@authup/server-core 1.0.0-beta.35 → 1.0.0-beta.37

package/dist/core/entities/role/service.mjs

@@ -0,0 +1,111 @@
+import { AbstractEntityService } from "../service.mjs";
+import { PermissionName, ROLE_ADMIN_NAME, RoleValidator, ValidatorGroup } from "@authup/core-kit";
+import { BuiltInPolicyType, PolicyData } from "@authup/access";
+import { isPropertySet, isUUID } from "@authup/kit";
+import { BadRequestError, NotFoundError } from "@ebec/http";
+//#region src/core/entities/role/service.ts
+var RoleService = class extends AbstractEntityService {
+	repository;
+	realmRepository;
+	validator;
+	constructor(ctx) {
+		super();
+		this.repository = ctx.repository;
+		this.realmRepository = ctx.realmRepository;
+		this.validator = new RoleValidator();
+	}
+	async getMany(query, actor) {
+		await actor.permissionEvaluator.preEvaluateOneOf({ name: [
+			PermissionName.ROLE_READ,
+			PermissionName.ROLE_UPDATE,
+			PermissionName.ROLE_DELETE
+		] });
+		return this.repository.findMany(query);
+	}
+	async getOne(idOrName, actor) {
+		await actor.permissionEvaluator.preEvaluateOneOf({ name: [
+			PermissionName.ROLE_READ,
+			PermissionName.ROLE_UPDATE,
+			PermissionName.ROLE_DELETE
+		] });
+		const entity = await this.repository.findOneByIdOrName(idOrName);
+		if (!entity) throw new NotFoundError();
+		return entity;
+	}
+	async create(data, actor) {
+		const { entity } = await this.save(void 0, data, actor);
+		return entity;
+	}
+	async update(idOrName, data, actor) {
+		const { entity } = await this.save(idOrName, data, actor, { updateOnly: true });
+		return entity;
+	}
+	async save(idOrName, data, actor, options = {}) {
+		let group;
+		const realm = typeof data.realm_id === "string" ? await this.realmRepository.resolve(data.realm_id) : void 0;
+		let entity;
+		if (idOrName) {
+			const where = {};
+			if (isUUID(idOrName)) where.id = idOrName;
+			else where.name = idOrName;
+			if (realm) where.realm_id = realm.id;
+			entity = await this.repository.findOneBy(where);
+			if (!entity && options.updateOnly) throw new NotFoundError();
+		} else if (options.updateOnly) throw new NotFoundError();
+		if (entity) {
+			await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_UPDATE });
+			group = ValidatorGroup.UPDATE;
+		} else {
+			await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_CREATE });
+			group = ValidatorGroup.CREATE;
+		}
+		const validated = await this.validator.run(data, { group });
+		await this.repository.validateJoinColumns(validated);
+		if (entity) {
+			await actor.permissionEvaluator.evaluate({
+				name: PermissionName.ROLE_UPDATE,
+				input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: {
+					...entity,
+					...validated
+				} })
+			});
+			entity = this.repository.merge(entity, validated);
+			await this.repository.checkUniqueness(validated, entity);
+			await this.repository.save(entity);
+			return {
+				entity,
+				created: false
+			};
+		}
+		if (!isPropertySet(validated, "realm_id") && actor.identity) validated.realm_id = this.getActorRealmId(actor) || null;
+		await actor.permissionEvaluator.evaluate({
+			name: PermissionName.ROLE_CREATE,
+			input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: validated })
+		});
+		await this.repository.checkUniqueness(validated);
+		entity = this.repository.create(validated);
+		await this.repository.save(entity);
+		return {
+			entity,
+			created: true
+		};
+	}
+	async delete(id, actor) {
+		await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_DELETE });
+		const entity = await this.repository.findOneBy({ id });
+		if (!entity) throw new NotFoundError();
+		if (entity.name === ROLE_ADMIN_NAME) throw new BadRequestError("The default admin role can not be deleted.");
+		await actor.permissionEvaluator.evaluate({
+			name: PermissionName.ROLE_DELETE,
+			input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity })
+		});
+		const { id: entityId } = entity;
+		await this.repository.remove(entity);
+		entity.id = entityId;
+		return entity;
+	}
+};
+//#endregion
+export { RoleService };
+
+//# sourceMappingURL=service.mjs.map

