@authup/server-core 1.0.0-beta.28 → 1.0.0-beta.29

package/dist/app/modules/provisioning/synchronizer/realm/module.js

@@ -0,0 +1,104 @@
+/*
+ * Copyright (c) 2026-2026.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { pickRecord } from '@authup/kit';
+import { ProvisioningEntityStrategyType, normalizeEntityProvisioningStrategy } from "../../strategy/index.js";
+import { BaseProvisioningSynchronizer } from "../base.js";
+export class RealmProvisioningSynchronizer extends BaseProvisioningSynchronizer {
+    repository;
+    clientSynchronizer;
+    permissionSynchronizer;
+    roleSynchronizer;
+    userSynchronizer;
+    robotSynchronizer;
+    scopeSynchronizer;
+    constructor(ctx) {
+        super();
+        this.repository = ctx.repository;
+        this.clientSynchronizer = ctx.clientSynchronizer;
+        this.permissionSynchronizer = ctx.permissionSynchronizer;
+        this.roleSynchronizer = ctx.roleSynchronizer;
+        this.userSynchronizer = ctx.userSynchronizer;
+        this.robotSynchronizer = ctx.robotSynchronizer;
+        this.scopeSynchronizer = ctx.scopeSynchronizer;
+    }
+    async synchronize(input) {
+        const strategy = normalizeEntityProvisioningStrategy(input.strategy);
+        let attributes = await this.repository.findOneBy({
+            name: input.attributes.name,
+        });
+        if (attributes) {
+            switch (strategy.type) {
+                case ProvisioningEntityStrategyType.MERGE:
+                    attributes = this.repository.merge(attributes, strategy.attributes ?
+                        pickRecord(input.attributes, strategy.attributes) :
+                        input.attributes);
+                    attributes = await this.repository.save(attributes);
+                    break;
+                case ProvisioningEntityStrategyType.REPLACE:
+                    input.attributes.id = attributes.id;
+                    attributes = await this.repository.save(input.attributes);
+                    break;
+            }
+        }
+        else {
+            attributes = await this.repository.save(input.attributes);
+        }
+        if (input.relations && input.relations.clients) {
+            const clients = input.relations.clients.map((child) => {
+                child.attributes.realm_id = attributes.id;
+                child.attributes.realm = attributes;
+                return child;
+            });
+            await this.clientSynchronizer.synchronizeMany(clients);
+        }
+        if (input.relations && input.relations.permissions) {
+            const permissions = input.relations.permissions.map((child) => {
+                child.attributes.realm_id = attributes.id;
+                child.attributes.realm = attributes;
+                return child;
+            });
+            await this.permissionSynchronizer.synchronizeMany(permissions);
+        }
+        if (input.relations && input.relations.roles) {
+            const roles = input.relations.roles.map((child) => {
+                child.attributes.realm_id = attributes.id;
+                child.attributes.realm = attributes;
+                return child;
+            });
+            await this.roleSynchronizer.synchronizeMany(roles);
+        }
+        if (input.relations && input.relations.users) {
+            const users = input.relations.users.map((child) => {
+                child.attributes.realm_id = attributes.id;
+                child.attributes.realm = attributes;
+                return child;
+            });
+            await this.userSynchronizer.synchronizeMany(users);
+        }
+        if (input.relations && input.relations.robots) {
+            const robots = input.relations.robots.map((child) => {
+                child.attributes.realm_id = attributes.id;
+                child.attributes.realm = attributes;
+                return child;
+            });
+            await this.robotSynchronizer.synchronizeMany(robots);
+        }
+        if (input.relations && input.relations.scopes) {
+            const scopes = input.relations.scopes.map((child) => {
+                child.attributes.realm_id = attributes.id;
+                child.attributes.realm = attributes;
+                return child;
+            });
+            await this.scopeSynchronizer.synchronizeMany(scopes);
+        }
+        return {
+            ...input,
+            attributes,
+        };
+    }
+}
+//# sourceMappingURL=module.js.map

