captify 0.1.18 → 1.1.0

package/dist/permissions/permissions.schemas.js

@@ -0,0 +1,244 @@
+/**
+ * Permissions module Zod validation schemas
+ */
+import { baseEntitySchema } from "../db/schemas";
+import { z } from "zod";
+// ============================================================================
+// Enum Schemas
+// ============================================================================
+export const subjectTypeSchema = z.enum(["user", "role", "group"]);
+export const policyEffectSchema = z.enum(["allow", "deny"]);
+export const policyStatusSchema = z.enum(["enabled", "disabled"]);
+export const resourceNameSchema = z.enum([
+    "agents",
+    "documents",
+    "llm-providers",
+    "llm-budgets",
+    "llm-usage",
+    "users",
+    "groups",
+    "permissions",
+    "ontology",
+    "feedbacks",
+    "search",
+    "search-indices",
+    "notifications",
+    "collaborative-docs",
+]);
+export const actionNameSchema = z.enum([
+    "*",
+    "read",
+    "list",
+    "create",
+    "update",
+    "delete",
+    "generate",
+    "chat",
+    "upload",
+    "download",
+    "enable",
+    "disable",
+    "add-to-group",
+    "remove-from-group",
+    "list-other-users",
+    "mark-read",
+    "mark-all-read",
+    "dismiss",
+    "dismiss-all",
+    "share",
+    "comment",
+]);
+export const policyTypeSchema = z.enum(["p", "g"]);
+// ============================================================================
+// DynamoDB Entity Schemas (single source of truth)
+// ============================================================================
+/**
+ * Policy entity schema.
+ *
+ * @description Schema for validating Policy data from DynamoDB.
+ * A single policy can grant/deny multiple actions on a resource.
+ */
+export const policySchema = baseEntitySchema
+    .omit({ id: true })
+    .extend({
+    policyId: z.string().min(1, "Policy ID is required"),
+    tenantId: z.string().min(1, "Tenant ID is required"),
+    ptype: policyTypeSchema,
+    subject: z.string().min(1, "Subject is required"),
+    subjectType: subjectTypeSchema,
+    domain: z.string().min(1, "Domain is required"),
+    resource: resourceNameSchema,
+    actions: z.array(actionNameSchema).min(1, "At least one action is required"),
+    effect: policyEffectSchema,
+    status: policyStatusSchema,
+})
+    .describe("Permission policy stored in DynamoDB");
+/**
+ * Role entity schema.
+ *
+ * @description Schema for validating Role data from DynamoDB.
+ */
+export const roleSchema = baseEntitySchema
+    .omit({ id: true })
+    .extend({
+    roleId: z.string().min(1, "Role ID is required"),
+    tenantId: z.string().min(1, "Tenant ID is required"),
+    roleName: z.string().min(1, "Role name is required"),
+    description: z.string().optional(),
+    isSystem: z.boolean(),
+})
+    .describe("Role stored in DynamoDB");
+/**
+ * Role assignment entity schema.
+ *
+ * @description Schema for validating RoleAssignment data from DynamoDB.
+ * Maps roles to groups within domains.