package/dist/core/entities/role/service.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.mjs","names":["BuiltInPolicyType","PolicyData","isPropertySet","isUUID","BadRequestError","NotFoundError","PermissionName","ROLE_ADMIN_NAME","RoleValidator","ValidatorGroup","AbstractEntityService","RoleService","repository","realmRepository","validator","ctx","getMany","query","actor","permissionEvaluator","preEvaluateOneOf","name","ROLE_READ","ROLE_UPDATE","ROLE_DELETE","findMany","getOne","idOrName","entity","findOneByIdOrName","create","data","save","undefined","update","updateOnly","options","group","realm","realm_id","resolve","where","id","findOneBy","preEvaluate","UPDATE","ROLE_CREATE","CREATE","validated","run","validateJoinColumns","evaluate","input","ATTRIBUTES","merge","checkUniqueness","created","identity","getActorRealmId","delete","entityId","remove"],"sources":["../../../../src/core/entities/role/service.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { BuiltInPolicyType, PolicyData } from '@authup/access';\nimport { isPropertySet, isUUID } from '@authup/kit';\nimport { BadRequestError, NotFoundError } from '@ebec/http';\nimport {\n    PermissionName,\n    ROLE_ADMIN_NAME,\n    RoleValidator,\n    ValidatorGroup,\n} from '@authup/core-kit';\nimport type { Role } from '@authup/core-kit';\nimport type { ActorContext } from '../actor/types.ts';\nimport type { IRealmRepository } from '../realm/types.ts';\nimport { AbstractEntityService } from '../service.ts';\nimport type { EntityRepositoryFindManyResult } from '../types.ts';\nimport type { IRoleRepository, IRoleService } from './types.ts';\n\nexport type RoleServiceContext = {\n    repository: IRoleRepository;\n    realmRepository: IRealmRepository;\n};\n\nexport class RoleService extends AbstractEntityService implements IRoleService {\n    protected repository: IRoleRepository;\n\n    protected realmRepository: IRealmRepository;\n\n    protected validator: RoleValidator;\n\n    constructor(ctx: RoleServiceContext) {\n        super();\n        this.repository = ctx.repository;\n        this.realmRepository = ctx.realmRepository;\n        this.validator = new RoleValidator();\n    }\n\n    async getMany(\n        query: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<EntityRepositoryFindManyResult<Role>> {\n        await actor.permissionEvaluator.preEvaluateOneOf({\n            name: [\n                PermissionName.ROLE_READ,\n                PermissionName.ROLE_UPDATE,\n                PermissionName.ROLE_DELETE,\n            ],\n        });\n\n        return this.repository.findMany(query);\n    }\n\n    async getOne(\n        idOrName: string,\n        actor: ActorContext,\n    ): Promise<Role> {\n        await actor.permissionEvaluator.preEvaluateOneOf({\n            name: [\n                PermissionName.ROLE_READ,\n                PermissionName.ROLE_UPDATE,\n                PermissionName.ROLE_DELETE,\n            ],\n        });\n\n        const entity = await this.repository.findOneByIdOrName(idOrName);\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        return entity;\n    }\n\n    async create(\n        data: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<Role> {\n        const { entity } = await this.save(undefined, data, actor);\n        return entity;\n    }\n\n    async update(\n        idOrName: string,\n        data: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<Role> {\n        const { entity } = await this.save(idOrName, data, actor, { updateOnly: true });\n        return entity;\n    }\n\n    async save(\n        idOrName: string | undefined,\n        data: Record<string, any>,\n        actor: ActorContext,\n        options: { updateOnly?: boolean } = {},\n    ): Promise<{\n        entity: Role,\n        created: boolean \n    }> {\n        let group: string;\n\n        const realm = typeof data.realm_id === 'string' ?\n            await this.realmRepository.resolve(data.realm_id) :\n            undefined;\n\n        let entity: Role | null | undefined;\n        if (idOrName) {\n            const where: Record<string, any> = {};\n            if (isUUID(idOrName)) {\n                where.id = idOrName;\n            } else {\n                where.name = idOrName;\n            }\n\n            if (realm) {\n                where.realm_id = realm.id;\n            }\n\n            entity = await this.repository.findOneBy(where);\n            if (!entity && options.updateOnly) {\n                throw new NotFoundError();\n            }\n        } else if (options.updateOnly) {\n            throw new NotFoundError();\n        }\n\n        if (entity) {\n            await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_UPDATE });\n            group = ValidatorGroup.UPDATE;\n        } else {\n            await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_CREATE });\n            group = ValidatorGroup.CREATE;\n        }\n\n        const validated = await this.validator.run(data, { group });\n\n        await this.repository.validateJoinColumns(validated);\n\n        if (entity) {\n            await actor.permissionEvaluator.evaluate({\n                name: PermissionName.ROLE_UPDATE,\n                input: new PolicyData({\n                    [BuiltInPolicyType.ATTRIBUTES]: {\n                        ...entity,\n                        ...validated,\n                    },\n                }),\n            });\n\n            entity = this.repository.merge(entity, validated);\n            await this.repository.checkUniqueness(validated, entity);\n            await this.repository.save(entity);\n\n            return {\n                entity,\n                created: false, \n            };\n        }\n\n        if (!isPropertySet(validated, 'realm_id') && actor.identity) {\n            validated.realm_id = this.getActorRealmId(actor) || null;\n        }\n\n        await actor.permissionEvaluator.evaluate({\n            name: PermissionName.ROLE_CREATE,\n            input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: validated }),\n        });\n\n        await this.repository.checkUniqueness(validated);\n\n        entity = this.repository.create(validated);\n        await this.repository.save(entity);\n\n        return {\n            entity,\n            created: true, \n        };\n    }\n\n    async delete(\n        id: string,\n        actor: ActorContext,\n    ): Promise<Role> {\n        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_DELETE });\n\n        const entity = await this.repository.findOneBy({ id });\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        if (entity.name === ROLE_ADMIN_NAME) {\n            throw new BadRequestError('The default admin role can not be deleted.');\n        }\n\n        await actor.permissionEvaluator.evaluate({\n            name: PermissionName.ROLE_DELETE,\n            input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity }),\n        });\n\n        const { id: entityId } = entity;\n        await this.repository.remove(entity);\n        entity.id = entityId;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;AA4BA,IAAaW,cAAb,cAAiCD,sBAAAA;CACnBE;CAEAC;CAEAC;CAEV,YAAYC,KAAyB;AACjC,SAAK;AACL,OAAKH,aAAaG,IAAIH;AACtB,OAAKC,kBAAkBE,IAAIF;AAC3B,OAAKC,YAAY,IAAIN,eAAAA;;CAGzB,MAAMQ,QACFC,OACAC,OAC6C;AAC7C,QAAMA,MAAMC,oBAAoBC,iBAAiB,EAC7CC,MAAM;GACFf,eAAegB;GACfhB,eAAeiB;GACfjB,eAAekB;GAClB,EACL,CAAA;AAEA,SAAO,KAAKZ,WAAWa,SAASR,MAAAA;;CAGpC,MAAMS,OACFC,UACAT,OACa;AACb,QAAMA,MAAMC,oBAAoBC,iBAAiB,EAC7CC,MAAM;GACFf,eAAegB;GACfhB,eAAeiB;GACfjB,eAAekB;GAClB,EACL,CAAA;EAEA,MAAMI,SAAS,MAAM,KAAKhB,WAAWiB,kBAAkBF,SAAAA;AACvD,MAAI,CAACC,OACD,OAAM,IAAIvB,eAAAA;AAGd,SAAOuB;;CAGX,MAAME,OACFC,MACAb,OACa;EACb,MAAM,EAAEU,WAAW,MAAM,KAAKI,KAAKC,KAAAA,GAAWF,MAAMb,MAAAA;AACpD,SAAOU;;CAGX,MAAMM,OACFP,UACAI,MACAb,OACa;EACb,MAAM,EAAEU,WAAW,MAAM,KAAKI,KAAKL,UAAUI,MAAMb,OAAO,EAAEiB,YAAY,MAAK,CAAA;AAC7E,SAAOP;;CAGX,MAAMI,KACFL,UACAI,MACAb,OACAkB,UAAoC,EAAE,EAIvC;EACC,IAAIC;EAEJ,MAAMC,QAAQ,OAAOP,KAAKQ,aAAa,WACnC,MAAM,KAAK1B,gBAAgB2B,QAAQT,KAAKQ,SAAQ,GAChDN,KAAAA;EAEJ,IAAIL;AACJ,MAAID,UAAU;GACV,MAAMc,QAA6B,EAAC;AACpC,OAAItC,OAAOwB,SAAAA,CACPc,OAAMC,KAAKf;OAEXc,OAAMpB,OAAOM;AAGjB,OAAIW,MACAG,OAAMF,WAAWD,MAAMI;AAG3Bd,YAAS,MAAM,KAAKhB,WAAW+B,UAAUF,MAAAA;AACzC,OAAI,CAACb,UAAUQ,QAAQD,WACnB,OAAM,IAAI9B,eAAAA;aAEP+B,QAAQD,WACf,OAAM,IAAI9B,eAAAA;AAGd,MAAIuB,QAAQ;AACR,SAAMV,MAAMC,oBAAoByB,YAAY,EAAEvB,MAAMf,eAAeiB,aAAY,CAAA;AAC/Ec,WAAQ5B,eAAeoC;SACpB;AACH,SAAM3B,MAAMC,oBAAoByB,YAAY,EAAEvB,MAAMf,eAAewC,aAAY,CAAA;AAC/ET,WAAQ5B,eAAesC;;EAG3B,MAAMC,YAAY,MAAM,KAAKlC,UAAUmC,IAAIlB,MAAM,EAAEM,OAAM,CAAA;AAEzD,QAAM,KAAKzB,WAAWsC,oBAAoBF,UAAAA;AAE1C,MAAIpB,QAAQ;AACR,SAAMV,MAAMC,oBAAoBgC,SAAS;IACrC9B,MAAMf,eAAeiB;IACrB6B,OAAO,IAAInD,WAAW,GACjBD,kBAAkBqD,aAAa;KAC5B,GAAGzB;KACH,GAAGoB;KACP,EACJ,CAAA;IACJ,CAAA;AAEApB,YAAS,KAAKhB,WAAW0C,MAAM1B,QAAQoB,UAAAA;AACvC,SAAM,KAAKpC,WAAW2C,gBAAgBP,WAAWpB,OAAAA;AACjD,SAAM,KAAKhB,WAAWoB,KAAKJ,OAAAA;AAE3B,UAAO;IACHA;IACA4B,SAAS;IACb;;AAGJ,MAAI,CAACtD,cAAc8C,WAAW,WAAA,IAAe9B,MAAMuC,SAC/CT,WAAUT,WAAW,KAAKmB,gBAAgBxC,MAAAA,IAAU;AAGxD,QAAMA,MAAMC,oBAAoBgC,SAAS;GACrC9B,MAAMf,eAAewC;GACrBM,OAAO,IAAInD,WAAW,GAAGD,kBAAkBqD,aAAaL,WAAU,CAAA;GACtE,CAAA;AAEA,QAAM,KAAKpC,WAAW2C,gBAAgBP,UAAAA;AAEtCpB,WAAS,KAAKhB,WAAWkB,OAAOkB,UAAAA;AAChC,QAAM,KAAKpC,WAAWoB,KAAKJ,OAAAA;AAE3B,SAAO;GACHA;GACA4B,SAAS;GACb;;CAGJ,MAAMG,OACFjB,IACAxB,OACa;AACb,QAAMA,MAAMC,oBAAoByB,YAAY,EAAEvB,MAAMf,eAAekB,aAAY,CAAA;EAE/E,MAAMI,SAAS,MAAM,KAAKhB,WAAW+B,UAAU,EAAED,IAAG,CAAA;AACpD,MAAI,CAACd,OACD,OAAM,IAAIvB,eAAAA;AAGd,MAAIuB,OAAOP,SAASd,gBAChB,OAAM,IAAIH,gBAAgB,6CAAA;AAG9B,QAAMc,MAAMC,oBAAoBgC,SAAS;GACrC9B,MAAMf,eAAekB;GACrB4B,OAAO,IAAInD,WAAW,GAAGD,kBAAkBqD,aAAazB,QAAO,CAAA;GACnE,CAAA;EAEA,MAAM,EAAEc,IAAIkB,aAAahC;AACzB,QAAM,KAAKhB,WAAWiD,OAAOjC,OAAAA;AAC7BA,SAAOc,KAAKkB;AAEZ,SAAOhC"}