package/dist/app/modules/provisioning/synchronizer/realm/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../src/app/modules/provisioning/synchronizer/realm/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAQzC,OAAO,EAAE,8BAA8B,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AAK9G,OAAO,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAG1D,MAAM,OAAO,6BAA8B,SAAQ,4BAAqD;IAC1F,UAAU,CAAqB;IAE/B,kBAAkB,CAAsD;IAExE,sBAAsB,CAA0D;IAEhF,gBAAgB,CAAoD;IAEpE,gBAAgB,CAAoD;IAEpE,iBAAiB,CAAqD;IAEtE,iBAAiB,CAAsD;IAEjF,YAAY,GAAyC;QACjD,KAAK,EAAE,CAAC;QAER,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QACjC,IAAI,CAAC,kBAAkB,GAAG,GAAG,CAAC,kBAAkB,CAAC;QACjD,IAAI,CAAC,sBAAsB,GAAG,GAAG,CAAC,sBAAsB,CAAC;QACzD,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC,gBAAgB,CAAC;QAC7C,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC,gBAAgB,CAAC;QAC7C,IAAI,CAAC,iBAAiB,GAAG,GAAG,CAAC,iBAAiB,CAAC;QAC/C,IAAI,CAAC,iBAAiB,GAAG,GAAG,CAAC,iBAAiB,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAA8B;QAC5C,MAAM,QAAQ,GAAG,mCAAmC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrE,IAAI,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAC7C,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI;SAC9B,CAAC,CAAC;QACH,IAAI,UAAU,EAAE,CAAC;YACb,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACpB,KAAK,8BAA8B,CAAC,KAAK;oBACrC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAC9B,UAAU,EACV,QAAQ,CAAC,UAAU,CAAC,CAAC;wBACjB,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;wBACnD,KAAK,CAAC,UAAU,CACvB,CAAC;oBAEF,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBACpD,MAAM;gBACV,KAAK,8BAA8B,CAAC,OAAO;oBACvC,KAAK,CAAC,UAAU,CAAC,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;oBACpC,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;oBAC1D,MAAM;YACd,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CACvC,CAAC,KAAK,EAAE,EAAE;gBACN,KAAK,CAAC,UAAU,CAAC,QAAQ,GAAG,UAAU,CAAC,EAAE,CAAC;gBAC1C,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,UAAU,CAAC;gBACpC,OAAO,KAAK,CAAC;YACjB,CAAC,CACJ,CAAC;YAEF,MAAM,IAAI,CAAC,kBAAkB,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;YACjD,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC1D,KAAK,CAAC,UAAU,CAAC,QAAQ,GAAG,UAAU,CAAC,EAAE,CAAC;gBAC1C,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,UAAU,CAAC;gBACpC,OAAO,KAAK,CAAC;YACjB,CAAC,CAAC,CAAC;YAEH,MAAM,IAAI,CAAC,sBAAsB,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC9C,KAAK,CAAC,UAAU,CAAC,QAAQ,GAAG,UAAU,CAAC,EAAE,CAAC;gBAC1C,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,UAAU,CAAC;gBACpC,OAAO,KAAK,CAAC;YACjB,CAAC,CAAC,CAAC;YAEH,MAAM,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC9C,KAAK,CAAC,UAAU,CAAC,QAAQ,GAAG,UAAU,CAAC,EAAE,CAAC;gBAC1C,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,UAAU,CAAC;gBACpC,OAAO,KAAK,CAAC;YACjB,CAAC,CAAC,CAAC;YAEH,MAAM,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBAChD,KAAK,CAAC,UAAU,CAAC,QAAQ,GAAG,UAAU,CAAC,EAAE,CAAC;gBAC1C,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,UAAU,CAAC;gBACpC,OAAO,KAAK,CAAC;YACjB,CAAC,CAAC,CAAC;YAEH,MAAM,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBAChD,KAAK,CAAC,UAAU,CAAC,QAAQ,GAAG,UAAU,CAAC,EAAE,CAAC;gBAC1C,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,UAAU,CAAC;gBACpC,OAAO,KAAK,CAAC;YACjB,CAAC,CAAC,CAAC;YAEH,MAAM,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACzD,CAAC;QAED,OAAO;YACH,GAAG,KAAK;YACR,UAAU;SACb,CAAC;IACN,CAAC;CACJ"}

package/dist/app/modules/provisioning/synchronizer/realm/types.d.ts

@@ -0,0 +1,19 @@
+import type { Realm } from '@authup/core-kit';
+import type { Repository } from 'typeorm';
+import type { ScopeProvisioningEntity } from '../../entities/index.ts';
+import type { ClientProvisioningEntity } from '../../entities/client/index.ts';
+import type { PermissionProvisioningEntity } from '../../entities/permission/index.ts';
+import type { RobotProvisioningEntity } from '../../entities/robot/index.ts';
+import type { RoleProvisioningEntity } from '../../entities/role/index.ts';
+import type { UserProvisioningEntity } from '../../entities/user/index.ts';
+import type { IProvisioningSynchronizer } from '../../types.ts';
+export type RealmProvisioningSynchronizerContext = {
+    repository: Repository<Realm>;
+    clientSynchronizer: IProvisioningSynchronizer<ClientProvisioningEntity>;
+    roleSynchronizer: IProvisioningSynchronizer<RoleProvisioningEntity>;
+    permissionSynchronizer: IProvisioningSynchronizer<PermissionProvisioningEntity>;
+    userSynchronizer: IProvisioningSynchronizer<UserProvisioningEntity>;
+    robotSynchronizer: IProvisioningSynchronizer<RobotProvisioningEntity>;
+    scopeSynchronizer: IProvisioningSynchronizer<ScopeProvisioningEntity>;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/app/modules/provisioning/synchronizer/realm/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/provisioning/synchronizer/realm/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AACvE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC/E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,KAAK,EACR,yBAAyB,EAE5B,MAAM,gBAAgB,CAAC;AAExB,MAAM,MAAM,oCAAoC,GAAG;IAC/C,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IAE9B,kBAAkB,EAAE,yBAAyB,CAAC,wBAAwB,CAAC,CAAC;IACxE,gBAAgB,EAAE,yBAAyB,CAAC,sBAAsB,CAAC,CAAC;IACpE,sBAAsB,EAAE,yBAAyB,CAAC,4BAA4B,CAAC,CAAC;IAChF,gBAAgB,EAAE,yBAAyB,CAAC,sBAAsB,CAAC,CAAC;IACpE,iBAAiB,EAAE,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;IACtE,iBAAiB,EAAE,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;CACzE,CAAC"}

