aws-service-stack 0.18.421 → 0.18.425

package/dist/service/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/service/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,kBAAkB,CAAC;AACjC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC"}

package/dist/service/index.js

@@ -21,6 +21,7 @@ __exportStar(require("./socket.service"), exports);
 __exportStar(require("./socket.service.interface"), exports);
 __exportStar(require("./crud.service"), exports);
 __exportStar(require("./crud.service.interface"), exports);
+__exportStar(require("./crud-operations"), exports);
 __exportStar(require("./stream.service"), exports);
 __exportStar(require("./stream.service.interface"), exports);
 __exportStar(require("./permission.cache"), exports);

package/dist/service/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/service/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA+B;AAC/B,iDAA+B;AAC/B,2DAAyC;AACzC,mDAAiC;AACjC,6DAA2C;AAC3C,iDAA+B;AAC/B,2DAAyC;AACzC,mDAAiC;AACjC,6DAA2C;AAC3C,qDAAmC;AACnC,oDAAkC;AAClC,uDAAqC","sourcesContent":["export * from \"./api.services\";\nexport * from \"./base.service\";\nexport * from \"./base.service.interface\";\nexport * from \"./socket.service\";\nexport * from \"./socket.service.interface\";\nexport * from \"./crud.service\";\nexport * from \"./crud.service.interface\";\nexport * from \"./stream.service\";\nexport * from \"./stream.service.interface\";\nexport * from \"./permission.cache\";\nexport * from \"./permission.repo\";\nexport * from \"./permission.service\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/service/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA+B;AAC/B,iDAA+B;AAC/B,2DAAyC;AACzC,mDAAiC;AACjC,6DAA2C;AAC3C,iDAA+B;AAC/B,2DAAyC;AACzC,oDAAkC;AAClC,mDAAiC;AACjC,6DAA2C;AAC3C,qDAAmC;AACnC,oDAAkC;AAClC,uDAAqC","sourcesContent":["export * from \"./api.services\";\nexport * from \"./base.service\";\nexport * from \"./base.service.interface\";\nexport * from \"./socket.service\";\nexport * from \"./socket.service.interface\";\nexport * from \"./crud.service\";\nexport * from \"./crud.service.interface\";\nexport * from \"./crud-operations\";\nexport * from \"./stream.service\";\nexport * from \"./stream.service.interface\";\nexport * from \"./permission.cache\";\nexport * from \"./permission.repo\";\nexport * from \"./permission.service\";\n"]}

package/dist/service/key-aws.services.d.ts

@@ -4,3 +4,4 @@ export declare class KeyServiceImpl implements KeyService {
     constructor(region: string);
     get(keyId: string): Promise<string>;
 }
+//# sourceMappingURL=key-aws.services.d.ts.map

package/dist/service/key-aws.services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-aws.services.d.ts","sourceRoot":"","sources":["../../src/service/key-aws.services.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,qBACa,cAAe,YAAW,UAAU;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;gBAElC,MAAM,EAAE,MAAM;IAIpB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAW1C"}

package/dist/service/key.services.interface.d.ts

@@ -1,3 +1,4 @@
 export interface KeyService {
     get(key: string): Promise<string>;
 }
+//# sourceMappingURL=key.services.interface.d.ts.map

package/dist/service/key.services.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key.services.interface.d.ts","sourceRoot":"","sources":["../../src/service/key.services.interface.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACnC"}

package/dist/service/permission.cache.d.ts

@@ -22,3 +22,4 @@ export declare class PermissionCache {
     invalidate(key: string): void;
     clear(): void;
 }
+//# sourceMappingURL=permission.cache.d.ts.map

package/dist/service/permission.cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.cache.d.ts","sourceRoot":"","sources":["../../src/service/permission.cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AASjD;;;;;;;GAOG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiC;IACvD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiD;IAC1E,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;gBAEnB,KAAK,GAAE,MAAuB;IAI1C,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAUnC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI;IAIzC;;;OAGG;IACG,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAiBpG,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAI7B,KAAK,IAAI,IAAI;CAGd"}

package/dist/service/permission.repo.d.ts

@@ -16,3 +16,4 @@ export declare class PermissionRepo {
     delete(id: string): Promise<boolean>;
     scan(): Promise<List<Partial<Permission>>>;
 }
+//# sourceMappingURL=permission.repo.d.ts.map

package/dist/service/permission.repo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.repo.d.ts","sourceRoot":"","sources":["../../src/service/permission.repo.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjD,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAezC;;;GAGG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,EAAE,CAA6B;gBAEpC,SAAS,EAAE,MAAM;IAMvB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAIhD,mBAAmB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAOtE,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IAKhE,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;IAe1D,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;IAW5D,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIpC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;CAGjD"}

package/dist/service/permission.service.d.ts

@@ -37,4 +37,7 @@ export declare class PermissionService {
     deletePermission(id: string): Promise<boolean>;
     listPermissions(filter?: Filter): Promise<List<Partial<Permission>>>;
     clearCache(): void;
+    /** Normalize method keys to uppercase. */
+    private normalizeMethodKeys;
 }
+//# sourceMappingURL=permission.service.d.ts.map

package/dist/service/permission.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.service.d.ts","sourceRoot":"","sources":["../../src/service/permission.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAIjD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAE/C;;;;;;;;;GASG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAiB;IACtC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkB;gBAE5B,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM;IASlD,oFAAoF;IAC9E,kBAAkB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAM3E,mDAAmD;IAC7C,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAU/D;;;;;;;OAOG;IACG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAgB9F,gBAAgB,CAAC,KAAK,EAAE;QAC5B,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;KAC9B,GAAG,OAAO,CAAC,UAAU,CAAC;IAkCjB,gBAAgB,CACpB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC,CAAC,GAC3E,OAAO,CAAC,UAAU,CAAC;IAoChB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAgB9C,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IAW1E,UAAU,IAAI,IAAI;IAQlB,0CAA0C;IAC1C,OAAO,CAAC,mBAAmB;CAS5B"}

