easywork-common-lib 1.0.1322 → 1.0.1323

package/dist/modules/authorization/factories/resource-authorization.factory.js

@@ -1,184 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var ResourceAuthorizationFactory_1;
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ResourceAuthorizationFactory = exports.ConfiguredResourceAuthorization = exports.ResourceAuthorizationBuilder = void 0;
-const common_1 = require("@nestjs/common");
-const resource_authorization_service_1 = require("../services/resource-authorization.service");
-const resource_configurations_1 = require("../config/resource-configurations");
-class ResourceAuthorizationBuilder {
-    resourceAuthService;
-    logger;
-    resourceConfig;
-    subGroupRepository;
-    customConfig;
-    constructor(resourceAuthService, logger) {
-        this.resourceAuthService = resourceAuthService;
-        this.logger = logger;
-    }
-    forResource(resourceName) {
-        try {
-            this.resourceConfig = (0, resource_configurations_1.getResourceConfig)(resourceName);
-            this.logger.debug(`Configured authorization for resource: ${resourceName}`);
-        }
-        catch (error) {
-            this.logger.error(`Failed to configure resource ${resourceName}: ${error instanceof Error ? error.message : "Unknown error"}`);
-            throw error;
-        }
-        return this;
-    }
-    withCustomConfig(config) {
-        this.resourceConfig = config;
-        this.logger.debug(`Configured authorization with custom config for: ${config.name}`);
-        return this;
-    }
-    overrideConfig(overrides) {
-        this.customConfig = overrides;
-        this.logger.debug(`Added config overrides: ${JSON.stringify(overrides)}`);
-        return this;
-    }
-    withSubGroupRepository(repository) {
-        this.subGroupRepository = repository;
-        return this;
-    }
-    build() {
-        if (!this.resourceConfig) {
-            throw new Error("Resource configuration is required. Call forResource() or withCustomConfig() first.");
-        }
-        const finalConfig = this.customConfig
-            ? { ...this.resourceConfig, ...this.customConfig }
-            : this.resourceConfig;
-        if (finalConfig.subGroupConfig?.enabled && !this.subGroupRepository) {
-            this.logger.warn(`Subgroups are enabled for ${finalConfig.name} but no SubGroup repository provided`);
-        }
-        return new ConfiguredResourceAuthorization(this.resourceAuthService, finalConfig, this.subGroupRepository);
-    }
-}
-exports.ResourceAuthorizationBuilder = ResourceAuthorizationBuilder;
-class ConfiguredResourceAuthorization {
-    authService;
-    config;
-    subGroupRepository;
-    constructor(authService, config, subGroupRepository) {
-        this.authService = authService;
-        this.config = config;
-        this.subGroupRepository = subGroupRepository;
-    }
-    async applyPermissionFilters(queryBuilder, user, options = {}) {
-        return this.authService.applyPermissionFilters(queryBuilder, user, this.config, {
-            ...options,
-            subGroupRepository: this.subGroupRepository,
-        });
-    }
-    async canPerformAction(user, action, targetEntity) {
-        return this.authService.canPerformAction(user, action, this.config, targetEntity);
-    }
-    async validateAccess(user, action, targetEntity) {
-        return this.authService.validateAccess(user, action, this.config, targetEntity);
-    }
-    async getAssistantIds(user) {
-        if (!this.config.subGroupConfig?.enabled || !this.subGroupRepository) {
-            return [];
-        }
