captify 0.1.18 → 0.1.19

package/dist/permissions/api/permissions.handlers.d.ts

@@ -0,0 +1,370 @@
+/**
+ * Permissions Policy API Handlers
+ * CRUD operations for permission policies
+ */
+import type { NextRequest } from "next/server";
+/**
+ * GET /api/permissions
+ *
+ * Lists all permission policies with optional filtering, sorting, and pagination.
+ *
+ * @query resource - Filter by resource name
+ * @query subjectType - Filter by subject type (user, role, group)
+ * @query effect - Filter by effect (allow, deny)
+ * @query status - Filter by status (enabled, disabled)
+ * @query search - Search in subject and resource
+ * @query sortBy - Sort field (subject, resource, action, effect, status, createdAt)
+ * @query sortOrder - Sort direction (asc, desc)
+ * @query page - Page number (default: 1)
+ * @query limit - Page size (default: 20, max: 100)
+ *
+ * @returns Object containing:
+ *   - policies: Array of policy objects
+ *   - totalCount: Total number of matching policies
+ *   - page: Current page number
+ *   - limit: Current page size
+ *   - totalPages: Total number of pages
+ */
+export declare const listPolicies: (request: NextRequest, context: {
+    params: Promise<Record<string, unknown>>;
+}) => Promise<import("next/server").NextResponse<{
+    error: string;
+} | {
+    policies: {
+        createdAt: number;
+        updatedAt: number;
+        createdById: string;
+        policyId: string;
+        tenantId: string;
+        ptype: "p" | "g";
+        subject: string;
+        subjectType: "role" | "group" | "user";
+        domain: string;
+        resource: "search" | "documents" | "users" | "groups" | "agents" | "feedbacks" | "llm-providers" | "llm-budgets" | "llm-usage" | "permissions" | "ontology" | "search-indices" | "collaborative-docs";
+        actions: ("list" | "download" | "*" | "read" | "update" | "delete" | "chat" | "comment" | "create" | "generate" | "upload" | "enable" | "disable" | "add-to-group" | "remove-from-group" | "list-other-users" | "share")[];
+        effect: "allow" | "deny";
+        status: "disabled" | "enabled";
+        modifiedById?: string | undefined;
+    }[];
+    totalCount: number;
+    page: number;
+    limit: number;
+    totalPages: number;
+}>>;
+/**
+ * GET /api/permissions/[policyId]
+ *
+ * Gets a specific policy by ID.
+ *
+ * @param policyId - The policy ID (from URL path)
+ *
+ * @returns Policy object
+ */
+export declare const getPolicy: (request: NextRequest, context: {
+    params: Promise<{
+        policyId: string;
+    }>;
+}) => Promise<import("next/server").NextResponse<{
+    error: string;
+} | {
+    policy: {
+        createdAt: number;
+        updatedAt: number;
+        createdById: string;
+        policyId: string;
+        tenantId: string;
+        ptype: "p" | "g";
+        subject: string;
+        subjectType: "role" | "group" | "user";
+        domain: string;
+        resource: "search" | "documents" | "users" | "groups" | "agents" | "feedbacks" | "llm-providers" | "llm-budgets" | "llm-usage" | "permissions" | "ontology" | "search-indices" | "collaborative-docs";
+        actions: ("list" | "download" | "*" | "read" | "update" | "delete" | "chat" | "comment" | "create" | "generate" | "upload" | "enable" | "disable" | "add-to-group" | "remove-from-group" | "list-other-users" | "share")[];
+        effect: "allow" | "deny";
+        status: "disabled" | "enabled";
+        modifiedById?: string | undefined;
+    };
+}>>;
+/**
+ * POST /api/permissions
+ *
+ * Creates a new permission policy.
+ *
+ * @body subject - The subject (user ID, role name, or group ID)
+ * @body subjectType - Type of subject (user, role, group)
+ * @body resource - Resource name (agents, documents, etc.)
+ * @body actions - Array of action names (read, list, create, update, delete, etc.)
