happy2 0.0.12 → 0.0.14

package/packages/happy2-server/dist/modules/message/messageGetProjection.js.map

@@ -1 +1 @@
-{"version":3,"file":"messageGetProjection.js","sourceRoot":"","sources":["../../../sources/modules/message/messageGetProjection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,MAAM,eAAe,CAAC;AACrD,OAAO,EAA6C,MAAM,kBAAkB,CAAC;AAE7E,OAAO,EACH,UAAU,EACV,aAAa,EACb,KAAK,EACL,KAAK,EACL,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,QAAQ,EACR,SAAS,EACT,KAAK,GACR,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAChD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACtC,QAAyB,EACzB,YAAoB,EACpB,SAAiB;IAEjB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,KAAK,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACjD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,QAAQ;SACvB,MAAM,CAAC;QACJ,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,OAAO,EAAE,QAAQ,CAAC,MAAM;QACxB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,UAAU,EAAE,QAAQ,CAAC,SAAS;QAC9B,cAAc,EAAE,QAAQ,CAAC,YAAY;QACrC,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,YAAY,EAAE,QAAQ,CAAC,WAAW;QAClC,iBAAiB,EAAE,QAAQ,CAAC,eAAe;QAC3C,yBAAyB,EAAE,QAAQ,CAAC,sBAAsB;QAC1D,UAAU,EAAE,QAAQ,CAAC,SAAS;QAC9B,SAAS,EAAE,QAAQ,CAAC,QAAQ;QAC5B,WAAW,EAAE,QAAQ,CAAC,UAAU;QAChC,qBAAqB,EAAE,QAAQ,CAAC,mBAAmB;QACnD,aAAa,EAAE,QAAQ,CAAC,WAAW;QACnC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,UAAU,EAAE,QAAQ,CAAC,SAAS;QAC9B,UAAU,EAAE,QAAQ,CAAC,SAAS;QAC9B,SAAS,EAAE,MAAM,CAAC,EAAE;QACpB,eAAe,EAAE,MAAM,CAAC,QAAQ;QAChC,iBAAiB,EAAE,MAAM,CAAC,SAAS;QACnC,gBAAgB,EAAE,MAAM,CAAC,QAAQ;QACjC,YAAY,EAAE,MAAM,CAAC,KAAK;QAC1B,oBAAoB,EAAE,MAAM,CAAC,WAAW;QACxC,WAAW,EAAE,MAAM,CAAC,IAAI;QACxB,WAAW,EAAE,MAAM,CAAC,IAAI;QACxB,iBAAiB,EAAE,MAAM,CAAC,SAAS;QACnC,aAAa,EAAE,GAAG,CAAC,EAAE;QACrB,eAAe,EAAE,GAAG,CAAC,IAAI;QACzB,mBAAmB,EAAE,GAAG,CAAC,QAAQ;QACjC,wBAAwB,EAAE,GAAG,CAAC,WAAW;QACzC,iBAAiB,EAAE,UAAU,CAAC,MAAM;QACpC,qBAAqB,EAAE,MAAM,CAAC,YAAY;QAC1C,WAAW,EAAE,MAAM,CAAC,IAAI;QACxB,iBAAiB,EAAE,MAAM,CAAC,SAAS;QACnC,iBAAiB,EAAE,MAAM,CAAC,SAAS;QACnC,sBAAsB,EAAE,SAAS,CAAC,MAAM;QACxC,cAAc,EAAE,WAAW,CAAC,EAAE;QAC9B,kBAAkB,EAAE,GAAG,CAAQ;;uBAEpB,QAAQ;kDACmB,WAAW,CAAC,EAAE;;;cAGlD;KACL,CAAC;SACD,IAAI,CAAC,QAAQ,CAAC;SACd,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;SACtD,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;SAC/C,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,kBAAkB,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;SACpE,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;SACzD,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;SACtE,QAAQ,CACL,WAAW,EACX,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,eAAe,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CACnF;SACA,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;SACjC,KAAK,CAAC,CAAC,CAAC,CAAC;IACd,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1E,OAAO,SAAS,CAAC;IACrB,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,KAAK,IAAI,IAAI,aAAa,CAAC,GAAG,CAAC,UAAU,IAAI,SAAS,CAAC,CAAC;IACtF,MAAM,cAAc,GAAG,OAAO;QAC1B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,QAAQ;aACT,MAAM,CAAC,aAAa,CAAC;aACrB,IAAI,CAAC,kBAAkB,CAAC;aACxB,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;aACzD,KAAK,CACF,GAAG,CACC,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,SAAS,CAAC,EAC3C,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EACvB,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,EAClC,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,CACnC,CACJ;aACA,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,OAAO;QACxB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,QAAQ;aACT,MAAM,CAAC;YACJ,YAAY,EAAE,SAAS,CAAC,WAAW;YACnC,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,eAAe,EAAE,SAAS,CAAC,aAAa;YACxC,OAAO,EAAE,SAAS,CAAC,MAAM;SAC5B,CAAC;aACD,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;aACzC,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACjF,MAAM,WAAW,GAAG,OAAO;QACvB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,QAAQ;aACT,MAAM,CAAC;YACJ,IAAI,EAAE,eAAe,CAAC,IAAI;YAC1B,iBAAiB,EAAE,eAAe,CAAC,eAAe;YAClD,YAAY,EAAE,eAAe,CAAC,WAAW;YACzC,MAAM,EAAE,eAAe,CAAC,MAAM;YAC9B,QAAQ,EAAE,eAAe,CAAC,OAAO;SACpC,CAAC;aACD,IAAI,CAAC,eAAe,CAAC;aACrB,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;aAC/C,OAAO,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,MAAM,QAAQ;SAC7B,MAAM,CAAC;QACJ,OAAO,EAAE,eAAe,CAAC,MAAM;QAC/B,YAAY,EAAE,eAAe,CAAC,WAAW;QACzC,OAAO,EAAE,eAAe,CAAC,MAAM;KAClC,CAAC;SACD,IAAI,CAAC,eAAe,CAAC;SACrB,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;SAC/C,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,MAAM,QAAQ;SAC9B,MAAM,CAAC;QACJ,aAAa,EAAE,qBAAqB,CAAC,WAAW;KACnD,CAAC;SACD,IAAI,CAAC,qBAAqB,CAAC;SAC3B,KAAK,CAAC,EAAE,CAAC,qBAAqB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;SACrD,OAAO,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,IAAI,GAAG,EAA2B,CAAC;IACvD,KAAK,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI;YACvD,GAAG,EAAE,QAAQ,CAAC,YAAY;YAC1B,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,SAAS;YAClC,aAAa,EAAE,QAAQ,CAAC,eAAe,IAAI,SAAS;YACpD,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,EAAE;SACd,CAAC;QACF,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;QACpB,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,KAAK,YAAY,CAAC;QACvD,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,aAAa,GAAG,GAAG,CAAC,SAAS;QAC/B,CAAC,CAAC,MAAM,CAAC;YACH,EAAE,EAAE,GAAG,CAAC,SAAS;YACjB,QAAQ,EAAE,GAAG,CAAC,eAAe;YAC7B,UAAU,EAAE,GAAG,CAAC,iBAAiB;YACjC,SAAS,EAAE,GAAG,CAAC,gBAAgB;YAC/B,KAAK,EAAE,GAAG,CAAC,YAAY;YACvB,aAAa,EAAE,GAAG,CAAC,oBAAoB;YACvC,IAAI,EAAE,GAAG,CAAC,WAAW;YACrB,SAAS,EAAE,GAAG,CAAC,WAAW;YAC1B,UAAU,EAAE,GAAG,CAAC,iBAAiB;SACpC,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,mBAAmB,GAAG,GAAG,CAAC,sBAAsB,IAAI,SAAS,CAAC;