+ */
+export const roleAssignmentSchema = baseEntitySchema
+    .omit({ id: true, updatedAt: true, modifiedById: true })
+    .extend({
+    assignmentId: z.string().min(1, "Assignment ID is required"),
+    tenantId: z.string().min(1, "Tenant ID is required"),
+    roleId: z.string().min(1, "Role ID is required"),
+    roleName: z.string().min(1, "Role name is required"),
+    groupId: z.string().min(1, "Group ID is required"),
+    groupName: z.string().min(1, "Group name is required"),
+    domain: z.string().min(1, "Domain is required"),
+})
+    .describe("Role assignment stored in DynamoDB");
+// ============================================================================
+// API Request Schemas
+// ============================================================================
+/**
+ * Schema for GET /api/permissions (list policies)
+ */
+export const listPoliciesQuerySchema = z.object({
+    resource: resourceNameSchema.optional(),
+    subjectType: subjectTypeSchema.optional(),
+    effect: policyEffectSchema.optional(),
+    status: policyStatusSchema.optional(),
+    search: z.string().optional(),
+    sortBy: z
+        .enum(["subject", "resource", "action", "effect", "status", "createdAt"])
+        .optional()
+        .default("createdAt"),
+    sortOrder: z.enum(["asc", "desc"]).optional().default("desc"),
+    page: z.coerce.number().int().min(1).optional().default(1),
+    limit: z.coerce.number().int().min(1).max(100).optional().default(20),
+});
+/**
+ * Schema for POST /api/permissions (create policy)
+ */
+export const createPolicyBodySchema = z.object({
+    subject: z.string().min(1, "Subject is required"),
+    subjectType: subjectTypeSchema,
+    resource: resourceNameSchema,
+    actions: z.array(actionNameSchema).min(1, "At least one action is required"),
+    effect: policyEffectSchema,
+});
+/**
+ * Schema for PATCH /api/permissions/[policyId] (update policy)
+ */
+export const updatePolicyBodySchema = z.object({
+    actions: z.array(actionNameSchema).min(1, "At least one action is required").optional(),
+    effect: policyEffectSchema.optional(),
+});
+/**
+ * Schema for PATCH /api/permissions/[policyId]/status (toggle status)
+ */
+export const updatePolicyStatusBodySchema = z.object({
+    status: policyStatusSchema,
+});
+/**
+ * Schema for POST /api/permissions/bulk-delete (bulk delete policies)
+ */
+export const bulkDeletePoliciesBodySchema = z.object({
+    policyIds: z
+        .array(z.string().min(1))
+        .min(1, "At least one policy ID is required")
+        .max(100, "Maximum 100 policies can be deleted at once"),
+});
+/**
+ * Schema for POST /api/permissions/roles (create role)
+ */
+export const createRoleBodySchema = z.object({
+    roleName: z
+        .string()
+        .min(1, "Role name is required")
+        .max(64, "Role name cannot exceed 64 characters")
+        .regex(/^[a-zA-Z0-9_]+$/, "Role name can only contain alphanumeric characters and underscores"),
+    description: z.string().max(256, "Description cannot exceed 256 characters").optional(),
+});
+/**
+ * Schema for PATCH /api/permissions/roles/[roleId] (update role)
+ */
+export const updateRoleBodySchema = z.object({
+    description: z.string().max(256, "Description cannot exceed 256 characters").optional(),
+});
+/**
+ * Schema for POST /api/permissions/roles/[roleId]/assignments (create assignment)
+ */
+export const createRoleAssignmentBodySchema = z.object({
+    groupId: z.string().min(1, "Group ID is required"),
+    domain: z.string().optional().default("default"),
+});
+// ============================================================================
+// Form Validation Schemas
+// ============================================================================
+/**
+ * Schema for policy form validation (create/edit policy dialogs)
+ * Supports multiple actions for create mode, single action for edit mode
+ */
+export const policyFormSchema = z.object({
+    subject: z.string().min(1, "Subject is required"),
+    subjectType: subjectTypeSchema,
+    resource: resourceNameSchema,
+    actions: z.array(actionNameSchema).min(1, "At least one action is required"),
+    effect: policyEffectSchema,
+});
+/**
+ * Schema for role assignment form validation
+ */
+export const roleAssignmentFormSchema = z.object({
+    groupId: z.string().min(1, "Group is required"),
+    groupName: z.string().min(1, "Group name is required"),