-        return this.authService.getAssistantIds(user, this.subGroupRepository);
-    }
-    async getSubGroupMembers(user) {
-        if (!this.config.subGroupConfig?.enabled || !this.subGroupRepository) {
-            return [];
-        }
-        return this.authService.getSubGroupMembers(user, this.subGroupRepository);
-    }
-    async canCreate(user) {
-        return this.authService.canCreate(user, this.config);
-    }
-    async canRead(user, entity) {
-        return this.authService.canRead(user, this.config, entity);
-    }
-    async canUpdate(user, entity) {
-        return this.authService.canUpdate(user, this.config, entity);
-    }
-    async canDelete(user, entity) {
-        return this.authService.canDelete(user, this.config, entity);
-    }
-    async canManage(user) {
-        return this.authService.canManage(user, this.config);
-    }
-    async canImport(user) {
-        return this.authService.canImport(user, this.config);
-    }
-    async canExport(user) {
-        return this.authService.canExport(user, this.config);
-    }
-    getConfig() {
-        return this.config;
-    }
-    hasSubGroupSupport() {
-        return this.config.subGroupConfig?.enabled ?? false;
-    }
-}
-exports.ConfiguredResourceAuthorization = ConfiguredResourceAuthorization;
-let ResourceAuthorizationFactory = ResourceAuthorizationFactory_1 = class ResourceAuthorizationFactory {
-    resourceAuthService;
-    logger = new common_1.Logger(ResourceAuthorizationFactory_1.name);
-    constructor(resourceAuthService) {
-        this.resourceAuthService = resourceAuthService;
-    }
-    createBuilder() {
-        return new ResourceAuthorizationBuilder(this.resourceAuthService, this.logger);
-    }
-    forContact(subGroupRepository) {
-        const builder = this.createBuilder().forResource("contact");
-        if (subGroupRepository) {
-            builder.withSubGroupRepository(subGroupRepository);
-        }
-        return builder.build();
-    }
-    forLead(subGroupRepository) {
-        const builder = this.createBuilder().forResource("lead");
-        if (subGroupRepository) {
-            builder.withSubGroupRepository(subGroupRepository);
-        }
-        return builder.build();
-    }
-    forPolicy(subGroupRepository) {
-        const builder = this.createBuilder().forResource("policy");
-        if (subGroupRepository) {
-            builder.withSubGroupRepository(subGroupRepository);
-        }
-        return builder.build();
-    }
-    forTask(subGroupRepository) {
-        const builder = this.createBuilder().forResource("task");
-        if (subGroupRepository) {
-            builder.withSubGroupRepository(subGroupRepository);
-        }
-        return builder.build();
-    }
-    forResource(resourceName, subGroupRepository) {
-        const builder = this.createBuilder().forResource(resourceName);
-        if (subGroupRepository) {
-            builder.withSubGroupRepository(subGroupRepository);
-        }
-        return builder.build();
-    }
-    getAvailableResources() {
-        return Object.keys(resource_configurations_1.RESOURCE_CONFIGURATIONS);
-    }
-    isValidResource(resourceName) {
-        return resourceName in resource_configurations_1.RESOURCE_CONFIGURATIONS;
-    }
-};
-exports.ResourceAuthorizationFactory = ResourceAuthorizationFactory;
-exports.ResourceAuthorizationFactory = ResourceAuthorizationFactory = ResourceAuthorizationFactory_1 = __decorate([
-    (0, common_1.Injectable)(),
-    __metadata("design:paramtypes", [resource_authorization_service_1.ResourceAuthorizationService])
-], ResourceAuthorizationFactory);
-//# sourceMappingURL=resource-authorization.factory.js.map

