libre-webui 0.25.0 → 0.27.0

package/backend/dist/services/recoveryDrillService.d.ts

@@ -0,0 +1,57 @@
+export declare class RecoveryDrillError extends Error {
+    readonly statusCode: number;
+    constructor(message: string, statusCode?: number);
+}
+export interface DrillReport {
+    snapshotMs: number;
+    archiveBytes: number;
+    verifyMs: number;
+    restoreMs: number;
+    restoreVerifyMs: number;
+}
+export interface PublicRecoveryDrill {
+    id: string;
+    status: string;
+    origin: string;
+    startedAt: number;
+    finishedAt: number | null;
+    snapshotBytes: number | null;
+    rpoSeconds: number | null;
+    restoreMs: number | null;
+    error: string | null;
+    report: DrillReport | null;
+}
+export declare const drillIntervalHours: () => number | null;
+/** Drills stage a filesystem snapshot; the team profile has its own CLI. */
+export declare const drillsSupported: () => boolean;
+export declare const listDrills: () => Promise<PublicRecoveryDrill[]>;
+export interface RunDrillOptions {
+    origin: 'scheduled' | 'manual';
+    createdBy?: string | null;
+    /**
+     * Scheduled drills skip quietly when the instance is busy and retry next
+     * tick; manual drills record the refusal so the administrator sees it.
+     */
+    recordBusyAsFailure?: boolean;
+}
+/**
+ * Run one full drill. Returns the recorded drill, or null when it was
+ * skipped without recording (lease held elsewhere, or busy on a scheduled
+ * run).
+ */
+export declare const runDrill: (options: RunDrillOptions) => Promise<PublicRecoveryDrill | null>;
+/**
+ * Scheduler-lease sweep: start a drill when the configured interval has
+ * elapsed since the last one (any outcome, so a failing instance does not
+ * hammer itself). Fire-and-forget; the drill lease serializes execution.
+ */
+export declare const sweepDrills: (now: number) => Promise<boolean>;
+declare const _default: {
+    runDrill: typeof runDrill;
+    sweepDrills: typeof sweepDrills;
+    listDrills: typeof listDrills;
+    drillsSupported: typeof drillsSupported;
+    drillIntervalHours: typeof drillIntervalHours;
+};
+export default _default;
+//# sourceMappingURL=recoveryDrillService.d.ts.map

package/backend/dist/services/recoveryDrillService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recoveryDrillService.d.ts","sourceRoot":"","sources":["../../src/services/recoveryDrillService.ts"],"names":[],"mappings":"AAwEA,qBAAa,kBAAmB,SAAQ,KAAK;aAGzB,UAAU;IAF5B,YACE,OAAO,EAAE,MAAM,EACC,UAAU,SAAM,EAGjC;CACF;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,WAAW,GAAG,IAAI,CAAC;CAC5B;AASD,eAAO,MAAM,kBAAkB,QAAO,MAAM,GAAG,IAK9C,CAAC;AAEF,4EAA4E;AAC5E,eAAO,MAAM,eAAe,QAAO,OAQlC,CAAC;AA0BF,eAAO,MAAM,UAAU,QAAa,OAAO,CAAC,mBAAmB,EAAE,CACK,CAAC;AAkEvE,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED;;;;GAIG;AACH,eAAO,MAAM,QAAQ,YACV,eAAe,KACvB,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAkLpC,CAAC;AAIF;;;;GAIG;AACH,eAAO,MAAM,WAAW,QAAe,MAAM,KAAG,OAAO,CAAC,OAAO,CAkB9D,CAAC"}