package/dist/service/permission.service.js

@@ -54,33 +54,33 @@ class PermissionService {
         const permission = await this.getPermissionByKey(permissionKey);
         if (!permission?.method)
             return false;
-        const methodLower = method.toUpperCase();
-        return permission.method[methodLower] === true;
+        const methodKey = method.toUpperCase();
+        return permission.method[methodKey] === true;
     }
     // ---------------------------------------------------------------------------
     // CRUD — create
     // ---------------------------------------------------------------------------
     async createPermission(input) {
         if (!input.role?.trim()) {
-            throw new exception_1.ErrorHttp({ code: 400, error: "BadRequest" }, "Role is required");
+            throw new exception_1.ErrorHttp(exception_1.HTTP.BAD_REQUEST, "Role is required");
         }
         if (!input.resource?.trim()) {
-            throw new exception_1.ErrorHttp({ code: 400, error: "BadRequest" }, "Resource is required");
+            throw new exception_1.ErrorHttp(exception_1.HTTP.BAD_REQUEST, "Resource is required");
         }
         if (!input.scope?.trim()) {
-            throw new exception_1.ErrorHttp({ code: 400, error: "BadRequest" }, "Scope is required");
+            throw new exception_1.ErrorHttp(exception_1.HTTP.BAD_REQUEST, "Scope is required");
         }
         // Duplicate check
-        const permissionKey = `${input.role}#${input.resource}#${input.scope}`;
+        const permissionKey = `${input.role.trim()}#${input.resource.trim()}#${input.scope.trim()}`;
         const existing = await this.repo.findByPermissionKey(permissionKey);
         if (existing) {
-            throw new exception_1.ErrorHttp({ code: 409, error: "Conflict" }, `Permission "${permissionKey}" already exists`);
+            throw new exception_1.ErrorHttp(exception_1.HTTP.CONFLICT, `Permission "${permissionKey}" already exists`);
         }
         const saved = await this.repo.save({
             role: input.role.trim(),
             resource: input.resource.trim(),
             scope: input.scope.trim(),
-            method: input.method ?? {},
+            method: this.normalizeMethodKeys(input.method ?? {}),
             permissionKey,
         });
         this.cache.clear();
@@ -91,10 +91,10 @@ class PermissionService {
     // ---------------------------------------------------------------------------
     async updatePermission(id, updates) {
         if (!id)
-            throw new exception_1.ErrorHttp({ code: 400, error: "BadRequest" }, "Permission id is required");
+            throw new exception_1.ErrorHttp(exception_1.HTTP.BAD_REQUEST, "Permission id is required");
         const existing = await this.repo.findById(id);
         if (!existing)
-            throw new exception_1.ErrorHttp({ code: 404, error: "NotFound" }, `Permission "${id}" not found`);
+            throw new exception_1.ErrorHttp(exception_1.HTTP.NOT_FOUND, `Permission "${id}" not found`);
         const data = { id };
         if (updates.role !== undefined)
             data.role = updates.role.trim();
@@ -103,7 +103,7 @@ class PermissionService {
         if (updates.scope !== undefined)
             data.scope = updates.scope.trim();
         if (updates.method !== undefined)
-            data.method = updates.method;
+            data.method = this.normalizeMethodKeys(updates.method);
         // Rebuild key if any key component changed
         const role = data.role ?? existing.role;
         const resource = data.resource ?? existing.resource;
@@ -113,7 +113,7 @@ class PermissionService {
         if (data.permissionKey !== existing.permissionKey) {
             const conflict = await this.repo.findByPermissionKey(data.permissionKey);
             if (conflict) {
-                throw new exception_1.ErrorHttp({ code: 409, error: "Conflict" }, `Permission "${data.permissionKey}" already exists`);
+                throw new exception_1.ErrorHttp(exception_1.HTTP.CONFLICT, `Permission "${data.permissionKey}" already exists`);
             }
         }
         const updated = await this.repo.update(data);
@@ -125,10 +125,10 @@ class PermissionService {
     // ---------------------------------------------------------------------------
     async deletePermission(id) {
         if (!id)
-            throw new exception_1.ErrorHttp({ code: 400, error: "BadRequest" }, "Permission id is required");
+            throw new exception_1.ErrorHttp(exception_1.HTTP.BAD_REQUEST, "Permission id is required");
         const existing = await this.repo.findById(id);
         if (!existing)
-            throw new exception_1.ErrorHttp({ code: 404, error: "NotFound" }, `Permission "${id}" not found`);
+            throw new exception_1.ErrorHttp(exception_1.HTTP.NOT_FOUND, `Permission "${id}" not found`);
         const result = await this.repo.delete(id);
         this.cache.clear();
         return result;
@@ -137,6 +137,9 @@ class PermissionService {
     // CRUD — list
     // ---------------------------------------------------------------------------
     async listPermissions(filter) {
+        if (!filter) {
+            return this.repo.scan();
+        }
         return this.repo.findByIndex(filter);
     }
     // ---------------------------------------------------------------------------
@@ -145,6 +148,19 @@ class PermissionService {
     clearCache() {
         this.cache.clear();
     }
+    // ---------------------------------------------------------------------------
+    // Utils
+    // ---------------------------------------------------------------------------
+    /** Normalize method keys to uppercase. */
+    normalizeMethodKeys(method) {
+        const normalized = {};
+        for (const key in method) {
+            if (method[key] === true) {
+                normalized[key.toUpperCase()] = true;
+            }
+        }
+        return normalized;
+    }
 }
 exports.PermissionService = PermissionService;
 //# sourceMappingURL=permission.service.js.map

