mftsccs-node 0.0.77 → 0.0.79-dev

package/dist/types/Services/AccessControl/AccessControlService.d.ts

@@ -1,267 +1,253 @@
-import { PermissionSet } from "./PermissionSet";
+/**
+ * AccessControlService
+ *
+ * This service provides access control functionality including:
+ * - 5-phase bulk access check with BFS inheritance graph traversal
+ * - Assign and revoke access permissions
+ * - Bulk operations for access management
+ * - Super admin checks with caching
+ * - Access inheritance management (including parent access inheritance)
+ *
+ * This is the TypeScript equivalent of the C# AccessControlService class (v3.4.0).
+ * All methods are static and can be called directly on the class.
+ */
+import { AccessResult, BulkAccessRequest, BulkParentAccessInheritanceResult } from '../../DataStructures/AccessControl/AccessControlModels';
+import { PermissionSet } from './PermissionSet';
 export declare class AccessControlService {
-    private static accessCache;
-    private static baseUrl;
+    private static cacheService;
+    private static apiClient;
+    private static isAccessControlEnabled;
     private static initialize;
     /**
-     * Checks if a user or entity has the specified access for a single concept.
-     * @param userId - The user's ID.
-     * @param access - The required PermissionSet.
-     * @param conceptId - The concept ID to check.
-     * @param entityId - Optional entity ID (defaults to userId).
-     * @returns Promise<boolean> - True if access is granted, false otherwise.
-     */
-    static checkAccessOfConcept(userId: number, access: PermissionSet, conceptId: number, entityId?: number): Promise<boolean>;
-    /**
-     * Checks if a user or entity has the specified access for all concepts in a list.
-     * @param userId - The user's ID.
-     * @param access - The required PermissionSet.
-     * @param conceptIdList - Array of concept IDs to check.
-     * @param entityId - Optional entity ID (defaults to userId).
-     * @returns Promise<boolean> - True if access is granted for all, false otherwise.
-     */
-    static checkAccessOfConceptList(userId: number, access: PermissionSet, conceptIdList: number[], entityId?: number): Promise<boolean>;
-    /**
-     * Filters a list of concept IDs, returning only those for which the user or entity has the specified access.
-     * @param userId - The user's ID.
-     * @param access - The required PermissionSet.
-     * @param conceptIdList - Array of concept IDs to filter.
-     * @param entityId - Optional entity ID (defaults to userId).
-     * @returns Promise<number[]> - Array of concept IDs with access.
-     */
-    static filterConceptListByAccess(userId: number, access: PermissionSet, conceptIdList: number[], entityId?: number): Promise<number[]>;
-    /**
-     * Gets the entity ID for a given user ID.
-     * @param userId - The user's ID.
-     * @returns number - The entity ID (default: userId).
-     */
-    private static getEntityIdConceptByUserId;
-    /**
-     * Assigns access to a specific entity for a concept.
-     * @param request - Object containing conceptId, access, entityId, makePublic.
-     * @returns Promise<any> - API response.
-     */
-    static assignAccessToEntity(request: {
-        conceptId: number;
-        access: string;
-        entityId: number;
-        makePublic: boolean;
-    }): Promise<any>;
-    /**
-     * Assigns public access to a concept or list of concepts.
-     * @param request - Object containing conceptId, accessList, connectionTypeList, nestedAccessLevel, conceptIdList.
-     * @returns Promise<any> - API response.
-     */
-    static assignPublicAccess(request: {
-        conceptId: number;
-        accessList: string[];
-        connectionTypeList?: string[];
-        nestedAccessLevel?: number;
-        conceptIdList?: number[];
-    }): Promise<any>;
-    /**
-     * Assigns public access to multiple concepts in bulk.
-     * @param request - Object containing conceptIdList, accessList, connectionTypeList, nestedAccessLevel, conceptId.
-     * @returns Promise<any> - API response.
-     */
-    static assignPublicAccessBlukConcept(request: {
-        conceptIdList: number[];
-        accessList: string[];
-        connectionTypeList?: string[];
-        nestedAccessLevel?: number;
-        conceptId?: number;
-    }): Promise<any>;
-    /**
-     * Assigns access to multiple entities and concepts in bulk.
-     * @param request - Object containing conceptId, conceptIdList, entityIdList, accessList, connectionTypeList, nestedAccessLevel.