package/dist/modules/authorization/factories/resource-authorization.factory.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resource-authorization.factory.js","sourceRoot":"","sources":["../../../../src/modules/authorization/factories/resource-authorization.factory.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAoD;AAIpD,+FAGoD;AACpD,+EAG2C;AAM3C,MAAa,4BAA4B;IAMpB;IACA;IANX,cAAc,CAAkB;IAChC,kBAAkB,CAAwB;IAC1C,YAAY,CAA2B;IAE/C,YACmB,mBAAiD,EACjD,MAAc;QADd,wBAAmB,GAAnB,mBAAmB,CAA8B;QACjD,WAAM,GAAN,MAAM,CAAQ;IAC9B,CAAC;IAKJ,WAAW,CAAC,YAAoB;QAC9B,IAAI,CAAC;YACH,IAAI,CAAC,cAAc,GAAG,IAAA,2CAAiB,EAAC,YAAY,CAAC,CAAC;YACtD,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,0CAA0C,YAAY,EAAE,CACzD,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,gCAAgC,YAAY,KAC1C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAC3C,EAAE,CACH,CAAC;YACF,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAKD,gBAAgB,CAAC,MAAsB;QACrC,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,oDAAoD,MAAM,CAAC,IAAI,EAAE,CAClE,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAKD,cAAc,CAAC,SAAkC;QAC/C,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IAKD,sBAAsB,CAAC,UAAgC;QACrD,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAKD,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;QACJ,CAAC;QAGD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY;YACnC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,cAAc,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE;YAClD,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;QAGxB,IAAI,WAAW,CAAC,cAAc,EAAE,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACpE,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,6BAA6B,WAAW,CAAC,IAAI,sCAAsC,CACpF,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,+BAA+B,CACxC,IAAI,CAAC,mBAAmB,EACxB,WAAW,EACX,IAAI,CAAC,kBAAkB,CACxB,CAAC;IACJ,CAAC;CACF;AAtFD,oEAsFC;AAMD,MAAa,+BAA+B;IAEvB;IACA;IACA;IAHnB,YACmB,WAAyC,EACzC,MAAsB,EACtB,kBAAyC;QAFzC,gBAAW,GAAX,WAAW,CAA8B;QACzC,WAAM,GAAN,MAAM,CAAgB;QACtB,uBAAkB,GAAlB,kBAAkB,CAAuB;IACzD,CAAC;IAKJ,KAAK,CAAC,sBAAsB,CAC1B,YAAiB,EACjB,IAAS,EACT,UAII,EAAE;QAEN,OAAO,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAC5C,YAAY,EACZ,IAAI,EACJ,IAAI,CAAC,MAAM,EACX;YACE,GAAG,OAAO;YACV,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;SAC5C,CACF,CAAC;IACJ,CAAC;IAKD,KAAK,CAAC,gBAAgB,CACpB,IAAS,EACT,MAAwB,EACxB,YAAkB;QAElB,OAAO,IAAI,CAAC,WAAW,CAAC,gBAAgB,CACtC,IAAI,EACJ,MAAM,EACN,IAAI,CAAC,MAAM,EACX,YAAY,CACb,CAAC;IACJ,CAAC;IAKD,KAAK,CAAC,cAAc,CAAC,IAAS,EAAE,MAAwB,EAAE,YAAiB;QACzE,OAAO,IAAI,CAAC,WAAW,CAAC,cAAc,CACpC,IAAI,EACJ,MAAM,EACN,IAAI,CAAC,MAAM,EACX,YAAY,CACb,CAAC;IACJ,CAAC;IAKD,KAAK,CAAC,eAAe,CAAC,IAAS;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACrE,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACzE,CAAC;IAKD,KAAK,CAAC,kBAAkB,CAAC,IAAS;QAChC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACrE,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC5E,CAAC;IAKD,KAAK,CAAC,SAAS,CAAC,IAAS;QACvB,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,IAAS,EAAE,MAAY;QACnC,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,IAAS,EAAE,MAAW;QACpC,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,IAAS,EAAE,MAAW;QACpC,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,IAAS;QACvB,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,IAAS;QACvB,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,IAAS;QACvB,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC;IAKD,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAKD,kBAAkB;QAChB,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,IAAI,KAAK,CAAC;IACtD,CAAC;CACF;AApHD,0EAoHC;AAMM,IAAM,4BAA4B,oCAAlC,MAAM,4BAA4B;IAIpB;IAHF,MAAM,GAAG,IAAI,eAAM,CAAC,8BAA4B,CAAC,IAAI,CAAC,CAAC;IAExE,YACmB,mBAAiD;QAAjD,wBAAmB,GAAnB,mBAAmB,CAA8B;IACjE,CAAC;IAKJ,aAAa;QACX,OAAO,IAAI,4BAA4B,CACrC,IAAI,CAAC,mBAAmB,EACxB,IAAI,CAAC,MAAM,CACZ,CAAC;IACJ,CAAC;IAKD,UAAU,CACR,kBAAwC;QAExC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,kBAAkB,EAAE,CAAC;YACvB,OAAO,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAED,OAAO,CACL,kBAAyC;QAEzC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,kBAAkB,EAAE,CAAC;YACvB,OAAO,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAED,SAAS,CACP,kBAAyC;QAEzC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,kBAAkB,EAAE,CAAC;YACvB,OAAO,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAED,OAAO,CACL,kBAAyC;QAEzC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,kBAAkB,EAAE,CAAC;YACvB,OAAO,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAKD,WAAW,CACT,YAAoB,EACpB,kBAAyC;QAEzC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QAC/D,IAAI,kBAAkB,EAAE,CAAC;YACvB,OAAO,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAKD,qBAAqB;QACnB,OAAO,MAAM,CAAC,IAAI,CAAC,iDAAuB,CAAC,CAAC;IAC9C,CAAC;IAKD,eAAe,CAAC,YAAoB;QAClC,OAAO,YAAY,IAAI,iDAAuB,CAAC;IACjD,CAAC;CACF,CAAA;AAvFY,oEAA4B;uCAA5B,4BAA4B;IADxC,IAAA,mBAAU,GAAE;qCAK6B,6DAA4B;GAJzD,4BAA4B,CAuFxC"}