IACpE,MAAM,aAAa,GACf,GAAG,CAAC,yBAAyB;QAC7B,mBAAmB;QACnB,CAAC,MAAM,aAAa,CAAC,QAAQ,EAAE,YAAY,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAC;QACrE,CAAC,CAAC;YACI,SAAS,EAAE,GAAG,CAAC,yBAAyB;YACxC,MAAM,EAAE,mBAAmB;SAC9B;QACH,CAAC,CAAC,SAAS,CAAC;IACpB,MAAM,aAAa,GACf,GAAG,CAAC,iBAAiB,KAAK,IAAI,IAAI,aAAa,CAAC,GAAG,CAAC,iBAAiB,IAAI,SAAS,CAAC,CAAC;IACxF,OAAO;QACH,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,OAAO;QACnB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC9B,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,GAAG,CAAC,aAAa;YACxB,CAAC,CAAC;gBACI,EAAE,EAAE,GAAG,CAAC,aAAa;gBACrB,IAAI,EAAE,GAAG,CAAC,eAAgB;gBAC1B,QAAQ,EAAE,GAAG,CAAC,mBAAoB;gBAClC,WAAW,EAAE,GAAG,CAAC,wBAAwB,IAAI,SAAS;aACzD;YACH,CAAC,CAAC,SAAS;QACf,IAAI,EAAE,GAAG,CAAC,IAA4B;QACtC,QAAQ,EAAE,GAAG,CAAC,QAAsC;QACpD,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC;QACpE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI;QAC7B,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC;QACjE,gBAAgB,EACZ,GAAG,CAAC,iBAAiB,KAAK,SAAS;YAC/B,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,GAAG,CAAC,iBAAiB,KAAK,UAAU,IAAI,GAAG,CAAC,iBAAiB,KAAK,QAAQ;gBAC1E,CAAC,CAAC,GAAG,CAAC,iBAAiB;gBACvB,CAAC,CAAC,SAAS;QACrB,aAAa,EAAE,GAAG,CAAC,iBAAiB;YAChC,CAAC,CAAC;gBACI,EAAE,EAAE,GAAG,CAAC,iBAAiB;gBACzB,YAAY,EAAE,GAAG,CAAC,qBAAqB,IAAI,SAAS;gBACpD,IAAI,EAAE,aAAa,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;gBAC7D,OAAO,EAAE,aAAa;aACzB;YACH,CAAC,CAAC,SAAS;QACf,YAAY,EAAE,GAAG,CAAC,cAAc,IAAI,SAAS;QAC7C,gBAAgB,EAAE,GAAG,CAAC,kBAAkB;QACxC,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACpC,IAAI,EAAE,OAAO,CAAC,IAAkD;YAChE,MAAM,EAAE,OAAO,CAAC,iBAAiB,IAAI,SAAS;YAC9C,MAAM,EAAE,OAAO,CAAC,YAAY;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,OAAO,CAAC,QAAQ;SAC5B,CAAC,CAAC;QACH,aAAa;QACb,WAAW,EAAE,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;QACvC,SAAS,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC;QACpC,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACpC,MAAM,EAAE,OAAO,CAAC,OAAO;YACvB,WAAW,EAAE,OAAO,CAAC,YAAY,IAAI,SAAS;YAC9C,MAAM,EAAE,OAAO,CAAC,OAAO,IAAI,SAAS;SACvC,CAAC,CAAC;QACH,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;QACtC,UAAU,EAAE,GAAG,CAAC,WAA2C;QAC3D,mBAAmB,EAAE,GAAG,CAAC,qBAAqB,IAAI,SAAS;QAC3D,WAAW,EAAE,GAAG,CAAC,aAAa,IAAI,SAAS;QAC3C,QAAQ,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;QACpC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;QAChF,SAAS,EAAE,GAAG,CAAC,UAAU;KAC5B,CAAC;AACN,CAAC"}
+{"version":3,"file":"messageGetProjection.js","sourceRoot":"","sources":["../../../sources/modules/message/messageGetProjection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,MAAM,eAAe,CAAC;AACrD,OAAO,EAA6C,MAAM,kBAAkB,CAAC;AAE7E,OAAO,EACH,UAAU,EACV,aAAa,EACb,KAAK,EACL,KAAK,EACL,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,QAAQ,EACR,SAAS,EACT,KAAK,GACR,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAChD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACtC,QAAyB,EACzB,YAAoB,EACpB,SAAiB;IAEjB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,KAAK,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACjD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,QAAQ;SACvB,MAAM,CAAC;QACJ,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,OAAO,EAAE,QAAQ,CAAC,MAAM;QACxB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,UAAU,EAAE,QAAQ,CAAC,SAAS;QAC9B,cAAc,EAAE,QAAQ,CAAC,YAAY;QACrC,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,YAAY,EAAE,QAAQ,CAAC,WAAW;QAClC,iBAAiB,EAAE,QAAQ,CAAC,eAAe;QAC3C,yBAAyB,EAAE,QAAQ,CAAC,sBAAsB;QAC1D,UAAU,EAAE,QAAQ,CAAC,SAAS;QAC9B,SAAS,EAAE,QAAQ,CAAC,QAAQ;QAC5B,WAAW,EAAE,QAAQ,CAAC,UAAU;QAChC,qBAAqB,EAAE,QAAQ,CAAC,mBAAmB;QACnD,aAAa,EAAE,QAAQ,CAAC,WAAW;QACnC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,UAAU,EAAE,QAAQ,CAAC,SAAS;QAC9B,UAAU,EAAE,QAAQ,CAAC,SAAS;QAC9B,SAAS,EAAE,MAAM,CAAC,EAAE;QACpB,eAAe,EAAE,MAAM,CAAC,QAAQ;QAChC,iBAAiB,EAAE,MAAM,CAAC,SAAS;QACnC,gBAAgB,EAAE,MAAM,CAAC,QAAQ;QACjC,YAAY,EAAE,MAAM,CAAC,KAAK;QAC1B,oBAAoB,EAAE,MAAM,CAAC,WAAW;QACxC,WAAW,EAAE,MAAM,CAAC,IAAI;QACxB,WAAW,EAAE,MAAM,CAAC,IAAI;QACxB,iBAAiB,EAAE,MAAM,CAAC,SAAS;QACnC,aAAa,EAAE,GAAG,CAAC,EAAE;QACrB,eAAe,EAAE,GAAG,CAAC,IAAI;QACzB,mBAAmB,EAAE,GAAG,CAAC,QAAQ;QACjC,wBAAwB,EAAE,GAAG,CAAC,WAAW;QACzC,iBAAiB,EAAE,UAAU,CAAC,MAAM;QACpC,0BAA0B,EAAE,UAAU,CAAC,aAAa;QACpD,wBAAwB,EAAE,UAAU,CAAC,WAAW;QAChD,qBAAqB,EAAE,UAAU,CAAC,SAAS;QAC3C,uBAAuB,EAAE,UAAU,CAAC,WAAW;QAC/C,4BAA4B,EAAE,UAAU,CAAC,eAAe;QACxD,6BAA6B,EAAE,UAAU,CAAC,gBAAgB;QAC1D,8BAA8B,EAAE,UAAU,CAAC,iBAAiB;QAC5D,0BAA0B,EAAE,UAAU,CAAC,aAAa;QACpD,4BAA4B,EAAE,UAAU,CAAC,eAAe;QACxD,+BAA+B,EAAE,UAAU,CAAC,kBAAkB;QAC9D,0CAA0C,EAAE,UAAU,CAAC,4BAA4B;QACnF,qBAAqB,EAAE,MAAM,CAAC,YAAY;QAC1C,WAAW,EAAE,MAAM,CAAC,IAAI;QACxB,iBAAiB,EAAE,MAAM,CAAC,SAAS;QACnC,iBAAiB,EAAE,MAAM,CAAC,SAAS;QACnC,sBAAsB,EAAE,SAAS,CAAC,MAAM;QACxC,cAAc,EAAE,WAAW,CAAC,EAAE;QAC9B,kBAAkB,EAAE,GAAG,CAAQ;;uBAEpB,QAAQ;kDACmB,WAAW,CAAC,EAAE;;;cAGlD;KACL,CAAC;SACD,IAAI,CAAC,QAAQ,CAAC;SACd,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;SACtD,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;SAC/C,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,kBAAkB,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;SACpE,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;SACzD,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAC;SACtE,QAAQ,CACL,WAAW,EACX,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,eAAe,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CACnF;SACA,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;SACjC,KAAK,CAAC,CAAC,CAAC,CAAC;IACd,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1E,OAAO,SAAS,CAAC;IACrB,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,KAAK,IAAI,IAAI,aAAa,CAAC,GAAG,CAAC,UAAU,IAAI,SAAS,CAAC,CAAC;IACtF,MAAM,cAAc,GAAG,OAAO;QAC1B