+ * @body effect - Policy effect (allow, deny)
+ *
+ * @returns Created policy object
+ */
+export declare const createPolicy: (request: NextRequest, context: {
+    params: Promise<Record<string, unknown>>;
+}) => Promise<import("next/server").NextResponse<{
+    error: string;
+} | {
+    policy: {
+        createdAt: number;
+        updatedAt: number;
+        createdById: string;
+        policyId: string;
+        tenantId: string;
+        ptype: "p" | "g";
+        subject: string;
+        subjectType: "role" | "group" | "user";
+        domain: string;
+        resource: "search" | "documents" | "users" | "groups" | "agents" | "feedbacks" | "llm-providers" | "llm-budgets" | "llm-usage" | "permissions" | "ontology" | "search-indices" | "collaborative-docs";
+        actions: ("list" | "download" | "*" | "read" | "update" | "delete" | "chat" | "comment" | "create" | "generate" | "upload" | "enable" | "disable" | "add-to-group" | "remove-from-group" | "list-other-users" | "share")[];
+        effect: "allow" | "deny";
+        status: "disabled" | "enabled";
+        modifiedById?: string | undefined;
+    };
+}>>;
+/**
+ * PATCH /api/permissions/[policyId]
+ *
+ * Updates a policy's action or effect.
+ *
+ * @param policyId - The policy ID (from URL path)
+ * @body action - New action (optional)
+ * @body effect - New effect (optional)
+ *
+ * @returns Updated policy object
+ */
+export declare const updatePolicy: (request: NextRequest, context: {
+    params: Promise<{
+        policyId: string;
+    }>;
+}) => Promise<import("next/server").NextResponse<{
+    error: string;
+} | {
+    policy: {
+        createdAt: number;
+        updatedAt: number;
+        createdById: string;
+        policyId: string;
+        tenantId: string;
+        ptype: "p" | "g";
+        subject: string;
+        subjectType: "role" | "group" | "user";
+        domain: string;
+        resource: "search" | "documents" | "users" | "groups" | "agents" | "feedbacks" | "llm-providers" | "llm-budgets" | "llm-usage" | "permissions" | "ontology" | "search-indices" | "collaborative-docs";
+        actions: ("list" | "download" | "*" | "read" | "update" | "delete" | "chat" | "comment" | "create" | "generate" | "upload" | "enable" | "disable" | "add-to-group" | "remove-from-group" | "list-other-users" | "share")[];
+        effect: "allow" | "deny";
+        status: "disabled" | "enabled";
+        modifiedById?: string | undefined;
+    };
+}>>;
+/**
+ * PATCH /api/permissions/[policyId]/status
+ *
+ * Toggles a policy's enabled/disabled status.
+ *
+ * @param policyId - The policy ID (from URL path)
+ * @body status - New status (enabled, disabled)
+ *
+ * @returns Updated policy object
+ */
+export declare const togglePolicyStatus: (request: NextRequest, context: {
+    params: Promise<{
+        policyId: string;
+    }>;
+}) => Promise<import("next/server").NextResponse<{
+    error: string;
+} | {
+    policy: {
+        createdAt: number;
+        updatedAt: number;
+        createdById: string;
+        policyId: string;
+        tenantId: string;
+        ptype: "p" | "g";
+        subject: string;
+        subjectType: "role" | "group" | "user";
+        domain: string;
+        resource: "search" | "documents" | "users" | "groups" | "agents" | "feedbacks" | "llm-providers" | "llm-budgets" | "llm-usage" | "permissions" | "ontology" | "search-indices" | "collaborative-docs";
+        actions: ("list" | "download" | "*" | "read" | "update" | "delete" | "chat" | "comment" | "create" | "generate" | "upload" | "enable" | "disable" | "add-to-group" | "remove-from-group" | "list-other-users" | "share")[];
+        effect: "allow" | "deny";
+        status: "disabled" | "enabled";
+        modifiedById?: string | undefined;
+    };
+}>>;
+/**
+ * DELETE /api/permissions/[policyId]
+ *
+ * Deletes a policy permanently.
+ *
+ * @param policyId - The policy ID (from URL path)
+ *
+ * @returns 204 No Content on success
+ */
+export declare const deletePolicy: (request: NextRequest, context: {
+    params: Promise<{
+        policyId: string;
+    }>;
+}) => Promise<import("next/server").NextResponse<{
+    error: string;
+} | null>>;
+/**
+ * POST /api/permissions/bulk-delete
+ *
+ * Deletes multiple policies permanently.