package/backend/dist/services/recoveryDrillService.js

@@ -0,0 +1,363 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Scheduled verified recovery drills (RECOVERY-01).
+ *
+ * A drill proves the instance is actually recoverable, end to end, with the
+ * same signed/encrypted pipeline operators use for real backups:
+ *
+ *   1. Stage a quiescent copy of the data directory (SQLite through the
+ *      online backup API, blobs and files by physical copy).
+ *   2. Create a signed, encrypted archive from the staged copy with
+ *      ephemeral drill keys, running the full recovery inventory.
+ *   3. Verify the archive, restore it into an isolated temporary target,
+ *      and verify the restored environment again.
+ *   4. Record measured timings — restore duration is the demonstrated RTO,
+ *      and the spacing between successful drills bounds the achievable RPO
+ *      of the current schedule — then delete every artifact.
+ *
+ * Drills are verification, not backups: nothing is retained. They run only
+ * on the solo (SQLite) profile, under a coordinator lease so replicas and
+ * overlapping ticks cannot double-run, and only while no other durable job
+ * is mid-flight — the same quiescence rule the recovery inventory enforces.
+ */
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { getPersistence, getSQLiteAdapterDatabase, } from '../persistence/index.js';
+import { encryptionService } from './encryptionService.js';
+import { getCoordinator } from '../platform/coordination/service.js';
+import { resolveDataDirectory } from '../utils/dataDirectory.js';
+import { createBackupArchive, generateBackupKeys, restoreBackupArchive, verifyBackupArchive, verifyRestoredBackup, } from '../platform/recovery/index.js';
+import { createLogger } from '../utils/logger.js';
+const logger = createLogger('services:recovery-drill');
+const LEASE_KEY = 'recovery-drill';
+const LEASE_TTL_MS = 30 * 60 * 1000;
+/** A running drill older than this was interrupted (crash/restart). */
+const STALE_RUNNING_MS = 60 * 60 * 1000;
+const DEFAULT_HISTORY_LIMIT = 60;
+const LIST_LIMIT = 50;
+const repositories = () => getPersistence(encryptionService).repositories.resources;
+export class RecoveryDrillError extends Error {
+    constructor(message, statusCode = 400) {
+        super(message);
+        this.statusCode = statusCode;
+    }
+}
+const historyLimit = () => {
+    const parsed = Number.parseInt(process.env.RECOVERY_DRILL_HISTORY || '', 10);
+    return Number.isInteger(parsed) && parsed >= 5 && parsed <= 1000
+        ? parsed
+        : DEFAULT_HISTORY_LIMIT;
+};
+export const drillIntervalHours = () => {
+    const parsed = Number.parseFloat(process.env.RECOVERY_DRILL_INTERVAL_HOURS || '');
+    return Number.isFinite(parsed) && parsed >= 1 ? parsed : null;
+};
+/** Drills stage a filesystem snapshot; the team profile has its own CLI. */
+export const drillsSupported = () => {
+    const env = process.env;
+    return !(env.LIBRE_PLATFORM_MODE?.trim().toLowerCase() === 'team' ||
+        env.DATABASE_BACKEND?.trim().toLowerCase() === 'postgres' ||
+        env.BLOB_STORE_BACKEND?.trim().toLowerCase() === 's3' ||
+        env.VECTOR_STORE_BACKEND?.trim().toLowerCase() === 'pgvector');
+};
+const decryptReport = (value) => {
+    if (!value)
+        return null;
+    try {
+        return JSON.parse(encryptionService.decryptAuthenticated(value));
+    }
+    catch {
+        return null;
+    }
+};
+const toPublic = (record) => ({
+    id: record.id,
+    status: record.status,
+    origin: record.origin,
+    startedAt: record.started_at,
+    finishedAt: record.finished_at,
+    snapshotBytes: record.snapshot_bytes,
+    rpoSeconds: record.rpo_seconds,
+    restoreMs: record.restore_ms,
+    error: record.error,
+    report: decryptReport(record.report),
+});
+export const listDrills = async () => (await repositories().recoveryDrills.list(LIST_LIMIT)).map(toPublic);
+const notifyAdminsOfFailure = async (drillId, message) => {
+    try {
+        const [{ userModel }, { notificationService }] = await Promise.all([
+            import('../models/userModel.js'),
+            import('./notificationService.js'),
+        ]);
+        const admins = (await userModel.getAllUsers()).filter(user => user.role === 'admin' && user.status === 'active');
+        for (const admin of admins) {
+            await notificationService.publish({
+                userId: admin.id,
+                type: 'system',
+                title: 'Recovery drill failed',
+                body: message,
+                href: '/system',
+                sourceKey: `recovery-drill-failed:${drillId}`,
+            });
+        }
+    }
+    catch (error) {
+        logger.warn('Recovery drill failure notification did not send', { error });
+    }
+};
+/** Copy the data directory, leaving the live SQLite files for the backup API. */
+const stageDataDirectory = async (dataDir, staging) => {
+    fs.mkdirSync(staging, { recursive: true, mode: 0o700 });
+    const skip = new Set(['data.sqlite', 'data.sqlite-wal', 'data.sqlite-shm']);
+    for (const entry of fs.readdirSync(dataDir)) {
+        if (skip.has(entry))
+            continue;
+        fs.cpSync(path.join(dataDir, entry), path.join(staging, entry), {
+            recursive: true,
+            errorOnExist: true,
+            force: false,
+        });
+    }
+    // The online backup API yields a consistent snapshot of a live database
+    // without stopping writers — the reason drills need no downtime.
+    await getSQLiteAdapterDatabase().backup(path.join(staging, 'data.sqlite'));
+};
+const runningDurableJobs = () => {
+    // The drill runs outside the durable-job system precisely so its own
+    // execution never appears here: any running row is real in-flight work
+    // that would land mid-write in the snapshot. The archive's recovery
+    // inventory re-checks this on the staged copy and remains authoritative.
+    try {
+        const row = getSQLiteAdapterDatabase()
+            .prepare("SELECT COUNT(*) AS count FROM platform_jobs WHERE state = 'running'")
+            .get();
+        return row.count;
+    }
+    catch {
+        return 0;
+    }
+};
+/**
+ * Run one full drill. Returns the recorded drill, or null when it was
+ * skipped without recording (lease held elsewhere, or busy on a scheduled
+ * run).
+ */
+export const runDrill = async (options) => {
+    if (!drillsSupported()) {
+        throw new RecoveryDrillError('Recovery drills run on the solo (SQLite) profile; the team profile uses the coordinated backup CLI', 501);
+    }
+    const lease = await getCoordinator().acquireLease(LEASE_KEY, LEASE_TTL_MS);
+    if (!lease) {
+        if (options.origin === 'manual') {
+            throw new RecoveryDrillError('A recovery drill is already running', 409);
+        }
+        return null;
+    }
+    const now = Date.now();
+    const drills = repositories().recoveryDrills;
+    try {
+        const running = await drills.findRunning();
+        if (running) {
+            if (now - running.started_at > STALE_RUNNING_MS) {
+                await drills.update(running.id, {
+                    status: 'failed',
+                    finished_at: now,
+                    error: 'The drill was interrupted by a restart',