package/dist/service/permission.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"permission.service.js","sourceRoot":"","sources":["../../src/service/permission.service.ts"],"names":[],"mappings":";;;AACA,4CAAyC;AACzC,yDAAqD;AACrD,uDAAmD;AAGnD;;;;;;;;;GASG;AACH,MAAa,iBAAiB;IACX,IAAI,CAAiB;IACrB,KAAK,CAAkB;IAExC,YAAY,SAAiB,EAAE,UAAmB;QAChD,IAAI,CAAC,IAAI,GAAG,IAAI,gCAAc,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,kCAAe,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED,8EAA8E;IAC9E,cAAc;IACd,8EAA8E;IAE9E,oFAAoF;IACpF,KAAK,CAAC,kBAAkB,CAAC,aAAqB;QAC5C,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC;QAEhC,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,aAAa,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,CAAC;IAC5G,CAAC;IAED,mDAAmD;IACnD,KAAK,CAAC,iBAAiB,CAAC,EAAU;QAChC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAErB,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,8EAA8E;IAC9E,mBAAmB;IACnB,8EAA8E;IAE9E;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CAAC,IAAY,EAAE,QAAgB,EAAE,KAAa,EAAE,MAAc;QAC/E,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1D,MAAM,aAAa,GAAG,GAAG,IAAI,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;QACrD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,EAAE,MAAM;YAAE,OAAO,KAAK,CAAC;QAEtC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAgC,CAAC;QAEvE,OAAO,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC;IACjD,CAAC;IAED,8EAA8E;IAC9E,gBAAgB;IAChB,8EAA8E;IAE9E,KAAK,CAAC,gBAAgB,CAAC,KAKtB;QACC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,qBAAS,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,kBAAkB,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;YAC5B,MAAM,IAAI,qBAAS,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,sBAAsB,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,qBAAS,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,mBAAmB,CAAC,CAAC;QAC/E,CAAC;QAED,kBAAkB;QAClB,MAAM,aAAa,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACvE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;QACpE,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,qBAAS,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,eAAe,aAAa,kBAAkB,CAAC,CAAC;QACxG,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACjC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;YACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE;YAC/B,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE;YACzB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE;YAC1B,aAAa;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8EAA8E;IAC9E,gBAAgB;IAChB,8EAA8E;IAE9E,KAAK,CAAC,gBAAgB,CACpB,EAAU,EACV,OAA4E;QAE5E,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,qBAAS,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,2BAA2B,CAAC,CAAC;QAE9F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,qBAAS,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;QAErG,MAAM,IAAI,GAAwB,EAAE,EAAE,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChE,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;YAAE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5E,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACnE,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAE/D,2CAA2C;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC;QAC3C,IAAI,CAAC,aAAa,GAAG,GAAG,IAAI,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;QAEpD,gDAAgD;QAChD,IAAI,IAAI,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACzE,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,qBAAS,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,eAAe,IAAI,CAAC,aAAa,kBAAkB,CAAC,CAAC;YAC7G,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE7C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,8EAA8E;IAC9E,gBAAgB;IAChB,8EAA8E;IAE9E,KAAK,CAAC,gBAAgB,CAAC,EAAU;QAC/B,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,qBAAS,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,2BAA2B,CAAC,CAAC;QAE9F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,qBAAS,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;QAErG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAE1C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,8EAA8E;IAC9E,cAAc;IACd,8EAA8E;IAE9E,KAAK,CAAC,eAAe,CAAC,MAAe;QACnC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,8EAA8E;IAC9E,8BAA8B;IAC9B,8EAA8E;IAE9E,UAAU;QACR,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF;AAhKD,8CAgKC","sourcesContent":["import { Permission } from \"../model/role.model\";\nimport { ErrorHttp } from \"../exception\";\nimport { PermissionCache } from \"./permission.cache\";\nimport { PermissionRepo } from \"./permission.repo\";\nimport { Filter, List } from \"@chinggis/types\";\n\n/**\n * PermissionService — cache + orchestration layer for Permission entities.\n *\n * Design decisions:\n * - Read-through cache via PermissionCache (in-flight dedup, TTL).\n * - Repository handles only DB I/O.\n * - Cache invalidation on every mutation.\n * - ~100 roles total, read-heavy → caching makes sense.\n * - Cache keyed by `perm:{permissionKey}` for deterministic, namespaced lookup.\n */\nexport class PermissionService {\n  private readonly repo: PermissionRepo;\n  private readonly cache: PermissionCache;\n\n  constructor(tableName: string, cacheTtlMs?: number) {\n    this.repo = new PermissionRepo(tableName);\n    this.cache = new PermissionCache(cacheTtlMs);\n  }\n\n  // ---------------------------------------------------------------------------\n  // Core lookup\n  // ---------------------------------------------------------------------------\n\n  /** Fetch Permission by composite key (role#resource#scope). Read-through cached. */\n  async getPermissionByKey(permissionKey: string): Promise<Permission | null> {\n    if (!permissionKey) return null;\n\n    return this.cache.getOrFetch(`perm:${permissionKey}`, () => this.repo.findByPermissionKey(permissionKey));\n  }\n\n  /** Fetch Permission by id. Read-through cached. */\n  async getPermissionById(id: string): Promise<Permission | null> {\n    if (!id) return null;\n\n    return this.cache.getOrFetch(`id:${id}`, () => this.repo.findById(id));\n  }\n\n  // ---------------------------------------------------------------------------\n  // Permission check\n  // ---------------------------------------------------------------------------\n\n  /**\n   * Check if the given role+resource+scope has a specific HTTP method allowed.\n   *\n   * Builds the permissionKey `role#resource#scope`, fetches the Permission,\n   * and checks the method map.\n   *\n   * @returns `true` if allowed, `false` otherwise.