package/dist/modules/authorization/index.d.ts

@@ -1,7 +0,0 @@
-export * from "./authorization.module";
-export * from "./interfaces/authorization.interface";
-export * from "./services";
-export * from "./factories/resource-authorization.factory";
-export * from "./config/resource-configurations";
-export * from "./decorators/permissions.decorator";
-export * from "./decorators/contact-permissions.decorator";

package/dist/modules/authorization/index.js

@@ -1,24 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./authorization.module"), exports);
-__exportStar(require("./interfaces/authorization.interface"), exports);
-__exportStar(require("./services"), exports);
-__exportStar(require("./factories/resource-authorization.factory"), exports);
-__exportStar(require("./config/resource-configurations"), exports);
-__exportStar(require("./decorators/permissions.decorator"), exports);
-__exportStar(require("./decorators/contact-permissions.decorator"), exports);
-//# sourceMappingURL=index.js.map

package/dist/modules/authorization/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/modules/authorization/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AACA,yDAAuC;AAGvC,uEAAqD;AAGrD,6CAA2B;AAG3B,6EAA2D;AAG3D,mEAAiD;AAGjD,qEAAmD;AACnD,6EAA2D"}

package/dist/modules/authorization/interfaces/authorization.interface.d.ts

@@ -1,23 +0,0 @@
-import { PermissionAction, PermissionContextType, PermissionResult, ResourcePermission } from "../../../common/";
-export interface IPermissionEvaluator {
-    evaluate(context: PermissionContextType): Promise<PermissionResult>;
-}
-export interface IPermissionProvider {
-    getPermissions(userId: string, resource: string): Promise<ResourcePermission[]>;
-    hasPermission(userId: string, resource: string, action: PermissionAction): Promise<boolean>;
-}
-export interface IResourceAccessFilter {
-    applyFilters(queryBuilder: any, context: PermissionContextType): any;
-    buildWhereConditions(context: PermissionContextType): Record<string, any>;
-}
-export interface IPermissionCache {
-    get(key: string): Promise<any>;
-    set(key: string, value: any, ttl?: number): Promise<void>;
-    delete(key: string): Promise<void>;
-    clear(pattern: string): Promise<void>;
-}
-export interface IAuthorizationService {
-    canAccess(context: PermissionContextType): Promise<PermissionResult>;
-    filterQuery(queryBuilder: any, context: PermissionContextType): Promise<any>;
-    validateAccess(context: PermissionContextType): Promise<void>;
-}