package/dist/app/modules/provisioning/synchronizer/realm/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2026.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/app/modules/provisioning/synchronizer/realm/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../src/app/modules/provisioning/synchronizer/realm/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/app/modules/provisioning/synchronizer/robot/index.d.ts

@@ -0,0 +1,3 @@
+export * from './module.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/app/modules/provisioning/synchronizer/robot/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/provisioning/synchronizer/robot/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/app/modules/provisioning/synchronizer/robot/index.js

@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2026.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./module.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/app/modules/provisioning/synchronizer/robot/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/app/modules/provisioning/synchronizer/robot/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/app/modules/provisioning/synchronizer/robot/module.d.ts

@@ -0,0 +1,16 @@
+import type { Client, Permission, Robot, RobotPermission, RobotRole, Role } from '@authup/core-kit';
+import type { Repository } from 'typeorm';
+import type { RobotProvisioningEntity } from '../../entities/robot/index.ts';
+import { BaseProvisioningSynchronizer } from '../base.ts';
+import type { RobotProvisioningSynchronizerContext } from './types.ts';
+export declare class RobotProvisioningSynchronizer extends BaseProvisioningSynchronizer<RobotProvisioningEntity> {
+    protected robotRepository: Repository<Robot>;
+    protected robotRoleRepository: Repository<RobotRole>;
+    protected robotPermissionRepository: Repository<RobotPermission>;
+    protected roleRepository: Repository<Role>;
+    protected permissionRepository: Repository<Permission>;
+    protected clientRepository: Repository<Client>;
+    constructor(ctx: RobotProvisioningSynchronizerContext);
+    synchronize(input: RobotProvisioningEntity): Promise<RobotProvisioningEntity>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/app/modules/provisioning/synchronizer/robot/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/provisioning/synchronizer/robot/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,EAC9D,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAE7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,YAAY,CAAC;AAEvE,qBAAa,6BAA8B,SAAQ,4BAA4B,CAAC,uBAAuB,CAAC;IACpG,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IAE7C,SAAS,CAAC,mBAAmB,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;IAErD,SAAS,CAAC,yBAAyB,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC;IAEjE,SAAS,CAAC,cAAc,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAE3C,SAAS,CAAC,oBAAoB,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IAEvD,SAAS,CAAC,gBAAgB,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;gBAEnC,GAAG,EAAE,oCAAoC;IAW/C,WAAW,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC;CAiKtF"}