package/dist/core/entities/role/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/entities/role-attribute/index.mjs

@@ -0,0 +1,2 @@
+import { RoleAttributeService } from "./service.mjs";
+export { RoleAttributeService };

package/dist/core/entities/role-attribute/service.mjs

@@ -0,0 +1,102 @@
+import { AbstractEntityService } from "../service.mjs";
+import { PermissionName } from "@authup/core-kit";
+import { BuiltInPolicyType, PolicyData } from "@authup/access";
+import { NotFoundError } from "@ebec/http";
+//#region src/core/entities/role-attribute/service.ts
+var RoleAttributeService = class extends AbstractEntityService {
+	repository;
+	constructor(ctx) {
+		super();
+		this.repository = ctx.repository;
+	}
+	async getMany(query, actor) {
+		await actor.permissionEvaluator.preEvaluateOneOf({ name: [
+			PermissionName.ROLE_READ,
+			PermissionName.ROLE_UPDATE,
+			PermissionName.ROLE_DELETE
+		] });
+		const { data: entities, meta } = await this.repository.findMany(query);
+		const data = [];
+		let { total } = meta;
+		for (const entity of entities) try {
+			await actor.permissionEvaluator.evaluateOneOf({
+				name: [
+					PermissionName.ROLE_READ,
+					PermissionName.ROLE_UPDATE,
+					PermissionName.ROLE_DELETE
+				],
+				input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity })
+			});
+			data.push(entity);
+		} catch {
+			total--;
+		}
+		return {
+			data,
+			meta: {
+				...meta,
+				total
+			}
+		};
+	}
+	async getOne(id, actor) {
+		await actor.permissionEvaluator.preEvaluateOneOf({ name: [
+			PermissionName.ROLE_READ,
+			PermissionName.ROLE_UPDATE,
+			PermissionName.ROLE_DELETE
+		] });
+		const entity = await this.repository.findOneBy({ id });
+		if (!entity) throw new NotFoundError();
+		await actor.permissionEvaluator.evaluateOneOf({
+			name: [
+				PermissionName.ROLE_READ,
+				PermissionName.ROLE_UPDATE,
+				PermissionName.ROLE_DELETE
+			],
+			input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity })
+		});
+		return entity;
+	}
+	async create(data, actor) {
+		await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_UPDATE });
+		await this.repository.validateJoinColumns(data);
+		data.realm_id = data.role.realm_id;
+		const entity = this.repository.create(data);
+		await actor.permissionEvaluator.evaluate({
+			name: PermissionName.ROLE_UPDATE,
+			input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity })
+		});
+		await this.repository.save(entity);
+		return entity;
+	}
+	async update(id, data, actor) {
+		await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_UPDATE });
+		await this.repository.validateJoinColumns(data);
+		let entity = await this.repository.findOneBy({ id });
+		if (!entity) throw new NotFoundError();
+		entity = this.repository.merge(entity, data);
+		await actor.permissionEvaluator.evaluate({
+			name: PermissionName.ROLE_UPDATE,
+			input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity })
+		});
+		await this.repository.save(entity);
+		return entity;
+	}
+	async delete(id, actor) {
+		await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_UPDATE });
+		const entity = await this.repository.findOneBy({ id });
+		if (!entity) throw new NotFoundError();
+		await actor.permissionEvaluator.evaluate({
+			name: PermissionName.ROLE_UPDATE,
+			input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity })
+		});
+		const { id: entityId } = entity;
+		await this.repository.remove(entity);
+		entity.id = entityId;
+		return entity;
+	}
+};
+//#endregion
+export { RoleAttributeService };
+
+//# sourceMappingURL=service.mjs.map