+    domain: z.string().min(1, "Domain is required"),
+});
+/**
+ * Schema for role creation with initial group assignments
+ */
+export const createRoleWithGroupsSchema = z.object({
+    roleName: z
+        .string()
+        .min(1, "Role name is required")
+        .max(64, "Role name cannot exceed 64 characters")
+        .regex(/^[a-zA-Z0-9_]+$/, "Role name can only contain alphanumeric characters and underscores"),
+    description: z.string().max(256, "Description cannot exceed 256 characters").optional(),
+    initialGroups: z.array(z.string()),
+});
+/**
+ * Schema for editing role description
+ */
+export const editRoleSchema = z.object({
+    description: z.string().max(256, "Description cannot exceed 256 characters").optional(),
+});
+// ============================================================================
+// Permission Check Schemas
+// ============================================================================
+/**
+ * Schema for a single permission check item
+ */
+export const permissionCheckItemSchema = z.object({
+    resource: resourceNameSchema,
+    action: actionNameSchema,
+});
+/**
+ * Schema for POST /api/permissions/check (batch permission check)
+ */
+export const checkPermissionsBodySchema = z.object({
+    checks: z
+        .array(permissionCheckItemSchema)
+        .min(1, "At least one check is required")
+        .max(100, "Maximum 100 checks allowed"),
+});
+//# sourceMappingURL=permissions.schemas.js.map

package/dist/permissions/permissions.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.schemas.js","sourceRoot":"","sources":["../../lib/permissions/permissions.schemas.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,+EAA+E;AAC/E,eAAe;AACf,+EAA+E;AAE/E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAE5D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC;IACvC,QAAQ;IACR,WAAW;IACX,eAAe;IACf,aAAa;IACb,WAAW;IACX,OAAO;IACP,QAAQ;IACR,aAAa;IACb,UAAU;IACV,WAAW;IACX,QAAQ;IACR,gBAAgB;IAChB,eAAe;IACf,oBAAoB;CACrB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC;IACrC,GAAG;IACH,MAAM;IACN,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,MAAM;IACN,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,SAAS;IACT,cAAc;IACd,mBAAmB;IACnB,kBAAkB;IAClB,WAAW;IACX,eAAe;IACf,SAAS;IACT,aAAa;IACb,OAAO;IACP,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAEnD,+EAA+E;AAC/E,mDAAmD;AACnD,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,gBAAgB;KACzC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;KAClB,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC;IACpD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC;IACpD,KAAK,EAAE,gBAAgB;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,qBAAqB,CAAC;IACjD,WAAW,EAAE,iBAAiB;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,oBAAoB,CAAC;IAC/C,QAAQ,EAAE,kBAAkB;IAC5B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,iCAAiC,CAAC;IAC5E,MAAM,EAAE,kBAAkB;IAC1B,MAAM,EAAE,kBAAkB;CAC3B,CAAC;KACD,QAAQ,CAAC,sCAAsC,CAAC,CAAC;AAEpD;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,gBAAgB;KACvC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;KAClB,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,qBAAqB,CAAC;IAChD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC;IACpD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC;IACpD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;CACtB,CAAC;KACD,QAAQ,CAAC,yBAAyB,CAAC,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,gBAAgB;KACjD,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;KACvD,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,2BAA2B,CAAC;IAC5D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC;IACpD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,qBAAqB,CAAC;IAChD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,CAAC;IAClD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC;IACtD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,oBAAoB,CAAC;CAChD,CAAC;KACD,QAAQ,CAAC,oCAAoC,CAAC,CAAC;AAelD,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACvC,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACzC,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACrC,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;SACxE,QAAQ,EAAE;SACV,OAAO,CAAC,WAAW,CAAC;IACvB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7D,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CACtE,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,qBAAqB,CAAC;IACjD,WAAW,EAAE,iBAAiB;IAC9B,QAAQ,EAAE,kBAAkB;IAC5