u.UserCreateDate?.toISOString(),\n            updatedAt: u.UserLastModifiedDate?.toISOString(),\n            token_use: \"id\",\n          } as CognitoUser;\n        }) || [];\n    }\n\n    params.PaginationToken = response.PaginationToken;\n    if (!params.PaginationToken) break;\n\n    currentPage++;\n  }\n\n  return users;\n}\n\nexport async function createGroup(\n  userPoolId: string,\n  groupName: string,\n  description?: string,\n): Promise<{ groupName: string; description?: string }> {\n  const command = new CreateGroupCommand({\n    UserPoolId: userPoolId,\n    GroupName: groupName,\n    Description: description,\n  });\n\n  const response = await cognitoClient.send(command);\n\n  return {\n    groupName: response.Group?.GroupName,\n    description: response.Group?.Description,\n  };\n}\n\nexport async function addUserToGroup(\n  userPoolId: string,\n  username: string,\n  groupName: string,\n): Promise<{ groupName: string; username: string }> {\n  const command = new AdminAddUserToGroupCommand({\n    UserPoolId: userPoolId,\n    Username: username,\n    GroupName: groupName,\n  });\n\n  await cognitoClient.send(command);\n\n  return {\n    username: username,\n    groupName: groupName,\n  };\n}\n\nexport async function deleteGroup(\n  userPoolId: string,\n  groupName: string,\n): Promise<{ groupName: string }> {\n  const command = new DeleteGroupCommand({\n    UserPoolId: userPoolId,\n    GroupName: groupName,\n  });\n\n  await cognitoClient.send(command);\n\n  return { groupName };\n}\n\nexport async function removeUserFromGroup(\n  userPoolId: string,\n  username: string,\n  groupName: string,\n): Promise<{ groupName: string; username: string }> {\n  const command = new AdminRemoveUserFromGroupCommand({\n    UserPoolId: userPoolId,\n    Username: username,\n    GroupName: groupName,\n  });\n\n  await cognitoClient.send(command);\n\n  return { username, groupName };\n}\n"]}

package/dist/function/cognito/index.d.ts

@@ -1,5 +1,5 @@
 export * from "./cognito.function";
-import { createCognitoUser, findAll, getCognitoUser, persistCustomValue, listUsersByAttribute, setCustomValue, setProfileId, setProfileIdByEmail, setProfileIdByPhone, setProfileIdByUsername, updateCognitoUser, deleteCognitoUser, disableCognitoUser, enableCognitoUser } from "./cognito.function";
+import { createCognitoUser, findAll, getCognitoUser, persistCustomValue, listUsersByAttribute, setCustomValue, setProfileId, setProfileIdByEmail, setProfileIdByPhone, setProfileIdByUsername, updateCognitoUser, deleteCognitoUser, disableCognitoUser, enableCognitoUser, createGroup, deleteGroup, addUserToGroup, removeUserFromGroup } from "./cognito.function";
 export declare const cognito: {
     create: typeof createCognitoUser;
     get: typeof getCognitoUser;
@@ -15,5 +15,9 @@ export declare const cognito: {
     persistCustomValue: typeof persistCustomValue;
     disable: typeof disableCognitoUser;
     enable: typeof enableCognitoUser;
+    createGroup: typeof createGroup;
+    deleteGroup: typeof deleteGroup;
+    addUserToGroup: typeof addUserToGroup;
+    removeUserFromGroup: typeof removeUserFromGroup;
 };
 export type CognitoApi = typeof cognito;

package/dist/function/cognito/index.js

@@ -32,5 +32,9 @@ exports.cognito = {
     persistCustomValue: cognito_function_1.persistCustomValue,
     disable: cognito_function_1.disableCognitoUser,
     enable: cognito_function_1.enableCognitoUser,
+    createGroup: cognito_function_1.createGroup,
+    deleteGroup: cognito_function_1.deleteGroup,
+    addUserToGroup: cognito_function_1.addUserToGroup,
+    removeUserFromGroup: cognito_function_1.removeUserFromGroup,
 };
 //# sourceMappingURL=index.js.map

package/dist/function/cognito/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/function/cognito/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,qDAAmC;AAEnC,yDAe4B;AAEf,QAAA,OAAO,GAAG;IACrB,MAAM,EAAE,oCAAiB;IACzB,GAAG,EAAE,iCAAc;IACnB,eAAe,EAAE,uCAAoB;IACrC,OAAO,EAAP,0BAAO;IACP,MAAM,EAAE,oCAAiB;IACzB,MAAM,EAAE,oCAAiB;IACzB,mBAAmB,EAAnB,sCAAmB;IACnB,mBAAmB,EAAnB,sCAAmB;IACnB,sBAAsB,EAAtB,yCAAsB;IACtB,YAAY,EAAZ,+BAAY;IACZ,cAAc,EAAd,iCAAc;IACd,kBAAkB,EAAlB,qCAAkB;IAClB,OAAO,EAAE,qCAAkB;IAC3B,MAAM,EAAE,oCAAiB;CAC1B,CAAC","sourcesContent":["export * from \"./cognito.function\";\n\nimport {\n  createCognitoUser,\n  findAll,\n  getCognitoUser,\n  persistCustomValue,\n  listUsersByAttribute,\n  setCustomValue,\n  setProfileId,\n  setProfileIdByEmail,\n  setProfileIdByPhone,\n  setProfileIdByUsername,\n  updateCognitoUser,\n  deleteCognitoUser,\n  disableCognitoUser,\n  enableCognitoUser,\n} from \"./cognito.function\";\n\nexport const cognito = {\n  create: createCognitoUser,\n  get: getCognitoUser,\n  listByAttribute: listUsersByAttribute,\n  findAll,\n  update: updateCognitoUser,\n  delete: deleteCognitoUser,\n  setProfileIdByEmail,\n  setProfileIdByPhone,\n  setProfileIdByUsername,\n  setProfileId,\n  setCustomValue,\n  persistCustomValue,\n  disable: disableCognitoUser,\n  enable: enableCognitoUser,\n};\n\nexport type CognitoApi = typeof cognito;\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/function/cognito/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,qDAAmC;AAEnC,yDAmB4B;AAEf,QAAA,OAAO,GAAG;IACrB,MAAM,EAAE,oCAAiB;IACzB,GAAG,EAAE,iCAAc;IACnB,eAAe,EAAE,uCAAoB;IACrC,OAAO,EAAP,0BAAO;IACP,MAAM,EAAE,oCAAiB;IACzB,MAAM,EAAE,oCAAiB;IACzB,mBAAmB,EAAnB,sCAAmB;IACnB,mBAAmB,EAAnB,sCAAmB;IACnB,sBAAsB,EAAtB,yCAAsB;IACtB,YAAY,EAAZ,+BAAY;IACZ,cAAc,EAAd,iCAAc;IACd,kBAAkB,EAAlB,qCAAkB;IAClB,OAAO,EAAE,qCAAkB;IAC3B,MAAM,EAAE,oCAAiB;IACzB,WAAW,EAAX,8BAAW;IACX,WAAW,EAAX,8BAAW;IACX,cAAc,EAAd,iCAAc;IACd,mBAAmB,EAAnB,sCAAmB;CACpB,CAAC","sourcesContent":["export * from \"./cognito.function\";\n\nimport {\n  createCognitoUser,\n  findAll,\n  getCognitoUser,\n  persistCustomValue,\n  listUsersByAttribute,\n  setCustomValue,\n  setProfileId,\n  setProfileIdByEmail,\n  setProfileIdByPhone,\n  setProfileIdByUsername,\n  updateCognitoUser,\n  deleteCognitoUser,\n  disableCognitoUser,\n  enableCognitoUser,\n  createGroup,\n  deleteGroup,\n  addUserToGroup,\n  removeUserFromGroup,\n} from \"./cognito.function\";\n\nexport const cognito = {\n  create: createCognitoUser,\n  get: getCognitoUser,\n  listByAttribute: listUsersByAttribute,\n  findAll,\n  update: updateCognitoUser,\n  delete: deleteCognitoUser,\n  setProfileIdByEmail,\n  setProfileIdByPhone,\n  setProfileIdByUsername,\n  setProfileId,\n  setCustomValue,\n  persistCustomValue,\n  disable: disableCognitoUser,\n  enable: enableCognitoUser,\n  createGroup,\n  deleteGroup,\n  addUserToGroup,\n  removeUserFromGroup,\n};\n\nexport type CognitoApi = typeof cognito;\n"]}