\n   */\n  async hasPermission(role: string, resource: string, scope: string, method: string): Promise<boolean> {\n    if (!role || !resource || !scope || !method) return false;\n\n    const permissionKey = `${role}#${resource}#${scope}`;\n    const permission = await this.getPermissionByKey(permissionKey);\n    if (!permission?.method) return false;\n\n    const methodLower = method.toUpperCase() as keyof Permission[\"method\"];\n\n    return permission.method[methodLower] === true;\n  }\n\n  // ---------------------------------------------------------------------------\n  // CRUD — create\n  // ---------------------------------------------------------------------------\n\n  async createPermission(input: {\n    role: string;\n    resource: string;\n    scope: string;\n    method: Permission[\"method\"];\n  }): Promise<Permission> {\n    if (!input.role?.trim()) {\n      throw new ErrorHttp({ code: 400, error: \"BadRequest\" }, \"Role is required\");\n    }\n    if (!input.resource?.trim()) {\n      throw new ErrorHttp({ code: 400, error: \"BadRequest\" }, \"Resource is required\");\n    }\n    if (!input.scope?.trim()) {\n      throw new ErrorHttp({ code: 400, error: \"BadRequest\" }, \"Scope is required\");\n    }\n\n    // Duplicate check\n    const permissionKey = `${input.role}#${input.resource}#${input.scope}`;\n    const existing = await this.repo.findByPermissionKey(permissionKey);\n    if (existing) {\n      throw new ErrorHttp({ code: 409, error: \"Conflict\" }, `Permission \"${permissionKey}\" already exists`);\n    }\n\n    const saved = await this.repo.save({\n      role: input.role.trim(),\n      resource: input.resource.trim(),\n      scope: input.scope.trim(),\n      method: input.method ?? {},\n      permissionKey,\n    });\n\n    this.cache.clear();\n    return saved;\n  }\n\n  // ---------------------------------------------------------------------------\n  // CRUD — update\n  // ---------------------------------------------------------------------------\n\n  async updatePermission(\n    id: string,\n    updates: Partial<Pick<Permission, \"role\" | \"resource\" | \"scope\" | \"method\">>,\n  ): Promise<Permission> {\n    if (!id) throw new ErrorHttp({ code: 400, error: \"BadRequest\" }, \"Permission id is required\");\n\n    const existing = await this.repo.findById(id);\n    if (!existing) throw new ErrorHttp({ code: 404, error: \"NotFound\" }, `Permission \"${id}\" not found`);\n\n    const data: Partial<Permission> = { id };\n    if (updates.role !== undefined) data.role = updates.role.trim();\n    if (updates.resource !== undefined) data.resource = updates.resource.trim();\n    if (updates.scope !== undefined) data.scope = updates.scope.trim();\n    if (updates.method !== undefined) data.method = updates.method;\n\n    // Rebuild key if any key component changed\n    const role = data.role ?? existing.role;\n    const resource = data.resource ?? existing.resource;\n    const scope = data.scope ?? existing.scope;\n    data.permissionKey = `${role}#${resource}#${scope}`;\n\n    // Check for duplicate key if components changed\n    if (data.permissionKey !== existing.permissionKey) {\n      const conflict = await this.repo.findByPermissionKey(data.permissionKey);\n      if (conflict) {\n        throw new ErrorHttp({ code: 409, error: \"Conflict\" }, `Permission \"${data.permissionKey}\" already exists`);\n      }\n    }\n\n    const updated = await this.repo.update(data);\n\n    this.cache.clear();\n    return updated;\n  }\n\n  // ---------------------------------------------------------------------------\n  // CRUD — delete\n  // ---------------------------------------------------------------------------\n\n  async deletePermission(id: string): Promise<boolean> {\n    if (!id) throw new ErrorHttp({ code: 400, error: \"BadRequest\" }, \"Permission id is required\");\n\n    const existing = await this.repo.findById(id);\n    if (!existing) throw new ErrorHttp({ code: 404, error: \"NotFound\" }, `Permission \"${id}\" not found`);\n\n    const result = await this.repo.delete(id);\n\n    this.cache.clear();\n    return result;\n  }\n\n  // ---------------------------------------------------------------------------\n  // CRUD — list\n  // ---------------------------------------------------------------------------\n\n  async listPermissions(filter?: Filter): Promise<List<Partial<Permission>>> {\n    return this.repo.findByIndex(filter);\n  }\n\n  // ---------------------------------------------------------------------------\n  // Cache control (for testing)\n  // ---------------------------------------------------------------------------\n\n  clearCache(): void {\n    this.cache.clear();\n  }\n}\n"]}
+{"version":3,"file":"permission.service.js","sourceRoot":"","sources":["../../src/service/permission.service.ts"],"names":[],"mappings":";;;AACA,4CAA+C;AAC/C,yDAAqD;AACrD,uDAAmD;AAGnD;;;;;;;;;GASG;AACH,MAAa,iBAAiB;IACX,IAAI,CAAiB;IACrB,KAAK,CAAkB;IAExC,YAAY,SAAiB,EAAE,UAAmB;QAChD,IAAI,CAAC,IAAI,GAAG,IAAI,gCAAc,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,kCAAe,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED,8EAA8E;IAC9E,cAAc;IACd,8EAA8E;IAE9E,oFAAoF;IACpF,KAAK,CAAC,kBAAkB,CAAC,aAAqB;QAC5C,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC;QAEhC,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,aAAa,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,CAAC;IAC5G,CAAC;IAED,mDAAmD;IACnD,KAAK,CAAC,iBAAiB,CAAC,EAAU;QAChC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAErB,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,8EAA8E;IAC9E,mBAAmB;IACnB,8EAA8E;IAE9E;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CAAC,IAAY,EAAE,QAAgB,EAAE,KAAa,EAAE,MAAc;QAC/E,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1D,MAAM,aAAa,GAAG,GAAG,IAAI,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;QACrD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,EAAE,MAAM;YAAE,OAAO,KAAK,CAAC;QAEtC,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,EAAgC,CAAC;QAErE,OAAO,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;IAC/C,CAAC;IAED,8EAA8E;IAC9E,gBAAgB;IAChB,8EAA8E;IAE9E,KAAK,CAAC,gBAAgB,CAAC,KAKtB;QACC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,qBAAS,CAAC,gBAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;YAC5B,MAAM,IAAI,qBAAS,CAAC,gBAAI,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,qBAAS,CAAC,gBAAI,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;QAC7D,CAAC;QAED,kBAAkB;QAClB,MAAM,aAAa,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;QACpE,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,qBAAS,CAAC,gBAAI,CAAC,QAAQ,EAAE,eAAe,aAAa,kBAAkB,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACjC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;YACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE;YAC/B,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE;YACzB,MAAM,EAAE,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;YACpD,aAAa;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8EAA8E;IAC9E,gBAAgB;IAChB,8EAA8E;IAE9E,KAAK,CAAC,gBAAgB,CACpB,EAAU,EACV,OAA4E;QAE5E,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,qBAAS,CAAC,gBAAI,CAAC,WAAW,EAAE,2BAA2B,CAAC,CAAC;QAE5E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,qBAAS,CAAC,gBAAI,CAAC,SAAS,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;QAEnF,MAAM,IAAI,GAAwB,EAAE,EAAE,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChE,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;YAAE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5E,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACnE,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAEzF,2CAA2C;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC;QAC3C,IAAI,CAAC,aAAa,GAAG,GAAG,IAAI,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;QAEpD,gDAAgD;QAChD,IAAI,IAAI,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACzE,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,qBAAS,CAAC,gBAAI,CAAC,QAAQ,EAAE,eAAe,IAAI,CAAC,aAAa,kBAAkB,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE7C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,8EAA8E;IAC9E,gBAAgB;IAChB,8EAA8E;IAE9E,KAAK,CAAC,gBAAgB,CAAC,EAAU;QAC/B,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,qBAAS,CAAC,gBAAI,CAAC,WAAW,EAAE,2BAA2B,CAAC,CAAC;QAE5E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,qBAAS,CAAC,gBAAI,CAAC,SAAS,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;QAEnF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAE1C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,8EAA8E;IAC9E,cAAc;IACd,8EAA8E;IAE9E,KAAK,CAAC,eAAe,CAAC,MAAe;QACnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,8EAA8E;IAC9E,8BAA8B;IAC9B,8EAA8E;IAE9E,UAAU;QACR,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,8EAA8E;IAC9E,QAAQ;IACR,8EAA8E;IAE9E,0CAA0C;IAClC,mBAAmB,CAAC,MAA4B;QACtD,MAAM,UAAU,GAAyB,EAAS,CAAC;QACnD,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;gBACzB,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC;YACvC,CAAC;QACH,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;CACF;AAlLD,8CAkLC","sourcesContent":["import { Permission } from \"../model/role.model\";\nimport { ErrorHttp, HTTP } from \"../exception\";\nimport { PermissionCache } from \"./permission.cache\";\nimport { PermissionRepo } from \"./permission.repo\";\nimport { Filter, List } from \"@chinggis/types\";\n\n/**\n * PermissionService — cache + orchestration layer for Permission entities.