B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,iCAAiC,CAAC;IAC5E,MAAM,EAAE,kBAAkB;CAC3B,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,iCAAiC,CAAC,CAAC,QAAQ,EAAE;IACvF,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,MAAM,EAAE,kBAAkB;CAC3B,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,SAAS,EAAE,CAAC;SACT,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACxB,GAAG,CAAC,CAAC,EAAE,oCAAoC,CAAC;SAC5C,GAAG,CAAC,GAAG,EAAE,6CAA6C,CAAC;CAC3D,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC;SAC/B,GAAG,CAAC,EAAE,EAAE,uCAAuC,CAAC;SAChD,KAAK,CAAC,iBAAiB,EAAE,oEAAoE,CAAC;IACjG,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC,QAAQ,EAAE;CACxF,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC,QAAQ,EAAE;CACxF,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,CAAC;IAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;CACjD,CAAC,CAAC;AAEH,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,qBAAqB,CAAC;IACjD,WAAW,EAAE,iBAAiB;IAC9B,QAAQ,EAAE,kBAAkB;IAC5B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,iCAAiC,CAAC;IAC5E,MAAM,EAAE,kBAAkB;CAC3B,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,mBAAmB,CAAC;IAC/C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,wBAAwB,CAAC;IACtD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,oBAAoB,CAAC;CAChD,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC;SAC/B,GAAG,CAAC,EAAE,EAAE,uCAAuC,CAAC;SAChD,KAAK,CAAC,iBAAiB,EAAE,oEAAoE,CAAC;IACjG,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC,QAAQ,EAAE;IACvF,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CACnC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC,QAAQ,EAAE;CACxF,CAAC,CAAC;AAmBH,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,QAAQ,EAAE,kBAAkB;IAC5B,MAAM,EAAE,gBAAgB;CACzB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,MAAM,EAAE,CAAC;SACN,KAAK,CAAC,yBAAyB,CAAC;SAChC,GAAG,CAAC,CAAC,EAAE,gCAAgC,CAAC;SACxC,GAAG,CAAC,GAAG,EAAE,4BAA4B,CAAC;CAC1C,CAAC,CAAC"}

package/dist/permissions/permissions.utilities.d.ts

@@ -0,0 +1,86 @@
+/**
+ * Permissions module utility functions
+ */
+import type { Policy, Role, RoleAssignment } from "./permissions.schemas";
+import type { PolicyRecord, RoleRecord, RoleAssignmentRecord } from "./permissions.interfaces";
+import type { UserAwsCredentials } from "../shared/services";
+/**
+ * Format domain string for Casbin
+ * @param tenantId Tenant identifier
+ * @param logicalDomain Logical domain within tenant (defaults to "default")
+ * @returns Formatted domain string
+ */
+export declare function formatDomain(tenantId: string, logicalDomain?: string): string;
+/**
+ * Parse domain string to extract tenant and logical domain
+ * @param domain Full domain string
+ * @returns Object with tenantId and logicalDomain
+ */
+export declare function parseDomain(domain: string): {
+    tenantId: string;
+    logicalDomain: string;
+};
+/**
+ * Convert Policy to PolicyRecord for DynamoDB storage
+ */
+export declare function toPolicyRecord(policy: Policy): PolicyRecord;
+/**
+ * Convert PolicyRecord from DynamoDB to Policy
+ */
+export declare function fromPolicyRecord(record: PolicyRecord): Policy;
+/**
+ * Convert Role to RoleRecord for DynamoDB storage
+ */
+export declare function toRoleRecord(role: Role): RoleRecord;
+/**
+ * Convert RoleRecord from DynamoDB to Role
+ */
+export declare function fromRoleRecord(record: RoleRecord): Role;
+/**
+ * Convert RoleAssignment to RoleAssignmentRecord for DynamoDB storage
+ */
+export declare function toRoleAssignmentRecord(assignment: RoleAssignment): RoleAssignmentRecord;
+/**
+ * Convert RoleAssignmentRecord from DynamoDB to RoleAssignment
+ */
+export declare function fromRoleAssignmentRecord(record: RoleAssignmentRecord): RoleAssignment;
+/**
+ * Generate a new UUID for policy/role/assignment IDs
+ */
+export declare function generateId(): string;
+/**
+ * Parameters for permission check
+ */
+export interface RequirePermissionParams {
+    /** User ID (subject) */
+    userId: string;
+    /** Tenant ID */
+    tenantId: string;
+    /** Resource to check access for */
+    resource: string;
+    /** Action to check permission for */
+    action: string;
+    /** User's Cognito groups for role-based permission resolution */
+    groups?: string[];
+    /** User's AWS credentials for DynamoDB operations */
+    userCredentials?: UserAwsCredentials;
+}
+/**
+ * Check if user has permission for a resource/action and throw if not.