package/dist/core/entities/role-attribute/service.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.mjs","names":["BuiltInPolicyType","PolicyData","NotFoundError","PermissionName","AbstractEntityService","RoleAttributeService","repository","ctx","getMany","query","actor","permissionEvaluator","preEvaluateOneOf","name","ROLE_READ","ROLE_UPDATE","ROLE_DELETE","data","entities","meta","findMany","total","entity","evaluateOneOf","input","ATTRIBUTES","push","getOne","id","findOneBy","create","preEvaluate","validateJoinColumns","realm_id","role","evaluate","save","update","merge","delete","entityId","remove"],"sources":["../../../../src/core/entities/role-attribute/service.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { BuiltInPolicyType, PolicyData } from '@authup/access';\nimport { NotFoundError } from '@ebec/http';\nimport { PermissionName } from '@authup/core-kit';\nimport type { RoleAttribute } from '@authup/core-kit';\nimport type { ActorContext } from '../actor/types.ts';\nimport { AbstractEntityService } from '../service.ts';\nimport type { EntityRepositoryFindManyResult } from '../types.ts';\nimport type { IRoleAttributeRepository, IRoleAttributeService } from './types.ts';\n\nexport type RoleAttributeServiceContext = {\n    repository: IRoleAttributeRepository;\n};\n\nexport class RoleAttributeService extends AbstractEntityService implements IRoleAttributeService {\n    protected repository: IRoleAttributeRepository;\n\n    constructor(ctx: RoleAttributeServiceContext) {\n        super();\n        this.repository = ctx.repository;\n    }\n\n    async getMany(\n        query: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<EntityRepositoryFindManyResult<RoleAttribute>> {\n        await actor.permissionEvaluator.preEvaluateOneOf({\n            name: [\n                PermissionName.ROLE_READ,\n                PermissionName.ROLE_UPDATE,\n                PermissionName.ROLE_DELETE,\n            ],\n        });\n\n        const {\n            data: entities, \n            meta, \n        } = await this.repository.findMany(query);\n\n        const data: RoleAttribute[] = [];\n        let { total } = meta;\n\n        for (const entity of entities) {\n            try {\n                await actor.permissionEvaluator.evaluateOneOf({\n                    name: [\n                        PermissionName.ROLE_READ,\n                        PermissionName.ROLE_UPDATE,\n                        PermissionName.ROLE_DELETE,\n                    ],\n                    input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity }),\n                });\n                data.push(entity);\n            } catch {\n                total--;\n            }\n        }\n\n        return {\n            data,\n            meta: {\n                ...meta,\n                total, \n            }, \n        };\n    }\n\n    async getOne(\n        id: string,\n        actor: ActorContext,\n    ): Promise<RoleAttribute> {\n        await actor.permissionEvaluator.preEvaluateOneOf({\n            name: [\n                PermissionName.ROLE_READ,\n                PermissionName.ROLE_UPDATE,\n                PermissionName.ROLE_DELETE,\n            ],\n        });\n\n        const entity = await this.repository.findOneBy({ id });\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        await actor.permissionEvaluator.evaluateOneOf({\n            name: [\n                PermissionName.ROLE_READ,\n                PermissionName.ROLE_UPDATE,\n                PermissionName.ROLE_DELETE,\n            ],\n            input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity }),\n        });\n\n        return entity;\n    }\n\n    async create(\n        data: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<RoleAttribute> {\n        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_UPDATE });\n\n        await this.repository.validateJoinColumns(data);\n\n        data.realm_id = data.role.realm_id;\n\n        const entity = this.repository.create(data);\n\n        await actor.permissionEvaluator.evaluate({\n            name: PermissionName.ROLE_UPDATE,\n            input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity }),\n        });\n\n        await this.repository.save(entity);\n\n        return entity;\n    }\n\n    async update(\n        id: string,\n        data: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<RoleAttribute> {\n        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_UPDATE });\n\n        await this.repository.validateJoinColumns(data);\n\n        let entity = await this.repository.findOneBy({ id });\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        entity = this.repository.merge(entity, data);\n\n        await actor.permissionEvaluator.evaluate({\n            name: PermissionName.ROLE_UPDATE,\n            input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity }),\n        });\n\n        await this.repository.save(entity);\n\n        return entity;\n    }\n\n    async delete(\n        id: string,\n        actor: ActorContext,\n    ): Promise<RoleAttribute> {\n        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_UPDATE });\n\n        const entity = await this.repository.findOneBy({ id });\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        await actor.permissionEvaluator.evaluate({\n            name: PermissionName.ROLE_UPDATE,\n            input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity }),\n        });\n\n        const { id: entityId } = entity;\n        await this.repository.remove(entity);\n        entity.id = entityId;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;AAoBA,IAAaK,uBAAb,cAA0CD,sBAAAA;CAC5BE;CAEV,YAAYC,KAAkC;AAC1C,SAAK;AACL,OAAKD,aAAaC,IAAID;;CAG1B,MAAME,QACFC,OACAC,OACsD;AACtD,QAAMA,MAAMC,oBAAoBC,iBAAiB,EAC7CC,MAAM;GACFV,eAAeW;GACfX,eAAeY;GACfZ,eAAea;GAClB,EACL,CAAA;EAEA,MAAM,EACFC,MAAMC,UACNC,SACA,MAAM,KAAKb,WAAWc,SAASX,MAAAA;EAEnC,MAAMQ,OAAwB,EAAE;EAChC,IAAI,EAAEI,UAAUF;AAEhB,OAAK,MAAMG,UAAUJ,SACjB,KAAI;AACA,SAAMR,MAAMC,oBAAoBY,cAAc;IAC1CV,MAAM;KACFV,eAAeW;KACfX,eAAeY;KACfZ,eAAea;KAClB;IACDQ,OAAO,IAAIvB,WAAW,GAAGD,kBAAkByB,aAAaH,QAAO,CAAA;IACnE,CAAA;AACAL,QAAKS,KAAKJ,OAAAA;UACN;AACJD;;AAIR,SAAO;GACHJ;GACAE,MAAM;IACF,GAAGA;IACHE;IACJ;GACJ;;CAGJ,MAAMM,OACFC,IACAlB,OACsB;AACtB,QAAMA,MAAMC,oBAAoBC,iBAAiB,EAC7CC,MAAM;GACFV,eAAeW;GACfX,eAAeY;GACfZ,eAAea;GAClB,EACL,CAAA;EAEA,MAAMM,SAAS,MAAM,KAAKhB,WAAWuB,UAAU,EAAED,IAAG,CAAA;AACpD,MAAI,CAACN,OACD,OAAM,IAAIpB,eAAAA;AAGd,QAAMQ,MAAMC,oBAAoBY,cAAc;GAC1CV,MAAM;IACFV,eAAeW;IACfX,eAAeY;IACfZ,eAAea;IAClB;GACDQ,OAAO,IAAIvB,WAAW,GAAGD,kBAAkByB,aAAaH,QAAO,CAAA;GACnE,CAAA;AAEA,SAAOA;;CAGX,MAAMQ,OACFb,MACAP,OACsB;AACtB,QAAMA,MAAMC,oBAAoBoB,YAAY,EAAElB,MAAMV,eAAeY,aAAY,CAAA;AAE/E,QAAM,KAAKT,WAAW0B,oBAAoBf,KAAAA;AAE1CA,OAAKgB,WAAWhB,KAAKiB,KAAKD;EAE1B,MAAMX,SAAS,KAAKhB,WAAWwB,OAAOb,KAAAA;AAEtC,QAAMP,MAAMC,oBAAoBwB,SAAS;GACrCtB,MAAMV,eAAeY;GACrBS,OAAO,IAAIvB,WAAW,GAAGD,kBAAkByB,aAAaH,QAAO,CAAA;GACnE,CAAA;AAEA,QAAM,KAAKhB,WAAW8B,KAAKd,OAAAA;AAE3B,SAAOA;;CAGX,MAAMe,OACFT,IACAX,MACAP,OACsB;AACtB,QAAMA,MAAMC,oBAAoBoB,YAAY,EAAElB,MAAMV,eAAeY,aAAY,CAAA;AAE/E,QAAM,KAAKT,WAAW0B,oBAAoBf,KAAAA;EAE1C,IAAIK,SAAS,MAAM,KAAKhB,WAAWuB,UAAU,EAAED,IAAG,CAAA;AAClD,MAAI,CAACN,OACD,OAAM,IAAIpB,eAAAA;AAGdoB,WAAS,KAAKhB,WAAWgC,MAAMhB,QAAQL,KAAAA;AAEvC,QAAMP,MAAMC,oBAAoBwB,SAAS;GACrCtB,MAAMV,eAAeY;GACrBS,OAAO,IAAIvB,WAAW,GAAGD,kBAAkByB,aAAaH,QAAO,CAAA;GACnE,CAAA;AAEA,QAAM,KAAKhB,WAAW8B,KAAKd,OAAAA;AAE3B,SAAOA;;CAGX,MAAMiB,OACFX,IACAlB,OACsB;AACtB,QAAMA,MAAMC,oBAAoBoB,YAAY,EAAElB,MAAMV,eAAeY,aAAY,CAAA;EAE/E,MAAMO,SAAS,MAAM,KAAKhB,WAAWuB,UAAU,EAAED,IAAG,CAAA;AACpD,MAAI,CAACN,OACD,OAAM,IAAIpB,eAAAA;AAGd,QAAMQ,MAAMC,oBAAoBwB,SAAS;GACrCtB,MAAMV,eAAeY;GACrBS,OAAO,IAAIvB,WAAW,GAAGD,kBAAkByB,aAAaH,QAAO,CAAA;GACnE,CAAA;EAEA,MAAM,EAAEM,IAAIY,aAAalB;AACzB,QAAM,KAAKhB,WAAWmC,OAAOnB,OAAAA;AAC7BA,SAAOM,KAAKY;AAEZ,SAAOlB"}