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,QAAQ;aACT,MAAM,CAAC,aAAa,CAAC;aACrB,IAAI,CAAC,kBAAkB,CAAC;aACxB,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;aACzD,KAAK,CACF,GAAG,CACC,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,SAAS,CAAC,EAC3C,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EACvB,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,EAClC,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,CACnC,CACJ;aACA,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,OAAO;QACxB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,QAAQ;aACT,MAAM,CAAC;YACJ,YAAY,EAAE,SAAS,CAAC,WAAW;YACnC,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,eAAe,EAAE,SAAS,CAAC,aAAa;YACxC,OAAO,EAAE,SAAS,CAAC,MAAM;SAC5B,CAAC;aACD,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;aACzC,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACjF,MAAM,WAAW,GAAG,OAAO;QACvB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,QAAQ;aACT,MAAM,CAAC;YACJ,IAAI,EAAE,eAAe,CAAC,IAAI;YAC1B,iBAAiB,EAAE,eAAe,CAAC,eAAe;YAClD,YAAY,EAAE,eAAe,CAAC,WAAW;YACzC,MAAM,EAAE,eAAe,CAAC,MAAM;YAC9B,QAAQ,EAAE,eAAe,CAAC,OAAO;SACpC,CAAC;aACD,IAAI,CAAC,eAAe,CAAC;aACrB,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;aAC/C,OAAO,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,MAAM,QAAQ;SAC7B,MAAM,CAAC;QACJ,OAAO,EAAE,eAAe,CAAC,MAAM;QAC/B,YAAY,EAAE,eAAe,CAAC,WAAW;QACzC,OAAO,EAAE,eAAe,CAAC,MAAM;KAClC,CAAC;SACD,IAAI,CAAC,eAAe,CAAC;SACrB,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;SAC/C,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,MAAM,QAAQ;SAC9B,MAAM,CAAC;QACJ,aAAa,EAAE,qBAAqB,CAAC,WAAW;KACnD,CAAC;SACD,IAAI,CAAC,qBAAqB,CAAC;SAC3B,KAAK,CAAC,EAAE,CAAC,qBAAqB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;SACrD,OAAO,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,IAAI,GAAG,EAA2B,CAAC;IACvD,KAAK,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI;YACvD,GAAG,EAAE,QAAQ,CAAC,YAAY;YAC1B,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,SAAS;YAClC,aAAa,EAAE,QAAQ,CAAC,eAAe,IAAI,SAAS;YACpD,KAAK,EAAE,CAAC;YACR,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,EAAE;SACd,CAAC;QACF,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;QACpB,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,KAAK,YAAY,CAAC;QACvD,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,aAAa,GAAG,GAAG,CAAC,SAAS;QAC/B,CAAC,CAAC,MAAM,CAAC;YACH,EAAE,EAAE,GAAG,CAAC,SAAS;YACjB,QAAQ,EAAE,GAAG,CAAC,eAAe;YAC7B,UAAU,EAAE,GAAG,CAAC,iBAAiB;YACjC,SAAS,EAAE,GAAG,CAAC,gBAAgB;YAC/B,KAAK,EAAE,GAAG,CAAC,YAAY;YACvB,aAAa,EAAE,GAAG,CAAC,oBAAoB;YACvC,IAAI,EAAE,GAAG,CAAC,WAAW;YACrB,SAAS,EAAE,GAAG,CAAC,WAAW;YAC1B,UAAU,EAAE,GAAG,CAAC,iBAAiB;SACpC,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,mBAAmB,GAAG,GAAG,CAAC,sBAAsB,IAAI,SAAS,CAAC;IACpE,MAAM,aAAa,GACf,GAAG,CAAC,yBAAyB;QAC7B,mBAAmB;QACnB,CAAC,MAAM,aAAa,CAAC,QAAQ,EAAE,YAAY,EAAE,mBAAmB,EAAE,KAAK,CAAC,CAAC;QACrE,CAAC,CAAC;YACI,SAAS,EAAE,GAAG,CAAC,yBAAyB;YACxC,MAAM,EAAE,mBAAmB;SAC9B;QACH,CAAC,CAAC,SAAS,CAAC;IACpB,MAAM,aAAa,GACf,GAAG,CAAC,iBAAiB,KAAK,IAAI,IAAI,aAAa,CAAC,GAAG,CAAC,iBAAiB,IAAI,SAAS,CAAC,CAAC;IACxF,OAAO;QACH,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,OAAO;QACnB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC9B,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,GAAG,CAAC,aAAa;YACxB,CAAC,CAAC;gBACI,EAAE,EAAE,GAAG,CAAC,aAAa;gBACrB,IAAI,EAAE,GAAG,CAAC,eAAgB;gBAC1B,QAAQ,EAAE,GAAG,CAAC,mBAAoB;gBAClC,WAAW,EAAE,GAAG,CAAC,wBAAwB,IAAI,SAAS;aACzD;YACH,CAAC,CAAC,SAAS;QACf,IAAI,EAAE,GAAG,CAAC,IAA4B;QACtC,QAAQ,EAAE,GAAG,CAAC,QAAsC;QACpD,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC;QACpE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI;QAC7B,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC;QACjE,gBAAgB,EACZ,GAAG,CAAC,iBAAiB,KAAK,SAAS;YAC/B,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,GAAG,CAAC,iBAAiB,KAAK,UAAU,IAAI,GAAG,CAAC,iBAAiB,KAAK,QAAQ;gBAC1E,CAAC,CAAC,GAAG,CAAC,iBAAiB;gBACvB,CAAC,CAAC,SAAS;QACrB,UAAU,EACN,CAAC,OAAO,IAAI,GAAG,CAAC,0BAA0B,IAAI,GAAG,CAAC,wBAAwB;YACtE,CAAC,CAAC,gBAAgB,CAAC;gBACb,aAAa,EAAE,GAAG,CAAC,0BAA0B;gBAC7C,WAAW,EAAE,GAAG,CAAC,wBAAwB;gBACzC,MAAM,EAAE,GAAG,CAAC,iBAAiB,IAAI,SAAS;gBAC1C,SAAS,EAAE,GAAG,CAAC,qBAAqB;gBACpC,WAAW,EAAE,GAAG,CAAC,uBAAuB;gBACxC,eAAe,EAAE,GAAG,CAAC,4BAA4B;gBACjD,gBAAgB,EAAE,GAAG,CAAC,6BAA6B;gBACnD,iBAAiB,EAAE,GAAG,CAAC,8BAA8B;gBACrD,aAAa,EAAE,GAAG,CAAC,0BAA0B;gBAC7C,eAAe,EAAE,GAAG,CAAC,4BAA4B,IAAI,CAAC;gBACtD,kBAAkB,EAAE,GAAG,CAAC,+BAA+B,IAAI,IAAI;gBAC/D,4BAA4B,EACxB,GAAG,CAAC,0CAA0C,IAAI,IAAI;aAC7D,CAAC;YACJ,CAAC,CAAC,SAAS;QACnB,aAAa,EAAE,GAAG,CAAC,iBAAiB;YAChC,CAAC,CAAC;gBACI,EAAE,EAAE,GAAG,CAAC,iBAAiB;gBACzB,YAAY,EAAE,GAAG,CAAC,qBAAqB,IAAI,SAAS;gBACpD,IAAI,EAAE,aAAa,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;gBAC7D,OAAO,EAAE,aAAa;aACzB;YACH,CAAC,CAAC,SAAS;QACf,YAAY,EAAE,GAAG,CAAC,cAAc,IAAI,SAAS;QAC7C,gBAAgB,EAAE,GAAG,CAAC,kBAAkB;QACxC,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACpC,IAAI,EAAE,OAAO,CAAC,IAAkD;YAChE,MAAM,EAAE,OAAO,CAAC,iBAAiB,IAAI,SAAS;YAC9C,MAAM,EAAE,OAAO,CAAC,YAAY;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,OAAO,CAAC,QAAQ;SAC5B,CAAC,CAAC;QACH,aAAa;QACb,WAAW,EAAE,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;QACvC,SAAS,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC;QACpC,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACpC,MAAM,EAAE,OAAO,CAAC,OAAO;YACvB,WAAW,EAAE,OAAO,CAAC,YAAY,IAAI,SAAS;YAC9C,MAAM,EAAE,OAAO,CAAC,OAAO,IAAI,SAAS;SACvC,CAAC,CAAC;QACH,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;QACtC,UAAU,EAAE,GAAG,CAAC,WAA2C;QAC3D,mBAAmB,EAAE,GAAG,CAAC,qBAAqB,IAAI,SAAS;QAC3D,WAAW,EAAE,GAAG,CAAC,aAAa,IAAI,SAAS;QAC3C,QAAQ,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;QACpC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;QAChF,SAAS,EAAE,GAAG,CAAC,UAAU;KAC5B,CAAC;AACN,CAAC"}