package/dist/function/index.d.ts

@@ -14,6 +14,10 @@ export declare const aws: {
         persistCustomValue: typeof import("./cognito").persistCustomValue;
         disable: typeof import("./cognito").disableCognitoUser;
         enable: typeof import("./cognito").enableCognitoUser;
+        createGroup: typeof import("./cognito").createGroup;
+        deleteGroup: typeof import("./cognito").deleteGroup;
+        addUserToGroup: typeof import("./cognito").addUserToGroup;
+        removeUserFromGroup: typeof import("./cognito").removeUserFromGroup;
     };
     s3: {
         createBucket: typeof import("./s3").createBucket;

package/dist/model/base.config.d.ts

@@ -1,4 +1,4 @@
-import { DynamoIndexMap, EndpointPolicy, TraceChange } from "../index.js";
+import { DynamoIndexMap, EndpointPolicy, PermissionMap, TraceChange } from "../index.js";
 /** Generic DynamoDB Configuration */
 export declare class DynamoDBConfig {
     NAME: string;
@@ -23,6 +23,7 @@ export interface EntityConfig {
     OWNER_PARENT_ID_FIELD_NAME?: string;
     OWNER_ID_FIELD_NAME?: string;
     TRACE_CHANGE?: TraceChange;
+    PERMISSION_MAP?: PermissionMap;
 }
 /** Generic Entity Configuration Class **/
 export declare class EntityConfigImpl implements EntityConfig {
@@ -32,6 +33,7 @@ export declare class EntityConfigImpl implements EntityConfig {
     ENDPOINT_POLICY: EndpointPolicy[];
     ADMIN_GROUP_NAME: string[];
     TRACE_CHANGE?: TraceChange;
+    PERMISSION_MAP?: PermissionMap;
     OWNER_PARENT_ID_FIELD_NAME?: string;
     OWNER_ID_FIELD_NAME: string;
     constructor(basePath: string, adminGroupName?: string[]);
@@ -40,6 +42,8 @@ export declare class EntityConfigImpl implements EntityConfig {
     setDynamoDB(tableName: string, ownerFieldName: string, indexMap: DynamoIndexMap, ownerParentFieldName?: string): this;
     /** Set OpenSearch configuration */
     setOpenSearch(domain: string, index: string): this;
+    /** Set permission map for RBAC: scope filtering, role table, and role path */
+    setPermissionMap(permissionMap: PermissionMap): this;
     /** Set path-based policies */
     setPolicies(policies: EndpointPolicy[]): this;
     /** Get configuration as a plain object (for BaseController compatibility) */

package/dist/model/base.config.js

@@ -33,6 +33,7 @@ class EntityConfigImpl {
     ENDPOINT_POLICY; // Path-based permission configuration
     ADMIN_GROUP_NAME; // Admin group name for Cognito
     TRACE_CHANGE;
+    PERMISSION_MAP;
     OWNER_PARENT_ID_FIELD_NAME;
     OWNER_ID_FIELD_NAME;
     constructor(basePath, adminGroupName) {
@@ -55,6 +56,11 @@ class EntityConfigImpl {
         this.OPEN_SEARCH = new OpenSearchConfig(domain, index);
         return this;
     }
+    /** Set permission map for RBAC: scope filtering, role table, and role path */
+    setPermissionMap(permissionMap) {
+        this.PERMISSION_MAP = permissionMap;
+        return this;
+    }
     /** Set path-based policies */
     setPolicies(policies) {
         this.ENDPOINT_POLICY = policies;
@@ -71,6 +77,7 @@ class EntityConfigImpl {
             ADMIN_GROUP_NAME: this.ADMIN_GROUP_NAME,
             OWNER_PARENT_ID_FIELD_NAME: this.OWNER_PARENT_ID_FIELD_NAME,
             OWNER_ID_FIELD_NAME: this.OWNER_ID_FIELD_NAME,
+            PERMISSION_MAP: this.PERMISSION_MAP,
         };
     }
 }