package/dist/app/modules/provisioning/synchronizer/robot/module.js

@@ -0,0 +1,168 @@
+/*
+ * Copyright (c) 2026-2026.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { pickRecord } from '@authup/kit';
+import { In, IsNull } from 'typeorm';
+import { ProvisioningEntityStrategyType, normalizeEntityProvisioningStrategy } from "../../strategy/index.js";
+import { BaseProvisioningSynchronizer } from "../base.js";
+export class RobotProvisioningSynchronizer extends BaseProvisioningSynchronizer {
+    robotRepository;
+    robotRoleRepository;
+    robotPermissionRepository;
+    roleRepository;
+    permissionRepository;
+    clientRepository;
+    constructor(ctx) {
+        super();
+        this.robotRepository = ctx.robotRepository;
+        this.robotRoleRepository = ctx.robotRoleRepository;
+        this.robotPermissionRepository = ctx.robotPermissionRepository;
+        this.roleRepository = ctx.roleRepository;
+        this.permissionRepository = ctx.permissionRepository;
+        this.clientRepository = ctx.clientRepository;
+    }
+    async synchronize(input) {
+        const strategy = normalizeEntityProvisioningStrategy(input.strategy);
+        let attributes = await this.robotRepository.findOneBy({
+            name: input.attributes.name,
+            ...(input.attributes.realm_id ? { realm_id: input.attributes.realm_id } : { realm_id: IsNull() }),
+        });
+        if (attributes) {
+            switch (strategy.type) {
+                case ProvisioningEntityStrategyType.MERGE:
+                    attributes = this.robotRepository.merge(attributes, strategy.attributes ?
+                        pickRecord(input.attributes, strategy.attributes) :
+                        input.attributes);
+                    attributes = await this.robotRepository.save(attributes);
+                    break;
+                case ProvisioningEntityStrategyType.REPLACE:
+                    input.attributes.id = attributes.id;
+                    attributes = await this.robotRepository.save(input.attributes);
+                    break;
+            }
+        }
+        else {
+            attributes = await this.robotRepository.save(input.attributes);
+        }
+        // Permissions (Global, Realm & Client)
+        const permissions = [];
+        if (input.relations && input.relations.globalPermissions) {
+            let entities;
+            const hasWildcard = input.relations.globalPermissions.some((el) => el === '*');
+            if (hasWildcard) {
+                entities = await this.permissionRepository.findBy({
+                    realm_id: IsNull(),
+                    client_id: IsNull(),
+                });
+            }
+            else {
+                entities = await this.permissionRepository.findBy({
+                    name: In(input.relations.globalPermissions),
+                    realm_id: IsNull(),
+                    client_id: IsNull(),
+                });
+            }
+            permissions.push(...entities);
+        }
+        if (input.relations && input.relations.realmPermissions) {
+            let entities;
+            const hasWildcard = input.relations.realmPermissions.some((el) => el === '*');
+            if (hasWildcard) {
+                entities = await this.permissionRepository.findBy({
+                    realm_id: attributes.realm_id,
+                    client_id: IsNull(),
+                });
+            }
+            else {
+                entities = await this.permissionRepository.findBy({
+                    name: In(input.relations.realmPermissions),
+                    realm_id: attributes.realm_id,
+                    client_id: IsNull(),
+                });
+            }
+            permissions.push(...entities);
+        }
+        if (permissions.length > 0) {
+            for (let i = 0; i < permissions.length; i++) {
+                const permission = permissions[i];
+                let robotPermission = await this.robotPermissionRepository.findOneBy({
+                    robot_id: attributes.id,
+                    permission_id: permission.id,
+                });
+                if (!robotPermission) {
+                    robotPermission = this.robotPermissionRepository.create({
+                        robot_id: attributes.id,
+                        robot_realm_id: attributes.realm_id,
+                        permission_id: permission.id,
+                        permission_realm_id: permission.realm_id,
+                    });
+                    await this.robotPermissionRepository.save(robotPermission);
+                }
+            }
+        }
+        // Role (Global & Realm)
+        const roles = [];
+        if (input.relations && input.relations.globalRoles) {
+            let entities;
+            const hasWildcard = input.relations.globalRoles.some((el) => el === '*');
+            if (hasWildcard) {
+                entities = await this.roleRepository.findBy({
+                    realm_id: IsNull(),
+                    client_id: IsNull(),
+                });
+            }
+            else {
+                entities = await this.roleRepository.findBy({
+                    name: In(input.relations.globalRoles),
+                    realm_id: IsNull(),
+                    client_id: IsNull(),
+                });
+            }
+            roles.push(...entities);
+        }
+        if (input.relations && input.relations.realmRoles) {
+            let entities;
+            const hasWildcard = input.relations.realmRoles.some((el) => el === '*');
+            if (hasWildcard) {
+                entities = await this.roleRepository.findBy({
+                    realm_id: attributes.realm_id,
+                    client_id: IsNull(),
+                });
+            }
+            else {
+                entities = await this.roleRepository.findBy({
+                    name: In(input.relations.realmRoles),
+                    realm_id: attributes.realm_id,
+                    client_id: IsNull(),
+                });
+            }
+            roles.push(...entities);
+        }
+        if (roles.length > 0) {
+            for (let i = 0; i < roles.length; i++) {
+                const role = roles[i];
+                let robotRole = await this.robotRoleRepository.findOneBy({
+                    robot_id: attributes.id,
+                    role_id: role.id,
+                });
+                if (!robotRole) {
+                    robotRole = this.robotRoleRepository.create({
+                        robot_id: attributes.id,
+                        robot_realm_id: attributes.realm_id,
+                        role_id: role.id,
+                        role_realm_id: role.realm_id,
+                    });
+                    await this.robotRoleRepository.save(robotRole);
+                }
+            }
+        }
+        return {
+            ...input,
+            attributes,
+        };
+    }
+}
+//# sourceMappingURL=module.js.map