\n *\n * Design decisions:\n * - Read-through cache via PermissionCache (in-flight dedup, TTL).\n * - Repository handles only DB I/O.\n * - Cache invalidation on every mutation.\n * - ~100 roles total, read-heavy → caching makes sense.\n * - Cache keyed by `perm:{permissionKey}` for deterministic, namespaced lookup.\n */\nexport class PermissionService {\n  private readonly repo: PermissionRepo;\n  private readonly cache: PermissionCache;\n\n  constructor(tableName: string, cacheTtlMs?: number) {\n    this.repo = new PermissionRepo(tableName);\n    this.cache = new PermissionCache(cacheTtlMs);\n  }\n\n  // ---------------------------------------------------------------------------\n  // Core lookup\n  // ---------------------------------------------------------------------------\n\n  /** Fetch Permission by composite key (role#resource#scope). Read-through cached. */\n  async getPermissionByKey(permissionKey: string): Promise<Permission | null> {\n    if (!permissionKey) return null;\n\n    return this.cache.getOrFetch(`perm:${permissionKey}`, () => this.repo.findByPermissionKey(permissionKey));\n  }\n\n  /** Fetch Permission by id. Read-through cached. */\n  async getPermissionById(id: string): Promise<Permission | null> {\n    if (!id) return null;\n\n    return this.cache.getOrFetch(`id:${id}`, () => this.repo.findById(id));\n  }\n\n  // ---------------------------------------------------------------------------\n  // Permission check\n  // ---------------------------------------------------------------------------\n\n  /**\n   * Check if the given role+resource+scope has a specific HTTP method allowed.\n   *\n   * Builds the permissionKey `role#resource#scope`, fetches the Permission,\n   * and checks the method map.\n   *\n   * @returns `true` if allowed, `false` otherwise.\n   */\n  async hasPermission(role: string, resource: string, scope: string, method: string): Promise<boolean> {\n    if (!role || !resource || !scope || !method) return false;\n\n    const permissionKey = `${role}#${resource}#${scope}`;\n    const permission = await this.getPermissionByKey(permissionKey);\n    if (!permission?.method) return false;\n\n    const methodKey = method.toUpperCase() as keyof Permission[\"method\"];\n\n    return permission.method[methodKey] === true;\n  }\n\n  // ---------------------------------------------------------------------------\n  // CRUD — create\n  // ---------------------------------------------------------------------------\n\n  async createPermission(input: {\n    role: string;\n    resource: string;\n    scope: string;\n    method: Permission[\"method\"];\n  }): Promise<Permission> {\n    if (!input.role?.trim()) {\n      throw new ErrorHttp(HTTP.BAD_REQUEST, \"Role is required\");\n    }\n    if (!input.resource?.trim()) {\n      throw new ErrorHttp(HTTP.BAD_REQUEST, \"Resource is required\");\n    }\n    if (!input.scope?.trim()) {\n      throw new ErrorHttp(HTTP.BAD_REQUEST, \"Scope is required\");\n    }\n\n    // Duplicate check\n    const permissionKey = `${input.role.trim()}#${input.resource.trim()}#${input.scope.trim()}`;\n    const existing = await this.repo.findByPermissionKey(permissionKey);\n    if (existing) {\n      throw new ErrorHttp(HTTP.CONFLICT, `Permission \"${permissionKey}\" already exists`);\n    }\n\n    const saved = await this.repo.save({\n      role: input.role.trim(),\n      resource: input.resource.trim(),\n      scope: input.scope.trim(),\n      method: this.normalizeMethodKeys(input.method ?? {}),\n      permissionKey,\n    });\n\n    this.cache.clear();\n    return saved;\n  }\n\n  // ---------------------------------------------------------------------------\n  // CRUD — update\n  // ---------------------------------------------------------------------------\n\n  async updatePermission(\n    id: string,\n    updates: Partial<Pick<Permission, \"role\" | \"resource\" | \"scope\" | \"method\">>,\n  ): Promise<Permission> {\n    if (!id) throw new ErrorHttp(HTTP.BAD_REQUEST, \"Permission id is required\");\n\n    const existing = await this.repo.findById(id);\n    if (!existing) throw new ErrorHttp(HTTP.NOT_FOUND, `Permission \"${id}\" not found`);\n\n    const data: Partial<Permission> = { id };\n    if (updates.role !== undefined) data.role = updates.role.trim();\n    if (updates.resource !== undefined) data.resource = updates.resource.trim();\n    if (updates.scope !== undefined) data.scope = updates.scope.trim();\n    if (updates.method !== undefined) data.method = this.normalizeMethodKeys(updates.method);\n\n    // Rebuild key if any key component changed\n    const role = data.role ?? existing.role;\n    const resource = data.resource ?? existing.resource;\n    const scope = data.scope ?? existing.scope;\n    data.permissionKey = `${role}#${resource}#${scope}`;\n\n    // Check for duplicate key if components changed\n    if (data.permissionKey !== existing.permissionKey) {\n      const conflict = await this.repo.findByPermissionKey(data.permissionKey);\n      if (conflict) {\n        throw new ErrorHttp(HTTP.CONFLICT, `Permission \"${data.permissionKey}\" already exists`);\n      }\n    }\n\n    const updated = await this.repo.update(data);\n\n    this.cache.clear();\n    return updated;\n  }\n\n  // ---------------------------------------------------------------------------\n  // CRUD — delete\n  // ---------------------------------------------------------------------------\n\n  async deletePermission(id: string): Promise<boolean> {\n    if (!id) throw new ErrorHttp(HTTP.BAD_REQUEST, \"Permission id is required\");\n\n    const existing = await this.repo.findById(id);\n    if (!existing) throw new ErrorHttp(HTTP.NOT_FOUND, `Permission \"${id}\" not found`);\n\n    const result = await this.repo.delete(id);\n\n    this.cache.clear();\n    return result;\n  }\n\n  // ---------------------------------------------------------------------------\n  // CRUD — list\n  // ---------------------------------------------------------------------------\n\n  async listPermissions(filter?: Filter): Promise<List<Partial<Permission>>> {\n    if (!filter) {\n      return this.repo.scan();\n    }\n    return this.repo.findByIndex(filter);\n  }\n\n  // ---------------------------------------------------------------------------\n  // Cache control (for testing)\n  // ---------------------------------------------------------------------------\n\n  clearCache(): void {\n    this.cache.clear();\n  }\n\n  // ---------------------------------------------------------------------------\n  // Utils\n  // ---------------------------------------------------------------------------\n\n  /** Normalize method keys to uppercase. */\n  private normalizeMethodKeys(method: Permission[\"method\"]): Permission[\"method\"] {\n    const normalized: Permission[\"method\"] = {} as any;\n    for (const key in method) {\n      if (method[key] === true) {\n        normalized[key.toUpperCase()] = true;\n      }\n    }\n    return normalized;\n  }\n}\n"]}