package/dist/core/entities/role-attribute/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/entities/role-permission/index.mjs

@@ -0,0 +1,2 @@
+import { RolePermissionService } from "./service.mjs";
+export { RolePermissionService };

package/dist/core/entities/role-permission/service.d.ts

@@ -1,3 +1,4 @@
+import { RolePermissionValidator } from '@authup/core-kit';
 import type { RolePermission } from '@authup/core-kit';
 import type { IIdentityPermissionProvider } from '../../identity/permission/types.ts';
 import type { ActorContext } from '../actor/types.ts';
@@ -11,6 +12,7 @@ export type RolePermissionServiceContext = {
 export declare class RolePermissionService extends AbstractEntityService implements IRolePermissionService {
     protected repository: IRolePermissionRepository;
     protected identityPermissionProvider: IIdentityPermissionProvider;
+    protected validator: RolePermissionValidator;
     constructor(ctx: RolePermissionServiceContext);
     getMany(query: Record<string, any>, actor: ActorContext): Promise<EntityRepositoryFindManyResult<RolePermission>>;
     getOne(id: string, actor: ActorContext): Promise<RolePermission>;

package/dist/core/entities/role-permission/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/role-permission/service.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,KAAK,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEpF,MAAM,MAAM,4BAA4B,GAAG;IACvC,UAAU,EAAE,yBAAyB,CAAC;IACtC,0BAA0B,EAAE,2BAA2B,CAAC;CAC3D,CAAC;AAEF,qBAAa,qBAAsB,SAAQ,qBAAsB,YAAW,sBAAsB;IAC9F,SAAS,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAEhD,SAAS,CAAC,0BAA0B,EAAE,2BAA2B,CAAC;gBAEtD,GAAG,EAAE,4BAA4B;IAMvC,OAAO,CACT,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,8BAA8B,CAAC,cAAc,CAAC,CAAC;IAWpD,MAAM,CACR,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,cAAc,CAAC;IAgBpB,MAAM,CACR,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,cAAc,CAAC;IAqDpB,MAAM,CACR,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,cAAc,CAAC;IAyBpB,MAAM,CACR,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,cAAc,CAAC;CAmB7B"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/role-permission/service.ts"],"names":[],"mappings":"AASA,OAAO,EAGH,uBAAuB,EAE1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,KAAK,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEpF,MAAM,MAAM,4BAA4B,GAAG;IACvC,UAAU,EAAE,yBAAyB,CAAC;IACtC,0BAA0B,EAAE,2BAA2B,CAAC;CAC3D,CAAC;AAEF,qBAAa,qBAAsB,SAAQ,qBAAsB,YAAW,sBAAsB;IAC9F,SAAS,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAEhD,SAAS,CAAC,0BAA0B,EAAE,2BAA2B,CAAC;IAElE,SAAS,CAAC,SAAS,EAAE,uBAAuB,CAAC;gBAEjC,GAAG,EAAE,4BAA4B;IAOvC,OAAO,CACT,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,8BAA8B,CAAC,cAAc,CAAC,CAAC;IAWpD,MAAM,CACR,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,cAAc,CAAC;IAgBpB,MAAM,CACR,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,cAAc,CAAC;IA+DpB,MAAM,CACR,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,cAAc,CAAC;IAyBpB,MAAM,CACR,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,cAAc,CAAC;CAmB7B"}