package/dist/app/modules/provisioning/synchronizer/robot/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../src/app/modules/provisioning/synchronizer/robot/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,8BAA8B,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AAC9G,OAAO,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAG1D,MAAM,OAAO,6BAA8B,SAAQ,4BAAqD;IAC1F,eAAe,CAAoB;IAEnC,mBAAmB,CAAwB;IAE3C,yBAAyB,CAA8B;IAEvD,cAAc,CAAmB;IAEjC,oBAAoB,CAAyB;IAE7C,gBAAgB,CAAqB;IAE/C,YAAY,GAAyC;QACjD,KAAK,EAAE,CAAC;QAER,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC,eAAe,CAAC;QAC3C,IAAI,CAAC,mBAAmB,GAAG,GAAG,CAAC,mBAAmB,CAAC;QACnD,IAAI,CAAC,yBAAyB,GAAG,GAAG,CAAC,yBAAyB,CAAC;QAC/D,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAC;QACzC,IAAI,CAAC,oBAAoB,GAAG,GAAG,CAAC,oBAAoB,CAAC;QACrD,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC,gBAAgB,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAA8B;QAC5C,MAAM,QAAQ,GAAG,mCAAmC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAErE,IAAI,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC;YAClD,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI;YAC3B,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC;SACpG,CAAC,CAAC;QACH,IAAI,UAAU,EAAE,CAAC;YACb,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACpB,KAAK,8BAA8B,CAAC,KAAK;oBACrC,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CACnC,UAAU,EACV,QAAQ,CAAC,UAAU,CAAC,CAAC;wBACjB,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;wBACnD,KAAK,CAAC,UAAU,CACvB,CAAC;oBAEF,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBACzD,MAAM;gBACV,KAAK,8BAA8B,CAAC,OAAO;oBACvC,KAAK,CAAC,UAAU,CAAC,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;oBACpC,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;oBAC/D,MAAM;YACd,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACnE,CAAC;QAED,uCAAuC;QACvC,MAAM,WAAW,GAAkB,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;YACvD,IAAI,QAAuB,CAAC;YAE5B,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;YAC/E,IAAI,WAAW,EAAE,CAAC;gBACd,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;oBAC9C,QAAQ,EAAE,MAAM,EAAE;oBAClB,SAAS,EAAE,MAAM,EAAE;iBACtB,CAAC,CAAC;YACP,CAAC;iBAAM,CAAC;gBACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;oBAC9C,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,iBAAiB,CAAC;oBAC3C,QAAQ,EAAE,MAAM,EAAE;oBAClB,SAAS,EAAE,MAAM,EAAE;iBACtB,CAAC,CAAC;YACP,CAAC;YAED,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAClC,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;YACtD,IAAI,QAAuB,CAAC;YAE5B,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;YAC9E,IAAI,WAAW,EAAE,CAAC;gBACd,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;oBAC9C,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,SAAS,EAAE,MAAM,EAAE;iBACtB,CAAC,CAAC;YACP,CAAC;iBAAM,CAAC;gBACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;oBAC9C,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC;oBAC1C,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,SAAS,EAAE,MAAM,EAAE;iBACtB,CAAC,CAAC;YACP,CAAC;YAED,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAClC,CAAC;QAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC1C,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;gBAElC,IAAI,eAAe,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,SAAS,CAAC;oBACjE,QAAQ,EAAE,UAAU,CAAC,EAAE;oBACvB,aAAa,EAAE,UAAU,CAAC,EAAE;iBAC/B,CAAC,CAAC;gBAEH,IAAI,CAAC,eAAe,EAAE,CAAC;oBACnB,eAAe,GAAG,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC;wBACpD,QAAQ,EAAE,UAAU,CAAC,EAAE;wBACvB,cAAc,EAAE,UAAU,CAAC,QAAQ;wBACnC,aAAa,EAAE,UAAU,CAAC,EAAE;wBAC5B,mBAAmB,EAAE,UAAU,CAAC,QAAQ;qBAC3C,CAAC,CAAC;oBAEH,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;gBAC/D,CAAC;YACL,CAAC;QACL,CAAC;QAED,wBAAwB;QACxB,MAAM,KAAK,GAAY,EAAE,CAAC;QAC1B,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;YACjD,IAAI,QAAiB,CAAC;YAEtB,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;YACzE,IAAI,WAAW,EAAE,CAAC;gBACd,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;oBACxC,QAAQ,EAAE,MAAM,EAAE;oBAClB,SAAS,EAAE,MAAM,EAAE;iBACtB,CAAC,CAAC;YACP,CAAC;iBAAM,CAAC;gBACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;oBACxC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC;oBACrC,QAAQ,EAAE,MAAM,EAAE;oBAClB,SAAS,EAAE,MAAM,EAAE;iBACtB,CAAC,CAAC;YACP,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;YAChD,IAAI,QAAiB,CAAC;YAEtB,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;YACxE,IAAI,WAAW,EAAE,CAAC;gBACd,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;oBACxC,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,SAAS,EAAE,MAAM,EAAE;iBACtB,CAAC,CAAC;YACP,CAAC;iBAAM,CAAC;gBACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;oBACxC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC;oBACpC,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,SAAS,EAAE,MAAM,EAAE;iBACtB,CAAC,CAAC;YACP,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAC5B,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAEtB,IAAI,SAAS,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC;oBACrD,QAAQ,EAAE,UAAU,CAAC,EAAE;oBACvB,OAAO,EAAE,IAAI,CAAC,EAAE;iBACnB,CAAC,CAAC;gBAEH,IAAI,CAAC,SAAS,EAAE,CAAC;oBACb,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC;wBACxC,QAAQ,EAAE,UAAU,CAAC,EAAE;wBACvB,cAAc,EAAE,UAAU,CAAC,QAAQ;wBACnC,OAAO,EAAE,IAAI,CAAC,EAAE;wBAChB,aAAa,EAAE,IAAI,CAAC,QAAQ;qBAC/B,CAAC,CAAC;oBAEH,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACnD,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO;YACH,GAAG,KAAK;YACR,UAAU;SACb,CAAC;IACN,CAAC;CACJ"}