package/packages/happy2-server/dist/modules/permission/impl/permissionEffectiveDb.d.ts

@@ -0,0 +1,4 @@
+import type { DrizzleExecutor } from "../../drizzle.js";
+import { type EffectivePermissions } from "../types.js";
+export declare function permissionEffectiveDb(executor: DrizzleExecutor, userId: string): Promise<EffectivePermissions | undefined>;
+//# sourceMappingURL=permissionEffectiveDb.d.ts.map

package/packages/happy2-server/dist/modules/permission/impl/permissionEffectiveDb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionEffectiveDb.d.ts","sourceRoot":"","sources":["../../../../sources/modules/permission/impl/permissionEffectiveDb.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AASxD,OAAO,EAAe,KAAK,oBAAoB,EAAmB,MAAM,aAAa,CAAC;AAEtF,wBAAsB,qBAAqB,CACvC,QAAQ,EAAE,eAAe,EACzB,MAAM,EAAE,MAAM,GACf,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CA4C3C"}

package/packages/happy2-server/dist/modules/permission/impl/permissionEffectiveDb.js

@@ -0,0 +1,39 @@
+import { and, eq, isNull } from "drizzle-orm";
+import { accounts, rolePermissions, serverSetupState, userPermissions, userRoles, users, } from "../../schema.js";
+import { permissions } from "../types.js";
+export async function permissionEffectiveDb(executor, userId) {
+    const [active] = await executor
+        .select({
+        id: users.id,
+        ownerUserId: serverSetupState.bootstrapAdminUserId,
+    })
+        .from(users)
+        .innerJoin(accounts, eq(accounts.id, users.accountId))
+        .innerJoin(serverSetupState, eq(serverSetupState.id, 1))
+        .where(and(eq(users.id, userId), eq(users.kind, "human"), isNull(users.deletedAt), eq(accounts.active, 1), isNull(accounts.bannedAt), isNull(accounts.deletedAt)))
+        .limit(1);
+    if (!active)
+        return undefined;
+    if (active.ownerUserId === userId)
+        return {
+            allowed: [...permissions],
+            owner: true,
+        };
+    const [direct, throughRoles] = await Promise.all([
+        executor
+            .select({ permission: userPermissions.permission })
+            .from(userPermissions)
+            .where(eq(userPermissions.userId, userId)),
+        executor
+            .select({ permission: rolePermissions.permission })
+            .from(userRoles)
+            .innerJoin(rolePermissions, eq(rolePermissions.roleId, userRoles.roleId))
+            .where(eq(userRoles.userId, userId)),
+    ]);
+    const granted = new Set([...direct, ...throughRoles].map(({ permission }) => permission));
+    return {
+        allowed: permissions.filter((permission) => granted.has(permission)),
+        owner: false,
+    };
+}
+//# sourceMappingURL=permissionEffectiveDb.js.map

package/packages/happy2-server/dist/modules/permission/impl/permissionEffectiveDb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionEffectiveDb.js","sourceRoot":"","sources":["../../../../sources/modules/permission/impl/permissionEffectiveDb.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EACH,QAAQ,EACR,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,SAAS,EACT,KAAK,GACR,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,WAAW,EAA8C,MAAM,aAAa,CAAC;AAEtF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACvC,QAAyB,EACzB,MAAc;IAEd,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,QAAQ;SAC1B,MAAM,CAAC;QACJ,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,WAAW,EAAE,gBAAgB,CAAC,oBAAoB;KACrD,CAAC;SACD,IAAI,CAAC,KAAK,CAAC;SACX,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;SACrD,SAAS,CAAC,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;SACvD,KAAK,CACF,GAAG,CACC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,EACpB,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,EACvB,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EACvB,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,EACtB,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EACzB,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC7B,CACJ;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACd,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM;QAC7B,OAAO;YACH,OAAO,EAAE,CAAC,GAAG,WAAW,CAAC;YACzB,KAAK,EAAE,IAAI;SACd,CAAC;IACN,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC7C,QAAQ;aACH,MAAM,CAAC,EAAE,UAAU,EAAE,eAAe,CAAC,UAAU,EAAE,CAAC;aAClD,IAAI,CAAC,eAAe,CAAC;aACrB,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9C,QAAQ;aACH,MAAM,CAAC,EAAE,UAAU,EAAE,eAAe,CAAC,UAAU,EAAE,CAAC;aAClD,IAAI,CAAC,SAAS,CAAC;aACf,SAAS,CAAC,eAAe,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;aACxE,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAC3C,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,GAAG,CACnB,CAAC,GAAG,MAAM,EAAE,GAAG,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,UAAwB,CAAC,CACjF,CAAC;IACF,OAAO;QACH,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACpE,KAAK,EAAE,KAAK;KACf,CAAC;AACN,CAAC"}

package/packages/happy2-server/dist/modules/permission/impl/permissionMutationRecord.d.ts