package/dist/core/entities/role-permission/service.mjs

@@ -0,0 +1,93 @@
+import { AbstractEntityService } from "../service.mjs";
+import { PermissionName, ROLE_ADMIN_NAME, RolePermissionValidator, ValidatorGroup } from "@authup/core-kit";
+import { BuiltInPolicyType, PolicyData } from "@authup/access";
+import { ConflictError, NotFoundError } from "@ebec/http";
+//#region src/core/entities/role-permission/service.ts
+var RolePermissionService = class extends AbstractEntityService {
+	repository;
+	identityPermissionProvider;
+	validator;
+	constructor(ctx) {
+		super();
+		this.repository = ctx.repository;
+		this.identityPermissionProvider = ctx.identityPermissionProvider;
+		this.validator = new RolePermissionValidator();
+	}
+	async getMany(query, actor) {
+		await actor.permissionEvaluator.preEvaluateOneOf({ name: [PermissionName.ROLE_PERMISSION_DELETE, PermissionName.ROLE_PERMISSION_READ] });
+		return this.repository.findMany(query);
+	}
+	async getOne(id, actor) {
+		await actor.permissionEvaluator.preEvaluateOneOf({ name: [PermissionName.ROLE_PERMISSION_DELETE, PermissionName.ROLE_PERMISSION_READ] });
+		const entity = await this.repository.findOneBy({ id });
+		if (!entity) throw new NotFoundError();
+		return entity;
+	}
+	async create(data, actor) {
+		await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_PERMISSION_CREATE });
+		const validated = await this.validator.run(data, { group: ValidatorGroup.CREATE });
+		await this.repository.validateJoinColumns(validated);
+		if (await this.repository.findOneBy({
+			role_id: validated.role_id,
+			permission_id: validated.permission_id
+		})) throw new ConflictError("The role-permission assignment already exists.");
+		if (validated.permission) {
+			validated.permission_realm_id = validated.permission.realm_id;
+			if (!validated.role || validated.role.name !== ROLE_ADMIN_NAME) await actor.permissionEvaluator.preEvaluate({
+				name: validated.permission.name,
+				realmId: validated.permission.realm_id,
+				clientId: validated.permission.client_id
+			});
+		}
+		if (validated.role) validated.role_realm_id = validated.role.realm_id;
+		if (validated.permission && actor.identity && typeof validated.policy_id === "undefined") {
+			const junctionPolicy = await this.identityPermissionProvider.resolveJunctionPolicy({
+				type: actor.identity.type,
+				id: actor.identity.data.id
+			}, {
+				name: validated.permission.name,
+				realmId: validated.permission.realm_id,
+				clientId: validated.permission.client_id
+			});
+			if (junctionPolicy) validated.policy_id = junctionPolicy.id;
+		}
+		await actor.permissionEvaluator.evaluate({
+			name: PermissionName.ROLE_PERMISSION_CREATE,
+			input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: validated })
+		});
+		let entity = this.repository.create(validated);
+		entity = await this.repository.save(entity);
+		return entity;
+	}
+	async update(id, data, actor) {
+		await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_PERMISSION_UPDATE });
+		const entity = await this.repository.findOneBy({ id });
+		if (!entity) throw new NotFoundError();
+		const updateData = {};
+		if (Object.prototype.hasOwnProperty.call(data, "policy_id")) updateData.policy_id = data.policy_id;
+		await this.repository.validateJoinColumns(updateData);
+		const merged = this.repository.merge(entity, updateData);
+		await actor.permissionEvaluator.evaluate({
+			name: PermissionName.ROLE_PERMISSION_UPDATE,
+			input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: merged })
+		});
+		return this.repository.save(merged);
+	}
+	async delete(id, actor) {
+		await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_PERMISSION_DELETE });
+		const entity = await this.repository.findOneBy({ id });
+		if (!entity) throw new NotFoundError();
+		await actor.permissionEvaluator.evaluate({
+			name: PermissionName.ROLE_PERMISSION_DELETE,
+			input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity })
+		});
+		const { id: entityId } = entity;
+		await this.repository.remove(entity);
+		entity.id = entityId;
+		return entity;
+	}
+};
+//#endregion
+export { RolePermissionService };
+
+//# sourceMappingURL=service.mjs.map

