orbitx-core-models 11.103.0 → 11.112.0

package/dist/permissions/resolve.d.ts

@@ -0,0 +1,50 @@
+import { Dashboard } from "./types";
+export interface PermissionSource {
+    permissionMode?: "role" | "custom";
+    permissionKeys?: string[];
+    /**
+     * Individually-granted extras on top of a named role -- e.g. a
+     * global-admin-adjacent role that also needs one extra node nobody else on
+     * that role gets. Only applies in "role" mode; ignored in "custom" mode
+     * since permissionKeys is already the fully authoritative set there.
+     */
+    extraPermissionKeys?: string[];
+    /**
+     * Must be populated (a Role document with `grantedKeys`) for "role" mode to
+     * resolve to anything — pass the raw ObjectId and this returns an empty set.
+     */
+    roleId?: {
+        grantedKeys?: string[];
+    } | unknown;
+}
+/**
+ * Single source of truth for "what can this user/agent actually do", used
+ * identically by every backend's requirePermission middleware and by each
+ * frontend's usePermissions() hook (via the effectivePermissions the login/
+ * `GET /me` response should expose). Does not hit the DB — the caller is
+ * responsible for populating `roleId` beforehand when in "role" mode.
+ */
+export declare function resolveEffectivePermissions(source: PermissionSource): Set<string>;
+export declare function hasPermission(source: PermissionSource, key: string): boolean;
+export interface ValidationResult {
+    valid: boolean;
+    errors: string[];
+}
+/**
+ * Enforces the parent-gates-children rule server-side: a submitted set is
+ * only valid if every key exists in that dashboard's tree AND every key's
+ * full ancestor chain is also present in the set. Run this on every write
+ * path that accepts a custom permission set or a new Role's grantedKeys —
+ * never trust client-side tree-editor state alone.
+ */
+export declare function validateGrantedKeys(dashboard: Dashboard, keys: string[]): ValidationResult;
+/** Every key in a dashboard's tree, granted at once -- for "full access" roles. */
+export declare function getFullAccessKeys(dashboard: Dashboard): string[];
+/**
+ * Validates a role's extraPermissionKeys against the UNION of the role's own
+ * grantedKeys and the extras -- an extra key's parent may already be covered
+ * by the role itself, so it doesn't need to be duplicated into the extras
+ * list. Call this on every write path that accepts extraPermissionKeys.
+ */
+export declare function validateExtraKeys(dashboard: Dashboard, roleGrantedKeys: string[], extraKeys: string[]): ValidationResult;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/permissions/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/permissions/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAGpC,MAAM,WAAW,gBAAgB;IAC/B,cAAc,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IACnC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B;;;OAGG;IACH,MAAM,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC;CAC/C;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,gBAAgB,GAAG,GAAG,CAAC,MAAM,CAAC,CAYjF;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAE5E;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAkB1F;AAED,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,EAAE,CAEhE;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,SAAS,EACpB,eAAe,EAAE,MAAM,EAAE,EACzB,SAAS,EAAE,MAAM,EAAE,GAClB,gBAAgB,CAElB"}