@@ -0,0 +1,10 @@
+import type { DrizzleTransaction } from "../../drizzle.js";
+import type { PermissionMutation } from "../types.js";
+export declare function permissionMutationRecord(tx: DrizzleTransaction, input: {
+    actorUserId: string;
+    affectedUserIds: readonly string[];
+    broadcast: boolean;
+    entityId: string;
+    kind: string;
+}): Promise<PermissionMutation>;
+//# sourceMappingURL=permissionMutationRecord.d.ts.map

package/packages/happy2-server/dist/modules/permission/impl/permissionMutationRecord.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionMutationRecord.d.ts","sourceRoot":"","sources":["../../../../sources/modules/permission/impl/permissionMutationRecord.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAI3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,wBAAsB,wBAAwB,CAC1C,EAAE,EAAE,kBAAkB,EACtB,KAAK,EAAE;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CAChB,GACF,OAAO,CAAC,kBAAkB,CAAC,CAyB7B"}

package/packages/happy2-server/dist/modules/permission/impl/permissionMutationRecord.js

@@ -0,0 +1,31 @@
+import { areaHint } from "../../chat/areaHint.js";
+import { syncEventInsert } from "../../sync/syncEventInsert.js";
+import { syncSequenceNext } from "../../sync/syncSequenceNext.js";
+export async function permissionMutationRecord(tx, input) {
+    const sequence = await syncSequenceNext(tx);
+    const affectedUserIds = [...new Set(input.affectedUserIds)];
+    if (input.broadcast)
+        await syncEventInsert(tx, {
+            sequence,
+            kind: input.kind,
+            entityId: input.entityId,
+            actorUserId: input.actorUserId,
+        });
+    if (!input.broadcast && affectedUserIds.length === 0)
+        affectedUserIds.push(input.actorUserId);
+    if (!input.broadcast)
+        for (const targetUserId of affectedUserIds)
+            await syncEventInsert(tx, {
+                sequence,
+                kind: input.kind,
+                entityId: input.entityId,
+                actorUserId: input.actorUserId,
+                targetUserId,
+            });
+    return {
+        affectedUserIds,
+        broadcast: input.broadcast,
+        sync: areaHint(sequence, "permissions"),
+    };
+}
+//# sourceMappingURL=permissionMutationRecord.js.map

package/packages/happy2-server/dist/modules/permission/impl/permissionMutationRecord.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionMutationRecord.js","sourceRoot":"","sources":["../../../../sources/modules/permission/impl/permissionMutationRecord.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAGlE,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC1C,EAAsB,EACtB,KAMC;IAED,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC5C,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,SAAS;QACf,MAAM,eAAe,CAAC,EAAE,EAAE;YACtB,QAAQ;YACR,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,KAAK,CAAC,WAAW;SACjC,CAAC,CAAC;IACP,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC9F,IAAI,CAAC,KAAK,CAAC,SAAS;QAChB,KAAK,MAAM,YAAY,IAAI,eAAe;YACtC,MAAM,eAAe,CAAC,EAAE,EAAE;gBACtB,QAAQ;gBACR,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,YAAY;aACf,CAAC,CAAC;IACX,OAAO;QACH,eAAe;QACf,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAA+B;KACxE,CAAC;AACN,CAAC"}

package/packages/happy2-server/dist/modules/permission/permissionGetEffective.d.ts

@@ -0,0 +1,8 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import type { EffectivePermissions } from "./types.js";
+/**
+ * Resolves one active human user's effective allow-list as the union of direct and role grants, with the durable server owner receiving every permission.
+ * This read boundary is the canonical projection returned to clients and used by server authorization checks.
+ */
+export declare function permissionGetEffective(executor: DrizzleExecutor, userId: string): Promise<EffectivePermissions>;
+//# sourceMappingURL=permissionGetEffective.d.ts.map

package/packages/happy2-server/dist/modules/permission/permissionGetEffective.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionGetEffective.d.ts","sourceRoot":"","sources":["../../../sources/modules/permission/permissionGetEffective.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD;;;GAGG;AACH,wBAAsB,sBAAsB,CACxC,QAAQ,EAAE,eAAe,EACzB,MAAM,EAAE,MAAM,GACf,OAAO,CAAC,oBAAoB,CAAC,CAI/B"}

package/packages/happy2-server/dist/modules/permission/permissionGetEffective.js

@@ -0,0 +1,13 @@
+import { CollaborationError } from "../chat/types.js";
+import { permissionEffectiveDb } from "./impl/permissionEffectiveDb.js";
+/**
+ * Resolves one active human user's effective allow-list as the union of direct and role grants, with the durable server owner receiving every permission.
+ * This read boundary is the canonical projection returned to clients and used by server authorization checks.
+ */
+export async function permissionGetEffective(executor, userId) {
+    const effective = await permissionEffectiveDb(executor, userId);
+    if (!effective)
+        throw new CollaborationError("not_found", "User was not found");
+    return effective;
+}
+//# sourceMappingURL=permissionGetEffective.js.map

package/packages/happy2-server/dist/modules/permission/permissionGetEffective.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissionGetEffective.js","sourceRoot":"","sources":["../../../sources/modules/permission/permissionGetEffective.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAGxE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,QAAyB,EACzB,MAAc;IAEd,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChE,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,kBAAkB,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;IAChF,OAAO,SAAS,CAAC;AACrB,CAAC"}

package/packages/happy2-server/dist/modules/permission/roleCreate.d.ts

@@ -0,0 +1,16 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+import type { Permission, PermissionMutation, RoleSummary } from "./types.js";
+/**
+ * Creates a custom roles row and its complete rolePermissions allow-list in one transaction, recording audit and sync evidence for management clients.
+ * The action owns role-name uniqueness and grant persistence so no partially configured role can become assignable.
+ */
+export declare function roleCreate(executor: DrizzleExecutor, input: {
+    actorUserId: string;
+    name: string;
+    description?: string;
+    permissions: Permission[];
+}): Promise<{
+    role: RoleSummary;
+    mutation: PermissionMutation;
+}>;
+//# sourceMappingURL=roleCreate.d.ts.map

package/packages/happy2-server/dist/modules/permission/roleCreate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roleCreate.d.ts","sourceRoot":"","sources":["../../../sources/modules/permission/roleCreate.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,eAAe,EAAmB,MAAM,eAAe,CAAC;AAGtE,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAG9E;;;GAGG;AACH,wBAAsB,UAAU,CAC5B,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC7B,GACF,OAAO,CAAC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,EAAE,kBAAkB,CAAA;CAAE,CAAC,CAuD9D"}