+                });
+            }
+            else if (options.origin === 'manual') {
+                throw new RecoveryDrillError('A recovery drill is already running', 409);
+            }
+            else {
+                return null;
+            }
+        }
+        const previous = await drills.findLatestFinished();
+        const record = {
+            id: randomUUID(),
+            status: 'running',
+            origin: options.origin,
+            started_at: now,
+            finished_at: null,
+            snapshot_bytes: null,
+            rpo_seconds: null,
+            restore_ms: null,
+            error: null,
+            report: null,
+            created_by: options.createdBy ?? null,
+            created_at: now,
+        };
+        await drills.insert(record);
+        const workDir = fs.mkdtempSync(path.join(os.tmpdir(), 'libre-drill-'));
+        try {
+            const busy = runningDurableJobs();
+            if (busy > 0) {
+                const message = `${busy} durable job(s) were running; the drill needs a quiet moment and will retry`;
+                if (options.origin === 'scheduled' && !options.recordBusyAsFailure) {
+                    await drills.update(record.id, {
+                        status: 'failed',
+                        finished_at: Date.now(),
+                        error: message,
+                    });
+                    // Scheduled busy-skips are unremarkable: no admin alert, and the
+                    // interval clock restarts so the next tick can try again.
+                    return toPublic({
+                        ...record,
+                        status: 'failed',
+                        finished_at: Date.now(),
+                        error: message,
+                    });
+                }
+                throw new RecoveryDrillError(message, 409);
+            }
+            const dataDir = resolveDataDirectory();
+            const staging = path.join(workDir, 'staging');
+            const snapshotStarted = Date.now();
+            await stageDataDirectory(dataDir, staging);
+            const keys = generateBackupKeys(path.join(workDir, 'keys'));
+            const archivePath = path.join(workDir, 'drill.lwbackup');
+            await createBackupArchive({
+                dataDir: staging,
+                outputPath: archivePath,
+                encryptionKeyPath: keys.encryptionKeyPath,
+                signingPrivateKeyPath: keys.signingPrivateKeyPath,
+                offline: true,
+            });
+            const snapshotMs = Date.now() - snapshotStarted;
+            const archiveBytes = fs.statSync(archivePath).size;
+            const verifyStarted = Date.now();
+            const verification = verifyBackupArchive({
+                archivePath,
+                signingPublicKeyPath: keys.signingPublicKeyPath,
+                encryptionKeyPath: keys.encryptionKeyPath,
+            });
+            if (!verification.signatureVerified || !verification.payloadVerified) {
+                throw new Error('The drill archive failed verification');
+            }
+            const verifyMs = Date.now() - verifyStarted;
+            const restoreStarted = Date.now();
+            const restoreTarget = path.join(workDir, 'restore');
+            await restoreBackupArchive({
+                archivePath,
+                signingPublicKeyPath: keys.signingPublicKeyPath,
+                encryptionKeyPath: keys.encryptionKeyPath,
+                targetDirectory: restoreTarget,
+                apply: true,
+            });
+            const restoreMs = Date.now() - restoreStarted;
+            const restoreVerifyStarted = Date.now();
+            await verifyRestoredBackup(restoreTarget);
+            const restoreVerifyMs = Date.now() - restoreVerifyStarted;
+            const report = {
+                snapshotMs,
+                archiveBytes,
+                verifyMs,
+                restoreMs,
+                restoreVerifyMs,
+            };
+            const finishedAt = Date.now();
+            const rpoSeconds = previous?.status === 'passed'
+                ? Math.round((now - previous.started_at) / 1000)
+                : null;
+            await drills.update(record.id, {
+                status: 'passed',
+                finished_at: finishedAt,
+                snapshot_bytes: archiveBytes,
+                rpo_seconds: rpoSeconds,
+                restore_ms: restoreMs,
+                report: encryptionService.encrypt(JSON.stringify(report)),
+            });
+            await drills.pruneToLimit(historyLimit());
+            logger.info('Recovery drill passed', {
+                drillId: record.id,
+                restoreMs,
+                archiveBytes,
+            });
+            return toPublic({
+                ...record,
+                status: 'passed',
+                finished_at: finishedAt,
+                snapshot_bytes: archiveBytes,
+                rpo_seconds: rpoSeconds,
+                restore_ms: restoreMs,
+                report: encryptionService.encrypt(JSON.stringify(report)),
+            });
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : 'Recovery drill failed';
+            await drills.update(record.id, {
+                status: 'failed',
+                finished_at: Date.now(),
+                error: message.slice(0, 500),
+            });
+            // Interactive refusals (busy, already running) answered the caller
+            // directly; the bell alert is for drills failing unattended.
+            if (!(error instanceof RecoveryDrillError)) {
+                await notifyAdminsOfFailure(record.id, message.slice(0, 500));
+            }
+            logger.warn('Recovery drill failed', { drillId: record.id, message });
+            if (error instanceof RecoveryDrillError)
+                throw error;
+            return toPublic({
+                ...(await drills.findById(record.id)),
+            });
+        }
+        finally {
+            fs.rmSync(workDir, { recursive: true, force: true });
+        }
+    }
+    finally {
+        await lease.release().catch(() => false);
+    }
+};
+let sweepInFlight = false;
+/**
+ * Scheduler-lease sweep: start a drill when the configured interval has
+ * elapsed since the last one (any outcome, so a failing instance does not
+ * hammer itself). Fire-and-forget; the drill lease serializes execution.
+ */
+export const sweepDrills = async (now) => {
+    const interval = drillIntervalHours();
+    if (!interval || !drillsSupported() || sweepInFlight)
+        return false;
+    const drills = repositories().recoveryDrills;
+    const latest = await drills.list(1);
+    const last = latest[0];
+    if (last && now - last.started_at < interval * 60 * 60 * 1000) {
+        return false;
+    }
+    sweepInFlight = true;
+    void runDrill({ origin: 'scheduled' })
+        .catch(error => {
+        logger.warn('Scheduled recovery drill errored', { error });
+    })
+        .finally(() => {
+        sweepInFlight = false;
+    });
+    return true;
+};
+export default {
+    runDrill,
+    sweepDrills,
+    listDrills,
+    drillsSupported,
+    drillIntervalHours,
+};
+//# sourceMappingURL=recoveryDrillService.js.map