-     * @returns Promise<any> - API response.
-     */
-    static assignAccessToEntityBulk(request: {
-        conceptId: number;
-        conceptIdList?: number[];
-        entityIdList: number[];
-        accessList: string[];
-        connectionTypeList?: string[];
-        nestedAccessLevel?: number;
-    }): Promise<any>;
-    /**
-     * Assigns access to a user for a concept.
-     * @param request - Object containing conceptId, access, userId, makePublic.
-     * @returns Promise<any> - API response.
-     */
-    static assignAccessByUser(request: {
-        conceptId: number;
-        access: string;
-        userId: number;
-        makePublic: boolean;
-    }): Promise<any>;
-    /**
-     * Revokes access for an entity from a concept.
-     * @param params - Object containing conceptId, access, entityId.
-     * @returns Promise<any> - API response.
-     */
-    static revokeAccess(params: {
-        conceptId: number;
-        access: string;
-        entityId: number;
-    }): Promise<any>;
-    /**
-     * Revokes access for multiple entities in bulk.
-     * @param request - Object containing conceptId, entityIdList, accessList.
-     * @returns Promise<any> - API response.
-     */
-    static revokeAccessBulk(request: {
-        conceptId: number;
-        entityIdList: number[];
-        accessList: string[];
-    }): Promise<any>;
-    /**
-     * Gets the access list for a concept and user.
-     * @param conceptId - The concept ID.
-     * @param userId - The user ID.
-     * @returns Promise<any> - API response.
-     */
-    static getAccessList(conceptId: number, userId: number): Promise<any>;
-    /**
-     * Gets the public access list for a list of concept IDs.
-     * @param conceptIdList - Array of concept IDs.
-     * @returns Promise<any> - API response.
-     */
-    static getPublicAccessList(conceptIdList: number[]): Promise<any>;
-    /**
-     * Revokes public access for a concept.
-     * @param request - Object containing conceptId, accessList.
-     * @returns Promise<any> - API response.
-     */
-    static revokePublicAccess(request: {
-        conceptId: number;
-        accessList: string[];
-    }): Promise<any>;
-    /**
-     * Checks if an entity has a specific permission for a concept.
-     * @param params - Object containing conceptId, permission, entityId.
-     * @returns Promise<any> - API response.
-     */
-    static checkAccess(params: {
-        conceptId: number;
-        permission: string;
-        entityId: number;
-    }): Promise<any>;
-    /**
-     * Checks if a user has a specific access for a concept.
-     * @param request - Object containing conceptId, access, userId.
-     * @returns Promise<any> - API response.
-     */
-    static checkAccessByUser(request: {
-        conceptId: number;
-        access: string;
-        userId: number;
-    }): Promise<any>;
-    /**
-     * Filters concepts by access for a user.
-     * @param request - Object containing userId, access, conceptIdList, connectionIdList.
-     * @returns Promise<any> - API response.
-     */
-    static filterConceptsByAccess(request: {
-        userId: number;
-        access: string;
-        conceptIdList?: number[];
-        connectionIdList?: number[];
-    }): Promise<any>;
-    /**
-     * Checks access for a user on multiple concepts in bulk.
-     * @param request - Object containing userId, access, conceptIdList.
-     * @returns Promise<any> - API response.
-     */
-    static checkAccessOfConceptBulk(request: {
-        userId: number;
-        access: string;
-        conceptIdList: number[];
-    }): Promise<any>;
+     * Enable or disable access control checks globally.
+     * When disabled, checkAccess/checkAccessBulk/getConceptIdsWithPermission allow all input concepts.
+     */
+    static setEnabled(isEnabled: boolean): void;
+    /**
+     * Returns whether access control checks are currently enabled.
+     */
+    static getEnabled(): boolean;
+    /**
+     * Set access-control API base URL. If omitted, APIClientService fallback order is used.
+     */
+    static setBaseUrl(baseUrl?: string): void;
+    /**
+     * Check whether a user/entity has the specified permission on a single concept.
+     * Delegates to checkAccessBulk for full inheritance + group resolution.