package/dist/permissions/resolve.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveEffectivePermissions = resolveEffectivePermissions;
+exports.hasPermission = hasPermission;
+exports.validateGrantedKeys = validateGrantedKeys;
+exports.getFullAccessKeys = getFullAccessKeys;
+exports.validateExtraKeys = validateExtraKeys;
+const treeUtils_1 = require("./treeUtils");
+/**
+ * Single source of truth for "what can this user/agent actually do", used
+ * identically by every backend's requirePermission middleware and by each
+ * frontend's usePermissions() hook (via the effectivePermissions the login/
+ * `GET /me` response should expose). Does not hit the DB — the caller is
+ * responsible for populating `roleId` beforehand when in "role" mode.
+ */
+function resolveEffectivePermissions(source) {
+    var _a, _b;
+    if (source.permissionMode === "custom") {
+        return new Set((_a = source.permissionKeys) !== null && _a !== void 0 ? _a : []);
+    }
+    const role = source.roleId;
+    const keys = new Set();
+    if (role && Array.isArray(role.grantedKeys)) {
+        role.grantedKeys.forEach((k) => keys.add(k));
+    }
+    ((_b = source.extraPermissionKeys) !== null && _b !== void 0 ? _b : []).forEach((k) => keys.add(k));
+    return keys;
+}
+function hasPermission(source, key) {
+    return resolveEffectivePermissions(source).has(key);
+}
+/**
+ * Enforces the parent-gates-children rule server-side: a submitted set is
+ * only valid if every key exists in that dashboard's tree AND every key's
+ * full ancestor chain is also present in the set. Run this on every write
+ * path that accepts a custom permission set or a new Role's grantedKeys —
+ * never trust client-side tree-editor state alone.
+ */
+function validateGrantedKeys(dashboard, keys) {
+    const errors = [];
+    const validKeys = new Set((0, treeUtils_1.getAllKeys)(dashboard));
+    const keySet = new Set(keys);
+    for (const key of keys) {
+        if (!validKeys.has(key)) {
+            errors.push(`Unknown permission key "${key}" for dashboard "${dashboard}"`);
+            continue;
+        }
+        for (const ancestor of (0, treeUtils_1.getAncestorKeys)(key)) {
+            if (!keySet.has(ancestor)) {
+                errors.push(`"${key}" is granted but its required parent "${ancestor}" is not`);
+            }
+        }
+    }
+    return { valid: errors.length === 0, errors };
+}
+/** Every key in a dashboard's tree, granted at once -- for "full access" roles. */
+function getFullAccessKeys(dashboard) {
+    return (0, treeUtils_1.getAllKeys)(dashboard);
+}
+/**
+ * Validates a role's extraPermissionKeys against the UNION of the role's own
+ * grantedKeys and the extras -- an extra key's parent may already be covered
+ * by the role itself, so it doesn't need to be duplicated into the extras
+ * list. Call this on every write path that accepts extraPermissionKeys.
+ */
+function validateExtraKeys(dashboard, roleGrantedKeys, extraKeys) {
+    return validateGrantedKeys(dashboard, [...roleGrantedKeys, ...extraKeys]);
+}

package/dist/permissions/seeds/roles.seed.d.ts

@@ -0,0 +1,19 @@
+import { Dashboard } from "../types";
+/**
+ * DRAFT SEED DATA -- transcribed by hand from the client's "Role & Access" PDF.
+ * This is the highest content-accuracy-risk piece of the whole RBAC build: a
+ * wrong key here silently over- or under-grants real production access.
+ *
+ * DO NOT run this against production until a human has reviewed the
+ * `grantedKeys` list for every role below against the original spec and
+ * signed off. Treat this file as a reviewable table, not settled code.
+ */
+export interface RoleSeed {
+    dashboard: Dashboard;
+    key: string;
+    label: string;
+    isSystemRole: true;
+    grantedKeys: string[];
+}
+export declare const roleSeeds: RoleSeed[];
+//# sourceMappingURL=roles.seed.d.ts.map

package/dist/permissions/seeds/roles.seed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.seed.d.ts","sourceRoot":"","sources":["../../../src/permissions/seeds/roles.seed.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAGrC;;;;;;;;GAQG;AACH,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,SAAS,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,IAAI,CAAC;IACnB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,eAAO,MAAM,SAAS,EAAE,QAAQ,EAuK/B,CAAC"}