package/dist/app/modules/provisioning/synchronizer/robot/types.d.ts

@@ -0,0 +1,11 @@
+import type { Client, Permission, Robot, RobotPermission, RobotRole, Role } from '@authup/core-kit';
+import type { Repository } from 'typeorm';
+export type RobotProvisioningSynchronizerContext = {
+    robotRepository: Repository<Robot>;
+    robotRoleRepository: Repository<RobotRole>;
+    robotPermissionRepository: Repository<RobotPermission>;
+    clientRepository: Repository<Client>;
+    roleRepository: Repository<Role>;
+    permissionRepository: Repository<Permission>;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/app/modules/provisioning/synchronizer/robot/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/provisioning/synchronizer/robot/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,eAAe,EAAE,SAAS,EACrD,IAAI,EACP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,MAAM,MAAM,oCAAoC,GAAG;IAC/C,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IACnC,mBAAmB,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;IAC3C,yBAAyB,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC;IAEvD,gBAAgB,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACrC,cAAc,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,oBAAoB,EAAE,UAAU,CAAC,UAAU,CAAC,CAAA;CAC/C,CAAC"}

package/dist/app/modules/provisioning/synchronizer/robot/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2026.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/app/modules/provisioning/synchronizer/robot/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../src/app/modules/provisioning/synchronizer/robot/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/app/modules/provisioning/synchronizer/role/index.d.ts

@@ -0,0 +1,3 @@
+export * from './module.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/app/modules/provisioning/synchronizer/role/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/provisioning/synchronizer/role/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/app/modules/provisioning/synchronizer/role/index.js

@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2026.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./module.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/app/modules/provisioning/synchronizer/role/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/app/modules/provisioning/synchronizer/role/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/app/modules/provisioning/synchronizer/role/module.d.ts

@@ -0,0 +1,13 @@
+import type { Permission, Role, RolePermission } from '@authup/core-kit';
+import type { Repository } from 'typeorm';
+import type { RoleProvisioningEntity } from '../../entities/role/index.ts';
+import { BaseProvisioningSynchronizer } from '../base.ts';
+import type { RoleProvisioningSynchronizerContext } from './types.ts';
+export declare class RoleProvisioningSynchronizer extends BaseProvisioningSynchronizer<RoleProvisioningEntity> {
+    protected repository: Repository<Role>;
+    protected permissionRepository: Repository<Permission>;
+    protected rolePermissionRepository: Repository<RolePermission>;
+    constructor(ctx: RoleProvisioningSynchronizerContext);
+    synchronize(input: RoleProvisioningEntity): Promise<RoleProvisioningEntity>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/app/modules/provisioning/synchronizer/role/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/provisioning/synchronizer/role/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,UAAU,EAAE,IAAI,EAAE,cAAc,EACnC,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAE3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAEtE,qBAAa,4BAA6B,SAAQ,4BAA4B,CAAC,sBAAsB,CAAC;IAClG,SAAS,CAAC,UAAU,EAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAExC,SAAS,CAAC,oBAAoB,EAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IAExD,SAAS,CAAC,wBAAwB,EAAE,UAAU,CAAC,cAAc,CAAC,CAAC;gBAEnD,GAAG,EAAE,mCAAmC;IAQ9C,WAAW,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CA2GpF"}