+     *
+     * @param conceptId - The ID of the concept to check access for
+     * @param permission - The permission to check (PermissionSet flags)
+     * @param entityId - Optional entity ID to check access for
+     * @returns Promise<boolean> - True if access is granted, false otherwise
+     */
+    static checkAccess(conceptId: number, permission: PermissionSet, entityId?: number | null): Promise<boolean>;
+    /**
+     * 5-phase bulk access check algorithm.
+     * Matches the C# AccessControlService.CheckAccessBulk implementation.
+     *
+     * Phase 1: Super-admin short-circuit
+     * Phase 2: Fast-path classification (owner, public, type concepts)
+     * Phase 3: BFS inheritance graph resolution (3 sources)
+     * Phase 4: Bulk access decision resolution (cache + API)
+     * Phase 5: Grant-only merge per concept
+     *
+     * @param conceptIds - List of concept IDs to check
+     * @param permission - The permission to check (PermissionSet flags)
+     * @param entityId - Optional entity ID
+     * @returns Promise<Map<number, boolean>> - conceptId → hasAccess
+     */
+    static checkAccessBulk(conceptIds: number[], permission: PermissionSet, entityId?: number | null): Promise<Map<number, boolean>>;
+    /**
+     * Get all conceptIds which have a certain permission for an entity.
+     * Delegates to checkAccessBulk for full inheritance support.
+     *
+     * @param permission - The permission to check (PermissionSet flags)
+     * @param conceptIdsFilter - List of concept IDs to filter
+     * @param entityId - Optional entity ID
+     * @returns Promise<number[]> - Array of concept IDs that have the permission
+     */
+    static getConceptIdsWithPermission(permission: PermissionSet, conceptIdsFilter: number[], entityId?: number | null): Promise<number[]>;
+    /**
+     * Resolve inheritance graph via 3-source BFS, depth-limited to MAX_BFS_DEPTH.
+     *
+     * Source 1: FreeSchema internal connections ("the_parent_access_inheritance")
+     * Source 2: Explicit parent access links (via Access API)
+     * Source 3: Concept-connection access inheritance
+     *
+     * @returns Map<number, number[]> — accessId → [self, parent1, grandparent1, ...]
+     */
+    private static resolveBulkInheritanceGraph;
+    /**
+     * Resolve access decisions for all (accessId × subject) combinations.
+     * Probes cache first, then makes bulk API calls for misses.
+     *
+     * @returns Map with key "accessId:subjectId" → hasAccess
+     */
+    private static resolveBulkDecisions;
+    /**
+     * Resolve all subjects for an entity: [null, entityId, ...groupIds]
+     */
+    private static resolveSubjects;
+    /**
+     * Check if any grant exists across own chain + type chain for any subject.
+     * Grant-only model: any grant → ALLOW, no grants → DENY.
+     */
+    private static hasAnyGrant;
+    /**
+     * Assign access permission to an entity
+     *
+     * @param conceptId - The concept ID to assign access for
+     * @param permission - The permission to assign (PermissionSet flags)
+     * @param entityId - Optional entity ID
+     * @returns Promise<boolean> - True if successful, false otherwise
+     */
+    static assignAccess(conceptId: number, permission: PermissionSet, entityId?: number | null): Promise<boolean>;
+    /**
+     * Assign access permissions to multiple targets in bulk
+     *
+     * @param request - Bulk access request containing targets
+     * @returns Promise<AccessResult[]> - Array of access results
+     */
+    static assignAccessBulk(request: BulkAccessRequest): Promise<AccessResult[]>;
+    /**
+     * Revoke access permission from an entity
+     *
+     * @param conceptId - The concept ID to revoke access for
+     * @param permission - The permission to revoke (PermissionSet flags)
+     * @param entityId - Optional entity ID
+     * @returns Promise<boolean> - True if successfully revoked, false otherwise
+     */
+    static revokeAccess(conceptId: number, permission: PermissionSet, entityId?: number | null): Promise<boolean>;
+    /**
+     * Revoke access permissions from multiple targets in bulk
+     *
+     * @param request - Bulk access request containing targets
+     * @returns Promise<AccessResult[]> - Array of access results
+     */
+    static revokeAccessBulk(request: BulkAccessRequest): Promise<AccessResult[]>;
+    /**
+     * Set access inheritance for a concept
+     *
+     * @param conceptId - The concept ID to set inheritance for