package/dist/permissions/seeds/roles.seed.js

@@ -0,0 +1,169 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.roleSeeds = void 0;
+const resolve_1 = require("../resolve");
+exports.roleSeeds = [
+    // ── Operations Dashboard ──────────────────────────────────────────────
+    {
+        dashboard: "ops",
+        key: "global-admin",
+        label: "Global Admin",
+        isSystemRole: true,
+        // Near-full access per spec -- modeled as literally every node in the
+        // Ops tree, since the spec's global-admin list covers every top-level
+        // section that exists.
+        grantedKeys: (0, resolve_1.getFullAccessKeys)("ops"),
+    },
+    {
+        dashboard: "ops",
+        key: "team-lead-chat",
+        label: "Team Lead (Chat)",
+        isSystemRole: true,
+        grantedKeys: [
+            "profile",
+            "profile.editPersonalInformation",
+            "profile.updatePassword",
+            "profile.twoFactorAuthentication",
+            "profile.viewSessions",
+            "status",
+            "dashboard",
+            "dashboard.liveChat",
+            "employees",
+            "logs",
+            "logs.detailedLogView",
+            "inbox",
+            "leads",
+            "leads.forward",
+            "leads.viewScript",
+            "leads.viewConversation",
+            "leads.company",
+            "leads.chatHistory",
+            "conversations",
+            "conversations.viewLead",
+            "chatFlux",
+        ],
+    },
+    {
+        dashboard: "ops",
+        key: "acc-manager-client",
+        label: "Account Manager (Client)",
+        isSystemRole: true,
+        grantedKeys: [
+            "profile",
+            "profile.editPersonalInformation",
+            "profile.updatePassword",
+            "profile.twoFactorAuthentication",
+            "profile.viewSessions",
+            "status",
+            "companies",
+            "companies.createCompany",
+            "companies.account",
+            "companies.account.basicInformation",
+            "companies.account.contactInformation",
+            "companies.account.hoursCallConnect",
+            "companies.account.leadForm",
+            "companies.account.users",
+            "companies.account.script",
+            "companies.account.appointmentScheduling",
+            "companies.account.retainerScheduling",
+            "companies.branding",
+            "companies.branding.widget",
+            "companies.branding.aliases",
+            "companies.branding.exitPopUp",
+            "companies.branding.appearance",
+            "companies.plansAddOns",
+            "companies.plansAddOns.chatX",
+            "companies.plansAddOns.addOns",
+            "companies.integrations",
+            "tickets",
+            "tickets.updateTicket",
+            "requests",
+            "requests.updateRequest",
+            "scripts",
+            "scripts.createVertical",
+            "scripts.updateVertical",
+            "scripts.deleteVertical",
+            "billing",
+            "billing.invoices",
+            "billing.paymentMethod",
+            "billing.adjustBillingCycle",
+            "invoices",
+            "invoices.createNewInvoice",
+        ],
+    },
+    {
+        dashboard: "ops",
+        key: "acc-manager-partner",
+        label: "Account Manager (Partner)",
+        isSystemRole: true,
+        grantedKeys: [
+            "profile",
+            "profile.editPersonalInformation",
+            "profile.updatePassword",
+            "profile.twoFactorAuthentication",
+            "profile.viewSessions",
+            "status",
+            "partners",
+            "partners.createPartner",
+            "partners.account",
+            "partners.account.basicInformation",
+            "partners.account.contactInformation",
+            "partners.account.users",
+            "partners.account.bankInformation",
+            "partners.payouts",
+            "partners.payouts.transfers",
+            "partners.payouts.withdrawals",
+            "partners.payouts.processPayout",
+            "tickets",
+            "tickets.updateTicket",
+            "requests",
+            "requests.updateRequest",
+            "reviews",
+            "reviews.updateReview",
+        ],
+    },
+    // ── Employee Dashboard (created from Ops per the spec's own note) ──────
+    {
+        dashboard: "employee",
+        key: "associate-agent",
+        label: "Associate Agent",
+        isSystemRole: true,
+        grantedKeys: [
+            "profile",
+            "dashboard",
+            "inbox",
+            "inbox.searchLiveChatsOnly",
+            "leads",
+            "leads.viewScript",
+            "leads.viewConversations",
+            "conversations",
+            "conversations.viewLead",
+        ],
+    },
+    {
+        dashboard: "employee",
+        key: "executive-agent",
+        label: "Executive Agent",
+        isSystemRole: true,
+        // Strict superset of associate-agent per spec -- every node checked.
+        grantedKeys: (0, resolve_1.getFullAccessKeys)("employee"),
+    },
+    // ── Partner Dashboard ───────────────────────────────────────────────────
+    {
+        dashboard: "partner",
+        key: "partner-admin",
+        label: "Admin",
+        isSystemRole: true,
+        // Full tree per spec. Assignable to the account owner AND, per the
+        // client's explicit confirmation, to additional team members later.
+        grantedKeys: (0, resolve_1.getFullAccessKeys)("partner"),
+    },
+    // ── Client Dashboard ────────────────────────────────────────────────────
+    {
+        dashboard: "client",
+        key: "client-admin",
+        label: "Admin",
+        isSystemRole: true,
+        grantedKeys: (0, resolve_1.getFullAccessKeys)("client"),
+    },
+];

package/dist/permissions/treeUtils.d.ts

@@ -0,0 +1,9 @@
+import { Dashboard, PermissionNode } from "./types";
+export declare function getTree(dashboard: Dashboard): PermissionNode[];
+/** Every valid key in a dashboard's tree, parents and leaves alike. */
+export declare function getAllKeys(dashboard: Dashboard): string[];
+/** "companies.account.leadForm" -> "companies.account" (or null for a top-level key). */
+export declare function getParentKey(key: string): string | null;
+/** A key's full ancestor chain, nearest-parent-last excluded... actually root-first. */
+export declare function getAncestorKeys(key: string): string[];
+//# sourceMappingURL=treeUtils.d.ts.map