package/dist/service/socket.service.d.ts

@@ -4,3 +4,4 @@ export declare class BaseSocketServiceIml<T> implements BaseSocketService<T> {
     private readonly apiGatewayManagement;
     sendSocketMessage(connectionId: string, data: T): Promise<any>;
 }
+//# sourceMappingURL=socket.service.d.ts.map

package/dist/service/socket.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket.service.d.ts","sourceRoot":"","sources":["../../src/service/socket.service.ts"],"names":[],"mappings":"AAEA,OAAO,wBAAwB,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAG/D,qBACa,oBAAoB,CAAC,CAAC,CAAE,YAAW,iBAAiB,CAAC,CAAC,CAAC;IAClC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAuB;IAE5F,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC;CAQ/D"}

package/dist/service/socket.service.interface.d.ts

@@ -1,3 +1,4 @@
 export interface BaseSocketService<T> {
     sendSocketMessage(connectionId: string, data: T): Promise<any>;
 }
+//# sourceMappingURL=socket.service.interface.d.ts.map

package/dist/service/socket.service.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket.service.interface.d.ts","sourceRoot":"","sources":["../../src/service/socket.service.interface.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;CAChE"}

package/dist/service/stream.service.d.ts

@@ -15,3 +15,4 @@ export declare abstract class StreamServiceImpl<T extends BaseEntity, D extends
     abstract processDeletion(oldItem: T, newItem: T, tableName?: string): Promise<any>;
     abstract processInsertion(newItem: T, tableName: string): Promise<any>;
 }
+//# sourceMappingURL=stream.service.d.ts.map

package/dist/service/stream.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream.service.d.ts","sourceRoot":"","sources":["../../src/service/stream.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAkB,UAAU,EAAkB,cAAc,EAAE,MAAM,UAAU,CAAC;AAE9G,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,kBAAkB,CAAC;AAG1B,8BAAsB,iBAAiB,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,CAC5G,YAAW,aAAa,CAAC,CAAC,CAAC;IAE3B,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACpB,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACpB,SAAS,CAAC,MAAM,EAAE,YAAY,CAAC;IAE/B,SAAS,aAAa,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IAa1C,YAAY,IAAI,MAAM;IAItB,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,GAAG,OAAO;IAMpE,aAAa,IAAI,cAAc;IAI/B,SAAS,CAAC,MAAM,EAAE,YAAY;IAe9B,QAAQ,CAAC,mBAAmB,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAErF,QAAQ,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAElF,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;CACvE"}

package/dist/service/stream.service.interface.d.ts

@@ -12,3 +12,4 @@ export interface StreamService<T extends BaseEntity> {
     processInsertion(newItem: T, tableName: string): Promise<any>;
     processModification(itemOld: T, itemNew: T, tableName?: string): Promise<any>;
 }
+//# sourceMappingURL=stream.service.interface.d.ts.map

package/dist/service/stream.service.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream.service.interface.d.ts","sourceRoot":"","sources":["../../src/service/stream.service.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C;;;GAGG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,SAAS,UAAU;IACjD,SAAS,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAAC;IAEtC,YAAY,IAAI,MAAM,CAAC;IAEvB,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,GAAG,OAAO,CAAC;IAErE,eAAe,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAE1E,gBAAgB,CAAC,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAE9D,mBAAmB,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;CAC/E"}

package/dist/service/validation.service.interface.d.ts

@@ -1,2 +1,3 @@
 export interface ValidationService {
 }
+//# sourceMappingURL=validation.service.interface.d.ts.map

package/dist/service/validation.service.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.service.interface.d.ts","sourceRoot":"","sources":["../../src/service/validation.service.interface.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;CAAG"}

package/dist/utils/array.util.d.ts

@@ -5,3 +5,4 @@
  * @returns An array of chunks.
  */
 export declare const chunkArray: <T>(array: T[], chunkSize: number) => T[][];
+//# sourceMappingURL=array.util.d.ts.map

package/dist/utils/array.util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"array.util.d.ts","sourceRoot":"","sources":["../../src/utils/array.util.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,UAAU,GAAI,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,WAAW,MAAM,KAAG,CAAC,EAAE,EAMhE,CAAC"}

package/dist/utils/auth.util.d.ts

@@ -9,3 +9,4 @@ export interface AuthConfig {
         secretAccessKey: string;
     };
 }
+//# sourceMappingURL=auth.util.d.ts.map

package/dist/utils/auth.util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.util.d.ts","sourceRoot":"","sources":["../../src/utils/auth.util.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,iBAAiB,QAAO;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;CAKzB,CAAC;AAEF,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE;QACZ,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;CACH"}

package/dist/utils/data.util.d.ts

@@ -18,3 +18,4 @@ export declare class EntityBuilder<T extends ZodType<any, any, any>> {
     private shouldInvalidate;
 }
 export {};
+//# sourceMappingURL=data.util.d.ts.map

package/dist/utils/data.util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data.util.d.ts","sourceRoot":"","sources":["../../src/utils/data.util.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAmF,OAAO,EAAE,MAAM,KAAK,CAAC;AAElH,KAAK,aAAa,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC;AAExC;;;;;;GAMG;AACH,qBAAa,aAAa,CAAC,CAAC,SAAS,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;IAIvD,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAL9B,OAAO,CAAC,IAAI,CAAK;gBAGE,MAAM,EAAE,CAAC,EACT,OAAO,GAAE,aAAoB,EAC7B,WAAW,GAAE,MAAU;IAG1C,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAInB,OAAO,CAAC,YAAY;IAyCpB,OAAO,CAAC,gBAAgB;CAYzB"}

package/dist/utils/date.util.d.ts

@@ -16,3 +16,4 @@ export declare function minDateStr(dateStrList: any[]): string;
  * @returns The newest date string, or an empty string if the list is empty.
  */
 export declare function maxDateStr(dateStrList: any[]): string;
+//# sourceMappingURL=date.util.d.ts.map

package/dist/utils/date.util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"date.util.d.ts","sourceRoot":"","sources":["../../src/utils/date.util.ts"],"names":[],"mappings":"AAAA,OAAc,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAErC,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAGpD;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,KAAK,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,KAAK,GAAG,OAAO,CAInG;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,KAAK,GAAG,OAAO,CAEnE;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAYnD;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,CAElE;AACD;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,MAAM,CAErD;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,MAAM,CAErD"}

package/dist/utils/dynamodb.utils.d.ts

@@ -3,7 +3,7 @@ import { Filter } from "../model";
 import { ActionDynamoDB, DynamoIndexMap } from "../model/dynamodb.model";
 export declare const generateUUID: () => string;
 export declare const buildDynamoDBFilterConditions: (filter: Filter, indexMap: DynamoIndexMap) => FilterExpression;
-export declare const buildQueryDB: (tableName: string, filter: Filter, indexMap: DynamoIndexMap) => QueryCommandInput | ScanCommandInput;
+export declare const buildQueryDB: (tableName: string, filter: Filter, indexMap: DynamoIndexMap) => QueryCommandInput;
 export declare const buildDynamoDBScanCommand: ({ tableName, filter, expression, }: {
     tableName: string;
     filter?: Filter;
@@ -46,3 +46,4 @@ export declare function toBase64(inputStr: any): string;
 export declare function getTableName(eventSourceARN: any): string;
 export declare function parseImage(image: any): Record<string, any>;
 export declare function parseEventToAction(action: "INSERT" | "MODIFY" | "REMOVE"): ActionDynamoDB;
+//# sourceMappingURL=dynamodb.utils.d.ts.map