+     * @returns Promise<boolean> - True if successful, false otherwise
+     */
+    static setAccessInheritance(conceptId: number): Promise<boolean>;
+    /**
+     * Get access inheritance status for a concept
+     *
+     * @param conceptId - The concept ID to check
+     * @param connectionTypeId - The connection type ID (default: 999)
+     * @returns Promise<boolean> - True if inheritance is enabled, false otherwise
+     */
+    static getAccessInheritanceStatus(conceptId: number, connectionTypeId?: number): Promise<boolean>;
+    /**
+     * Set access inheritance status for a concept
+     *
+     * @param conceptId - The concept ID to set inheritance status for
+     * @param isEnabled - Whether to enable or disable inheritance
+     * @param connectionTypeId - The connection type ID (default: 999)
+     * @returns Promise<boolean> - True if successful, false otherwise
+     */
+    static setAccessInheritanceStatus(conceptId: number, isEnabled: boolean, connectionTypeId?: number): Promise<boolean>;
+    /**
+     * Set parent access inheritance link for a concept
+     *
+     * @param conceptId - The child concept ID
+     * @param parentConceptId - The parent concept ID to inherit from
+     * @returns Promise<number> - The new access ID, or existing access ID
+     */
+    static setParentAccessInheritance(conceptId: number, parentConceptId: number): Promise<number>;
+    /**
+     * Remove parent access inheritance link
+     *
+     * @param conceptId - The child concept ID
+     * @param parentConceptId - Optional parent concept ID (removes specific link or all)
+     * @returns Promise<string> - Status message
+     */
+    static removeParentAccessInheritance(conceptId: number, parentConceptId?: number): Promise<string>;
+    /**
+     * Check if parent access inheritance link exists
+     *
+     * @param conceptId - The child concept ID
+     * @param parentConceptId - Optional parent concept ID to check specific link
+     * @returns Promise<boolean> - True if link exists
+     */
+    static hasParentAccessInheritance(conceptId: number, parentConceptId?: number): Promise<boolean>;
     /**
-     * Gets entities with a specific access for a concept.
-     * @param conceptId - The concept ID.
-     * @param access - The access type.
-     * @returns Promise<any> - API response.
+     * Get the parent access ID for a concept
+     *
+     * @param conceptId - The child concept ID
+     * @returns Promise<number | null> - Parent access ID or null
      */
-    static getEntitiesByAccess(conceptId: number, access: string): Promise<any>;
+    static getParentAccessId(conceptId: number): Promise<number | null>;
     /**
-     * Gets all entities with any access for a concept.
-     * @param conceptId - The concept ID.
-     * @returns Promise<any> - API response.
+     * Set parent access inheritance for multiple children with one parent
+     *
+     * @param childConceptIds - List of child concept IDs
+     * @param parentConceptId - The parent concept ID to inherit from
+     * @returns Promise<BulkParentAccessInheritanceResult[]> - Results per child
      */
-    static getEntitiesWithAccess(conceptId: number): Promise<any>;
+    static setParentAccessInheritanceBulk(childConceptIds: number[], parentConceptId: number): Promise<BulkParentAccessInheritanceResult[]>;
     /**
-     * Gets access groups by entity.
-     * @param entityId - Optional entity ID.
-     * @returns Promise<any> - API response.
+     * Remove parent access inheritance for multiple children
+     *
+     * @param childConceptIds - List of child concept IDs
+     * @param parentConceptId - Optional parent concept ID
+     * @returns Promise<BulkParentAccessInheritanceResult[]> - Results per child
      */
-    static getAccessGroupByEntity(entityId?: number): Promise<any>;
+    static removeParentAccessInheritanceBulk(childConceptIds: number[], parentConceptId?: number): Promise<BulkParentAccessInheritanceResult[]>;
     /**
-     * Gets access groups by user.
-     * @param userId - Optional user ID.
-     * @returns Promise<any> - API response.
+     * Check if an entity is a super admin
+     * Uses caching for performance
+     *
+     * @param entityId - The entity ID to check
+     * @returns Promise<boolean> - True if super admin, false otherwise
      */
-    static getAccessGroupByUser(userId?: number): Promise<any>;
+    static isSuperAdmin(entityId: number): Promise<boolean>;
     /**
-     * Gets public access by access IDs.
-     * @param accessIdList - Array of access IDs.