package/backend/dist/services/recoveryDrillService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recoveryDrillService.js","sourceRoot":"","sources":["../../src/services/recoveryDrillService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,cAAc,EACd,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGlD,MAAM,MAAM,GAAG,YAAY,CAAC,yBAAyB,CAAC,CAAC;AAEvD,MAAM,SAAS,GAAG,gBAAgB,CAAC;AACnC,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACpC,uEAAuE;AACvE,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACxC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACjC,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,cAAc,CAAC,iBAAiB,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC;AAE3D,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YACE,OAAe,EACC,UAAU,GAAG,GAAG;QAEhC,KAAK,CAAC,OAAO,CAAC,CAAC;0BAFC,UAAU;IAG5B,CAAC;CACF;AAuBD,MAAM,YAAY,GAAG,GAAW,EAAE;IAChC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7E,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,IAAI;QAC9D,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,qBAAqB,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAkB,EAAE;IACpD,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAC9B,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,EAAE,CAChD,CAAC;IACF,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC,CAAC;AAEF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,eAAe,GAAG,GAAY,EAAE;IAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,OAAO,CAAC,CACN,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM;QACxD,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,UAAU;QACzD,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,IAAI;QACrD,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,UAAU,CAC9D,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,KAAoB,EAAsB,EAAE;IACjE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CACf,iBAAiB,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAC/B,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,MAAiC,EAAuB,EAAE,CAAC,CAAC;IAC5E,EAAE,EAAE,MAAM,CAAC,EAAE;IACb,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,SAAS,EAAE,MAAM,CAAC,UAAU;IAC5B,UAAU,EAAE,MAAM,CAAC,WAAW;IAC9B,aAAa,EAAE,MAAM,CAAC,cAAc;IACpC,UAAU,EAAE,MAAM,CAAC,WAAW;IAC9B,SAAS,EAAE,MAAM,CAAC,UAAU;IAC5B,KAAK,EAAE,MAAM,CAAC,KAAK;IACnB,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;CACrC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,IAAoC,EAAE,CACnE,CAAC,MAAM,YAAY,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAEvE,MAAM,qBAAqB,GAAG,KAAK,EACjC,OAAe,EACf,OAAe,EACA,EAAE;IACjB,IAAI,CAAC;QACH,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,mBAAmB,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACjE,MAAM,CAAC,wBAAwB,CAAC;YAChC,MAAM,CAAC,0BAA0B,CAAC;SACnC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CACnD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAC1D,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,mBAAmB,CAAC,OAAO,CAAC;gBAChC,MAAM,EAAE,KAAK,CAAC,EAAE;gBAChB,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,uBAAuB;gBAC9B,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,SAAS;gBACf,SAAS,EAAE,yBAAyB,OAAO,EAAE;aAC9C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,kDAAkD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC,CAAC;AAEF,iFAAiF;AACjF,MAAM,kBAAkB,GAAG,KAAK,EAC9B,OAAe,EACf,OAAe,EACA,EAAE;IACjB,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC5E,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAC9B,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE;YAC9D,SAAS,EAAE,IAAI;YACf,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IACD,wEAAwE;IACxE,iEAAiE;IACjE,MAAM,wBAAwB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;AAC7E,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,GAAW,EAAE;IACtC,qEAAqE;IACrE,uEAAuE;IACvE,oEAAoE;IACpE,yEAAyE;IACzE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,wBAAwB,EAAE;aACnC,OAAO,CACN,qEAAqE,CACtE;aACA,GAAG,EAAuB,CAAC;QAC9B,OAAO,GAAG,CAAC,KAAK,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC,CAAC;AAYF;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,EAC3B,OAAwB,EACa,EAAE;IACvC,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,kBAAkB,CAC1B,oGAAoG,EACpG,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,cAAc,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC3E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,kBAAkB,CAAC,qCAAqC,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC,cAAc,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,GAAG,GAAG,OAAO,CAAC,UAAU,GAAG,gBAAgB,EAAE,CAAC;gBAChD,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE;oBAC9B,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,GAAG;oBAChB,KAAK,EAAE,wCAAwC;iBAChD,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACvC,MAAM,IAAI,kBAAkB,CAC1B,qCAAqC,EACrC,GAAG,CACJ,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,kBAAkB,EAAE,CAAC;QACnD,MAAM,MAAM,GAA8B;YACxC,EAAE,EAAE,UAAU,EAAE;YAChB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,GAAG;YACf,WAAW,EAAE,IAAI;YACjB,cAAc,EAAE,IAAI;YACpB,WAAW,EAAE,IAAI;YACjB,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;YACrC,UAAU,EAAE,GAAG;SAChB,CAAC;QACF,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAE5B,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAC;YAClC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,GAAG,IAAI,6EAA6E,CAAC;gBACrG,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;oBACnE,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE;wBAC7B,MAAM,EAAE,QAAQ;wBAChB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;wBACvB,KAAK,EAAE,OAAO;qBACf,CAAC,CAAC;oBACH,iEAAiE;oBACjE,0DAA0D;oBAC1D,OAAO,QAAQ,CAAC;wBACd,GAAG,MAAM;wBACT,MAAM,EAAE,QAAQ;wBAChB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;wBACvB,KAAK,EAAE,OAAO;qBACf,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,IAAI,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC7C,CAAC;YAED,MAAM,OAAO,GAAG,oBAAoB,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC9C,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACnC,MAAM,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAE3C,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;YAC5D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;YACzD,MAAM,mBAAmB,CAAC;gBACxB,OAAO,EAAE,OAAO;gBAChB,UAAU,EAAE,WAAW;gBACvB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;gBACzC,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;gBACjD,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC;YAChD,MAAM,YAAY,GAAG,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC;YAEnD,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACjC,MAAM,YAAY,GAAG,mBAAmB,CAAC;gBACvC,WAAW;gBACX,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;gBAC/C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;aAC1C,CAAC,CAAC;YACH,IAAI,CAAC,YAAY,CAAC,iBAAiB,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,CAAC;gBACrE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC;YAE5C,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAClC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACpD,MAAM,oBAAoB,CAAC;gBACzB,WAAW;gBACX,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;gBAC/C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;gBACzC,eAAe,EAAE,aAAa;gBAC9B,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC;YAE9C,MAAM,oBAAoB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACxC,MAAM,oBAAoB,CAAC,aAAa,CAAC,CAAC;YAC1C,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,oBAAoB,CAAC;YAE1D,MAAM,MAAM,GAAgB;gBAC1B,UAAU;gBACV,YAAY;gBACZ,QAAQ;gBACR,SAAS;gBACT,eAAe;aAChB,CAAC;YACF,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC9B,MAAM,UAAU,GACd,QAAQ,EAAE,MAAM,KAAK,QAAQ;gBAC3B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;gBAChD,CAAC,CAAC,IAAI,CAAC;YACX,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,WAAW,EAAE,UAAU;gBACvB,cAAc,EAAE,YAAY;gBAC5B,WAAW,EAAE,UAAU;gBACvB,UAAU,EAAE,SAAS;gBACrB,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;aAC1D,CAAC,CAAC;YACH,MAAM,MAAM,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;gBACnC,OAAO,EAAE,MAAM,CAAC,EAAE;gBAClB,SAAS;gBACT,YAAY;aACb,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC;gBACd,GAAG,MAAM;gBACT,MAAM,EAAE,QAAQ;gBAChB,WAAW,EAAE,UAAU;gBACvB,cAAc,EAAE,YAAY;gBAC5B,WAAW,EAAE,UAAU;gBACvB,UAAU,EAAE,SAAS;gBACrB,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;aAC1D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC;YACnE,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE;gBAC7B,MAAM,EAAE,QAAQ;gBAChB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;gBACvB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aAC7B,CAAC,CAAC;YACH,mEAAmE;YACnE,6DAA6D;YAC7D,IAAI,CAAC,CAAC,KAAK,YAAY,kBAAkB,CAAC,EAAE,CAAC;gBAC3C,MAAM,qBAAqB,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YACtE,IAAI,KAAK,YAAY,kBAAkB;gBAAE,MAAM,KAAK,CAAC;YACrD,OAAO,QAAQ,CAAC;gBACd,GAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAE;aACvC,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC,CAAC;AAEF,IAAI,aAAa,GAAG,KAAK,CAAC;AAE1B;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,GAAW,EAAoB,EAAE;IACjE,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IACtC,IAAI,CAAC,QAAQ,IAAI,CAAC,eAAe,EAAE,IAAI,aAAa;QAAE,OAAO,KAAK,CAAC;IACnE,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC,cAAc,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,IAAI,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,GAAG,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QAC9D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,aAAa,GAAG,IAAI,CAAC;IACrB,KAAK,QAAQ,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;SACnC,KAAK,CAAC,KAAK,CAAC,EAAE;QACb,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC;SACD,OAAO,CAAC,GAAG,EAAE;QACZ,aAAa,GAAG,KAAK,CAAC;IACxB,CAAC,CAAC,CAAC;IACL,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,eAAe;IACb,QAAQ;IACR,WAAW;IACX,UAAU;IACV,eAAe;IACf,kBAAkB;CACnB,CAAC"}