+ *
+ * @body policyIds - Array of policy IDs to delete
+ *
+ * @returns Object with deleted IDs and any failures
+ */
+export declare const bulkDeletePolicies: (request: NextRequest, context: {
+    params: Promise<Record<string, unknown>>;
+}) => Promise<import("next/server").NextResponse<{
+    error: string;
+} | {
+    deleted: string[];
+    failed: {
+        policyId: string;
+        error: string;
+    }[];
+}>>;
+/**
+ * Semantic grouped handlers for policies
+ */
+export declare const policyHandlers: {
+    list: (request: NextRequest, context: {
+        params: Promise<Record<string, unknown>>;
+    }) => Promise<import("next/server").NextResponse<{
+        error: string;
+    } | {
+        policies: {
+            createdAt: number;
+            updatedAt: number;
+            createdById: string;
+            policyId: string;
+            tenantId: string;
+            ptype: "p" | "g";
+            subject: string;
+            subjectType: "role" | "group" | "user";
+            domain: string;
+            resource: "search" | "documents" | "users" | "groups" | "agents" | "feedbacks" | "llm-providers" | "llm-budgets" | "llm-usage" | "permissions" | "ontology" | "search-indices" | "collaborative-docs";
+            actions: ("list" | "download" | "*" | "read" | "update" | "delete" | "chat" | "comment" | "create" | "generate" | "upload" | "enable" | "disable" | "add-to-group" | "remove-from-group" | "list-other-users" | "share")[];
+            effect: "allow" | "deny";
+            status: "disabled" | "enabled";
+            modifiedById?: string | undefined;
+        }[];
+        totalCount: number;
+        page: number;
+        limit: number;
+        totalPages: number;
+    }>>;
+    get: (request: NextRequest, context: {
+        params: Promise<{
+            policyId: string;
+        }>;
+    }) => Promise<import("next/server").NextResponse<{
+        error: string;
+    } | {
+        policy: {
+            createdAt: number;
+            updatedAt: number;
+            createdById: string;
+            policyId: string;
+            tenantId: string;
+            ptype: "p" | "g";
+            subject: string;
+            subjectType: "role" | "group" | "user";
+            domain: string;
+            resource: "search" | "documents" | "users" | "groups" | "agents" | "feedbacks" | "llm-providers" | "llm-budgets" | "llm-usage" | "permissions" | "ontology" | "search-indices" | "collaborative-docs";
+            actions: ("list" | "download" | "*" | "read" | "update" | "delete" | "chat" | "comment" | "create" | "generate" | "upload" | "enable" | "disable" | "add-to-group" | "remove-from-group" | "list-other-users" | "share")[];
+            effect: "allow" | "deny";
+            status: "disabled" | "enabled";
+            modifiedById?: string | undefined;
+        };
+    }>>;
+    create: (request: NextRequest, context: {
+        params: Promise<Record<string, unknown>>;
+    }) => Promise<import("next/server").NextResponse<{
+        error: string;
+    } | {
+        policy: {
+            createdAt: number;
+            updatedAt: number;
+            createdById: string;
+            policyId: string;
+            tenantId: string;
+            ptype: "p" | "g";
+            subject: string;
+            subjectType: "role" | "group" | "user";
+            domain: string;
+            resource: "search" | "documents" | "users" | "groups" | "agents" | "feedbacks" | "llm-providers" | "llm-budgets" | "llm-usage" | "permissions" | "ontology" | "search-indices" | "collaborative-docs";
+            actions: ("list" | "download" | "*" | "read" | "update" | "delete" | "chat" | "comment" | "create" | "generate" | "upload" | "enable" | "disable" | "add-to-group" | "remove-from-group" | "list-other-users" | "share")[];
+            effect: "allow" | "deny";
+            status: "disabled" | "enabled";
+            modifiedById?: string | undefined;
+        };
+    }>>;
+    update: (request: NextRequest, context: {
+        params: Promise<{
+            policyId: string;
+        }>;
+    }) => Promise<import("next/server").NextResponse<{
+        error: string;
+    } | {
+        policy: {
+            createdAt: number;
+            updatedAt: number;
+            createdById: string;