package/dist/core/entities/role-permission/service.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.mjs","names":["BuiltInPolicyType","PolicyData","ConflictError","NotFoundError","PermissionName","ROLE_ADMIN_NAME","RolePermissionValidator","ValidatorGroup","AbstractEntityService","RolePermissionService","repository","identityPermissionProvider","validator","ctx","getMany","query","actor","permissionEvaluator","preEvaluateOneOf","name","ROLE_PERMISSION_DELETE","ROLE_PERMISSION_READ","findMany","getOne","id","entity","findOneBy","create","data","preEvaluate","ROLE_PERMISSION_CREATE","validated","run","group","CREATE","validateJoinColumns","existing","role_id","permission_id","permission","permission_realm_id","realm_id","role","realmId","clientId","client_id","role_realm_id","identity","policy_id","junctionPolicy","resolveJunctionPolicy","type","evaluate","input","ATTRIBUTES","save","update","ROLE_PERMISSION_UPDATE","updateData","Object","prototype","hasOwnProperty","call","merged","merge","delete","entityId","remove"],"sources":["../../../../src/core/entities/role-permission/service.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { BuiltInPolicyType, PolicyData } from '@authup/access';\nimport { ConflictError, NotFoundError } from '@ebec/http';\nimport { \n    PermissionName, \n    ROLE_ADMIN_NAME, \n    RolePermissionValidator, \n    ValidatorGroup, \n} from '@authup/core-kit';\nimport type { RolePermission } from '@authup/core-kit';\nimport type { IIdentityPermissionProvider } from '../../identity/permission/types.ts';\nimport type { ActorContext } from '../actor/types.ts';\nimport { AbstractEntityService } from '../service.ts';\nimport type { EntityRepositoryFindManyResult } from '../types.ts';\nimport type { IRolePermissionRepository, IRolePermissionService } from './types.ts';\n\nexport type RolePermissionServiceContext = {\n    repository: IRolePermissionRepository;\n    identityPermissionProvider: IIdentityPermissionProvider;\n};\n\nexport class RolePermissionService extends AbstractEntityService implements IRolePermissionService {\n    protected repository: IRolePermissionRepository;\n\n    protected identityPermissionProvider: IIdentityPermissionProvider;\n\n    protected validator: RolePermissionValidator;\n\n    constructor(ctx: RolePermissionServiceContext) {\n        super();\n        this.repository = ctx.repository;\n        this.identityPermissionProvider = ctx.identityPermissionProvider;\n        this.validator = new RolePermissionValidator();\n    }\n\n    async getMany(\n        query: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<EntityRepositoryFindManyResult<RolePermission>> {\n        await actor.permissionEvaluator.preEvaluateOneOf({\n            name: [\n                PermissionName.ROLE_PERMISSION_DELETE,\n                PermissionName.ROLE_PERMISSION_READ,\n            ],\n        });\n\n        return this.repository.findMany(query);\n    }\n\n    async getOne(\n        id: string,\n        actor: ActorContext,\n    ): Promise<RolePermission> {\n        await actor.permissionEvaluator.preEvaluateOneOf({\n            name: [\n                PermissionName.ROLE_PERMISSION_DELETE,\n                PermissionName.ROLE_PERMISSION_READ,\n            ],\n        });\n\n        const entity = await this.repository.findOneBy({ id });\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        return entity;\n    }\n\n    async create(\n        data: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<RolePermission> {\n        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_PERMISSION_CREATE });\n\n        const validated = await this.validator.run(data, { group: ValidatorGroup.CREATE });\n\n        await this.repository.validateJoinColumns(validated);\n\n        const existing = await this.repository.findOneBy({\n            role_id: validated.role_id,\n            permission_id: validated.permission_id,\n        });\n        if (existing) {\n            throw new ConflictError('The role-permission assignment already exists.');\n        }\n\n        if (validated.permission) {\n            validated.permission_realm_id = validated.permission.realm_id;\n\n            if (!validated.role || validated.role.name !== ROLE_ADMIN_NAME) {\n                await actor.permissionEvaluator.preEvaluate({\n                    name: validated.permission.name,\n                    realmId: validated.permission.realm_id,\n                    clientId: validated.permission.client_id,\n                });\n            }\n        }\n\n        if (validated.role) {\n            validated.role_realm_id = validated.role.realm_id;\n        }\n\n        if (\n            validated.permission &&\n            actor.identity &&\n            typeof validated.policy_id === 'undefined'\n        ) {\n            const junctionPolicy = await this.identityPermissionProvider.resolveJunctionPolicy(\n                {\n                    type: actor.identity.type,\n                    id: actor.identity.data.id,\n                },\n                {\n                    name: validated.permission.name,\n                    realmId: validated.permission.realm_id,\n                    clientId: validated.permission.client_id,\n                },\n            );\n            if (junctionPolicy) {\n                validated.policy_id = junctionPolicy.id;\n            }\n        }\n\n        await actor.permissionEvaluator.evaluate({\n            name: PermissionName.ROLE_PERMISSION_CREATE,\n            input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: validated }),\n        });\n\n        let entity = this.repository.create(validated);\n        entity = await this.repository.save(entity);\n\n        return entity;\n    }\n\n    async update(\n        id: string,\n        data: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<RolePermission> {\n        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_PERMISSION_UPDATE });\n\n        const entity = await this.repository.findOneBy({ id });\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        const updateData: Record<string, any> = {};\n        if (Object.prototype.hasOwnProperty.call(data, 'policy_id')) {\n            updateData.policy_id = data.policy_id;\n        }\n\n        await this.repository.validateJoinColumns(updateData);\n\n        const merged = this.repository.merge(entity, updateData);\n\n        await actor.permissionEvaluator.evaluate({\n            name: PermissionName.ROLE_PERMISSION_UPDATE,\n            input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: merged }),\n        });\n\n        return this.repository.save(merged);\n    }\n\n    async delete(\n        id: string,\n        actor: ActorContext,\n    ): Promise<RolePermission> {\n        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROLE_PERMISSION_DELETE });\n\n        const entity = await this.repository.findOneBy({ id });\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        await actor.permissionEvaluator.evaluate({\n            name: PermissionName.ROLE_PERMISSION_DELETE,\n            input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity }),\n        });\n\n        const { id: entityId } = entity;\n        await this.repository.remove(entity);\n        entity.id = entityId;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;AA2BA,IAAaS,wBAAb,cAA2CD,sBAAAA;CAC7BE;CAEAC;CAEAC;CAEV,YAAYC,KAAmC;AAC3C,SAAK;AACL,OAAKH,aAAaG,IAAIH;AACtB,OAAKC,6BAA6BE,IAAIF;AACtC,OAAKC,YAAY,IAAIN,yBAAAA;;CAGzB,MAAMQ,QACFC,OACAC,OACuD;AACvD,QAAMA,MAAMC,oBAAoBC,iBAAiB,EAC7CC,MAAM,CACFf,eAAegB,wBACfhB,eAAeiB,qBAClB,EACL,CAAA;AAEA,SAAO,KAAKX,WAAWY,SAASP,MAAAA;;CAGpC,MAAMQ,OACFC,IACAR,OACuB;AACvB,QAAMA,MAAMC,oBAAoBC,iBAAiB,EAC7CC,MAAM,CACFf,eAAegB,wBACfhB,eAAeiB,qBAClB,EACL,CAAA;EAEA,MAAMI,SAAS,MAAM,KAAKf,WAAWgB,UAAU,EAAEF,IAAG,CAAA;AACpD,MAAI,CAACC,OACD,OAAM,IAAItB,eAAAA;AAGd,SAAOsB;;CAGX,MAAME,OACFC,MACAZ,OACuB;AACvB,QAAMA,MAAMC,oBAAoBY,YAAY,EAAEV,MAAMf,eAAe0B,wBAAuB,CAAA;EAE1F,MAAMC,YAAY,MAAM,KAAKnB,UAAUoB,IAAIJ,MAAM,EAAEK,OAAO1B,eAAe2B,QAAO,CAAA;AAEhF,QAAM,KAAKxB,WAAWyB,oBAAoBJ,UAAAA;AAM1C,MAAIK,MAJmB,KAAK1B,WAAWgB,UAAU;GAC7CW,SAASN,UAAUM;GACnBC,eAAeP,UAAUO;GAC7B,CAAA,CAEI,OAAM,IAAIpC,cAAc,iDAAA;AAG5B,MAAI6B,UAAUQ,YAAY;AACtBR,aAAUS,sBAAsBT,UAAUQ,WAAWE;AAErD,OAAI,CAACV,UAAUW,QAAQX,UAAUW,KAAKvB,SAASd,gBAC3C,OAAMW,MAAMC,oBAAoBY,YAAY;IACxCV,MAAMY,UAAUQ,WAAWpB;IAC3BwB,SAASZ,UAAUQ,WAAWE;IAC9BG,UAAUb,UAAUQ,WAAWM;IACnC,CAAA;;AAIR,MAAId,UAAUW,KACVX,WAAUe,gBAAgBf,UAAUW,KAAKD;AAG7C,MACIV,UAAUQ,cACVvB,MAAM+B,YACN,OAAOhB,UAAUiB,cAAc,aACjC;GACE,MAAMC,iBAAiB,MAAM,KAAKtC,2BAA2BuC,sBACzD;IACIC,MAAMnC,MAAM+B,SAASI;IACrB3B,IAAIR,MAAM+B,SAASnB,KAAKJ;IAC5B,EACA;IACIL,MAAMY,UAAUQ,WAAWpB;IAC3BwB,SAASZ,UAAUQ,WAAWE;IAC9BG,UAAUb,UAAUQ,WAAWM;IACnC,CAAA;AAEJ,OAAII,eACAlB,WAAUiB,YAAYC,eAAezB;;AAI7C,QAAMR,MAAMC,oBAAoBmC,SAAS;GACrCjC,MAAMf,eAAe0B;GACrBuB,OAAO,IAAIpD,WAAW,GAAGD,kBAAkBsD,aAAavB,WAAU,CAAA;GACtE,CAAA;EAEA,IAAIN,SAAS,KAAKf,WAAWiB,OAAOI,UAAAA;AACpCN,WAAS,MAAM,KAAKf,WAAW6C,KAAK9B,OAAAA;AAEpC,SAAOA;;CAGX,MAAM+B,OACFhC,IACAI,MACAZ,OACuB;AACvB,QAAMA,MAAMC,oBAAoBY,YAAY,EAAEV,MAAMf,eAAeqD,wBAAuB,CAAA;EAE1F,MAAMhC,SAAS,MAAM,KAAKf,WAAWgB,UAAU,EAAEF,IAAG,CAAA;AACpD,MAAI,CAACC,OACD,OAAM,IAAItB,eAAAA;EAGd,MAAMuD,aAAkC,EAAC;AACzC,MAAIC,OAAOC,UAAUC,eAAeC,KAAKlC,MAAM,YAAA,CAC3C8B,YAAWV,YAAYpB,KAAKoB;AAGhC,QAAM,KAAKtC,WAAWyB,oBAAoBuB,WAAAA;EAE1C,MAAMK,SAAS,KAAKrD,WAAWsD,MAAMvC,QAAQiC,WAAAA;AAE7C,QAAM1C,MAAMC,oBAAoBmC,SAAS;GACrCjC,MAAMf,eAAeqD;GACrBJ,OAAO,IAAIpD,WAAW,GAAGD,kBAAkBsD,aAAaS,QAAO,CAAA;GACnE,CAAA;AAEA,SAAO,KAAKrD,WAAW6C,KAAKQ,OAAAA;;CAGhC,MAAME,OACFzC,IACAR,OACuB;AACvB,QAAMA,MAAMC,oBAAoBY,YAAY,EAAEV,MAAMf,eAAegB,wBAAuB,CAAA;EAE1F,MAAMK,SAAS,MAAM,KAAKf,WAAWgB,UAAU,EAAEF,IAAG,CAAA;AACpD,MAAI,CAACC,OACD,OAAM,IAAItB,eAAAA;AAGd,QAAMa,MAAMC,oBAAoBmC,SAAS;GACrCjC,MAAMf,eAAegB;GACrBiC,OAAO,IAAIpD,WAAW,GAAGD,kBAAkBsD,aAAa7B,QAAO,CAAA;GACnE,CAAA;EAEA,MAAM,EAAED,IAAI0C,aAAazC;AACzB,QAAM,KAAKf,WAAWyD,OAAO1C,OAAAA;AAC7BA,SAAOD,KAAK0C;AAEZ,SAAOzC"}