package/backend/dist/services/resourceGrantService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resourceGrantService.d.ts","sourceRoot":"","sources":["../../src/services/resourceGrantService.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAGV,yBAAyB,EAC1B,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAGL,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC3B,MAAM,2BAA2B,CAAC;AAGnC,qBAAa,kBAAmB,SAAQ,KAAK;IAGzC,QAAQ,CAAC,UAAU,EAAE,MAAM;IAF7B,YACE,OAAO,EAAE,MAAM,EACN,UAAU,EAAE,MAAM,EAI5B;CACF;AAaD;;;GAGG;AACH,eAAO,MAAM,eAAe,UACnB,UAAU,gBACH,qBAAqB,cACvB,MAAM,KACjB,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAU1D,CAAC;AAEF,eAAO,MAAM,qBAAqB,UACzB,UAAU,gBACH,MAAM,cACR,MAAM,KACjB,OAAO,CAAC,yBAAyB,EAAE,CAUrC,CAAC;AAEF,eAAO,MAAM,WAAW,UACf,UAAU,SACV;IACL,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB,KACA,OAAO,CAAC,yBAAyB,CAsEnC,CAAC;AAEF,eAAO,MAAM,WAAW,UACf,UAAU,WACR,MAAM,KACd,OAAO,CAAC,OAAO,CA2CjB,CAAC;AAEF,gEAAgE;AAChE,eAAO,MAAM,kBAAkB,UACtB,UAAU,KAChB,OAAO,CAAC,yBAAyB,EAAE,CAWrC,CAAC;AAEF,2DAA2D;AAC3D,eAAO,MAAM,uBAAuB,iBACpB,MAAM,cACR,MAAM,KACjB,OAAO,CAAC,MAAM,CAC8C,CAAC"}
+{"version":3,"file":"resourceGrantService.d.ts","sourceRoot":"","sources":["../../src/services/resourceGrantService.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAGV,yBAAyB,EAC1B,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAGL,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC3B,MAAM,2BAA2B,CAAC;AA4DnC,qBAAa,kBAAmB,SAAQ,KAAK;IAGzC,QAAQ,CAAC,UAAU,EAAE,MAAM;IAF7B,YACE,OAAO,EAAE,MAAM,EACN,UAAU,EAAE,MAAM,EAI5B;CACF;AAaD;;;GAGG;AACH,eAAO,MAAM,eAAe,UACnB,UAAU,gBACH,qBAAqB,cACvB,MAAM,KACjB,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAU1D,CAAC;AAEF,eAAO,MAAM,qBAAqB,UACzB,UAAU,gBACH,MAAM,cACR,MAAM,KACjB,OAAO,CAAC,yBAAyB,EAAE,CAUrC,CAAC;AAEF,eAAO,MAAM,WAAW,UACf,UAAU,SACV;IACL,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB,KACA,OAAO,CAAC,yBAAyB,CAuEnC,CAAC;AAEF,eAAO,MAAM,WAAW,UACf,UAAU,WACR,MAAM,KACd,OAAO,CAAC,OAAO,CA6CjB,CAAC;AAEF,gEAAgE;AAChE,eAAO,MAAM,kBAAkB,UACtB,UAAU,KAChB,OAAO,CAAC,yBAAyB,EAAE,CAWrC,CAAC;AAEF,2DAA2D;AAC3D,eAAO,MAAM,uBAAuB,iBACpB,MAAM,cACR,MAAM,KACjB,OAAO,CAAC,MAAM,CAC8C,CAAC"}