-     * @returns Promise<any> - API response.
+     * Assign super admin access to an entity
+     *
+     * @param entityId - The entity ID to grant super admin access to
+     * @returns Promise<number> - The entity ID if successful, 0 otherwise
      */
-    static getPublicAccessByAccessIds(accessIdList: number[]): Promise<any>;
+    static assignSuperAdmin(entityId: number): Promise<number>;
     /**
-     * Gets the full access mapping for public users.
-     * @returns Promise<any> - API response.
+     * Revoke super admin access from an entity
+     *
+     * @param entityId - The entity ID to revoke super admin access from
+     * @returns Promise<string> - Success message or error message
      */
-    static getFullAccessMappingForPublic(): Promise<any>;
+    static revokeSuperAdmin(entityId: number): Promise<string>;
     /**
-     * Assigns public access for all users.
-     * @returns Promise<any> - API response.
+     * Parse boolean from API response data.
+     * Handles: raw boolean, string, object with known property names.
+     * Matches C# ParseBoolData helper.
      */
-    static assignPublicAccessForAllUser(): Promise<any>;
+    private static parseBoolData;
     /**
-     * Assigns access by connection type for users.
-     * @returns Promise<any> - API response.
+     * Parse integer from API response data.
+     * Handles: raw number, string, object with known property names.
+     * Matches C# ParseIntData helper.
      */
-    static assignAccessByConncetionTypeOfUser(): Promise<any>;
+    private static parseIntData;
     /**
-     * Sets access inheritance for a concept.
-     * @param request - Object containing mainConceptId, enable, connectionTypeId.
-     * @returns Promise<any> - API response.
+     * Convert PermissionSet to string for API calls
      */
-    static setAccessInheritance(request: {
-        mainConceptId: number;
-        enable: boolean;
-        connectionTypeId?: number;
-    }): Promise<any>;
+    private static permissionSetToString;
     /**
-     * Gets the status of access inheritance for a concept.
-     * @param mainConceptId - The main concept ID.
-     * @param connectionTypeId - The connection type ID (default: 999).
-     * @returns Promise<any> - API response.
+     * Clear all access cache entries
      */
-    static getAccessInheritanceStatus(mainConceptId: number, connectionTypeId?: number): Promise<any>;
+    static clearCache(): void;
     /**
-     * Performs a GET request to the backend API.
-     * @param path - The API path.
-     * @param errorMsg - Error message to throw if request fails.
-     * @returns Promise<any> - API response.
+     * Clear super admin cache
      */
-    private static _get;
+    static clearSuperAdminCache(): void;
     /**
-     * Performs a POST request to the backend API.
-     * @param path - The API path.
-     * @param body - Request body.
-     * @param errorMsg - Error message to throw if request fails.
-     * @returns Promise<any> - API response.
+     * Update access cache entry (for MQTT-driven cache sync)
      */
-    private static _post;
+    static updateAccessCache(accessId: number, permission: string, entityId: number | null | undefined, hasAccess: boolean): void;
     /**
-     * Performs a DELETE request to the backend API.
-     * @param path - The API path.
-     * @param body - Optional request body.
-     * @param errorMsg - Error message to throw if request fails.
-     * @returns Promise<any> - API response.