package/packages/happy2-server/dist/modules/permission/roleCreate.js

@@ -0,0 +1,70 @@
+import { createId } from "@paralleldrive/cuid2";
+import { sql } from "drizzle-orm";
+import { CollaborationError } from "../chat/types.js";
+import { isUniqueConstraint } from "../chat/isUniqueConstraint.js";
+import { chatAppendAudit } from "../chat/chatAppendAudit.js";
+import { withTransaction } from "../drizzle.js";
+import { rolePermissions, roles } from "../schema.js";
+import { permissionMutationRecord } from "./impl/permissionMutationRecord.js";
+import { userRequirePermission } from "./userRequirePermission.js";
+/**
+ * Creates a custom roles row and its complete rolePermissions allow-list in one transaction, recording audit and sync evidence for management clients.
+ * The action owns role-name uniqueness and grant persistence so no partially configured role can become assignable.
+ */
+export async function roleCreate(executor, input) {
+    return withTransaction(executor, async (tx) => {
+        await userRequirePermission(tx, input.actorUserId, "manageAdminRoles");
+        const [existing] = await tx
+            .select({ id: roles.id })
+            .from(roles)
+            .where(sql `lower(${roles.name}) = lower(${input.name})`)
+            .limit(1);
+        if (existing)
+            throw new CollaborationError("conflict", "A role with this name exists");
+        const id = createId();
+        try {
+            await tx.insert(roles).values({
+                id,
+                name: input.name,
+                description: input.description ?? null,
+                createdByUserId: input.actorUserId,
+            });
+        }
+        catch (error) {
+            if (isUniqueConstraint(error))
+                throw new CollaborationError("conflict", "A role with this name exists");
+            throw error;
+        }
+        if (input.permissions.length)
+            await tx.insert(rolePermissions).values(input.permissions.map((permission) => ({
+                roleId: id,
+                permission,
+            })));
+        await chatAppendAudit(tx, {
+            actorUserId: input.actorUserId,
+            action: "role.created",
+            targetType: "role",
+            targetId: id,
+            after: { name: input.name, permissions: input.permissions },
+        });
+        const mutation = await permissionMutationRecord(tx, {
+            actorUserId: input.actorUserId,
+            affectedUserIds: [],
+            broadcast: true,
+            entityId: id,
+            kind: "role.created",
+        });
+        return {
+            role: {
+                id,
+                name: input.name,
+                ...(input.description ? { description: input.description } : {}),
+                builtin: null,
+                permissions: input.permissions,
+                userIds: [],
+            },
+            mutation,
+        };
+    });
+}
+//# sourceMappingURL=roleCreate.js.map

package/packages/happy2-server/dist/modules/permission/roleCreate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roleCreate.js","sourceRoot":"","sources":["../../../sources/modules/permission/roleCreate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAwB,eAAe,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAE9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC5B,QAAyB,EACzB,KAKC;IAED,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,qBAAqB,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;QACvE,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;aACtB,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;aACxB,IAAI,CAAC,KAAK,CAAC;aACX,KAAK,CAAC,GAAG,CAAA,SAAS,KAAK,CAAC,IAAI,aAAa,KAAK,CAAC,IAAI,GAAG,CAAC;aACvD,KAAK,CAAC,CAAC,CAAC,CAAC;QACd,IAAI,QAAQ;YAAE,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;QACvF,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC;YACD,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;gBAC1B,EAAE;gBACF,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;gBACtC,eAAe,EAAE,KAAK,CAAC,WAAW;aACrC,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,kBAAkB,CAAC,KAAK,CAAC;gBACzB,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;YAC7E,MAAM,KAAK,CAAC;QAChB,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM;YACxB,MAAM,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,CACnC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;gBACnC,MAAM,EAAE,EAAE;gBACV,UAAU;aACb,CAAC,CAAC,CACN,CAAC;QACN,MAAM,eAAe,CAAC,EAAE,EAAE;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,cAAc;YACtB,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;SAC9D,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,EAAE,EAAE;YAChD,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,eAAe,EAAE,EAAE;YACnB,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE,cAAc;SACvB,CAAC,CAAC;QACH,OAAO;YACH,IAAI,EAAE;gBACF,EAAE;gBACF,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,OAAO,EAAE,EAAE;aACd;YACD,QAAQ;SACX,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/permission/roleDelete.d.ts

@@ -0,0 +1,11 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+import type { PermissionMutation } from "./types.js";
+/**
+ * Deletes one custom roles row and its cascading grants and assignments while refusing either durable built-in marker.
+ * Capturing affected users before deletion allows the same commit to notify every client whose effective permissions changed.
+ */
+export declare function roleDelete(executor: DrizzleExecutor, input: {
+    actorUserId: string;
+    roleId: string;
+}): Promise<PermissionMutation>;
+//# sourceMappingURL=roleDelete.d.ts.map

package/packages/happy2-server/dist/modules/permission/roleDelete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roleDelete.d.ts","sourceRoot":"","sources":["../../../sources/modules/permission/roleDelete.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,eAAe,EAAmB,MAAM,eAAe,CAAC;AAGtE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGrD;;;GAGG;AACH,wBAAsB,UAAU,CAC5B,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/C,OAAO,CAAC,kBAAkB,CAAC,CA6B7B"}

package/packages/happy2-server/dist/modules/permission/roleDelete.js

@@ -0,0 +1,41 @@
+import { eq } from "drizzle-orm";
+import { chatAppendAudit } from "../chat/chatAppendAudit.js";
+import { CollaborationError } from "../chat/types.js";
+import { withTransaction } from "../drizzle.js";
+import { roles, userRoles } from "../schema.js";
+import { permissionMutationRecord } from "./impl/permissionMutationRecord.js";
+import { userRequirePermission } from "./userRequirePermission.js";
+/**
+ * Deletes one custom roles row and its cascading grants and assignments while refusing either durable built-in marker.
+ * Capturing affected users before deletion allows the same commit to notify every client whose effective permissions changed.
+ */
+export async function roleDelete(executor, input) {
+    return withTransaction(executor, async (tx) => {
+        await userRequirePermission(tx, input.actorUserId, "manageAdminRoles");
+        const [role] = await tx.select().from(roles).where(eq(roles.id, input.roleId)).limit(1);
+        if (!role)
+            throw new CollaborationError("not_found", "Role was not found");
+        if (role.builtinKind)
+            throw new CollaborationError("invalid", "Built-in roles cannot be deleted");
+        const affectedUserIds = (await tx
+            .select({ userId: userRoles.userId })
+            .from(userRoles)
+            .where(eq(userRoles.roleId, input.roleId))).map(({ userId }) => userId);
+        await tx.delete(roles).where(eq(roles.id, input.roleId));
+        await chatAppendAudit(tx, {
+            actorUserId: input.actorUserId,
+            action: "role.deleted",
+            targetType: "role",
+            targetId: input.roleId,
+            before: { name: role.name },
+        });
+        return permissionMutationRecord(tx, {
+            actorUserId: input.actorUserId,
+            affectedUserIds,
+            broadcast: true,
+            entityId: input.roleId,
+            kind: "permissions.changed",
+        });
+    });
+}
+//# sourceMappingURL=roleDelete.js.map

package/packages/happy2-server/dist/modules/permission/roleDelete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roleDelete.js","sourceRoot":"","sources":["../../../sources/modules/permission/roleDelete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAwB,eAAe,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAE9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC5B,QAAyB,EACzB,KAA8C;IAE9C,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,qBAAqB,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,kBAAkB,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;QAC3E,IAAI,IAAI,CAAC,WAAW;YAChB,MAAM,IAAI,kBAAkB,CAAC,SAAS,EAAE,kCAAkC,CAAC,CAAC;QAChF,MAAM,eAAe,GAAG,CACpB,MAAM,EAAE;aACH,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;aACpC,IAAI,CAAC,SAAS,CAAC;aACf,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CACjD,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACzD,MAAM,eAAe,CAAC,EAAE,EAAE;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,cAAc;YACtB,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,KAAK,CAAC,MAAM;YACtB,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;SAC9B,CAAC,CAAC;QACH,OAAO,wBAAwB,CAAC,EAAE,EAAE;YAChC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,eAAe;YACf,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,KAAK,CAAC,MAAM;YACtB,IAAI,EAAE,qBAAqB;SAC9B,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/permission/roleList.d.ts