package/backend/dist/services/resourceGrantService.js

@@ -30,6 +30,47 @@ import { encryptionService } from './encryptionService.js';
 import { buildAuditEvent } from './securityAuditService.js';
 import { authorize, isShareableResourceType, } from './authorizationService.js';
 import { userModel } from '../models/userModel.js';
+import { createLogger } from '../utils/logger.js';
+const logger = createLogger('resource-grants');
+/**
+ * Post-commit propagation for a grant change. Knowledge shares re-publish
+ * the vector ACL so retrieval reflects the new grant set immediately.
+ * Failures are logged, never thrown: the SQL grant rows stay authoritative
+ * and the next index publication converges the ACL.
+ */
+const propagateGrantChange = async (record, change) => {
+    if (record.resource_type === 'document' ||
+        record.resource_type === 'knowledge-collection') {
+        try {
+            const { default: documentService } = await import('./documentService.js');
+            await documentService.syncShareGrants(record.resource_type, record.resource_id, record.owner_user_id);
+        }
+        catch (error) {
+            logger.error('Failed to propagate a share change to the vector ACL', {
+                resourceType: record.resource_type,
+                error,
+            });
+        }
+    }
+    if (change === 'created' && record.principal_type === 'user') {
+        try {
+            const [{ notificationService }, { userModel }] = await Promise.all([
+                import('./notificationService.js'),
+                import('../models/userModel.js'),
+            ]);
+            const owner = await userModel.getUserById(record.owner_user_id);
+            await notificationService.publish({
+                userId: record.principal_id,
+                type: 'share',
+                title: `${owner?.username ?? 'Someone'} shared a ${record.resource_type.replace(/-/g, ' ')} with you`,
+                sourceKey: `share:${record.id}`,
+            });
+        }
+        catch (error) {
+            logger.warn('Share notification failed', { error });
+        }
+    }
+};
 export class ResourceGrantError extends Error {
     constructor(message, statusCode) {
         super(message);
@@ -127,12 +168,14 @@ export const createGrant = async (actor, input) => {
             tx.audit.insert(audit);
             return undefined;
         });
-        return record;
     }
-    await persistence.transaction(async ({ security: tx }) => {
-        await tx.grants.upsert(record);
-        await tx.audit.insert(audit);
-    });
+    else {
+        await persistence.transaction(async ({ security: tx }) => {
+            await tx.grants.upsert(record);
+            await tx.audit.insert(audit);
+        });
+    }
+    await propagateGrantChange(record, 'created');
     return record;
 };
 export const deleteGrant = async (actor, grantId) => {
@@ -161,20 +204,22 @@ export const deleteGrant = async (actor, grantId) => {
         },
     });
     const persistence = getPersistence(encryptionService);
-    if (persistence.dialect === 'sqlite') {
-        return persistence.transaction(({ security: tx }) => {
-            const deleted = tx.grants.delete(grantId);
-            if (deleted)
+    const deleted = persistence.dialect === 'sqlite'
+        ? await persistence.transaction(({ security: tx }) => {
+            const removed = tx.grants.delete(grantId);
+            if (removed)
                 tx.audit.insert(audit);
-            return deleted;
+            return removed;
+        })
+        : await persistence.transaction(async ({ security: tx }) => {
+            const removed = await tx.grants.delete(grantId);
+            if (removed)
+                await tx.audit.insert(audit);
+            return removed;
         });
-    }
-    return persistence.transaction(async ({ security: tx }) => {
-        const deleted = await tx.grants.delete(grantId);
-        if (deleted)
-            await tx.audit.insert(audit);
-        return deleted;
-    });
+    if (deleted)
+        await propagateGrantChange(record, 'revoked');
+    return deleted;
 };
 /** Resources shared with the actor (directly or via groups). */
 export const listGrantsForActor = async (actor) => {