+ *
+ * @param params - Permission check parameters
+ * @throws PermissionDeniedError if user lacks permission
+ *
+ * @example
+ * ```ts
+ * await requirePermission({
+ *   userId,
+ *   tenantId,
+ *   resource: "users",
+ *   action: "create",
+ *   groups: user.groups,
+ * });
+ * ```
+ */
+export declare function requirePermission(params: RequirePermissionParams): Promise<void>;
+//# sourceMappingURL=permissions.utilities.d.ts.map

package/dist/permissions/permissions.utilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.utilities.d.ts","sourceRoot":"","sources":["../../lib/permissions/permissions.utilities.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAC1F,OAAO,KAAK,EACV,YAAY,EACZ,UAAU,EACV,oBAAoB,EACrB,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAWhE;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,SAAY,GAAG,MAAM,CAEhF;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAUvF;AAMD;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAe3D;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAgB7D;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAQnD;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CAWvD;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,cAAc,GAAG,oBAAoB,CAUvF;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,oBAAoB,GAAG,cAAc,CAYrF;AAMD;;GAEG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAMD;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,qDAAqD;IACrD,eAAe,CAAC,EAAE,kBAAkB,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBtF"}

package/dist/permissions/permissions.utilities.js

@@ -0,0 +1,150 @@
+/**
+ * Permissions module utility functions
+ */
+import { PermissionDeniedError } from "./permissions.errors";
+import { getPermissionsService } from "./services";
+import { policyKeys } from "../db/schemas/policies.schema";
+import { roleKeys } from "../db/schemas/roles.schema";
+import { roleAssignmentKeys } from "../db/schemas/role-assignments.schema";
+// ============================================================================
+// Domain Utilities
+// ============================================================================
+/**
+ * Format domain string for Casbin
+ * @param tenantId Tenant identifier
+ * @param logicalDomain Logical domain within tenant (defaults to "default")
+ * @returns Formatted domain string
+ */
+export function formatDomain(tenantId, logicalDomain = "default") {
+    return `${tenantId}:${logicalDomain}`;
+}
+/**
+ * Parse domain string to extract tenant and logical domain
+ * @param domain Full domain string
+ * @returns Object with tenantId and logicalDomain
+ */
+export function parseDomain(domain) {
+    // Split on the last colon to handle tenant IDs that may contain colons
+    // Format: tenantId:logicalDomain (e.g., "tenant-123:default")
+    const lastColonIndex = domain.lastIndexOf(":");
+    if (lastColonIndex === -1) {
+        return { tenantId: domain, logicalDomain: "default" };
+    }
+    const tenantId = domain.substring(0, lastColonIndex);
+    const logicalDomain = domain.substring(lastColonIndex + 1) || "default";
+    return { tenantId, logicalDomain };
+}
+// ============================================================================
+// Record Converters
+// ============================================================================
+/**
+ * Convert Policy to PolicyRecord for DynamoDB storage
+ */
+export function toPolicyRecord(policy) {
+    return Object.assign(Object.assign({}, policy), { PK: policyKeys.pk(policy.tenantId), SK: policyKeys.sk(policy.ptype, policy.policyId), v0: policy.subject, v1: policy.domain, v2: policy.resource, v3: policy.actions, v4: policy.effect, GSI1_PK: policyKeys.gsi1Pk(policy.tenantId, policy.resource), GSI1_SK: policyKeys.gsi1Sk(policy.status, policy.createdAt), GSI2_PK: policyKeys.gsi2Pk(policy.tenantId, policy.subjectType, policy.subject), GSI2_SK: policyKeys.gsi2Sk(policy.resource) });
+}
+/**
+ * Convert PolicyRecord from DynamoDB to Policy
+ */
+export function fromPolicyRecord(record) {
+    return {
+        policyId: record.policyId,
+        tenantId: record.tenantId,
+        ptype: record.ptype,
+        subject: record.subject,
+        subjectType: record.subjectType,
+        domain: record.domain,
+        resource: record.resource,
+        actions: record.actions,
+        effect: record.effect,
+        status: record.status,
+        createdAt: record.createdAt,
+        updatedAt: record.updatedAt,
+        createdById: record.createdById,
+    };
+}
+/**
+ * Convert Role to RoleRecord for DynamoDB storage