package/dist/app/modules/provisioning/synchronizer/role/module.js

@@ -0,0 +1,113 @@
+/*
+ * Copyright (c) 2026-2026.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { pickRecord } from '@authup/kit';
+import { In, IsNull } from 'typeorm';
+import { ProvisioningEntityStrategyType, normalizeEntityProvisioningStrategy } from "../../strategy/index.js";
+import { BaseProvisioningSynchronizer } from "../base.js";
+export class RoleProvisioningSynchronizer extends BaseProvisioningSynchronizer {
+    repository;
+    permissionRepository;
+    rolePermissionRepository;
+    constructor(ctx) {
+        super();
+        this.repository = ctx.repository;
+        this.permissionRepository = ctx.permissionRepository;
+        this.rolePermissionRepository = ctx.rolePermissionRepository;
+    }
+    async synchronize(input) {
+        const strategy = normalizeEntityProvisioningStrategy(input.strategy);
+        let attributes = await this.repository.findOneBy({
+            name: input.attributes.name,
+            realm_id: input.attributes.realm_id || IsNull(),
+            client_id: input.attributes.client_id || IsNull(),
+        });
+        if (attributes) {
+            switch (strategy.type) {
+                case ProvisioningEntityStrategyType.MERGE:
+                    attributes = this.repository.merge(attributes, strategy.attributes ?
+                        pickRecord(input.attributes, strategy.attributes) :
+                        input.attributes);
+                    attributes = await this.repository.save(attributes);
+                    break;
+                case ProvisioningEntityStrategyType.REPLACE:
+                    input.attributes.id = attributes.id;
+                    attributes = await this.repository.save(input.attributes);
+                    break;
+            }
+        }
+        else {
+            attributes = await this.repository.save(input.attributes);
+        }
+        if (!input.relations) {
+            return {
+                ...input,
+                attributes,
+            };
+        }
+        const permissions = [];
+        if (input.relations.globalPermissions) {
+            let entities;
+            const hasWildcard = input.relations.globalPermissions.some((el) => el === '*');
+            if (hasWildcard) {
+                entities = await this.permissionRepository.findBy({
+                    realm_id: IsNull(),
+                    client_id: IsNull(),
+                });
+            }
+            else {
+                entities = await this.permissionRepository.findBy({
+                    name: In(input.relations.globalPermissions),
+                    realm_id: IsNull(),
+                    client_id: IsNull(),
+                });
+            }
+            permissions.push(...entities);
+        }
+        if (attributes.realm_id &&
+            input.relations.realmPermissions) {
+            let entities;
+            const hasWildcard = input.relations.realmPermissions.some((el) => el === '*');
+            if (hasWildcard) {
+                entities = await this.permissionRepository.findBy({
+                    realm_id: attributes.realm_id,
+                    client_id: IsNull(),
+                });
+            }
+            else {
+                entities = await this.permissionRepository.findBy({
+                    name: In(input.relations.realmPermissions),
+                    realm_id: attributes.realm_id,
+                    client_id: IsNull(),
+                });
+            }
+            permissions.push(...entities);
+        }
+        if (permissions.length > 0) {
+            for (let i = 0; i < permissions.length; i++) {
+                const permission = permissions[i];
+                let rolePermission = await this.rolePermissionRepository.findOneBy({
+                    role_id: attributes.id,
+                    permission_id: permission.id,
+                });
+                if (!rolePermission) {
+                    rolePermission = this.rolePermissionRepository.create({
+                        role_id: attributes.id,
+                        role_realm_id: attributes.realm_id,
+                        permission_id: permission.id,
+                        permission_realm_id: permission.realm_id,
+                    });
+                    await this.rolePermissionRepository.save(rolePermission);
+                }
+            }
+        }
+        return {
+            ...input,
+            attributes,
+        };
+    }
+}
+//# sourceMappingURL=module.js.map