+     * Update super admin cache entry (for MQTT-driven cache sync)
      */
-    private static _delete;
+    static updateSuperAdminCache(entityId: number, isSuperAdmin: boolean): void;
 }

package/dist/types/Services/AccessControl/PermissionSet.d.ts

@@ -1,8 +1,23 @@
+/**
+ * Permission set enum (bitwise flags)
+ * Mirrors C# PermissionSet enum
+ */
 export declare enum PermissionSet {
     None = 0,
-    Read = 1,
-    Write = 2,
-    Execute = 4,
+    Read = 1,// 1
+    Write = 2,// 2
+    Execute = 4,// 4
     Delete = 8
 }
+/**
+ * Convert an array of permission strings to a PermissionSet bitfield
+ */
 export declare function getPermissionSetFromStrings(permissions: string[]): PermissionSet;
+/**
+ * Convert a PermissionSet bitfield to an array of permission strings
+ */
+export declare function getStringsFromPermissionSet(permissions: PermissionSet): string[];
+/**
+ * Check if a permission string is valid
+ */
+export declare function isValidPermission(permission: string): boolean;

package/dist/types/Services/AccessControl/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Access Control Services
+ *
+ * This module exports all access control components:
+ * - AccessControlService: Main service for access control operations
+ * - CacheService: In-memory caching for access checks
+ * - APIClientService: HTTP client for access control API endpoints
+ * - PermissionSet: Permission flags and utilities
+ * - Models: Data types for access control operations
+ */
+export { AccessControlService } from './AccessControlService';
+export { CacheService, ICacheService } from './AccessControlCacheService';
+export { APIClientService, IAPIClientService } from './APIClientService';
+export { PermissionSet, getPermissionSetFromStrings, getStringsFromPermissionSet, isValidPermission } from './PermissionSet';
+export { PermissionSet as PermissionSetEnum, AccessRequest, AccessResult, BulkAccessRequest, BulkAccessTarget, BulkCheckAccessRequest, AccessInheritanceRequest, SuperAdminRequest, AccessControlAPIResponse, AccessControlApiResponse, AddAccessByEntityRequest, AddPublicAccessToConcept, AddAccessByEntityBulkRequest, AddAccessByUserRequest, CheckAccessBulk, ParentAccessInheritanceRequest, VALID_PERMISSIONS, isValidPermission as isValidPermissionFromModels } from '../../DataStructures/AccessControl/AccessControlModels';

package/dist/types/Services/CreateTypeConcept.d.ts

@@ -0,0 +1,2 @@
+import { Concept } from "../DataStructures/Concept";
+export declare function CreateTypeConcept(typeConcept: Concept | number, characterValue: string, userId?: number, accessId?: number, sessionInformationId?: number): Promise<Concept>;

package/dist/types/app.d.ts

@@ -20,6 +20,7 @@ export { default as CreateComposition } from './Services/CreateTheComposition';
 export { CreateConnectionBetweenTwoConcepts, CreateConnectionBetweenTwoConceptsGeneral } from './Services/CreateConnectionBetweenTwoConcepts';
 export { default as GetTheConcept } from './Services/GetTheConcept';
 export { default as MakeTheInstanceConcept } from './Services/MakeTheInstanceConcept';
+export { CreateTypeConcept } from './Services/CreateTypeConcept';
 export { storeToDatabase, getFromDatabaseWithType, getFromDatabaseWithTypeOld } from './Database/NoIndexDb';
 export { default as GetConceptByCharacter } from './Services/GetConceptByCharacter';
 export { GetLink, GetLinkRaw } from './Services/GetLink';
@@ -98,6 +99,8 @@ export { GetConnectionsBetweenApi } from './Api/GetConnections/GetConnectionsBet
 export { buildFetchConnection } from './DataStructures/FetchConnection';
 export type { FetchConnection, FetchConnectionQuery } from './DataStructures/FetchConnection';
 export { DATAID, NORMAL, JUSTDATA, ALLID, DATAIDDATE, RAW, LISTNORMAL, DATAV2 } from './Constants/FormatConstants';
+export { AccessControlService } from './Services/AccessControl/AccessControlService';
+export { PermissionSet } from './Services/AccessControl/PermissionSet';
 export { Transaction } from './DataStructures/Transaction/Transaction';
 export type { InnerActions } from './DataStructures/Transaction/Transaction';
 export { ReservedIds, ReservedConnectionIds } from './DataStructures/ReservedIds';
@@ -160,7 +163,9 @@ declare function updateAccessToken(accessToken?: string): void;
  *     clientId: '101084838',
  *     clientSecret: 'your-client-secret',
  *     aiUrl: 'https://ai.freeschema.com',
- *     enableAi: true
+ *     enableAi: true,
+ *     enableAccessControl: true,
+ *     accessControlBaseUrl: 'https://access.example.com/api/access-control'
  * });
  * init('https://api.freeschema.com', '', 'MyApp', config);
  * ```
@@ -172,6 +177,8 @@ declare function updateAccessToken(accessToken?: string): void;
  *     aiUrl: 'https://ai.example.com',
  *     accessToken: 'token',
  *     enableAi: true,
+ *     enableAccessControl: true,
+ *     accessControlBaseUrl: 'https://access.example.com/api/access-control',
  *     flags: {
  *         logApplication: true,
  *         accessTracker: true