+ */
+export function toRoleRecord(role) {
+    return Object.assign(Object.assign({}, role), { PK: roleKeys.pk(role.tenantId), SK: roleKeys.sk(role.roleId), GSI1_PK: roleKeys.gsi1Pk(role.tenantId), GSI1_SK: roleKeys.gsi1Sk(role.roleName) });
+}
+/**
+ * Convert RoleRecord from DynamoDB to Role
+ */
+export function fromRoleRecord(record) {
+    return {
+        roleId: record.roleId,
+        tenantId: record.tenantId,
+        roleName: record.roleName,
+        description: record.description,
+        isSystem: record.isSystem,
+        createdAt: record.createdAt,
+        updatedAt: record.updatedAt,
+        createdById: record.createdById,
+    };
+}
+/**
+ * Convert RoleAssignment to RoleAssignmentRecord for DynamoDB storage
+ */
+export function toRoleAssignmentRecord(assignment) {
+    return Object.assign(Object.assign({}, assignment), { PK: roleAssignmentKeys.pk(assignment.tenantId), SK: roleAssignmentKeys.sk(assignment.domain, assignment.roleId, assignment.groupId), GSI1_PK: roleAssignmentKeys.gsi1Pk(assignment.tenantId, assignment.roleId), GSI1_SK: roleAssignmentKeys.gsi1Sk(assignment.groupId), GSI2_PK: roleAssignmentKeys.gsi2Pk(assignment.tenantId, assignment.groupId), GSI2_SK: roleAssignmentKeys.gsi2Sk(assignment.roleId) });
+}
+/**
+ * Convert RoleAssignmentRecord from DynamoDB to RoleAssignment
+ */
+export function fromRoleAssignmentRecord(record) {
+    return {
+        assignmentId: record.assignmentId,
+        tenantId: record.tenantId,
+        roleId: record.roleId,
+        roleName: record.roleName,
+        groupId: record.groupId,
+        groupName: record.groupName,
+        domain: record.domain,
+        createdAt: record.createdAt,
+        createdById: record.createdById,
+    };
+}
+// ============================================================================
+// Validation Helpers
+// ============================================================================
+/**
+ * Generate a new UUID for policy/role/assignment IDs
+ */
+export function generateId() {
+    return crypto.randomUUID();
+}
+/**
+ * Check if user has permission for a resource/action and throw if not.
+ *
+ * @param params - Permission check parameters
+ * @throws PermissionDeniedError if user lacks permission
+ *
+ * @example
+ * ```ts
+ * await requirePermission({
+ *   userId,
+ *   tenantId,
+ *   resource: "users",
+ *   action: "create",
+ *   groups: user.groups,
+ * });
+ * ```
+ */
+export async function requirePermission(params) {
+    const { userId, tenantId, resource, action, groups, userCredentials } = params;
+    const permissionsService = getPermissionsService();
+    const allowed = await permissionsService.enforce({
+        subject: userId,
+        tenantId,
+        resource,
+        action,
+        groups,
+        userCredentials,
+    });
+    if (!allowed) {
+        throw new PermissionDeniedError(resource, action);
+    }
+}
+//# sourceMappingURL=permissions.utilities.js.map

package/dist/permissions/permissions.utilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.utilities.js","sourceRoot":"","sources":["../../lib/permissions/permissions.utilities.ts"],"names":[],"mappings":"AAAA;;GAEG;AASH,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAE9E,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,aAAa,GAAG,SAAS;IACtE,OAAO,GAAG,QAAQ,IAAI,aAAa,EAAE,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,uEAAuE;IACvE,8DAA8D;IAC9D,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,cAAc,KAAK,CAAC,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IACrD,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,GAAG,CAAC,CAAC,IAAI,SAAS,CAAC;IACxE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;AACrC,CAAC;AAED,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,uCACK,MAAM,KACT,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAClC,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,EAChD,EAAE,EAAE,MAAM,CAAC,OAAO,EAClB,EAAE,EAAE,MAAM,CAAC,MAAM,EACjB,EAAE,EAAE,MAAM,CAAC,QAAQ,EACnB,EAAE,EAAE,MAAM,CAAC,OAAO,EAClB,EAAE,EAAE,MAAM,CAAC,MAAM,EACjB,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,EAC5D,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,EAC3D,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,EAC/E,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAC3C;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAoB;IACnD,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAU;IACrC,uCACK,IAAI,KACP,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAC9B,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAC5B,