package/dist/permissions/treeUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"treeUtils.d.ts","sourceRoot":"","sources":["../../src/permissions/treeUtils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAapD,wBAAgB,OAAO,CAAC,SAAS,EAAE,SAAS,GAAG,cAAc,EAAE,CAE9D;AAED,uEAAuE;AACvE,wBAAgB,UAAU,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,EAAE,CAUzD;AAED,yFAAyF;AACzF,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGvD;AAED,wFAAwF;AACxF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAOrD"}

package/dist/permissions/treeUtils.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getTree = getTree;
+exports.getAllKeys = getAllKeys;
+exports.getParentKey = getParentKey;
+exports.getAncestorKeys = getAncestorKeys;
+const ops_tree_1 = require("./trees/ops.tree");
+const employee_tree_1 = require("./trees/employee.tree");
+const partner_tree_1 = require("./trees/partner.tree");
+const client_tree_1 = require("./trees/client.tree");
+const TREES = {
+    ops: ops_tree_1.opsTree,
+    employee: employee_tree_1.employeeTree,
+    partner: partner_tree_1.partnerTree,
+    client: client_tree_1.clientTree,
+};
+function getTree(dashboard) {
+    return TREES[dashboard];
+}
+/** Every valid key in a dashboard's tree, parents and leaves alike. */
+function getAllKeys(dashboard) {
+    const keys = [];
+    const walk = (nodes) => {
+        for (const node of nodes) {
+            keys.push(node.key);
+            if (node.children)
+                walk(node.children);
+        }
+    };
+    walk(TREES[dashboard]);
+    return keys;
+}
+/** "companies.account.leadForm" -> "companies.account" (or null for a top-level key). */
+function getParentKey(key) {
+    const idx = key.lastIndexOf(".");
+    return idx === -1 ? null : key.slice(0, idx);
+}
+/** A key's full ancestor chain, nearest-parent-last excluded... actually root-first. */
+function getAncestorKeys(key) {
+    const parts = key.split(".");
+    const ancestors = [];
+    for (let i = 1; i < parts.length; i++) {
+        ancestors.push(parts.slice(0, i).join("."));
+    }
+    return ancestors;
+}

package/dist/permissions/trees/client.tree.d.ts

@@ -0,0 +1,3 @@
+import { PermissionNode } from "../types";
+export declare const clientTree: PermissionNode[];
+//# sourceMappingURL=client.tree.d.ts.map

package/dist/permissions/trees/client.tree.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.tree.d.ts","sourceRoot":"","sources":["../../../src/permissions/trees/client.tree.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAM1C,eAAO,MAAM,UAAU,EAAE,cAAc,EA2FtC,CAAC"}