+            policyId: string;
+            tenantId: string;
+            ptype: "p" | "g";
+            subject: string;
+            subjectType: "role" | "group" | "user";
+            domain: string;
+            resource: "search" | "documents" | "users" | "groups" | "agents" | "feedbacks" | "llm-providers" | "llm-budgets" | "llm-usage" | "permissions" | "ontology" | "search-indices" | "collaborative-docs";
+            actions: ("list" | "download" | "*" | "read" | "update" | "delete" | "chat" | "comment" | "create" | "generate" | "upload" | "enable" | "disable" | "add-to-group" | "remove-from-group" | "list-other-users" | "share")[];
+            effect: "allow" | "deny";
+            status: "disabled" | "enabled";
+            modifiedById?: string | undefined;
+        };
+    }>>;
+    toggleStatus: (request: NextRequest, context: {
+        params: Promise<{
+            policyId: string;
+        }>;
+    }) => Promise<import("next/server").NextResponse<{
+        error: string;
+    } | {
+        policy: {
+            createdAt: number;
+            updatedAt: number;
+            createdById: string;
+            policyId: string;
+            tenantId: string;
+            ptype: "p" | "g";
+            subject: string;
+            subjectType: "role" | "group" | "user";
+            domain: string;
+            resource: "search" | "documents" | "users" | "groups" | "agents" | "feedbacks" | "llm-providers" | "llm-budgets" | "llm-usage" | "permissions" | "ontology" | "search-indices" | "collaborative-docs";
+            actions: ("list" | "download" | "*" | "read" | "update" | "delete" | "chat" | "comment" | "create" | "generate" | "upload" | "enable" | "disable" | "add-to-group" | "remove-from-group" | "list-other-users" | "share")[];
+            effect: "allow" | "deny";
+            status: "disabled" | "enabled";
+            modifiedById?: string | undefined;
+        };
+    }>>;
+    delete: (request: NextRequest, context: {
+        params: Promise<{
+            policyId: string;
+        }>;
+    }) => Promise<import("next/server").NextResponse<{
+        error: string;
+    } | null>>;
+    bulkDelete: (request: NextRequest, context: {
+        params: Promise<Record<string, unknown>>;
+    }) => Promise<import("next/server").NextResponse<{
+        error: string;
+    } | {
+        deleted: string[];
+        failed: {
+            policyId: string;
+            error: string;
+        }[];
+    }>>;
+};
+//# sourceMappingURL=permissions.handlers.d.ts.map

package/dist/permissions/api/permissions.handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.handlers.d.ts","sourceRoot":"","sources":["../../../lib/permissions/api/permissions.handlers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAa/C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;GA4BxB,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,SAAS;;kBAIwB,MAAM;;;;;;;;;;;;;;;;;;;;;GAqBnD,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;GAyBxB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,YAAY;;kBAIqB,MAAM;;;;;;;;;;;;;;;;;;;;;GA2BnD,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB;;kBAIe,MAAM;;;;;;;;;;;;;;;;;;;;;GA2BnD,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY;;kBAIqB,MAAM;;;;UAqBnD,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;GAyB9B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBAjOmB,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBA8EN,MAAM;;;;;;;;;;;;;;;;;;;;;;;;sBA2CN,MAAM;;;;;;;;;;;;;;;;;;;;;;;;sBA0CN,MAAM;;;;;;;;;;;;;;;;CAsEnD,CAAC"}

package/dist/permissions/api/permissions.handlers.js

@@ -0,0 +1,235 @@
+/**
+ * Permissions Policy API Handlers
+ * CRUD operations for permission policies
+ */
+import { handleApi, withAuth, getUserAwsCredentials } from "../../shared/utilities/api";
+import { getPolicyService } from "../services";
+import { listPoliciesQuerySchema, createPolicyBodySchema, updatePolicyBodySchema, updatePolicyStatusBodySchema, bulkDeletePoliciesBodySchema, } from "../permissions.schemas";
+import { ACTION, RESOURCE } from "../permissions.constants";
+import { requirePermission } from "../permissions.utilities";
+/**
+ * GET /api/permissions
+ *
+ * Lists all permission policies with optional filtering, sorting, and pagination.