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EACvC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IACvC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,UAA0B;IAC/D,uCACK,UAAU,KACb,EAAE,EAAE,kBAAkB,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAC9C,EAAE,EAAE,kBAAkB,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,EACnF,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,EAC1E,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EACtD,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,EAC3E,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IACrD;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAA4B;IACnE,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;KAChC,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;AAC7B,CAAC;AAwBD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAA+B;IACrE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC;IAE/E,MAAM,kBAAkB,GAAG,qBAAqB,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC;QAC/C,OAAO,EAAE,MAAM;QACf,QAAQ;QACR,QAAQ;QACR,MAAM;QACN,MAAM;QACN,eAAe;KAChB,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;AACH,CAAC"}

package/dist/permissions/services/casbin-dynamodb.adapter.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Custom Casbin DynamoDB Adapter
+ * Implements Casbin's Adapter interface for storing policies in DynamoDB
+ */
+import type { Adapter, Model } from "casbin";
+import type { CasbinDynamoDbAdapterOptions } from "../permissions.interfaces";
+/**
+ * DynamoDB adapter for Casbin policy storage
+ * Loads policies (p) and role assignments (g) from DynamoDB tables
+ */
+export declare class CasbinDynamoDbAdapter implements Adapter {
+    private tenantId;
+    private userCredentials?;
+    private db;
+    private assignmentsDb;
+    constructor(options: CasbinDynamoDbAdapterOptions);
+    /**
+     * Load all enabled policies and role assignments from DynamoDB into the Casbin model
+     */
+    loadPolicy(model: Model): Promise<void>;
+    /**
+     * Load permission policies (p rules) from the policies table
+     */
+    private loadPermissionPolicies;
+    /**
+     * Load role assignments as g (grouping) policies
+     * Maps Cognito groups to roles: g, groupName, roleName, domain
+     */
+    private loadRoleAssignments;
+    /**
+     * Load a single policy line into the model
+     */
+    private loadPolicyLine;
+    /**
+     * Save all policies from the Casbin model to DynamoDB
+     * Note: This is typically not called directly - use addPolicy/removePolicy for incremental updates
+     */
+    savePolicy(_model: Model): Promise<boolean>;
+    /**
+     * Add a policy rule to DynamoDB
+     * Note: This is called by Casbin but we manage policies through PolicyService
+     */
+    addPolicy(_sec: string, _ptype: string, _rule: string[]): Promise<void>;
+    /**
+     * Remove a policy rule from DynamoDB
+     * Note: This is called by Casbin but we manage policies through PolicyService
+     */
+    removePolicy(_sec: string, _ptype: string, _rule: string[]): Promise<void>;
+    /**
+     * Remove policies matching a filter
+     */
+    removeFilteredPolicy(_sec: string, _ptype: string, _fieldIndex: number, ..._fieldValues: string[]): Promise<void>;
+}
+/**
+ * Create a new Casbin DynamoDB adapter for a tenant
+ */
+export declare function createCasbinAdapter(tenantId: string): CasbinDynamoDbAdapter;
+//# sourceMappingURL=casbin-dynamodb.adapter.d.ts.map

package/dist/permissions/services/casbin-dynamodb.adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"casbin-dynamodb.adapter.d.ts","sourceRoot":"","sources":["../../../lib/permissions/services/casbin-dynamodb.adapter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAS7C,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,0CAA0C,CAAC;AAE7F;;;GAGG;AACH,qBAAa,qBAAsB,YAAW,OAAO;IACnD,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,eAAe,CAAC,CAAqB;IAC7C,OAAO,CAAC,EAAE,CAAuC;IACjD,OAAO,CAAC,aAAa,CAA8C;gBAEvD,OAAO,EAAE,4BAA4B;IAWjD;;OAEG;IACG,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7C;;OAEG;YACW,sBAAsB;IAyCpC;;;OAGG;YACW,mBAAmB;IAyBjC;;OAEG;IACH,OAAO,CAAC,cAAc;IAYtB;;;OAGG;IACG,UAAU,CAAC,MAAM,EAAE,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC;IAOjD;;;OAGG;IACG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAM7E;;;OAGG;IACG,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAKhF;;OAEG;IACG,oBAAoB,CACxB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,GAAG,YAAY,EAAE,MAAM,EAAE,GACxB,OAAO,CAAC,IAAI,CAAC;CAIjB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,qBAAqB,CAE3E"}