package/dist/model/base.config.js.map

@@ -1 +1 @@
-{"version":3,"file":"base.config.js","sourceRoot":"","sources":["../../src/model/base.config.ts"],"names":[],"mappings":";;;AAEA,qCAAqC;AACrC,MAAa,cAAc;IACzB,IAAI,CAAS,CAAC,sBAAsB;IACpC,uBAAuB,CAAU;IACjC,gBAAgB,CAAS,CAAC,iCAAiC;IAC3D,GAAG,CAAiB;IAEpB,YAAY,SAAiB,EAAE,cAAsB,EAAE,QAAwB,EAAE,eAAwB;QACvG,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;QACtB,IAAI,CAAC,uBAAuB,GAAG,eAAe,CAAC;QAC/C,IAAI,CAAC,gBAAgB,GAAG,cAAc,CAAC;QACvC,IAAI,CAAC,GAAG,GAAG,QAAQ,CAAC;IACtB,CAAC;CACF;AAZD,wCAYC;AAED,uCAAuC;AACvC,MAAa,gBAAgB;IAC3B,MAAM,CAAS;IACf,KAAK,CAAS;IAEd,YAAY,MAAc,EAAE,SAAiB;QAC3C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;IACzB,CAAC;CACF;AARD,4CAQC;AAcD,0CAA0C;AAC1C,MAAa,gBAAgB;IAC3B,SAAS,CAAS,CAAC,uCAAuC;IAC1D,SAAS,CAAiB,CAAC,yBAAyB;IACpD,WAAW,CAAmB,CAAC,2BAA2B;IAC1D,eAAe,CAAmB,CAAC,sCAAsC;IACzE,gBAAgB,CAAW,CAAC,+BAA+B;IAE3D,YAAY,CAAe;IAE3B,0BAA0B,CAAU;IACpC,mBAAmB,CAAS;IAE5B,YAAY,QAAgB,EAAE,cAAyB;QACrD,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,gBAAgB,GAAG,cAAc,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,eAAe,GAAG,EAAE,CAAC;IAC5B,CAAC;IAED,cAAc,CAAC,WAAwB;QACrC,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;IAClC,CAAC;IAED,iCAAiC;IACjC,WAAW,CACT,SAAiB,EACjB,cAAsB,EACtB,QAAwB,EACxB,oBAA6B;QAE7B,IAAI,CAAC,SAAS,GAAG,IAAI,cAAc,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,oBAAoB,CAAC,CAAC;QAC/F,IAAI,CAAC,0BAA0B,GAAG,oBAAoB,CAAC;QACvD,IAAI,CAAC,mBAAmB,GAAG,cAAc,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mCAAmC;IACnC,aAAa,CAAC,MAAc,EAAE,KAAa;QACzC,IAAI,CAAC,WAAW,GAAG,IAAI,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8BAA8B;IAC9B,WAAW,CAAC,QAA0B;QACpC,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6EAA6E;IAC7E,QAAQ;QACN,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,0BAA0B,EAAE,IAAI,CAAC,0BAA0B;YAC3D,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;SAC9C,CAAC;IACJ,CAAC;CACF;AA5DD,4CA4DC","sourcesContent":["import { DynamoIndexMap, EndpointPolicy, TraceChange } from \"@chinggis/core\";\n\n/** Generic DynamoDB Configuration */\nexport class DynamoDBConfig {\n  NAME: string; // DynamoDB table name\n  OWNER_PARENT_FIELD_NAME?: string;\n  OWNER_FIELD_NAME: string; // DynamoDB index map for queries\n  MAP: DynamoIndexMap;\n\n  constructor(tableName: string, ownerFieldName: string, indexMap: DynamoIndexMap, parentFieldName?: string) {\n    this.NAME = tableName;\n    this.OWNER_PARENT_FIELD_NAME = parentFieldName;\n    this.OWNER_FIELD_NAME = ownerFieldName;\n    this.MAP = indexMap;\n  }\n}\n\n/** Generic OpenSearch Configuration */\nexport class OpenSearchConfig {\n  DOMAIN: string;\n  INDEX: string;\n\n  constructor(domain: string, indexName: string) {\n    this.DOMAIN = domain;\n    this.INDEX = indexName;\n  }\n}\n\n/** Configuration interface for type safety */\nexport interface EntityConfig {\n  BASE_PATH: string;\n  DYNAMO_DB: DynamoDBConfig;\n  OPEN_SEARCH: OpenSearchConfig;\n  ENDPOINT_POLICY: EndpointPolicy[];\n  ADMIN_GROUP_NAME: string[];\n  OWNER_PARENT_ID_FIELD_NAME?: string;\n  OWNER_ID_FIELD_NAME?: string;\n  TRACE_CHANGE?: TraceChange;\n}\n\n/** Generic Entity Configuration Class **/\nexport class EntityConfigImpl implements EntityConfig {\n  BASE_PATH: string; //Entity name for logging and debugging\n  DYNAMO_DB: DynamoDBConfig; // DynamoDB configuration\n  OPEN_SEARCH: OpenSearchConfig; // OpenSearch configuration\n  ENDPOINT_POLICY: EndpointPolicy[]; // Path-based permission configuration\n  ADMIN_GROUP_NAME: string[]; // Admin group name for Cognito\n\n  TRACE_CHANGE?: TraceChange;\n\n  OWNER_PARENT_ID_FIELD_NAME?: string;\n  OWNER_ID_FIELD_NAME: string;\n\n  constructor(basePath: string, adminGroupName?: string[]) {\n    this.BASE_PATH = basePath;\n    this.ADMIN_GROUP_NAME = adminGroupName || [\"admin\"];\n    this.ENDPOINT_POLICY = [];\n  }\n\n  setTraceChange(traceChange: TraceChange): void {\n    this.TRACE_CHANGE = traceChange;\n  }\n\n  /** Set DynamoDB configuration */\n  setDynamoDB(\n    tableName: string,\n    ownerFieldName: string,\n    indexMap: DynamoIndexMap,\n    ownerParentFieldName?: string,\n  ): this {\n    this.DYNAMO_DB = new DynamoDBConfig(tableName, ownerFieldName, indexMap, ownerParentFieldName);\n    this.OWNER_PARENT_ID_FIELD_NAME = ownerParentFieldName;\n    this.OWNER_ID_FIELD_NAME = ownerFieldName;\n    return this;\n  }\n\n  /** Set OpenSearch configuration */\n  setOpenSearch(domain: string, index: string): this {\n    this.OPEN_SEARCH = new OpenSearchConfig(domain, index);\n    return this;\n  }\n\n  /** Set path-based policies */\n  setPolicies(policies: EndpointPolicy[]): this {\n    this.ENDPOINT_POLICY = policies;\n    return this;\n  }\n\n  /** Get configuration as a plain object (for BaseController compatibility) */\n  toObject(): EntityConfig {\n    return {\n      BASE_PATH: this.BASE_PATH,\n      DYNAMO_DB: this.DYNAMO_DB,\n      OPEN_SEARCH: this.OPEN_SEARCH,\n      ENDPOINT_POLICY: this.ENDPOINT_POLICY,\n      TRACE_CHANGE: this.TRACE_CHANGE,\n      ADMIN_GROUP_NAME: this.ADMIN_GROUP_NAME,\n      OWNER_PARENT_ID_FIELD_NAME: this.OWNER_PARENT_ID_FIELD_NAME,\n      OWNER_ID_FIELD_NAME: this.OWNER_ID_FIELD_NAME,\n    };\n  }\n}\n"]}