package/backend/dist/services/resourceGrantService.js.map

@@ -1 +1 @@
-{"version":3,"file":"resourceGrantService.js","sourceRoot":"","sources":["../../src/services/resourceGrantService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAMzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EACL,SAAS,EACT,uBAAuB,GAGxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YACE,OAAe,EACN,UAAkB;QAE3B,KAAK,CAAC,OAAO,CAAC,CAAC;0BAFN,UAAU;QAGnB,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC;AAE/E,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,cAAc,CAAC,iBAAiB,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC;AAEnE,MAAM,YAAY,GAAG,CAAC,KAAc,EAA4B,EAAE,CAChE,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,OAAO,CAAC;AAE7D,MAAM,eAAe,GAAG,CAAC,KAAc,EAA+B,EAAE,CACtE,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,CAAC;AAExC;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,KAAiB,EACjB,YAAmC,EACnC,UAAkB,EACyC,EAAE;IAC7D,MAAM,WAAW,GAAG,MAAM,OAAO,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACtE,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACvE,IAAI,WAAW,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACxE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE;QAChD,IAAI,EAAE,YAAY;QAClB,EAAE,EAAE,UAAU;QACd,WAAW;KACZ,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;AACpD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACxC,KAAiB,EACjB,YAAoB,EACpB,UAAkB,EACoB,EAAE;IACxC,IAAI,CAAC,uBAAuB,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,kBAAkB,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;IACtE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,mEAAmE;QACnE,MAAM,IAAI,kBAAkB,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,QAAQ,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;AACrE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAC9B,KAAiB,EACjB,KAMC,EACmC,EAAE;IACtC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,kBAAkB,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,kBAAkB,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,kBAAkB,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,KAAK,EACL,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,UAAU,CACjB,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QACnD,MAAM,IAAI,kBAAkB,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;IACD,IACE,KAAK,CAAC,aAAa,KAAK,MAAM;QAC9B,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,EACxC,CAAC;QACD,MAAM,IAAI,kBAAkB,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;IACtE,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,MAAM,GAA8B;QACxC,EAAE,EAAE,UAAU,EAAE;QAChB,aAAa,EAAE,KAAK,CAAC,YAAY;QACjC,WAAW,EAAE,KAAK,CAAC,UAAU;QAC7B,aAAa,EAAE,MAAM,CAAC,WAAW;QACjC,cAAc,EAAE,KAAK,CAAC,aAAa;QACnC,YAAY,EAAE,KAAK,CAAC,WAAW;QAC/B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,MAAM;QACxB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;KACvB,CAAC;IACF,MAAM,KAAK,GAAG,eAAe,CAAC;QAC5B,MAAM,EAAE,cAAc;QACtB,MAAM,EAAE,SAAS;QACjB,WAAW,EAAE,KAAK,CAAC,MAAM;QACzB,UAAU,EAAE,KAAK,CAAC,YAAY;QAC9B,QAAQ,EAAE,KAAK,CAAC,UAAU;QAC1B,OAAO,EAAE;YACP,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B;KACF,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,cAAc,CAAC,iBAAiB,CAAC,CAAC;IACtD,IAAI,WAAW,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE;YACjD,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACzB,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE;QACvD,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAC9B,KAAiB,EACjB,OAAe,EACG,EAAE;IACpB,MAAM,MAAM,GAAG,MAAM,QAAQ,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,kBAAkB,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,KAAK,EACL,MAAM,CAAC,aAAa,EACpB,MAAM,CAAC,WAAW,CACnB,CAAC;IACF,8DAA8D;IAC9D,+CAA+C;IAC/C,MAAM,WAAW,GACf,MAAM,CAAC,cAAc,KAAK,MAAM,IAAI,MAAM,CAAC,YAAY,KAAK,KAAK,CAAC,MAAM,CAAC;IAC3E,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,IAAI,kBAAkB,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,CAAC;QAC5B,MAAM,EAAE,cAAc;QACtB,MAAM,EAAE,SAAS;QACjB,WAAW,EAAE,KAAK,CAAC,MAAM;QACzB,UAAU,EAAE,MAAM,CAAC,aAAa;QAChC,QAAQ,EAAE,MAAM,CAAC,WAAW;QAC5B,OAAO,EAAE;YACP,aAAa,EAAE,MAAM,CAAC,cAAc;YACpC,WAAW,EAAE,MAAM,CAAC,YAAY;SACjC;KACF,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,cAAc,CAAC,iBAAiB,CAAC,CAAC;IACtD,IAAI,WAAW,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,WAAW,CAAC,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE;YAClD,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,OAAO;gBAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACpC,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE;QACxD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,OAAO;YAAE,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1C,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,gEAAgE;AAChE,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,KAAiB,EACqB,EAAE;IACxC,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,MAAM,QAAQ,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;KACpE,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,QAAQ,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzE,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CACT,GAAG,CAAC,MAAM,QAAQ,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,2DAA2D;AAC3D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,YAAoB,EACpB,UAAkB,EACD,EAAE,CACnB,QAAQ,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC"}
+{"version":3,"file":"resourceGrantService.js","sourceRoot":"","sources":["../../src/services/resourceGrantService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAMzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EACL,SAAS,EACT,uBAAuB,GAGxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;AAE/C;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,KAAK,EAChC,MAOC,EACD,MAA6B,EACd,EAAE;IACjB,IACE,MAAM,CAAC,aAAa,KAAK,UAAU;QACnC,MAAM,CAAC,aAAa,KAAK,sBAAsB,EAC/C,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;YAC1E,MAAM,eAAe,CAAC,eAAe,CACnC,MAAM,CAAC,aAAa,EACpB,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,aAAa,CACrB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,sDAAsD,EAAE;gBACnE,YAAY,EAAE,MAAM,CAAC,aAAa;gBAClC,KAAK;aACN,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,cAAc,KAAK,MAAM,EAAE,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACjE,MAAM,CAAC,0BAA0B,CAAC;gBAClC,MAAM,CAAC,wBAAwB,CAAC;aACjC,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAChE,MAAM,mBAAmB,CAAC,OAAO,CAAC;gBAChC,MAAM,EAAE,MAAM,CAAC,YAAY;gBAC3B,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,GAAG,KAAK,EAAE,QAAQ,IAAI,SAAS,aAAa,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW;gBACrG,SAAS,EAAE,SAAS,MAAM,CAAC,EAAE,EAAE;aAChC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YACE,OAAe,EACN,UAAkB;QAE3B,KAAK,CAAC,OAAO,CAAC,CAAC;0BAFN,UAAU;QAGnB,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC;AAE/E,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,cAAc,CAAC,iBAAiB,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC;AAEnE,MAAM,YAAY,GAAG,CAAC,KAAc,EAA4B,EAAE,CAChE,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,OAAO,CAAC;AAE7D,MAAM,eAAe,GAAG,CAAC,KAAc,EAA+B,EAAE,CACtE,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,CAAC;AAExC;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,KAAiB,EACjB,YAAmC,EACnC,UAAkB,EACyC,EAAE;IAC7D,MAAM,WAAW,GAAG,MAAM,OAAO,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACtE,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACvE,IAAI,WAAW,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACxE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE;QAChD,IAAI,EAAE,YAAY;QAClB,EAAE,EAAE,UAAU;QACd,WAAW;KACZ,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;AACpD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACxC,KAAiB,EACjB,YAAoB,EACpB,UAAkB,EACoB,EAAE;IACxC,IAAI,CAAC,uBAAuB,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,kBAAkB,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;IACtE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,mEAAmE;QACnE,MAAM,IAAI,kBAAkB,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,QAAQ,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;AACrE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAC9B,KAAiB,EACjB,KAMC,EACmC,EAAE;IACtC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,kBAAkB,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,kBAAkB,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,kBAAkB,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,KAAK,EACL,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,UAAU,CACjB,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QACnD,MAAM,IAAI,kBAAkB,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;IACD,IACE,KAAK,CAAC,aAAa,KAAK,MAAM;QAC9B,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,EACxC,CAAC;QACD,MAAM,IAAI,kBAAkB,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;IACtE,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,MAAM,GAA8B;QACxC,EAAE,EAAE,UAAU,EAAE;QAChB,aAAa,EAAE,KAAK,CAAC,YAAY;QACjC,WAAW,EAAE,KAAK,CAAC,UAAU;QAC7B,aAAa,EAAE,MAAM,CAAC,WAAW;QACjC,cAAc,EAAE,KAAK,CAAC,aAAa;QACnC,YAAY,EAAE,KAAK,CAAC,WAAW;QAC/B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,MAAM;QACxB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;KACvB,CAAC;IACF,MAAM,KAAK,GAAG,eAAe,CAAC;QAC5B,MAAM,EAAE,cAAc;QACtB,MAAM,EAAE,SAAS;QACjB,WAAW,EAAE,KAAK,CAAC,MAAM;QACzB,UAAU,EAAE,KAAK,CAAC,YAAY;QAC9B,QAAQ,EAAE,KAAK,CAAC,UAAU;QAC1B,OAAO,EAAE;YACP,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B;KACF,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,cAAc,CAAC,iBAAiB,CAAC,CAAC;IACtD,IAAI,WAAW,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE;YACjD,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACzB,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvB,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE;YACvD,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/B,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,oBAAoB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAC9B,KAAiB,EACjB,OAAe,EACG,EAAE;IACpB,MAAM,MAAM,GAAG,MAAM,QAAQ,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,kBAAkB,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,KAAK,EACL,MAAM,CAAC,aAAa,EACpB,MAAM,CAAC,WAAW,CACnB,CAAC;IACF,8DAA8D;IAC9D,+CAA+C;IAC/C,MAAM,WAAW,GACf,MAAM,CAAC,cAAc,KAAK,MAAM,IAAI,MAAM,CAAC,YAAY,KAAK,KAAK,CAAC,MAAM,CAAC;IAC3E,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,IAAI,kBAAkB,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,KAAK,GAAG,eAAe,CAAC;QAC5B,MAAM,EAAE,cAAc;QACtB,MAAM,EAAE,SAAS;QACjB,WAAW,EAAE,KAAK,CAAC,MAAM;QACzB,UAAU,EAAE,MAAM,CAAC,aAAa;QAChC,QAAQ,EAAE,MAAM,CAAC,WAAW;QAC5B,OAAO,EAAE;YACP,aAAa,EAAE,MAAM,CAAC,cAAc;YACpC,WAAW,EAAE,MAAM,CAAC,YAAY;SACjC;KACF,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,cAAc,CAAC,iBAAiB,CAAC,CAAC;IACtD,MAAM,OAAO,GACX,WAAW,CAAC,OAAO,KAAK,QAAQ;QAC9B,CAAC,CAAC,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE;YACjD,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,OAAO;gBAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACpC,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC;QACJ,CAAC,CAAC,MAAM,WAAW,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE;YACvD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,OAAO;gBAAE,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1C,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;IACT,IAAI,OAAO;QAAE,MAAM,oBAAoB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC3D,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,gEAAgE;AAChE,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,KAAiB,EACqB,EAAE;IACxC,MAAM,MAAM,GAAG;QACb,GAAG,CAAC,MAAM,QAAQ,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;KACpE,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,QAAQ,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzE,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CACT,GAAG,CAAC,MAAM,QAAQ,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,2DAA2D;AAC3D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,YAAoB,EACpB,UAAkB,EACD,EAAE,CACnB,QAAQ,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC"}

package/backend/dist/services/searchService.d.ts

@@ -0,0 +1,29 @@
+import type { AuthzActor } from './authorizationService.js';
+export interface SearchSnippetHit {
+    snippet: string;
+    score: number;
+}
+export interface SessionSearchHit extends SearchSnippetHit {
+    sessionId: string;
+    title: string;
+    messageId: string;
+    role: string;
+}
+export interface NoteSearchHit extends SearchSnippetHit {
+    noteId: string;
+    title: string;
+    shared: boolean;
+}
+export interface DocumentSearchHit extends SearchSnippetHit {
+    documentId: string;
+    filename: string;
+}
+export interface WorkspaceSearchResult {
+    sessions: SessionSearchHit[];
+    notes: NoteSearchHit[];
+    documents: DocumentSearchHit[];
+}
+/** A readable excerpt centered on the first query-term occurrence. */
+export declare const buildSnippet: (text: string, query: string) => string;
+export declare const searchWorkspace: (actor: AuthzActor, query: string, limitPerDomain?: number) => Promise<WorkspaceSearchResult>;
+//# sourceMappingURL=searchService.d.ts.map