+ *
+ * @query resource - Filter by resource name
+ * @query subjectType - Filter by subject type (user, role, group)
+ * @query effect - Filter by effect (allow, deny)
+ * @query status - Filter by status (enabled, disabled)
+ * @query search - Search in subject and resource
+ * @query sortBy - Sort field (subject, resource, action, effect, status, createdAt)
+ * @query sortOrder - Sort direction (asc, desc)
+ * @query page - Page number (default: 1)
+ * @query limit - Page size (default: 20, max: 100)
+ *
+ * @returns Object containing:
+ *   - policies: Array of policy objects
+ *   - totalCount: Total number of matching policies
+ *   - page: Current page number
+ *   - limit: Current page size
+ *   - totalPages: Total number of pages
+ */
+export const listPolicies = withAuth(async (request, { userId, tenantId, user, idToken }) => handleApi(async () => {
+    const userCredentials = await getUserAwsCredentials(idToken);
+    await requirePermission({
+        userId,
+        tenantId,
+        resource: RESOURCE.PERMISSIONS,
+        action: ACTION.LIST,
+        groups: user.groups,
+        userCredentials,
+    });
+    const searchParams = Object.fromEntries(request.nextUrl.searchParams.entries());
+    const params = listPoliciesQuerySchema.parse(searchParams);
+    const service = getPolicyService();
+    const result = await service.list(params, { userId, tenantId, userCredentials });
+    return {
+        policies: result.policies,
+        totalCount: result.totalCount,
+        page: result.page,
+        limit: result.limit,
+        totalPages: result.totalPages,
+    };
+}));
+/**
+ * GET /api/permissions/[policyId]
+ *
+ * Gets a specific policy by ID.
+ *
+ * @param policyId - The policy ID (from URL path)
+ *
+ * @returns Policy object
+ */
+export const getPolicy = withAuth(async (_request, { userId, tenantId, user, idToken }, { params }) => handleApi(async () => {
+    const userCredentials = await getUserAwsCredentials(idToken);
+    await requirePermission({
+        userId,
+        tenantId,
+        resource: RESOURCE.PERMISSIONS,
+        action: ACTION.READ,
+        groups: user.groups,
+        userCredentials,
+    });
+    const { policyId } = await params;
+    const service = getPolicyService();
+    const policy = await service.get(policyId, { userId, tenantId, userCredentials });
+    return { policy };
+}));
+/**
+ * POST /api/permissions
+ *
+ * Creates a new permission policy.
+ *
+ * @body subject - The subject (user ID, role name, or group ID)
+ * @body subjectType - Type of subject (user, role, group)
+ * @body resource - Resource name (agents, documents, etc.)
+ * @body actions - Array of action names (read, list, create, update, delete, etc.)
+ * @body effect - Policy effect (allow, deny)
+ *
+ * @returns Created policy object
+ */
+export const createPolicy = withAuth(async (request, { userId, tenantId, user, idToken }) => handleApi(async () => {
+    const userCredentials = await getUserAwsCredentials(idToken);
+    await requirePermission({
+        userId,
+        tenantId,
+        resource: RESOURCE.PERMISSIONS,
+        action: ACTION.CREATE,
+        groups: user.groups,
+        userCredentials,
+    });
+    const body = await request.json();
+    const validated = createPolicyBodySchema.parse(body);
+    const service = getPolicyService();
+    const policy = await service.create(validated, { userId, tenantId, userCredentials });
+    return { policy };
+}, { successStatus: 201 }));
+/**
+ * PATCH /api/permissions/[policyId]
+ *
+ * Updates a policy's action or effect.
+ *
+ * @param policyId - The policy ID (from URL path)
+ * @body action - New action (optional)
+ * @body effect - New effect (optional)
+ *
+ * @returns Updated policy object
+ */
+export const updatePolicy = withAuth(async (request, { userId, tenantId, user, idToken }, { params }) => handleApi(async () => {
+    const userCredentials = await getUserAwsCredentials(idToken);
+    await requirePermission({
+        userId,
+        tenantId,
+        resource: RESOURCE.PERMISSIONS,
+        action: ACTION.UPDATE,
+        groups: user.groups,
+        userCredentials,
+    });
+    const { policyId } = await params;
+    const body = await request.json();
+    const validated = updatePolicyBodySchema.parse(body);
+    const service = getPolicyService();
+    const policy = await service.update(policyId, validated, {
+        userId,
+        tenantId,
+        userCredentials,
+    });
+    return { policy };
+}));
+/**
+ * PATCH /api/permissions/[policyId]/status
+ *
+ * Toggles a policy's enabled/disabled status.