package/dist/modules/authorization/interfaces/authorization.interface.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=authorization.interface.js.map

package/dist/modules/authorization/interfaces/authorization.interface.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authorization.interface.js","sourceRoot":"","sources":["../../../../src/modules/authorization/interfaces/authorization.interface.ts"],"names":[],"mappings":""}

package/dist/modules/authorization/services/authorization.service.d.ts

@@ -1,25 +0,0 @@
-import { PermissionContextType, PermissionResult } from "../../../common/";
-import { IAuthorizationService } from "../interfaces/authorization.interface";
-import { PermissionEvaluatorService } from "./permission-evaluator.service";
-import { ResourceAccessFilterService } from "./resource-access-filter.service";
-import { PermissionCacheService } from "./permission-cache.service";
-export declare class AuthorizationService implements IAuthorizationService {
-    private readonly permissionEvaluator;
-    private readonly accessFilter;
-    private readonly permissionCache;
-    private readonly logger;
-    constructor(permissionEvaluator: PermissionEvaluatorService, accessFilter: ResourceAccessFilterService, permissionCache: PermissionCacheService);
-    canAccess(context: PermissionContextType): Promise<PermissionResult>;
-    filterQuery(queryBuilder: any, context: PermissionContextType): Promise<any>;
-    validateAccess(context: PermissionContextType): Promise<void>;
-    canCreate(user: any, resource: string, targetEntity?: any): Promise<PermissionResult>;
-    canRead(user: any, resource: string, targetEntity?: any): Promise<PermissionResult>;
-    canUpdate(user: any, resource: string, targetEntity: any): Promise<PermissionResult>;
-    canDelete(user: any, resource: string, targetEntity: any): Promise<PermissionResult>;
-    canManage(user: any, resource: string, targetEntity?: any): Promise<PermissionResult>;
-    canAccessMultiple(contexts: PermissionContextType[]): Promise<{
-        [key: string]: PermissionResult;
-    }>;
-    clearUserCache(userId: string): Promise<void>;
-    private buildCacheKey;
-}