package/dist/utils/dynamodb.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamodb.utils.d.ts","sourceRoot":"","sources":["../../src/utils/dynamodb.utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAI/F,OAAO,EAAE,MAAM,EAAa,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzE,eAAO,MAAM,YAAY,QAAO,MAE/B,CAAC;AAEF,eAAO,MAAM,6BAA6B,GAAI,QAAQ,MAAM,EAAE,UAAU,cAAc,KAAG,gBAwHxF,CAAC;AAmBF,eAAO,MAAM,YAAY,GACvB,WAAW,MAAM,EACjB,QAAQ,MAAM,EACd,UAAU,cAAc,KACvB,iBAoBF,CAAC;AAEF,eAAO,MAAM,wBAAwB,GAAI,oCAItC;IACD,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B,KAAG,gBAeH,CAAC;AAEF,eAAO,MAAM,yBAAyB,GAAI,mDAKvC;IACD,eAAe,EAAE,gBAAgB,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,cAAc,CAAC;CAC1B,KAAG,iBAyDH,CAAC;AAiGF,eAAO,MAAM,mBAAmB,GAAI,OAAO,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,UAAU,cAAc,2BAYvF,CAAC;AAEF,eAAO,MAAM,aAAa,GAAI,QAAQ,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,UAAU,cAAc,wBAWlF,CAAC;AACF,eAAO,MAAM,6BAA6B,GACxC,QAAQ,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC3B,YAAY,MAAM,EAAE,EACpB,YAAY,MAAM,KACjB,OAOF,CAAC;AAEF,eAAO,MAAM,aAAa,GAAI,YAAY,MAAM,EAAE,EAAE,UAAU,cAAc,KAAG,MAAM,EAoDpF,CAAC;AAEF,wBAAgB,UAAU,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAErF;AAED,eAAO,MAAM,iBAAiB,GAAI,iBAE/B;IACD,UAAU,CAAC,EAAE;QACX,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,wBAAwB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClD,yBAAyB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;KACjD,CAAC;CACH,KAAG,OAQH,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,gBAAgB,WAIvD;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CACvC;AAED,eAAO,MAAM,cAAc,GAAI,KAAK,MAAM,EAAE,OAAO,MAAM,EAAE,UAAU,cAAc,KAAG,MAAM,GAAG,MAU9F,CAAC;AAEF,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,wBAAwB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,yBAAyB,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChD;AAgCD,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,WAAW,GAAE,MAAM,EAAO,EAC1B,cAAc,CAAC,EAAE,MAAM,EAAE,GACxB,gBAAgB,CAuClB;AAED,eAAO,MAAM,qBAAqB,GAAI,CAAC,EAAE,SAAS,MAAM,KAAG,CAAC,GAAG,SAU9D,CAAC;AAEF,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAUtG;AAED,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,GAAG,GAAG,MAAM,CAE9C;AAED,wBAAgB,YAAY,CAAC,cAAc,EAAE,GAAG,GAAG,MAAM,CAMxD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,GAAG,uBASpC;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,cAAc,CAWzF"}