@@ -0,0 +1,8 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import { type RoleSummary } from "./types.js";
+/**
+ * Lists every custom and built-in role with its grants and assigned users for an actor allowed to administer role membership.
+ * Returning built-in markers from durable rows lets clients preserve the undeletable admin/member identities after either role is renamed.
+ */
+export declare function roleList(executor: DrizzleExecutor, actorUserId: string): Promise<RoleSummary[]>;
+//# sourceMappingURL=roleList.d.ts.map

package/packages/happy2-server/dist/modules/permission/roleList.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roleList.d.ts","sourceRoot":"","sources":["../../../sources/modules/permission/roleList.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrD,OAAO,EAAgC,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAE5E;;;GAGG;AACH,wBAAsB,QAAQ,CAC1B,QAAQ,EAAE,eAAe,EACzB,WAAW,EAAE,MAAM,GACpB,OAAO,CAAC,WAAW,EAAE,CAAC,CA6BxB"}

package/packages/happy2-server/dist/modules/permission/roleList.js

@@ -0,0 +1,36 @@
+import { rolePermissions, roles, userRoles } from "../schema.js";
+import { userRequirePermission } from "./userRequirePermission.js";
+import { permissions } from "./types.js";
+/**
+ * Lists every custom and built-in role with its grants and assigned users for an actor allowed to administer role membership.
+ * Returning built-in markers from durable rows lets clients preserve the undeletable admin/member identities after either role is renamed.
+ */
+export async function roleList(executor, actorUserId) {
+    await userRequirePermission(executor, actorUserId, "manageAdminRoles");
+    const [roleRows, permissionRows, assignmentRows] = await Promise.all([
+        executor.select().from(roles).orderBy(roles.createdAt, roles.id),
+        executor
+            .select({ roleId: rolePermissions.roleId, permission: rolePermissions.permission })
+            .from(rolePermissions),
+        executor
+            .select({ roleId: userRoles.roleId, userId: userRoles.userId })
+            .from(userRoles)
+            .orderBy(userRoles.createdAt, userRoles.userId),
+    ]);
+    return roleRows.map((role) => {
+        const granted = new Set(permissionRows
+            .filter(({ roleId }) => roleId === role.id)
+            .map(({ permission }) => permission));
+        return {
+            id: role.id,
+            name: role.name,
+            ...(role.description ? { description: role.description } : {}),
+            builtin: role.builtinKind,
+            permissions: permissions.filter((permission) => granted.has(permission)),
+            userIds: assignmentRows
+                .filter(({ roleId }) => roleId === role.id)
+                .map(({ userId }) => userId),
+        };
+    });
+}
+//# sourceMappingURL=roleList.js.map

package/packages/happy2-server/dist/modules/permission/roleList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roleList.js","sourceRoot":"","sources":["../../../sources/modules/permission/roleList.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,WAAW,EAAqC,MAAM,YAAY,CAAC;AAE5E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC1B,QAAyB,EACzB,WAAmB;IAEnB,MAAM,qBAAqB,CAAC,QAAQ,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;IACvE,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjE,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;QAChE,QAAQ;aACH,MAAM,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,eAAe,CAAC,UAAU,EAAE,CAAC;aAClF,IAAI,CAAC,eAAe,CAAC;QAC1B,QAAQ;aACH,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;aAC9D,IAAI,CAAC,SAAS,CAAC;aACf,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC;KACtD,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACzB,MAAM,OAAO,GAAG,IAAI,GAAG,CACnB,cAAc;aACT,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE,CAAC;aAC1C,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,UAAwB,CAAC,CACzD,CAAC;QACF,OAAO;YACH,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,OAAO,EAAE,IAAI,CAAC,WAAqC;YACnD,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACxE,OAAO,EAAE,cAAc;iBAClB,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE,CAAC;iBAC1C,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC;SACnC,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/permission/roleUpdate.d.ts

@@ -0,0 +1,14 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+import type { Permission, PermissionMutation } from "./types.js";
+/**
+ * Updates a roles row's editable metadata and optional complete rolePermissions allow-list while preserving its immutable built-in marker.
+ * Permission changes notify every assigned user in the same transaction so their clients can immediately refetch `/v0/me`.
+ */
+export declare function roleUpdate(executor: DrizzleExecutor, input: {
+    actorUserId: string;
+    roleId: string;
+    name?: string;
+    description?: string | null;
+    permissions?: Permission[];
+}): Promise<PermissionMutation>;
+//# sourceMappingURL=roleUpdate.d.ts.map

package/packages/happy2-server/dist/modules/permission/roleUpdate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roleUpdate.d.ts","sourceRoot":"","sources":["../../../sources/modules/permission/roleUpdate.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,eAAe,EAAmB,MAAM,eAAe,CAAC;AAGtE,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGjE;;;GAGG;AACH,wBAAsB,UAAU,CAC5B,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;CAC9B,GACF,OAAO,CAAC,kBAAkB,CAAC,CAoE7B"}

package/packages/happy2-server/dist/modules/permission/roleUpdate.js

@@ -0,0 +1,78 @@
+import { eq, sql } from "drizzle-orm";
+import { chatAppendAudit } from "../chat/chatAppendAudit.js";
+import { CollaborationError } from "../chat/types.js";
+import { isUniqueConstraint } from "../chat/isUniqueConstraint.js";
+import { withTransaction } from "../drizzle.js";
+import { rolePermissions, roles, userRoles } from "../schema.js";
+import { permissionMutationRecord } from "./impl/permissionMutationRecord.js";
+import { userRequirePermission } from "./userRequirePermission.js";
+/**
+ * Updates a roles row's editable metadata and optional complete rolePermissions allow-list while preserving its immutable built-in marker.
+ * Permission changes notify every assigned user in the same transaction so their clients can immediately refetch `/v0/me`.
+ */
+export async function roleUpdate(executor, input) {
+    return withTransaction(executor, async (tx) => {
+        await userRequirePermission(tx, input.actorUserId, "manageAdminRoles");
+        const [role] = await tx.select().from(roles).where(eq(roles.id, input.roleId)).limit(1);
+        if (!role)
+            throw new CollaborationError("not_found", "Role was not found");
+        if (input.name !== undefined) {
+            const [duplicate] = await tx
+                .select({ id: roles.id })
+                .from(roles)
+                .where(sql `${roles.id} <> ${input.roleId} AND lower(${roles.name}) = lower(${input.name})`)
+                .limit(1);
+            if (duplicate)
+                throw new CollaborationError("conflict", "A role with this name exists");
+        }
+        try {
+            await tx
+                .update(roles)
+                .set({
+                ...(input.name === undefined ? {} : { name: input.name }),
+                ...(input.description === undefined ? {} : { description: input.description }),
+                updatedAt: new Date().toISOString(),
+            })
+                .where(eq(roles.id, input.roleId));
+        }
+        catch (error) {
+            if (isUniqueConstraint(error))
+                throw new CollaborationError("conflict", "A role with this name exists");
+            throw error;
+        }
+        if (input.permissions !== undefined) {
+            await tx.delete(rolePermissions).where(eq(rolePermissions.roleId, input.roleId));
+            if (input.permissions.length)
+                await tx.insert(rolePermissions).values(input.permissions.map((permission) => ({
+                    roleId: input.roleId,
+                    permission,
+                })));
+        }
+        const affectedUserIds = input.permissions === undefined
+            ? []
+            : (await tx
+                .select({ userId: userRoles.userId })
+                .from(userRoles)
+                .where(eq(userRoles.roleId, input.roleId))).map(({ userId }) => userId);
+        await chatAppendAudit(tx, {
+            actorUserId: input.actorUserId,
+            action: "role.updated",
+            targetType: "role",
+            targetId: input.roleId,
+            before: { name: role.name, description: role.description },
+            after: {
+                name: input.name,
+                description: input.description,
+                permissions: input.permissions,
+            },
+        });
+        return permissionMutationRecord(tx, {
+            actorUserId: input.actorUserId,
+            affectedUserIds,
+            broadcast: true,
+            entityId: input.roleId,
+            kind: input.permissions === undefined ? "role.updated" : "permissions.changed",
+        });
+    });
+}
+//# sourceMappingURL=roleUpdate.js.map