package/dist/permissions/trees/client.tree.js

@@ -0,0 +1,99 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.clientTree = void 0;
+// Transcribed from the client's "Role & Access" spec (Client Dashboard section).
+// Only one predefined role exists here ("admin", full tree) -- same note as Partner:
+// "An admin can control custom access from the above tree of a new or old user,
+// there are no more pre-made roles for client dashboard."
+exports.clientTree = [
+    {
+        key: "profile",
+        label: "Profile",
+        children: [
+            { key: "profile.editPersonalInformation", label: "Edit Personal Information" },
+            { key: "profile.updatePassword", label: "Update Password" },
+            { key: "profile.twoFactorAuthentication", label: "Two Factor Authentication" },
+            { key: "profile.viewSessions", label: "View Sessions" },
+        ],
+    },
+    {
+        key: "dashboard",
+        label: "Dashboard",
+        children: [
+            { key: "dashboard.liveChat", label: "Live Chat" },
+            { key: "dashboard.website", label: "Website" },
+        ],
+    },
+    {
+        key: "company",
+        label: "Company",
+        children: [
+            {
+                key: "company.account",
+                label: "Account",
+                children: [
+                    { key: "company.account.basicInformation", label: "Basic Information" },
+                    { key: "company.account.contactInformation", label: "Contact Information" },
+                    { key: "company.account.hoursCallConnect", label: "Hours/Call Connect" },
+                    { key: "company.account.leadForm", label: "Lead Form" },
+                    { key: "company.account.users", label: "Users" },
+                    { key: "company.account.script", label: "Script" },
+                    { key: "company.account.appointment", label: "Appointment Scheduling" },
+                    { key: "company.account.retainerSigning", label: "Retainer Signing" },
+                ],
+            },
+            {
+                key: "company.branding",
+                label: "Branding",
+                children: [
+                    { key: "company.branding.widget", label: "Widget" },
+                    { key: "company.branding.aliases", label: "Aliases" },
+                    { key: "company.branding.exitPopUp", label: "Exit Pop Up" },
+                    { key: "company.branding.appearance", label: "Appearance" },
+                ],
+            },
+            {
+                key: "company.plansAddOns",
+                label: "Plans & Add Ons",
+                children: [
+                    { key: "company.plansAddOns.chatX", label: "CHAT-X" },
+                    { key: "company.plansAddOns.addOns", label: "Add Ons" },
+                ],
+            },
+            { key: "company.integrations", label: "Integrations" },
+        ],
+    },
+    {
+        key: "leads",
+        label: "Leads",
+        children: [
+            { key: "leads.viewConversations", label: "View Conversations" },
+            { key: "leads.forward", label: "Forward" },
+            { key: "leads.dispute", label: "Dispute" },
+        ],
+    },
+    {
+        key: "requests",
+        label: "Requests",
+        children: [
+            { key: "requests.createRequest", label: "Create Request" },
+            { key: "requests.viewRequest", label: "View Request" },
+        ],
+    },
+    {
+        key: "tickets",
+        label: "Tickets",
+        children: [
+            { key: "tickets.createTicket", label: "Create Ticket" },
+            { key: "tickets.viewTicket", label: "View Ticket" },
+        ],
+    },
+    {
+        key: "billing",
+        label: "Billing",
+        children: [
+            { key: "billing.addRemovePaymentMethod", label: "Add / Remove Payment Method" },
+            { key: "billing.invoices", label: "Invoices" },
+        ],
+    },
+];

package/dist/permissions/trees/employee.tree.d.ts

@@ -0,0 +1,3 @@
+import { PermissionNode } from "../types";
+export declare const employeeTree: PermissionNode[];
+//# sourceMappingURL=employee.tree.d.ts.map

package/dist/permissions/trees/employee.tree.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"employee.tree.d.ts","sourceRoot":"","sources":["../../../src/permissions/trees/employee.tree.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAM1C,eAAO,MAAM,YAAY,EAAE,cAAc,EA2BxC,CAAC"}

package/dist/permissions/trees/employee.tree.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.employeeTree = void 0;
+// Transcribed from the client's "Role & Access" spec (Employee Dashboard section).
+// Note: the spec shows "Leads" nested under a "Portal" heading, but Portal has no
+// checkbox of its own and no other children — modeled here as a pure nav grouping
+// label, not a permission node, matching how "Leads" is a top-level node elsewhere.
+exports.employeeTree = [
+    { key: "profile", label: "Profile" },
+    { key: "dashboard", label: "Dashboard" },
+    {
+        key: "inbox",
+        label: "Inbox",
+        children: [
+            { key: "inbox.searchLiveChatsOnly", label: "Search [Live Chats Only]" },
+            { key: "inbox.searchEndedShelvedChats", label: "Search [Ended / Shelved Chats]" },
+        ],
+    },
+    {
+        key: "leads",
+        label: "Leads",
+        children: [
+            { key: "leads.forward", label: "Forward" },
+            { key: "leads.viewScript", label: "View Script" },
+            { key: "leads.viewConversations", label: "View Conversations" },
+            { key: "leads.viewCompany", label: "View Company" },
+            { key: "leads.chatHistory", label: "Chat History" },
+        ],
+    },
+    {
+        key: "conversations",
+        label: "Conversations",
+        children: [{ key: "conversations.viewLead", label: "View Lead" }],
+    },
+];

package/dist/permissions/trees/ops.tree.d.ts

@@ -0,0 +1,3 @@
+import { PermissionNode } from "../types";
+export declare const opsTree: PermissionNode[];
+//# sourceMappingURL=ops.tree.d.ts.map

package/dist/permissions/trees/ops.tree.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ops.tree.d.ts","sourceRoot":"","sources":["../../../src/permissions/trees/ops.tree.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAQ1C,eAAO,MAAM,OAAO,EAAE,cAAc,EAmKnC,CAAC"}