+{"version":3,"file":"base.config.js","sourceRoot":"","sources":["../../src/model/base.config.ts"],"names":[],"mappings":";;;AAEA,qCAAqC;AACrC,MAAa,cAAc;IACzB,IAAI,CAAS,CAAC,sBAAsB;IACpC,uBAAuB,CAAU;IACjC,gBAAgB,CAAS,CAAC,iCAAiC;IAC3D,GAAG,CAAiB;IAEpB,YAAY,SAAiB,EAAE,cAAsB,EAAE,QAAwB,EAAE,eAAwB;QACvG,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;QACtB,IAAI,CAAC,uBAAuB,GAAG,eAAe,CAAC;QAC/C,IAAI,CAAC,gBAAgB,GAAG,cAAc,CAAC;QACvC,IAAI,CAAC,GAAG,GAAG,QAAQ,CAAC;IACtB,CAAC;CACF;AAZD,wCAYC;AAED,uCAAuC;AACvC,MAAa,gBAAgB;IAC3B,MAAM,CAAS;IACf,KAAK,CAAS;IAEd,YAAY,MAAc,EAAE,SAAiB;QAC3C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;IACzB,CAAC;CACF;AARD,4CAQC;AAeD,0CAA0C;AAC1C,MAAa,gBAAgB;IAC3B,SAAS,CAAS,CAAC,uCAAuC;IAC1D,SAAS,CAAiB,CAAC,yBAAyB;IACpD,WAAW,CAAmB,CAAC,2BAA2B;IAC1D,eAAe,CAAmB,CAAC,sCAAsC;IACzE,gBAAgB,CAAW,CAAC,+BAA+B;IAE3D,YAAY,CAAe;IAC3B,cAAc,CAAiB;IAE/B,0BAA0B,CAAU;IACpC,mBAAmB,CAAS;IAE5B,YAAY,QAAgB,EAAE,cAAyB;QACrD,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,gBAAgB,GAAG,cAAc,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,eAAe,GAAG,EAAE,CAAC;IAC5B,CAAC;IAED,cAAc,CAAC,WAAwB;QACrC,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;IAClC,CAAC;IAED,iCAAiC;IACjC,WAAW,CACT,SAAiB,EACjB,cAAsB,EACtB,QAAwB,EACxB,oBAA6B;QAE7B,IAAI,CAAC,SAAS,GAAG,IAAI,cAAc,CAAC,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,oBAAoB,CAAC,CAAC;QAC/F,IAAI,CAAC,0BAA0B,GAAG,oBAAoB,CAAC;QACvD,IAAI,CAAC,mBAAmB,GAAG,cAAc,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mCAAmC;IACnC,aAAa,CAAC,MAAc,EAAE,KAAa;QACzC,IAAI,CAAC,WAAW,GAAG,IAAI,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8EAA8E;IAC9E,gBAAgB,CAAC,aAA4B;QAC3C,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8BAA8B;IAC9B,WAAW,CAAC,QAA0B;QACpC,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6EAA6E;IAC7E,QAAQ;QACN,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,0BAA0B,EAAE,IAAI,CAAC,0BAA0B;YAC3D,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC,CAAC;IACJ,CAAC;CACF;AApED,4CAoEC","sourcesContent":["import { DynamoIndexMap, EndpointPolicy, PermissionMap, TraceChange } from \"@chinggis/core\";\n\n/** Generic DynamoDB Configuration */\nexport class DynamoDBConfig {\n  NAME: string; // DynamoDB table name\n  OWNER_PARENT_FIELD_NAME?: string;\n  OWNER_FIELD_NAME: string; // DynamoDB index map for queries\n  MAP: DynamoIndexMap;\n\n  constructor(tableName: string, ownerFieldName: string, indexMap: DynamoIndexMap, parentFieldName?: string) {\n    this.NAME = tableName;\n    this.OWNER_PARENT_FIELD_NAME = parentFieldName;\n    this.OWNER_FIELD_NAME = ownerFieldName;\n    this.MAP = indexMap;\n  }\n}\n\n/** Generic OpenSearch Configuration */\nexport class OpenSearchConfig {\n  DOMAIN: string;\n  INDEX: string;\n\n  constructor(domain: string, indexName: string) {\n    this.DOMAIN = domain;\n    this.INDEX = indexName;\n  }\n}\n\n/** Configuration interface for type safety */\nexport interface EntityConfig {\n  BASE_PATH: string;\n  DYNAMO_DB: DynamoDBConfig;\n  OPEN_SEARCH: OpenSearchConfig;\n  ENDPOINT_POLICY: EndpointPolicy[];\n  ADMIN_GROUP_NAME: string[];\n  OWNER_PARENT_ID_FIELD_NAME?: string;\n  OWNER_ID_FIELD_NAME?: string;\n  TRACE_CHANGE?: TraceChange;\n  PERMISSION_MAP?: PermissionMap;\n}\n\n/** Generic Entity Configuration Class **/\nexport class EntityConfigImpl implements EntityConfig {\n  BASE_PATH: string; //Entity name for logging and debugging\n  DYNAMO_DB: DynamoDBConfig; // DynamoDB configuration\n  OPEN_SEARCH: OpenSearchConfig; // OpenSearch configuration\n  ENDPOINT_POLICY: EndpointPolicy[]; // Path-based permission configuration\n  ADMIN_GROUP_NAME: string[]; // Admin group name for Cognito\n\n  TRACE_CHANGE?: TraceChange;\n  PERMISSION_MAP?: PermissionMap;\n\n  OWNER_PARENT_ID_FIELD_NAME?: string;\n  OWNER_ID_FIELD_NAME: string;\n\n  constructor(basePath: string, adminGroupName?: string[]) {\n    this.BASE_PATH = basePath;\n    this.ADMIN_GROUP_NAME = adminGroupName || [\"admin\"];\n    this.ENDPOINT_POLICY = [];\n  }\n\n  setTraceChange(traceChange: TraceChange): void {\n    this.TRACE_CHANGE = traceChange;\n  }\n\n  /** Set DynamoDB configuration */\n  setDynamoDB(\n    tableName: string,\n    ownerFieldName: string,\n    indexMap: DynamoIndexMap,\n    ownerParentFieldName?: string,\n  ): this {\n    this.DYNAMO_DB = new DynamoDBConfig(tableName, ownerFieldName, indexMap, ownerParentFieldName);\n    this.OWNER_PARENT_ID_FIELD_NAME = ownerParentFieldName;\n    this.OWNER_ID_FIELD_NAME = ownerFieldName;\n    return this;\n  }\n\n  /** Set OpenSearch configuration */\n  setOpenSearch(domain: string, index: string): this {\n    this.OPEN_SEARCH = new OpenSearchConfig(domain, index);\n    return this;\n  }\n\n  /** Set permission map for RBAC: scope filtering, role table, and role path */\n  setPermissionMap(permissionMap: PermissionMap): this {\n    this.PERMISSION_MAP = permissionMap;\n    return this;\n  }\n\n  /** Set path-based policies */\n  setPolicies(policies: EndpointPolicy[]): this {\n    this.ENDPOINT_POLICY = policies;\n    return this;\n  }\n\n  /** Get configuration as a plain object (for BaseController compatibility) */\n  toObject(): EntityConfig {\n    return {\n      BASE_PATH: this.BASE_PATH,\n      DYNAMO_DB: this.DYNAMO_DB,\n      OPEN_SEARCH: this.OPEN_SEARCH,\n      ENDPOINT_POLICY: this.ENDPOINT_POLICY,\n      TRACE_CHANGE: this.TRACE_CHANGE,\n      ADMIN_GROUP_NAME: this.ADMIN_GROUP_NAME,\n      OWNER_PARENT_ID_FIELD_NAME: this.OWNER_PARENT_ID_FIELD_NAME,\n      OWNER_ID_FIELD_NAME: this.OWNER_ID_FIELD_NAME,\n      PERMISSION_MAP: this.PERMISSION_MAP,\n    };\n  }\n}\n"]}