package/dist/modules/authorization/services/authorization.service.js

@@ -1,139 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var AuthorizationService_1;
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthorizationService = void 0;
-const common_1 = require("@nestjs/common");
-const common_2 = require("../../../common/");
-const permission_evaluator_service_1 = require("./permission-evaluator.service");
-const resource_access_filter_service_1 = require("./resource-access-filter.service");
-const permission_cache_service_1 = require("./permission-cache.service");
-let AuthorizationService = AuthorizationService_1 = class AuthorizationService {
-    permissionEvaluator;
-    accessFilter;
-    permissionCache;
-    logger = new common_1.Logger(AuthorizationService_1.name);
-    constructor(permissionEvaluator, accessFilter, permissionCache) {
-        this.permissionEvaluator = permissionEvaluator;
-        this.accessFilter = accessFilter;
-        this.permissionCache = permissionCache;
-    }
-    async canAccess(context) {
-        const cacheKey = this.buildCacheKey(context);
-        try {
-            const cachedResult = await this.permissionCache.get(cacheKey);
-            if (cachedResult && cachedResult.timestamp) {
-                const now = Date.now();
-                const ttl = cachedResult.allowed ? 300000 : 60000;
-                if (now - cachedResult.timestamp < ttl) {
-                    return cachedResult;
-                }
-            }
-            const result = await this.permissionEvaluator.evaluate(context);
-            const resultWithTimestamp = {
-                ...result,
-                timestamp: Date.now(),
-            };
-            const ttl = result.allowed ? 300 : 60;
-            await this.permissionCache.set(cacheKey, resultWithTimestamp, ttl);
-            return result;
-        }
-        catch (error) {
-            this.logger.error(`Permission evaluation failed: ${error.message}`, error.stack);
-            throw new common_1.ForbiddenException("Permission evaluation failed");
-        }
-    }
-    async filterQuery(queryBuilder, context) {
-        const result = await this.canAccess(context);
-        if (!result.allowed) {
-            throw new common_1.ForbiddenException(`Access denied for ${context.action} on ${context.resource}`);
-        }
-        if (result.filters && Object.keys(result.filters).length > 0) {
-            return this.accessFilter.applyFilters(queryBuilder, {
-                ...context,
-                additionalContext: { permissionFilters: result.filters },
-            });
-        }
-        return queryBuilder;
-    }
-    async validateAccess(context) {
-        const result = await this.canAccess(context);
-        if (!result.allowed) {
-            throw new common_1.ForbiddenException(result.reason ||
-                `Access denied for ${context.action} on ${context.resource}`);
-        }
-    }
-    async canCreate(user, resource, targetEntity) {
-        return this.canAccess({
-            user,
-            resource,
-            action: common_2.PermissionAction.CREATE,
-            targetEntity,
-        });
-    }
-    async canRead(user, resource, targetEntity) {
-        return this.canAccess({
-            user,
-            resource,
-            action: common_2.PermissionAction.READ,
-            targetEntity,
-        });
-    }
-    async canUpdate(user, resource, targetEntity) {
-        return this.canAccess({
-            user,
-            resource,
-            action: common_2.PermissionAction.UPDATE,
-            targetEntity,
-        });
-    }
-    async canDelete(user, resource, targetEntity) {
-        return this.canAccess({
-            user,
-            resource,
-            action: common_2.PermissionAction.DELETE,
-            targetEntity,
-        });
-    }
-    async canManage(user, resource, targetEntity) {
-        return this.canAccess({
-            user,
-            resource,
-            action: common_2.PermissionAction.MANAGE,
-            targetEntity,
-        });
-    }
-    async canAccessMultiple(contexts) {
-        const results = {};
-        const promises = contexts.map(async (context) => {
-            const result = await this.canAccess(context);
-            const key = `${context.resource}.${context.action}`;
-            results[key] = result;
-        });
-        await Promise.all(promises);
-        return results;
-    }
-    async clearUserCache(userId) {
-        return this.permissionCache.clear(`user:${userId}:*`);
-    }
-    buildCacheKey(context) {
-        const entityId = context.targetEntity?.id || "null";
-        return `user:${context.user.id}:${context.resource}:${context.action}:${entityId}`;
-    }
-};
-exports.AuthorizationService = AuthorizationService;
-exports.AuthorizationService = AuthorizationService = AuthorizationService_1 = __decorate([
-    (0, common_1.Injectable)(),
-    __metadata("design:paramtypes", [permission_evaluator_service_1.PermissionEvaluatorService,
-        resource_access_filter_service_1.ResourceAccessFilterService,
-        permission_cache_service_1.PermissionCacheService])
-], AuthorizationService);
-//# sourceMappingURL=authorization.service.js.map