package/dist/utils/dynamodb.utils.js

@@ -21,9 +21,12 @@ exports.generateUUID = generateUUID;
 const buildDynamoDBFilterConditions = (filter, indexMap) => {
     if (!filter)
         throw new errors_1.MissingParameterError("filter");
-    const rFields = indexMap.get(filter.indexName)?.rFields ?? [];
+    const indexInfo = indexMap.get(filter.indexName);
+    const rFields = indexInfo?.rFields ?? [];
+    const sortKeyField = indexInfo?.sortKeyField;
     const ignoredKeys = [
         ...rFields,
+        sortKeyField,
         "page",
         "size",
         "sortBy",
@@ -33,14 +36,16 @@ const buildDynamoDBFilterConditions = (filter, indexMap) => {
         "rangeFilterBy",
         "rangeFilterMin",
         "rangeFilterMax",
+        "queryCountLimit",
         "lastKey",
         "indexName",
         "indexValue",
         "indexSortName",
         "indexSortValue",
+        "rangeFilters",
         "fieldsInclude",
         "fieldsExclude",
-    ];
+    ].filter(Boolean);
     const dynamicFilters = (0, reflection_util_1.excludeKeys)(filter, ignoredKeys);
     const expressions = [];
     const attrNames = {};
@@ -54,7 +59,7 @@ const buildDynamoDBFilterConditions = (filter, indexMap) => {
         };
     };
     // Range Filter
-    if (filter.rangeFilterBy) {
+    if (filter.rangeFilterBy && filter.rangeFilterBy !== sortKeyField) {
         const key = filter.rangeFilterBy;
         const { name, value } = genPlaceholder(key);
         attrNames[name] = key;
@@ -129,28 +134,30 @@ const marshallExpressionValue = (value) => (0, util_dynamodb_1.marshall)({ val:
     convertClassInstanceToMap: true,
     removeUndefinedValues: true,
 }).val;
+const marshallKeyConditionValue = (value) => {
+    if (value instanceof Date) {
+        return marshallExpressionValue(value.toISOString().slice(0, 10));
+    }
+    return marshallExpressionValue(value);
+};
 const buildQueryDB = (tableName, filter, indexMap) => {
     if (!tableName || !filter)
         throw new errors_1.MissingParameterError("tableName or filter");
     const filterCondition = (0, exports.buildDynamoDBFilterConditions)(filter, indexMap);
     const indexField = indexMap.get(filter.indexName)?.field;
-    if (indexField) {
-        return (0, exports.buildDynamoDBQueryCommand)({
-            filterCondition,
-            tableName,
-            filter,
-            indexMap,
-        });
+    if (!indexField) {
+        throw new errors_1.ErrorDynamoDB(tableName, "buildQueryDB", "find requires indexName and indexValue; use scan() otherwise");
     }
-    return (0, exports.buildDynamoDBScanCommand)({
-        tableName,
+    return (0, exports.buildDynamoDBQueryCommand)({
+        filterCondition,
         filter,
-        expression: filterCondition,
+        tableName,
+        indexMap,
     });
 };
 exports.buildQueryDB = buildQueryDB;
 const buildDynamoDBScanCommand = ({ tableName, filter, expression, }) => {
-    const scanCommand = { TableName: tableName, Limit: filter?.size ?? 25 };
+    const scanCommand = { TableName: tableName };
     if (filter?.lastKey && filter.lastKey != "undefined")
         scanCommand.ExclusiveStartKey = (0, exports.parseLastEvaluatedKey)(filter.lastKey);
     if (isEmptyExpressions(expression))
@@ -181,17 +188,13 @@ const buildDynamoDBQueryCommand = ({ filter, tableName, filterCondition, indexMa
         [attrKey]: attr,
     };
     let expressionAttributeValues = {
-        [valueKey]: marshallExpressionValue(value),
+        [valueKey]: marshallKeyConditionValue(value),
     };
-    // Add sort key if exist in index map
-    if (filter.indexSortName && filter.indexSortValue && indexInfo.sortKeyField) {
-        const sortAttr = indexInfo.sortKeyField;
-        const sortValue = filter.indexSortValue;
-        const sortAttrKey = `#${sortAttr}`;
-        const sortAttrValueKey = `:${sortAttr}`;
-        keyConditionExpression += ` AND ${sortAttrKey} = ${sortAttrValueKey}`;
-        expressionAttributeNames[sortAttrKey] = sortAttr;
-        expressionAttributeValues[sortAttrValueKey] = marshallExpressionValue(sortValue);
+    const sortKeyCondition = buildSortKeyCondition(filter, indexInfo.sortKeyField);
+    if (sortKeyCondition) {
+        keyConditionExpression += ` AND ${sortKeyCondition.expression}`;
+        Object.assign(expressionAttributeNames, sortKeyCondition.attributeNames);
+        Object.assign(expressionAttributeValues, sortKeyCondition.attributeValues);
     }
     if (filterCondition?.filter) {
         if (filterCondition.attributeNames) {
@@ -221,6 +224,76 @@ const buildDynamoDBQueryCommand = ({ filter, tableName, filterCondition, indexMa
     return queryCommand;
 };
 exports.buildDynamoDBQueryCommand = buildDynamoDBQueryCommand;
+const hasValue = (value) => value !== undefined && value !== null && value !== "";
+const buildSortKeyCondition = (filter, sortKeyField) => {
+    if (!sortKeyField)
+        return undefined;
+    const sortAttrKey = `#${sortKeyField}`;
+    const sortValueKey = `:${sortKeyField}`;
+    const attributeNames = { [sortAttrKey]: sortKeyField };
+    const rangeFilter = filter.rangeFilters?.find((item) => item.fieldName === sortKeyField);
+    if (rangeFilter && (hasValue(rangeFilter.minValue) || hasValue(rangeFilter.maxValue))) {
+        return buildSortKeyRangeCondition(sortAttrKey, sortValueKey, attributeNames, rangeFilter);
+    }
+    if (filter.rangeFilterBy === sortKeyField && (hasValue(filter.rangeFilterMin) || hasValue(filter.rangeFilterMax))) {
+        return buildSortKeyRangeCondition(sortAttrKey, sortValueKey, attributeNames, {
+            fieldName: sortKeyField,
+            minValue: filter.rangeFilterMin,
+            maxValue: filter.rangeFilterMax,
+        });
+    }
+    const explicitSortValue = (!filter.indexSortName || filter.indexSortName === sortKeyField) && hasValue(filter.indexSortValue)
+        ? filter.indexSortValue
+        : undefined;
+    const directSortValue = hasValue(filter[sortKeyField]) ? filter[sortKeyField] : undefined;
+    const sortValue = explicitSortValue ?? directSortValue;
+    if (!hasValue(sortValue))
+        return undefined;
+    return {
+        expression: `${sortAttrKey} = ${sortValueKey}`,
+        attributeNames,
+        attributeValues: {
+            [sortValueKey]: marshallKeyConditionValue(sortValue),
+        },
+    };
+};
+const buildSortKeyRangeCondition = (sortAttrKey, sortValueKey, attributeNames, rangeFilter) => {
+    const attributeValues = {};
+    const hasMin = hasValue(rangeFilter.minValue);
+    const hasMax = hasValue(rangeFilter.maxValue);
+    if (hasMin && hasMax) {
+        if (!rangeFilter.minExclude && !rangeFilter.maxExclude) {
+            attributeValues[`${sortValueKey}_min`] = marshallKeyConditionValue(rangeFilter.minValue);
+            attributeValues[`${sortValueKey}_max`] = marshallKeyConditionValue(rangeFilter.maxValue);
+            return {
+                expression: `${sortAttrKey} BETWEEN ${sortValueKey}_min AND ${sortValueKey}_max`,
+                attributeNames,
+                attributeValues,
+            };
+        }
+        attributeValues[`${sortValueKey}_min`] = marshallKeyConditionValue(rangeFilter.minValue);
+        attributeValues[`${sortValueKey}_max`] = marshallKeyConditionValue(rangeFilter.maxValue);
+        return {
+            expression: `${sortAttrKey} ${rangeFilter.minExclude ? ">" : ">="} ${sortValueKey}_min AND ${sortAttrKey} ${rangeFilter.maxExclude ? "<" : "<="} ${sortValueKey}_max`,
+            attributeNames,
+            attributeValues,
+        };
+    }
+    if (hasMin) {
+        attributeValues[sortValueKey] = marshallKeyConditionValue(rangeFilter.minValue);
+        return {
+            expression: `${sortAttrKey} ${rangeFilter.minExclude ? ">" : ">="} ${sortValueKey}`,
+            attributeNames,
+            attributeValues,
+        };
+    }
+    attributeValues[sortValueKey] = marshallKeyConditionValue(rangeFilter.maxValue);
+    return {
+        expression: `${sortAttrKey} ${rangeFilter.maxExclude ? "<" : "<="} ${sortValueKey}`,
+        attributeNames,
+        attributeValues,
+    };
+};
 const generateIndexValues = (input, indexMap) => {
     const result = { ...input };
     for (const [, { field, rFields, fieldSeparator }] of indexMap.entries()) {
@@ -406,13 +479,15 @@ const parseLastEvaluatedKey = (lastKey) => {
 };
 exports.parseLastEvaluatedKey = parseLastEvaluatedKey;
 function generateLastEvaluatedKey(item, indexField, sortField) {
-    if (!item?.id && !indexField)
+    if (!item?.id && (!indexField || !item?.[indexField]))
         throw new Error("id or indexField not found");
-    const result = { id: item?.id };
-    if (indexField)
-        Object.assign(result, { [indexField]: item[indexField] });
-    if (sortField)
-        Object.assign(result, { [sortField]: item[sortField] });
+    const result = {};
+    if (item?.id)
+        result.id = item.id;
+    if (indexField && item[indexField])
+        result[indexField] = item[indexField];
+    if (sortField && item[sortField])
+        result[sortField] = item[sortField];
     return toBase64(JSON.stringify(result));
 }
 function toBase64(inputStr) {