package/dist/model/base.model.d.ts

@@ -45,3 +45,18 @@ export declare enum InclusionMode {
     INCLUDE = "include",
     EXCLUDE = "exclude"
 }
+export interface RolePermission {
+    role: string;
+    permissions: string[];
+}
+export declare class ScopeMap extends Map<string, {
+    filterField: string;
+    claimKey?: string;
+}> {
+}
+export interface PermissionMap {
+    scopeMap: ScopeMap;
+    roleTable: string;
+    userPoolId?: string;
+    rolePath?: string;
+}

package/dist/model/base.model.js

@@ -1,9 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.InclusionMode = void 0;
+exports.ScopeMap = exports.InclusionMode = void 0;
 var InclusionMode;
 (function (InclusionMode) {
     InclusionMode["INCLUDE"] = "include";
     InclusionMode["EXCLUDE"] = "exclude";
 })(InclusionMode || (exports.InclusionMode = InclusionMode = {}));
+class ScopeMap extends Map {
+}
+exports.ScopeMap = ScopeMap;
 //# sourceMappingURL=base.model.js.map

package/dist/model/base.model.js.map

@@ -1 +1 @@
-{"version":3,"file":"base.model.js","sourceRoot":"","sources":["../../src/model/base.model.ts"],"names":[],"mappings":";;;AAwDA,IAAY,aAGX;AAHD,WAAY,aAAa;IACvB,oCAAmB,CAAA;IACnB,oCAAmB,CAAA;AACrB,CAAC,EAHW,aAAa,6BAAb,aAAa,QAGxB","sourcesContent":["import { RequestType } from \"./validation.model\";\nimport { Action } from \"./http.model\";\n\nexport interface BaseEntity {\n  id?: string;\n  createdAt?: string;\n  updatedAt?: string;\n\n  createdBy?: any;\n  updatedBy?: any;\n\n  ownerId?: string;\n  ownerParentId?: string;\n\n  permission?: Map<string, Permission[]>;\n\n  history?: ChangeHistory[];\n\n  year?: string;\n  yearMonth?: string;\n}\n\nexport interface ChangedField {\n  fieldName: string;\n  oldValue: string;\n  newValue: string;\n}\n\nexport interface ChangeHistory {\n  action: string;\n  user: string;\n  date: string;\n  changes?: ChangedField[];\n}\n\nexport interface Permission {\n  role: RequestType;\n  actions: Action[];\n}\n\nexport interface Attachment {\n  thumbnail: string;\n  original: string;\n}\n\nexport interface List<T> {\n  items: Array<T>;\n  total?: number;\n  lastKey?: string;\n}\n\nexport interface TraceChange {\n  fields: string[];\n  mode: InclusionMode;\n}\n\nexport enum InclusionMode {\n  INCLUDE = \"include\",\n  EXCLUDE = \"exclude\",\n}\n"]}
+{"version":3,"file":"base.model.js","sourceRoot":"","sources":["../../src/model/base.model.ts"],"names":[],"mappings":";;;AAwDA,IAAY,aAGX;AAHD,WAAY,aAAa;IACvB,oCAAmB,CAAA;IACnB,oCAAmB,CAAA;AACrB,CAAC,EAHW,aAAa,6BAAb,aAAa,QAGxB;AAOD,MAAa,QAAS,SAAQ,GAAuD;CAAG;AAAxF,4BAAwF","sourcesContent":["import { RequestType } from \"./validation.model\";\nimport { Action } from \"./http.model\";\n\nexport interface BaseEntity {\n  id?: string;\n  createdAt?: string;\n  updatedAt?: string;\n\n  createdBy?: any;\n  updatedBy?: any;\n\n  ownerId?: string;\n  ownerParentId?: string;\n\n  permission?: Map<string, Permission[]>;\n\n  history?: ChangeHistory[];\n\n  year?: string;\n  yearMonth?: string;\n}\n\nexport interface ChangedField {\n  fieldName: string;\n  oldValue: string;\n  newValue: string;\n}\n\nexport interface ChangeHistory {\n  action: string;\n  user: string;\n  date: string;\n  changes?: ChangedField[];\n}\n\nexport interface Permission {\n  role: RequestType;\n  actions: Action[];\n}\n\nexport interface Attachment {\n  thumbnail: string;\n  original: string;\n}\n\nexport interface List<T> {\n  items: Array<T>;\n  total?: number;\n  lastKey?: string;\n}\n\nexport interface TraceChange {\n  fields: string[];\n  mode: InclusionMode;\n}\n\nexport enum InclusionMode {\n  INCLUDE = \"include\",\n  EXCLUDE = \"exclude\",\n}\n\nexport interface RolePermission {\n  role: string;\n  permissions: string[];\n}\n\nexport class ScopeMap extends Map<string, { filterField: string; claimKey?: string }> {}\n\nexport interface PermissionMap {\n  scopeMap: ScopeMap;\n  roleTable: string;\n  userPoolId?: string;\n  rolePath?: string;\n}\n"]}

package/dist/model/index.d.ts

@@ -5,3 +5,4 @@ export * from "./filter.model";
 export * from "./validation.model";
 export * from "./dynamodb.model";
 export * from "./base.config";
+export { Permission as RolePermission } from "./role.model";

package/dist/model/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/model/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,+CAA6B;AAC7B,+CAA6B;AAC7B,iDAA+B;AAC/B,qDAAmC;AACnC,mDAAiC;AACjC,gDAA8B","sourcesContent":["export * from \"./cognito-user.model\";\nexport * from \"./http.model\";\nexport * from \"./base.model\";\nexport * from \"./filter.model\";\nexport * from \"./validation.model\";\nexport * from \"./dynamodb.model\";\nexport * from \"./base.config\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/model/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,+CAA6B;AAC7B,+CAA6B;AAC7B,iDAA+B;AAC/B,qDAAmC;AACnC,mDAAiC;AACjC,gDAA8B","sourcesContent":["export * from \"./cognito-user.model\";\nexport * from \"./http.model\";\nexport * from \"./base.model\";\nexport * from \"./filter.model\";\nexport * from \"./validation.model\";\nexport * from \"./dynamodb.model\";\nexport * from \"./base.config\";\nexport { Permission as RolePermission } from \"./role.model\";\n"]}

package/dist/model/role.model.d.ts

@@ -0,0 +1,20 @@
+import { BaseEntity } from "./base.model";
+export interface Permission extends BaseEntity {
+    role: string;
+    resource: string;
+    scope: string;
+    method: {
+        get?: boolean;
+        post?: boolean;
+        patch?: boolean;
+        put?: boolean;
+        delete?: boolean;
+    };
+    permissionKey: string;
+}
+/**
+ * Build a fully-qualified permission key.
+ * Format: `${role}.${resource}.${scope}.${method}`
+ * Example: `OwnerRole.PropertyTable.BranchScope.GET`
+ */
+export declare function buildPermissionKey(role: string, resource: string, scope: string, method: string): string;