package/dist/modules/authorization/services/authorization.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authorization.service.js","sourceRoot":"","sources":["../../../../src/modules/authorization/services/authorization.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAwE;AACxE,6CAI0B;AAE1B,iFAA4E;AAC5E,qFAA+E;AAC/E,yEAAoE;AAG7D,IAAM,oBAAoB,4BAA1B,MAAM,oBAAoB;IAIZ;IACA;IACA;IALF,MAAM,GAAG,IAAI,eAAM,CAAC,sBAAoB,CAAC,IAAI,CAAC,CAAC;IAEhE,YACmB,mBAA+C,EAC/C,YAAyC,EACzC,eAAuC;QAFvC,wBAAmB,GAAnB,mBAAmB,CAA4B;QAC/C,iBAAY,GAAZ,YAAY,CAA6B;QACzC,oBAAe,GAAf,eAAe,CAAwB;IACvD,CAAC;IAEJ,KAAK,CAAC,SAAS,CAAC,OAA8B;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAE7C,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAE9D,IAAI,YAAY,IAAI,YAAY,CAAC,SAAS,EAAE,CAAC;gBAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;gBAClD,IAAI,GAAG,GAAG,YAAY,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;oBACvC,OAAO,YAAY,CAAC;gBACtB,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAGhE,MAAM,mBAAmB,GAAG;gBAC1B,GAAG,MAAM;gBACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC;YAGF,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAC;YAEnE,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,iCAAiC,KAAK,CAAC,OAAO,EAAE,EAChD,KAAK,CAAC,KAAK,CACZ,CAAC;YACF,MAAM,IAAI,2BAAkB,CAAC,8BAA8B,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CACf,YAAiB,EACjB,OAA8B;QAE9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAE7C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,2BAAkB,CAC1B,qBAAqB,OAAO,CAAC,MAAM,OAAO,OAAO,CAAC,QAAQ,EAAE,CAC7D,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,OAAO,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,YAAY,EAAE;gBAClD,GAAG,OAAO;gBACV,iBAAiB,EAAE,EAAE,iBAAiB,EAAE,MAAM,CAAC,OAAO,EAAE;aACzD,CAAC,CAAC;QACL,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAA8B;QACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAE7C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,2BAAkB,CAC1B,MAAM,CAAC,MAAM;gBACX,qBAAqB,OAAO,CAAC,MAAM,OAAO,OAAO,CAAC,QAAQ,EAAE,CAC/D,CAAC;QACJ,CAAC;IACH,CAAC;IAGD,KAAK,CAAC,SAAS,CACb,IAAS,EACT,QAAgB,EAChB,YAAkB;QAElB,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,IAAI;YACJ,QAAQ;YACR,MAAM,EAAE,yBAAgB,CAAC,MAAM;YAC/B,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CACX,IAAS,EACT,QAAgB,EAChB,YAAkB;QAElB,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,IAAI;YACJ,QAAQ;YACR,MAAM,EAAE,yBAAgB,CAAC,IAAI;YAC7B,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CACb,IAAS,EACT,QAAgB,EAChB,YAAiB;QAEjB,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,IAAI;YACJ,QAAQ;YACR,MAAM,EAAE,yBAAgB,CAAC,MAAM;YAC/B,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CACb,IAAS,EACT,QAAgB,EAChB,YAAiB;QAEjB,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,IAAI;YACJ,QAAQ;YACR,MAAM,EAAE,yBAAgB,CAAC,MAAM;YAC/B,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CACb,IAAS,EACT,QAAgB,EAChB,YAAkB;QAElB,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,IAAI;YACJ,QAAQ;YACR,MAAM,EAAE,yBAAgB,CAAC,MAAM;YAC/B,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IAGD,KAAK,CAAC,iBAAiB,CACrB,QAAiC;QAEjC,MAAM,OAAO,GAAwC,EAAE,CAAC;QAExD,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5B,OAAO,OAAO,CAAC;IACjB,CAAC;IAGD,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,MAAM,IAAI,CAAC,CAAC;IACxD,CAAC;IAEO,aAAa,CAAC,OAA8B;QAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,MAAM,CAAC;QACpD,OAAO,QAAQ,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;IACrF,CAAC;CACF,CAAA;AAzKY,oDAAoB;+BAApB,oBAAoB;IADhC,IAAA,mBAAU,GAAE;qCAK6B,yDAA0B;QACjC,4DAA2B;QACxB,iDAAsB;GAN/C,oBAAoB,CAyKhC"}

package/dist/modules/authorization/services/dynamic-filter.service.d.ts

@@ -1,9 +0,0 @@
-import { FilterCriteria, PermissionContextType } from "../../../common/";
-export declare class DynamicFilterService {
-    private readonly logger;
-    buildFiltersFromCriteria(criteria: FilterCriteria, context: PermissionContextType, assistantIds?: string[]): Promise<Record<string, any>>;
-    private applyFieldCondition;
-    mergeFilters(...filterObjects: Record<string, any>[]): Record<string, any>;
-    private getColumnMapping;
-    private mapFieldName;
-}