package/packages/happy2-server/dist/modules/permission/roleUpdate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roleUpdate.js","sourceRoot":"","sources":["../../../sources/modules/permission/roleUpdate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAwB,eAAe,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oCAAoC,CAAC;AAE9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC5B,QAAyB,EACzB,KAMC;IAED,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,qBAAqB,CAAC,EAAE,EAAE,KAAK,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,kBAAkB,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;QAC3E,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE;iBACvB,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;iBACxB,IAAI,CAAC,KAAK,CAAC;iBACX,KAAK,CACF,GAAG,CAAA,GAAG,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC,MAAM,cAAc,KAAK,CAAC,IAAI,aAAa,KAAK,CAAC,IAAI,GAAG,CACtF;iBACA,KAAK,CAAC,CAAC,CAAC,CAAC;YACd,IAAI,SAAS;gBAAE,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,CAAC;YACD,MAAM,EAAE;iBACH,MAAM,CAAC,KAAK,CAAC;iBACb,GAAG,CAAC;gBACD,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;gBACzD,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC9E,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACtC,CAAC;iBACD,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,kBAAkB,CAAC,KAAK,CAAC;gBACzB,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;YAC7E,MAAM,KAAK,CAAC;QAChB,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YACjF,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM;gBACxB,MAAM,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,CACnC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;oBACnC,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU;iBACb,CAAC,CAAC,CACN,CAAC;QACV,CAAC;QACD,MAAM,eAAe,GACjB,KAAK,CAAC,WAAW,KAAK,SAAS;YAC3B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CACI,MAAM,EAAE;iBACH,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;iBACpC,IAAI,CAAC,SAAS,CAAC;iBACf,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CACjD,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,eAAe,CAAC,EAAE,EAAE;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,cAAc;YACtB,UAAU,EAAE,MAAM;YAClB,QAAQ,EAAE,KAAK,CAAC,MAAM;YACtB,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;YAC1D,KAAK,EAAE;gBACH,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;aACjC;SACJ,CAAC,CAAC;QACH,OAAO,wBAAwB,CAAC,EAAE,EAAE;YAChC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,eAAe;YACf,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,KAAK,CAAC,MAAM;YACtB,IAAI,EAAE,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,qBAAqB;SACjF,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/permission/types.d.ts

@@ -0,0 +1,24 @@
+export declare const permissions: readonly ["manageSecrets", "assignSecrets", "manageImages", "assignImagesToChats", "managePlugins", "viewAllMembers", "manageAdminRoles"];
+export type Permission = (typeof permissions)[number];
+export interface EffectivePermissions {
+    allowed: Permission[];
+    owner: boolean;
+}
+export interface RoleSummary {
+    id: string;
+    name: string;
+    description?: string;
+    builtin: "admin" | "member" | null;
+    permissions: Permission[];
+    userIds: string[];
+}
+export interface PermissionMutation {
+    affectedUserIds: string[];
+    broadcast: boolean;
+    sync: {
+        sequence: string;
+        chats: [];
+        areas: ["permissions"];
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/packages/happy2-server/dist/modules/permission/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../sources/modules/permission/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW,YACpB,eAAe,EACf,eAAe,EACf,cAAc,EACd,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,CACZ,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtD,MAAM,WAAW,oBAAoB;IACjC,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,KAAK,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,IAAI,CAAC;IACnC,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,OAAO,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IAC/B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,IAAI,EAAE;QACF,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,EAAE,CAAC;QACV,KAAK,EAAE,CAAC,aAAa,CAAC,CAAC;KAC1B,CAAC;CACL"}

package/packages/happy2-server/dist/modules/permission/types.js

@@ -0,0 +1,10 @@
+export const permissions = [
+    "manageSecrets",
+    "assignSecrets",
+    "manageImages",
+    "assignImagesToChats",
+    "managePlugins",
+    "viewAllMembers",
+    "manageAdminRoles",
+];
+//# sourceMappingURL=types.js.map

package/packages/happy2-server/dist/modules/permission/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../sources/modules/permission/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG;IACvB,eAAe;IACf,eAAe;IACf,cAAc;IACd,qBAAqB;IACrB,eAAe;IACf,gBAAgB;IAChB,kBAAkB;CACZ,CAAC"}

package/packages/happy2-server/dist/modules/permission/userPermissionGet.d.ts

@@ -0,0 +1,16 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+import { permissionGetEffective } from "./permissionGetEffective.js";
+import { type Permission } from "./types.js";
+/**
+ * Returns one active user's direct grants, assigned role identifiers, and effective permission projection to an authorized role administrator.
+ * Keeping direct and inherited state distinct lets management clients edit explicit grants without accidentally flattening role membership.
+ */
+export declare function userPermissionGet(executor: DrizzleExecutor, input: {
+    actorUserId: string;
+    userId: string;
+}): Promise<{
+    direct: Permission[];
+    roleIds: string[];
+    effective: Awaited<ReturnType<typeof permissionGetEffective>>;
+}>;
+//# sourceMappingURL=userPermissionGet.d.ts.map

package/packages/happy2-server/dist/modules/permission/userPermissionGet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"userPermissionGet.d.ts","sourceRoot":"","sources":["../../../sources/modules/permission/userPermissionGet.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,OAAO,EAAe,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAE1D;;;GAGG;AACH,wBAAsB,iBAAiB,CACnC,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/C,OAAO,CAAC;IACP,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAC,CAAC;CACjE,CAAC,CAuBD"}

package/packages/happy2-server/dist/modules/permission/userPermissionGet.js

@@ -0,0 +1,33 @@
+import { eq } from "drizzle-orm";
+import { userRequireActiveHuman } from "../chat/userRequireActiveHuman.js";
+import { userPermissions, userRoles } from "../schema.js";
+import { permissionGetEffective } from "./permissionGetEffective.js";
+import { userRequirePermission } from "./userRequirePermission.js";
+import { permissions } from "./types.js";
+/**
+ * Returns one active user's direct grants, assigned role identifiers, and effective permission projection to an authorized role administrator.
+ * Keeping direct and inherited state distinct lets management clients edit explicit grants without accidentally flattening role membership.
+ */
+export async function userPermissionGet(executor, input) {
+    await userRequirePermission(executor, input.actorUserId, "manageAdminRoles");
+    await userRequireActiveHuman(executor, input.userId);
+    const [directRows, roleRows, effective] = await Promise.all([
+        executor
+            .select({ permission: userPermissions.permission })
+            .from(userPermissions)
+            .where(eq(userPermissions.userId, input.userId)),
+        executor
+            .select({ roleId: userRoles.roleId })
+            .from(userRoles)
+            .where(eq(userRoles.userId, input.userId))
+            .orderBy(userRoles.createdAt, userRoles.roleId),
+        permissionGetEffective(executor, input.userId),
+    ]);
+    const directSet = new Set(directRows.map(({ permission }) => permission));
+    return {
+        direct: permissions.filter((permission) => directSet.has(permission)),
+        roleIds: roleRows.map(({ roleId }) => roleId),
+        effective,
+    };
+}
+//# sourceMappingURL=userPermissionGet.js.map