package/dist/model/role.model.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildPermissionKey = buildPermissionKey;
+/**
+ * Build a fully-qualified permission key.
+ * Format: `${role}.${resource}.${scope}.${method}`
+ * Example: `OwnerRole.PropertyTable.BranchScope.GET`
+ */
+function buildPermissionKey(role, resource, scope, method) {
+    return `${role}.${resource}.${scope}.${method}`;
+}
+//# sourceMappingURL=role.model.js.map

package/dist/model/role.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role.model.js","sourceRoot":"","sources":["../../src/model/role.model.ts"],"names":[],"mappings":";;AAqBA,gDAEC;AAPD;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,IAAY,EAAE,QAAgB,EAAE,KAAa,EAAE,MAAc;IAC9F,OAAO,GAAG,IAAI,IAAI,QAAQ,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;AAClD,CAAC","sourcesContent":["import { BaseEntity } from \"./base.model\";\n\nexport interface Permission extends BaseEntity {\n  role: string; // DB Index: Manager | User etc\n  resource: string; // DB Index: Property | Profile etc\n  scope: string; // DB Index: Organization | Branch | Agent\n  method: {\n    get?: boolean;\n    post?: boolean;\n    patch?: boolean;\n    put?: boolean;\n    delete?: boolean;\n  };\n  permissionKey: string; // DB Index: role#resourse#scope Manager#Property#Branch\n}\n\n/**\n * Build a fully-qualified permission key.\n * Format: `${role}.${resource}.${scope}.${method}`\n * Example: `OwnerRole.PropertyTable.BranchScope.GET`\n */\nexport function buildPermissionKey(role: string, resource: string, scope: string, method: string): string {\n  return `${role}.${resource}.${scope}.${method}`;\n}\n"]}

package/dist/model/validation.model.d.ts

@@ -7,7 +7,7 @@ export interface ResponseFields {
 export interface EndpointPolicy {
     method: HttpMethod;
     path: string;
-    access: Access[];
+    access?: Access[];
     validator?: any;
     response?: ResponseFields;
 }

package/dist/model/validation.model.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.model.js","sourceRoot":"","sources":["../../src/model/validation.model.ts"],"names":[],"mappings":";;;AAgBA,IAAY,WAKX;AALD,WAAY,WAAW;IACrB,8BAAe,CAAA;IACf,4BAAa,CAAA;IACb,8BAAe,CAAA;IACf,gCAAiB,CAAA;AACnB,CAAC,EALW,WAAW,2BAAX,WAAW,QAKtB;AAED,IAAY,MAMX;AAND,WAAY,MAAM;IAChB,2BAAiB,CAAA;IACjB,uBAAa,CAAA;IACb,yBAAe,CAAA;IACf,yBAAe,CAAA;IACf,2BAAiB,CAAA;AACnB,CAAC,EANW,MAAM,sBAAN,MAAM,QAMjB","sourcesContent":["import { HttpMethod } from \"@chinggis/core\";\n\nexport interface ResponseFields {\n  include?: string[];\n  exclude?: string[];\n}\n\n/** Path-based permission definition */\nexport interface EndpointPolicy {\n  method: HttpMethod;\n  path: string;\n  access: Access[];\n  validator?: any;\n  response?: ResponseFields;\n}\n\nexport enum RequestType {\n  GUEST = \"guest\",\n  USER = \"user\",\n  ADMIN = \"admin\",\n  SYSTEM = \"system\",\n}\n\nexport enum Access {\n  PUBLIC = \"public\",\n  USER = \"user\",\n  OWNER = \"owner\",\n  ADMIN = \"admin\",\n  SYSTEM = \"system\",\n}\n"]}
+{"version":3,"file":"validation.model.js","sourceRoot":"","sources":["../../src/model/validation.model.ts"],"names":[],"mappings":";;;AAgBA,IAAY,WAKX;AALD,WAAY,WAAW;IACrB,8BAAe,CAAA;IACf,4BAAa,CAAA;IACb,8BAAe,CAAA;IACf,gCAAiB,CAAA;AACnB,CAAC,EALW,WAAW,2BAAX,WAAW,QAKtB;AAED,IAAY,MAMX;AAND,WAAY,MAAM;IAChB,2BAAiB,CAAA;IACjB,uBAAa,CAAA;IACb,yBAAe,CAAA;IACf,yBAAe,CAAA;IACf,2BAAiB,CAAA;AACnB,CAAC,EANW,MAAM,sBAAN,MAAM,QAMjB","sourcesContent":["import { HttpMethod } from \"@chinggis/core\";\n\nexport interface ResponseFields {\n  include?: string[];\n  exclude?: string[];\n}\n\n/** Path-based permission definition */\nexport interface EndpointPolicy {\n  method: HttpMethod;\n  path: string;\n  access?: Access[];\n  validator?: any;\n  response?: ResponseFields;\n}\n\nexport enum RequestType {\n  GUEST = \"guest\",\n  USER = \"user\",\n  ADMIN = \"admin\",\n  SYSTEM = \"system\",\n}\n\nexport enum Access {\n  PUBLIC = \"public\",\n  USER = \"user\",\n  OWNER = \"owner\",\n  ADMIN = \"admin\",\n  SYSTEM = \"system\",\n}\n"]}

package/dist/service/index.d.ts

@@ -7,3 +7,6 @@ export * from "./crud.service";
 export * from "./crud.service.interface";
 export * from "./stream.service";
 export * from "./stream.service.interface";
+export * from "./permission.cache";
+export * from "./permission.repo";
+export * from "./permission.service";

package/dist/service/index.js

@@ -23,4 +23,7 @@ __exportStar(require("./crud.service"), exports);
 __exportStar(require("./crud.service.interface"), exports);
 __exportStar(require("./stream.service"), exports);
 __exportStar(require("./stream.service.interface"), exports);
+__exportStar(require("./permission.cache"), exports);
+__exportStar(require("./permission.repo"), exports);
+__exportStar(require("./permission.service"), exports);
 //# sourceMappingURL=index.js.map