package/dist/app/modules/provisioning/synchronizer/role/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../../../src/app/modules/provisioning/synchronizer/role/module.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,8BAA8B,EAAE,mCAAmC,EAAE,MAAM,yBAAyB,CAAC;AAC9G,OAAO,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAG1D,MAAM,OAAO,4BAA6B,SAAQ,4BAAoD;IACxF,UAAU,CAAoB;IAE9B,oBAAoB,CAA0B;IAE9C,wBAAwB,CAA6B;IAE/D,YAAY,GAAwC;QAChD,KAAK,EAAE,CAAC;QAER,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QACjC,IAAI,CAAC,oBAAoB,GAAG,GAAG,CAAC,oBAAoB,CAAC;QACrD,IAAI,CAAC,wBAAwB,GAAG,GAAG,CAAC,wBAAwB,CAAC;IACjE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAA6B;QAC3C,MAAM,QAAQ,GAAG,mCAAmC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrE,IAAI,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAC7C,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI;YAC3B,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,IAAI,MAAM,EAAE;YAC/C,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,SAAS,IAAI,MAAM,EAAE;SACpD,CAAC,CAAC;QACH,IAAI,UAAU,EAAE,CAAC;YACb,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACpB,KAAK,8BAA8B,CAAC,KAAK;oBACrC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAC9B,UAAU,EACV,QAAQ,CAAC,UAAU,CAAC,CAAC;wBACjB,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;wBACnD,KAAK,CAAC,UAAU,CACvB,CAAC;oBAEF,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBACpD,MAAM;gBACV,KAAK,8BAA8B,CAAC,OAAO;oBACvC,KAAK,CAAC,UAAU,CAAC,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;oBACpC,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;oBAC1D,MAAM;YACd,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO;gBACH,GAAG,KAAK;gBACR,UAAU;aACb,CAAC;QACN,CAAC;QAED,MAAM,WAAW,GAAkB,EAAE,CAAC;QAEtC,IAAI,KAAK,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;YACpC,IAAI,QAAsB,CAAC;YAE3B,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;YAC/E,IAAI,WAAW,EAAE,CAAC;gBACd,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;oBAC9C,QAAQ,EAAE,MAAM,EAAE;oBAClB,SAAS,EAAE,MAAM,EAAE;iBACtB,CAAC,CAAC;YACP,CAAC;iBAAM,CAAC;gBACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;oBAC9C,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,iBAAiB,CAAC;oBAC3C,QAAQ,EAAE,MAAM,EAAE;oBAClB,SAAS,EAAE,MAAM,EAAE;iBACtB,CAAC,CAAC;YACP,CAAC;YAED,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAClC,CAAC;QAED,IACI,UAAU,CAAC,QAAQ;YACnB,KAAK,CAAC,SAAS,CAAC,gBAAgB,EAClC,CAAC;YACC,IAAI,QAAsB,CAAC;YAE3B,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;YAC9E,IAAI,WAAW,EAAE,CAAC;gBACd,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;oBAC9C,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,SAAS,EAAE,MAAM,EAAE;iBACtB,CAAC,CAAC;YACP,CAAC;iBAAM,CAAC;gBACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC;oBAC9C,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC;oBAC1C,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,SAAS,EAAE,MAAM,EAAE;iBACtB,CAAC,CAAC;YACP,CAAC;YAED,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAClC,CAAC;QAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC1C,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;gBAElC,IAAI,cAAc,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,SAAS,CAAC;oBAC/D,OAAO,EAAE,UAAU,CAAC,EAAE;oBACtB,aAAa,EAAE,UAAU,CAAC,EAAE;iBAC/B,CAAC,CAAC;gBAEH,IAAI,CAAC,cAAc,EAAE,CAAC;oBAClB,cAAc,GAAG,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC;wBAClD,OAAO,EAAE,UAAU,CAAC,EAAE;wBACtB,aAAa,EAAE,UAAU,CAAC,QAAQ;wBAClC,aAAa,EAAE,UAAU,CAAC,EAAE;wBAC5B,mBAAmB,EAAE,UAAU,CAAC,QAAQ;qBAC3C,CAAC,CAAC;oBAEH,MAAM,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBAC7D,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO;YACH,GAAG,KAAK;YACR,UAAU;SACb,CAAC;IACN,CAAC;CACJ"}

package/dist/app/modules/provisioning/synchronizer/role/types.d.ts

@@ -0,0 +1,8 @@
+import type { Permission, Role, RolePermission } from '@authup/core-kit';
+import type { Repository } from 'typeorm';
+export type RoleProvisioningSynchronizerContext = {
+    repository: Repository<Role>;
+    permissionRepository: Repository<Permission>;
+    rolePermissionRepository: Repository<RolePermission>;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/app/modules/provisioning/synchronizer/role/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/provisioning/synchronizer/role/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,UAAU,EAAE,IAAI,EAAE,cAAc,EACnC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,MAAM,MAAM,mCAAmC,GAAG;IAC9C,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,oBAAoB,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IAC7C,wBAAwB,EAAE,UAAU,CAAC,cAAc,CAAC,CAAA;CACvD,CAAC"}

package/dist/app/modules/provisioning/synchronizer/role/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2026.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/app/modules/provisioning/synchronizer/role/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../src/app/modules/provisioning/synchronizer/role/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/app/modules/provisioning/synchronizer/root/index.d.ts

@@ -0,0 +1,3 @@
+export * from './module.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/app/modules/provisioning/synchronizer/root/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/provisioning/synchronizer/root/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/app/modules/provisioning/synchronizer/root/index.js

@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2026.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./module.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/app/modules/provisioning/synchronizer/root/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/app/modules/provisioning/synchronizer/root/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}