package/backend/dist/services/searchService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"searchService.d.ts","sourceRoot":"","sources":["../../src/services/searchService.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAS5D,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAiB,SAAQ,gBAAgB;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAc,SAAQ,gBAAgB;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,iBAAkB,SAAQ,gBAAgB;IACzD,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB,SAAS,EAAE,iBAAiB,EAAE,CAAC;CAChC;AAED,sEAAsE;AACtE,eAAO,MAAM,YAAY,SAAU,MAAM,SAAS,MAAM,KAAG,MAgB1D,CAAC;AAEF,eAAO,MAAM,eAAe,UACnB,UAAU,SACV,MAAM,8BAEZ,OAAO,CAAC,qBAAqB,CAuG/B,CAAC"}

package/backend/dist/services/searchService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"searchService.js","sourceRoot":"","sources":["../../src/services/searchService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;;;;GAUG;AAEH,OAAO,cAAc,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,EACL,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AAErC,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,sBAAsB,GAAG,KAAM,CAAC;AA+BtC,sEAAsE;AACtE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE;IAClE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC;YAAE,MAAM,GAAG,EAAE,CAAC;IAC/D,CAAC;IACD,IAAI,MAAM,KAAK,CAAC,CAAC;QAAE,MAAM,GAAG,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,cAAc,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAAC,CAAC;IAChE,OAAO,CACL,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACtB,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE;QAClC,CAAC,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CACpC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,KAAiB,EACjB,KAAa,EACb,cAAc,GAAG,CAAC,EACc,EAAE;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAEhE,gBAAgB;IAChB,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnE,MAAM,iBAAiB,GAAwC,EAAE,CAAC;IAClE,MAAM,WAAW,GAAG,IAAI,GAAG,EASxB,CAAC;IACJ,KAAK,EAAE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QACtC,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACvC,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YACxC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE;gBAAE,SAAS;YACvC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;YACzC,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YACtD,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE;gBAClB,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,OAAO,CAAC,OAAO;aACtB,CAAC,CAAC;YACH,IAAI,iBAAiB,CAAC,MAAM,IAAI,sBAAsB;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAuB,EAAE,CAAC;IAC3C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,KAAK,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,mBAAmB,CAAC,OAAO,EAAE,iBAAiB,EAAE;QAC1E,qBAAqB,EAAE,IAAI;KAC5B,CAAC,EAAE,CAAC;QACH,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;QAClC,iDAAiD;QACjD,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,SAAS;QAC/C,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,WAAW,CAAC,IAAI,CAAC;YACf,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;YACzC,KAAK;SACN,CAAC,CAAC;QACH,IAAI,WAAW,CAAC,MAAM,IAAI,cAAc;YAAE,MAAM;IAClD,CAAC;IAED,yBAAyB;IACzB,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,mBAAmB,CACpC,OAAO,EACP,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,OAAO,EAAE;KACvC,CAAC,CAAC,EACH,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAChC,CAAC;IACF,KAAK,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,SAAS;YACjC,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC;YAC1D,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,gCAAgC;IAChC,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrE,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CACnD,CAAC;IACF,MAAM,cAAc,GAAG,mBAAmB,CACxC,OAAO,EACP,SAAS;SACN,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;SACnD,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAChB,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,IAAI,EAAE,GAAG,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,OAAO,IAAI,EAAE,EAAE;KACxD,CAAC,CAAC,EACL,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAChC,CAAC;IACF,MAAM,YAAY,GAAwB,EAAE,CAAC;IAC7C,KAAK,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE,CAAC;QACpE,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;QACxC,YAAY,CAAC,IAAI,CAAC;YAChB,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;YACrE,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;AAC7E,CAAC,CAAC"}

package/backend/dist/services/securityAuditService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"securityAuditService.d.ts","sourceRoot":"","sources":["../../src/services/securityAuditService.ts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EACV,WAAW,EAEX,8BAA8B,EAC/B,MAAM,yBAAyB,CAAC;AAMjC,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE3E,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAYD,eAAO,MAAM,gBAAgB,QAAO,MAOnC,CAAC;AAyBF,yEAAyE;AACzE,eAAO,MAAM,kBAAkB,YACpB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,KAC3C,MAAM,GAAG,IAYX,CAAC;AAEF,sEAAsE;AACtE,eAAO,MAAM,YAAY,OAAQ,MAAM,GAAG,SAAS,KAAG,MAAM,GAAG,IAG9D,CAAC;AAEF,yEAAyE;AACzE,eAAO,MAAM,eAAe,UACnB,uBAAuB,KAC7B,8BAYD,CAAC;AAgBH;;;GAGG;AACH,eAAO,MAAM,gBAAgB,UACpB,uBAAuB,KAC7B,OAAO,CAAC,IAAI,CAad,CAAC;AAEF,eAAO,MAAM,gBAAgB,UAAiB;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,KAAG,OAAO,CAAC,8BAA8B,EAAE,CAY3C,CAAC"}
+{"version":3,"file":"securityAuditService.d.ts","sourceRoot":"","sources":["../../src/services/securityAuditService.ts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EACV,WAAW,EAEX,8BAA8B,EAC/B,MAAM,yBAAyB,CAAC;AAOjC,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE3E,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAYD,eAAO,MAAM,gBAAgB,QAAO,MAOnC,CAAC;AAyBF,yEAAyE;AACzE,eAAO,MAAM,kBAAkB,YACpB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,KAC3C,MAAM,GAAG,IAYX,CAAC;AAEF,sEAAsE;AACtE,eAAO,MAAM,YAAY,OAAQ,MAAM,GAAG,SAAS,KAAG,MAAM,GAAG,IAG9D,CAAC;AAEF,yEAAyE;AACzE,eAAO,MAAM,eAAe,UACnB,uBAAuB,KAC7B,8BAYD,CAAC;AAgBH;;;GAGG;AACH,eAAO,MAAM,gBAAgB,UACpB,uBAAuB,KAC7B,OAAO,CAAC,IAAI,CAad,CAAC;AAEF,eAAO,MAAM,gBAAgB,UAAiB;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,KAAG,OAAO,CAAC,8BAA8B,EAAE,CAY3C,CAAC"}