package/dist/service/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/service/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA+B;AAC/B,iDAA+B;AAC/B,2DAAyC;AACzC,mDAAiC;AACjC,6DAA2C;AAC3C,iDAA+B;AAC/B,2DAAyC;AACzC,mDAAiC;AACjC,6DAA2C","sourcesContent":["export * from \"./api.services\";\nexport * from \"./base.service\";\nexport * from \"./base.service.interface\";\nexport * from \"./socket.service\";\nexport * from \"./socket.service.interface\";\nexport * from \"./crud.service\";\nexport * from \"./crud.service.interface\";\nexport * from \"./stream.service\";\nexport * from \"./stream.service.interface\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/service/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA+B;AAC/B,iDAA+B;AAC/B,2DAAyC;AACzC,mDAAiC;AACjC,6DAA2C;AAC3C,iDAA+B;AAC/B,2DAAyC;AACzC,mDAAiC;AACjC,6DAA2C;AAC3C,qDAAmC;AACnC,oDAAkC;AAClC,uDAAqC","sourcesContent":["export * from \"./api.services\";\nexport * from \"./base.service\";\nexport * from \"./base.service.interface\";\nexport * from \"./socket.service\";\nexport * from \"./socket.service.interface\";\nexport * from \"./crud.service\";\nexport * from \"./crud.service.interface\";\nexport * from \"./stream.service\";\nexport * from \"./stream.service.interface\";\nexport * from \"./permission.cache\";\nexport * from \"./permission.repo\";\nexport * from \"./permission.service\";\n"]}

package/dist/service/permission.cache.d.ts

@@ -0,0 +1,24 @@
+import { Permission } from "../model/role.model";
+/**
+ * In-memory read-through cache for Permission entities.
+ *
+ * - Keyed by permissionKey (deterministic, namespaced).
+ * - TTL-based expiry per entry.
+ * - Survives across warm Lambda invocations (module-level singleton).
+ * - Handles concurrent fetches for the same key via in-flight dedup.
+ */
+export declare class PermissionCache {
+    private readonly store;
+    private readonly inflight;
+    private readonly ttlMs;
+    constructor(ttlMs?: number);
+    get(key: string): Permission | null;
+    set(key: string, value: Permission): void;
+    /**
+     * Read-through: returns cached value or calls `fetcher` exactly once.
+     * Concurrent calls for the same key share a single in-flight promise.
+     */
+    getOrFetch(key: string, fetcher: () => Promise<Permission | null>): Promise<Permission | null>;
+    invalidate(key: string): void;
+    clear(): void;
+}

package/dist/service/permission.cache.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PermissionCache = void 0;
+const DEFAULT_TTL_MS = 15 * 60 * 1000; // 15 minutes
+/**
+ * In-memory read-through cache for Permission entities.
+ *
+ * - Keyed by permissionKey (deterministic, namespaced).
+ * - TTL-based expiry per entry.
+ * - Survives across warm Lambda invocations (module-level singleton).
+ * - Handles concurrent fetches for the same key via in-flight dedup.
+ */
+class PermissionCache {
+    store = new Map();
+    inflight = new Map();
+    ttlMs;
+    constructor(ttlMs = DEFAULT_TTL_MS) {
+        this.ttlMs = ttlMs;
+    }
+    get(key) {
+        const entry = this.store.get(key);
+        if (!entry)
+            return null;
+        if (Date.now() > entry.expiresAt) {
+            this.store.delete(key);
+            return null;
+        }
+        return entry.value;
+    }
+    set(key, value) {
+        this.store.set(key, { value, expiresAt: Date.now() + this.ttlMs });
+    }
+    /**
+     * Read-through: returns cached value or calls `fetcher` exactly once.
+     * Concurrent calls for the same key share a single in-flight promise.
+     */
+    async getOrFetch(key, fetcher) {
+        const cached = this.get(key);
+        if (cached)
+            return cached;
+        const existing = this.inflight.get(key);
+        if (existing)
+            return existing;
+        const promise = fetcher().then((result) => {
+            this.inflight.delete(key);
+            if (result)
+                this.set(key, result);
+            return result;
+        });
+        this.inflight.set(key, promise);
+        return promise;
+    }
+    invalidate(key) {
+        this.store.delete(key);
+    }
+    clear() {
+        this.store.clear();
+    }
+}
+exports.PermissionCache = PermissionCache;
+//# sourceMappingURL=permission.cache.js.map

package/dist/service/permission.cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.cache.js","sourceRoot":"","sources":["../../src/service/permission.cache.ts"],"names":[],"mappings":";;;AAOA,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;AAEpD;;;;;;;GAOG;AACH,MAAa,eAAe;IACT,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IACtC,QAAQ,GAAG,IAAI,GAAG,EAAsC,CAAC;IACzD,KAAK,CAAS;IAE/B,YAAY,QAAgB,cAAc;QACxC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED,GAAG,CAAC,GAAW;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC,KAAK,CAAC;IACrB,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,KAAiB;QAChC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,GAAW,EAAE,OAAyC;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACxC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,MAAM;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAClC,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,UAAU,CAAC,GAAW;QACpB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF;AAnDD,0CAmDC","sourcesContent":["import { Permission } from \"../model/role.model\";\n\ninterface CacheEntry {\n  value: Permission;\n  expiresAt: number;\n}\n\nconst DEFAULT_TTL_MS = 15 * 60 * 1000; // 15 minutes\n\n/**\n * In-memory read-through cache for Permission entities.\n *\n * - Keyed by permissionKey (deterministic, namespaced).\n * - TTL-based expiry per entry.\n * - Survives across warm Lambda invocations (module-level singleton).\n * - Handles concurrent fetches for the same key via in-flight dedup.\n */\nexport class PermissionCache {\n  private readonly store = new Map<string, CacheEntry>();\n  private readonly inflight = new Map<string, Promise<Permission | null>>();\n  private readonly ttlMs: number;\n\n  constructor(ttlMs: number = DEFAULT_TTL_MS) {\n    this.ttlMs = ttlMs;\n  }\n\n  get(key: string): Permission | null {\n    const entry = this.store.get(key);\n    if (!entry) return null;\n    if (Date.now() > entry.expiresAt) {\n      this.store.delete(key);\n      return null;\n    }\n    return entry.value;\n  }\n\n  set(key: string, value: Permission): void {\n    this.store.set(key, { value, expiresAt: Date.now() + this.ttlMs });\n  }\n\n  /**\n   * Read-through: returns cached value or calls `fetcher` exactly once.\n   * Concurrent calls for the same key share a single in-flight promise.\n   */\n  async getOrFetch(key: string, fetcher: () => Promise<Permission | null>): Promise<Permission | null> {\n    const cached = this.get(key);\n    if (cached) return cached;\n\n    const existing = this.inflight.get(key);\n    if (existing) return existing;\n\n    const promise = fetcher().then((result) => {\n      this.inflight.delete(key);\n      if (result) this.set(key, result);\n      return result;\n    });\n\n    this.inflight.set(key, promise);\n    return promise;\n  }\n\n  invalidate(key: string): void {\n    this.store.delete(key);\n  }\n\n  clear(): void {\n    this.store.clear();\n  }\n}\n"]}

package/dist/service/permission.repo.d.ts

@@ -0,0 +1,16 @@
+import { Permission } from "../model/role.model";
+import { List } from "../model/base.model";
+/**
+ * Repository layer for Permission table.
+ * Pure DB operations — no caching, no business logic.
+ */
+export declare class PermissionRepo {
+    private readonly db;
+    constructor(tableName: string);
+    findById(id: string): Promise<Permission | null>;
+    findByPermissionKey(permissionKey: string): Promise<Permission | null>;
+    save(permission: Partial<Permission>): Promise<Permission>;
+    update(permission: Partial<Permission>): Promise<Permission>;
+    delete(id: string): Promise<boolean>;
+    scan(): Promise<List<Partial<Permission>>>;
+}