+ *
+ * @param policyId - The policy ID (from URL path)
+ * @body status - New status (enabled, disabled)
+ *
+ * @returns Updated policy object
+ */
+export const togglePolicyStatus = withAuth(async (request, { userId, tenantId, user, idToken }, { params }) => handleApi(async () => {
+    const userCredentials = await getUserAwsCredentials(idToken);
+    await requirePermission({
+        userId,
+        tenantId,
+        resource: RESOURCE.PERMISSIONS,
+        action: ACTION.UPDATE,
+        groups: user.groups,
+        userCredentials,
+    });
+    const { policyId } = await params;
+    const body = await request.json();
+    const validated = updatePolicyStatusBodySchema.parse(body);
+    const service = getPolicyService();
+    const policy = await service.toggleStatus(policyId, validated.status, {
+        userId,
+        tenantId,
+        userCredentials,
+    });
+    return { policy };
+}));
+/**
+ * DELETE /api/permissions/[policyId]
+ *
+ * Deletes a policy permanently.
+ *
+ * @param policyId - The policy ID (from URL path)
+ *
+ * @returns 204 No Content on success
+ */
+export const deletePolicy = withAuth(async (_request, { userId, tenantId, user, idToken }, { params }) => handleApi(async () => {
+    const userCredentials = await getUserAwsCredentials(idToken);
+    await requirePermission({
+        userId,
+        tenantId,
+        resource: RESOURCE.PERMISSIONS,
+        action: ACTION.DELETE,
+        groups: user.groups,
+        userCredentials,
+    });
+    const { policyId } = await params;
+    const service = getPolicyService();
+    await service.delete(policyId, { userId, tenantId, groups: user.groups, userCredentials });
+    return null;
+}));
+/**
+ * POST /api/permissions/bulk-delete
+ *
+ * Deletes multiple policies permanently.
+ *
+ * @body policyIds - Array of policy IDs to delete
+ *
+ * @returns Object with deleted IDs and any failures
+ */
+export const bulkDeletePolicies = withAuth(async (request, { userId, tenantId, user, idToken }) => handleApi(async () => {
+    const userCredentials = await getUserAwsCredentials(idToken);
+    await requirePermission({
+        userId,
+        tenantId,
+        resource: RESOURCE.PERMISSIONS,
+        action: ACTION.DELETE,
+        groups: user.groups,
+        userCredentials,
+    });
+    const body = await request.json();
+    const validated = bulkDeletePoliciesBodySchema.parse(body);
+    const service = getPolicyService();
+    return service.bulkDelete(validated.policyIds, {
+        userId,
+        tenantId,
+        groups: user.groups,
+        userCredentials,
+    });
+}));
+/**
+ * Semantic grouped handlers for policies
+ */
+export const policyHandlers = {
+    list: listPolicies,
+    get: getPolicy,
+    create: createPolicy,
+    update: updatePolicy,
+    toggleStatus: togglePolicyStatus,
+    delete: deletePolicy,
+    bulkDelete: bulkDeletePolicies,
+};
+//# sourceMappingURL=permissions.handlers.js.map

package/dist/permissions/api/permissions.handlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.handlers.js","sourceRoot":"","sources":["../../../lib/permissions/api/permissions.handlers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACxF,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,yCAAyC,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAClC,KAAK,EAAE,OAAoB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAClE,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,eAAe,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAE7D,MAAM,iBAAiB,CAAC;QACtB,MAAM;QACN,QAAQ;QACR,QAAQ,EAAE,QAAQ,CAAC,WAAW;QAC9B,MAAM,EAAE,MAAM,CAAC,IAAI;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,eAAe;KAChB,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAE3D,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;IAEjF,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;AACJ,CAAC,CAAC,CACL,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,QAAQ,CAC/B,KAAK,EACH,QAAqB,EACrB,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EACnC,EAAE,MAAM,EAA6C,EACrD,EAAE,CACF,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,eAAe,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAE7D,MAAM,iBAAiB,CAAC;QACtB,MAAM;QACN,QAAQ;QACR,QAAQ,EAAE,QAAQ,CAAC,WAAW;QAC9B,MAAM,EAAE,MAAM,CAAC,IAAI;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,eAAe;KAChB,CAAC,CAAC;IAEH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC;IAElC,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;IAElF,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC,CAAC,CACL,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAClC,KAAK,EAAE,OAAoB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAClE,SAAS,CACP,KAAK,IAAI,EAAE;IACT,MAAM,eAAe,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAE7D,MAAM,iBAAiB,CAAC;QACtB,MAAM;QACN,QAAQ;QACR,QAAQ,EAAE,QAAQ,CAAC,WAAW;QAC9B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,eAAe;KAChB,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAErD,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;IAEtF,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC,EACD,EAAE,aAAa,EAAE,GAAG,EAAE,CACvB,CACJ,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAClC,KAAK,EACH,OAAoB,EACpB,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EACnC,EAAE,MAAM,EAA6C,EACrD,EAAE,CACF,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,eAAe,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAE7D,MAAM,iBAAiB,CAAC;QACtB,MAAM;QACN,QAAQ;QACR,QAAQ,EAAE,QAAQ,CAAC,WAAW;QAC9B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,eAAe;KAChB,CAAC,CAAC;IAEH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAErD,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE;QACvD,MAAM;QACN,QAAQ;QACR,eAAe;KAChB,CAAC,CAAC;IAEH,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC,CAAC,CACL,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CACxC,KAAK,EACH,OAAoB,EACpB,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EACnC,EAAE,MAAM,EAA6C,EACrD,EAAE,CACF,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,eAAe,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAE7D,MAAM,iBAAiB,CAAC;QACtB,MAAM;QACN,QAAQ;QACR,QAAQ,EAAE,QAAQ,CAAC,WAAW;QAC9B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,eAAe;KAChB,CAAC,CAAC;IAEH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,4BAA4B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE3D,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,MAAM,EAAE;QACpE,MAAM;QACN,QAAQ;QACR,eAAe;KAChB,CAAC,CAAC;IAEH,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC,CAAC,CACL,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAClC,KAAK,EACH,QAAqB,EACrB,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EACnC,EAAE,MAAM,EAA6C,EACrD,EAAE,CACF,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,eAAe,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAE7D,MAAM,iBAAiB,CAAC;QACtB,MAAM;QACN,QAAQ;QACR,QAAQ,EAAE,QAAQ,CAAC,WAAW;QAC9B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,eAAe;KAChB,CAAC,CAAC;IAEH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC;IAElC,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IAE3F,OAAO,IAAI,CAAC;AACd,CAAC,CAAC,CACL,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CACxC,KAAK,EAAE,OAAoB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAClE,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,eAAe,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAE7D,MAAM,iBAAiB,CAAC;QACtB,MAAM;QACN,QAAQ;QACR,QAAQ,EAAE,QAAQ,CAAC,WAAW;QAC9B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,eAAe;KAChB,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,4BAA4B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE3D,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,OAAO,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,EAAE;QAC7C,MAAM;QACN,QAAQ;QACR,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,eAAe;KAChB,CAAC,CAAC;AACL,CAAC,CAAC,CACL,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,SAAS;IACd,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,YAAY,EAAE,kBAAkB;IAChC,MAAM,EAAE,YAAY;IACpB,UAAU,EAAE,kBAAkB;CAC/B,CAAC"}

package/dist/permissions/api/resources.handlers.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Resources API Handlers
+ * Static resource listing for permission management UI
+ */
+import type { NextRequest } from "next/server";
+/**
+ * GET /api/permissions/resources
+ *
+ * Lists all protected resources in the system.
+ * This is static data used by the permissions UI to display
+ * resource options when creating/editing policies.
+ *
+ * @returns Object containing:
+ *   - resources: Array of resource objects with their available actions
+ */
+export declare const listResources: (request: NextRequest, context: {
+    params: Promise<Record<string, unknown>>;
+}) => Promise<import("next/server").NextResponse<{
+    error: string;
+} | {
+    resources: import("..").Resource[];
+}>>;
+/**
+ * Semantic grouped handlers for resources
+ */
+export declare const resourceHandlers: {
+    list: (request: NextRequest, context: {
+        params: Promise<Record<string, unknown>>;
+    }) => Promise<import("next/server").NextResponse<{
+        error: string;
+    } | {
+        resources: import("..").Resource[];
+    }>>;
+};
+//# sourceMappingURL=resources.handlers.d.ts.map

package/dist/permissions/api/resources.handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.handlers.d.ts","sourceRoot":"","sources":["../../../lib/permissions/api/resources.handlers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAI/C;;;;;;;;;GASG;AACH,eAAO,MAAM,aAAa;;;;;;GAIzB,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;CAE5B,CAAC"}