package/dist/service/permission.repo.js

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PermissionRepo = void 0;
+const base_db_repo_1 = require("../repositories/base-db.repo");
+const dynamodb_model_1 = require("../model/dynamodb.model");
+const dynamodb_utils_1 = require("../utils/dynamodb.utils");
+function createPermissionIndexMap() {
+    const map = new dynamodb_model_1.DynamoIndexMap();
+    map.partitionKey = "id";
+    map.set("byPermissionKey", { field: "permissionKey", rFields: ["role", "resource", "scope"], fieldSeparator: "#" });
+    map.mapFields = ["method"];
+    return map;
+}
+/**
+ * Repository layer for Permission table.
+ * Pure DB operations — no caching, no business logic.
+ */
+class PermissionRepo {
+    db;
+    constructor(tableName) {
+        this.db = new base_db_repo_1.BaseRepoDBImpl();
+        this.db.setTable(tableName);
+        this.db.setIndexMap(createPermissionIndexMap());
+    }
+    async findById(id) {
+        return this.db.findById(id);
+    }
+    async findByPermissionKey(permissionKey) {
+        return this.db.findOne({
+            indexName: "byPermissionKey",
+            indexValue: permissionKey,
+        });
+    }
+    async save(permission) {
+        if (!permission.id)
+            permission.id = (0, dynamodb_utils_1.generateUUID)();
+        const now = new Date().toISOString();
+        if (!permission.createdAt)
+            permission.createdAt = now;
+        permission.updatedAt = now;
+        // Build composite key: role#resource#scope
+        if (permission.role && permission.resource && permission.scope) {
+            permission.permissionKey = `${permission.role}#${permission.resource}#${permission.scope}`;
+        }
+        return this.db.save(permission);
+    }
+    async update(permission) {
+        permission.updatedAt = new Date().toISOString();
+        // Rebuild composite key if components changed
+        if (permission.role && permission.resource && permission.scope) {
+            permission.permissionKey = `${permission.role}#${permission.resource}#${permission.scope}`;
+        }
+        return this.db.update(permission);
+    }
+    async delete(id) {
+        return this.db.delete(id);
+    }
+    async scan() {
+        return this.db.scan({});
+    }
+}
+exports.PermissionRepo = PermissionRepo;
+//# sourceMappingURL=permission.repo.js.map

package/dist/service/permission.repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.repo.js","sourceRoot":"","sources":["../../src/service/permission.repo.ts"],"names":[],"mappings":";;;AAAA,+DAA8D;AAC9D,4DAAyD;AAEzD,4DAAuD;AAGvD,SAAS,wBAAwB;IAC/B,MAAM,GAAG,GAAG,IAAI,+BAAc,EAAE,CAAC;IACjC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;IACxB,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IACpH,GAAG,CAAC,SAAS,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3B,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAa,cAAc;IACR,EAAE,CAA6B;IAEhD,YAAY,SAAiB;QAC3B,IAAI,CAAC,EAAE,GAAG,IAAI,6BAAc,EAAc,CAAC;QAC3C,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC5B,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,wBAAwB,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,OAAO,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,aAAqB;QAC7C,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;YACrB,SAAS,EAAE,iBAAiB;YAC5B,UAAU,EAAE,aAAa;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,UAA+B;QACxC,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,UAAU,CAAC,EAAE,GAAG,IAAA,6BAAY,GAAE,CAAC;QAEnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC,UAAU,CAAC,SAAS;YAAE,UAAU,CAAC,SAAS,GAAG,GAAG,CAAC;QACtD,UAAU,CAAC,SAAS,GAAG,GAAG,CAAC;QAE3B,2CAA2C;QAC3C,IAAI,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YAC/D,UAAU,CAAC,aAAa,GAAG,GAAG,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;QAC7F,CAAC;QAED,OAAO,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAA+B;QAC1C,UAAU,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEhD,8CAA8C;QAC9C,IAAI,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YAC/D,UAAU,CAAC,aAAa,GAAG,GAAG,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;QAC7F,CAAC;QAED,OAAO,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,OAAO,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,IAAI;QACR,OAAO,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;CACF;AArDD,wCAqDC","sourcesContent":["import { BaseRepoDBImpl } from \"../repositories/base-db.repo\";\nimport { DynamoIndexMap } from \"../model/dynamodb.model\";\nimport { Permission } from \"../model/role.model\";\nimport { generateUUID } from \"../utils/dynamodb.utils\";\nimport { List } from \"../model/base.model\";\n\nfunction createPermissionIndexMap(): DynamoIndexMap {\n  const map = new DynamoIndexMap();\n  map.partitionKey = \"id\";\n  map.set(\"byPermissionKey\", { field: \"permissionKey\", rFields: [\"role\", \"resource\", \"scope\"], fieldSeparator: \"#\" });\n  map.mapFields = [\"method\"];\n  return map;\n}\n\n/**\n * Repository layer for Permission table.\n * Pure DB operations — no caching, no business logic.\n */\nexport class PermissionRepo {\n  private readonly db: BaseRepoDBImpl<Permission>;\n\n  constructor(tableName: string) {\n    this.db = new BaseRepoDBImpl<Permission>();\n    this.db.setTable(tableName);\n    this.db.setIndexMap(createPermissionIndexMap());\n  }\n\n  async findById(id: string): Promise<Permission | null> {\n    return this.db.findById(id);\n  }\n\n  async findByPermissionKey(permissionKey: string): Promise<Permission | null> {\n    return this.db.findOne({\n      indexName: \"byPermissionKey\",\n      indexValue: permissionKey,\n    });\n  }\n\n  async save(permission: Partial<Permission>): Promise<Permission> {\n    if (!permission.id) permission.id = generateUUID();\n\n    const now = new Date().toISOString();\n    if (!permission.createdAt) permission.createdAt = now;\n    permission.updatedAt = now;\n\n    // Build composite key: role#resource#scope\n    if (permission.role && permission.resource && permission.scope) {\n      permission.permissionKey = `${permission.role}#${permission.resource}#${permission.scope}`;\n    }\n\n    return this.db.save(permission);\n  }\n\n  async update(permission: Partial<Permission>): Promise<Permission> {\n    permission.updatedAt = new Date().toISOString();\n\n    // Rebuild composite key if components changed\n    if (permission.role && permission.resource && permission.scope) {\n      permission.permissionKey = `${permission.role}#${permission.resource}#${permission.scope}`;\n    }\n\n    return this.db.update(permission);\n  }\n\n  async delete(id: string): Promise<boolean> {\n    return this.db.delete(id);\n  }\n\n  async scan(): Promise<List<Partial<Permission>>> {\n    return this.db.scan({});\n  }\n}\n"]}