package/dist/core/entities/role-permission/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/entities/scope/index.mjs

@@ -0,0 +1,2 @@
+import { ScopeService } from "./service.mjs";
+export { ScopeService };

package/dist/core/entities/scope/service.mjs

@@ -0,0 +1,110 @@
+import { AbstractEntityService } from "../service.mjs";
+import { PermissionName, ScopeValidator, ValidatorGroup } from "@authup/core-kit";
+import { BuiltInPolicyType, PolicyData } from "@authup/access";
+import { isPropertySet, isUUID } from "@authup/kit";
+import { NotFoundError } from "@ebec/http";
+//#region src/core/entities/scope/service.ts
+var ScopeService = class extends AbstractEntityService {
+	repository;
+	realmRepository;
+	validator;
+	constructor(ctx) {
+		super();
+		this.repository = ctx.repository;
+		this.realmRepository = ctx.realmRepository;
+		this.validator = new ScopeValidator();
+	}
+	async getMany(query, actor) {
+		await actor.permissionEvaluator.preEvaluateOneOf({ name: [
+			PermissionName.SCOPE_READ,
+			PermissionName.SCOPE_UPDATE,
+			PermissionName.SCOPE_DELETE
+		] });
+		return this.repository.findMany(query);
+	}
+	async getOne(idOrName, actor) {
+		await actor.permissionEvaluator.preEvaluateOneOf({ name: [
+			PermissionName.SCOPE_READ,
+			PermissionName.SCOPE_UPDATE,
+			PermissionName.SCOPE_DELETE
+		] });
+		const entity = await this.repository.findOneByIdOrName(idOrName);
+		if (!entity) throw new NotFoundError();
+		return entity;
+	}
+	async create(data, actor) {
+		const { entity } = await this.save(void 0, data, actor);
+		return entity;
+	}
+	async update(idOrName, data, actor) {
+		const { entity } = await this.save(idOrName, data, actor, { updateOnly: true });
+		return entity;
+	}
+	async save(idOrName, data, actor, options = {}) {
+		let group;
+		const realm = typeof data.realm_id === "string" ? await this.realmRepository.resolve(data.realm_id) : void 0;
+		let entity;
+		if (idOrName) {
+			const where = {};
+			if (isUUID(idOrName)) where.id = idOrName;
+			else where.name = idOrName;
+			if (realm) where.realm_id = realm.id;
+			entity = await this.repository.findOneBy(where);
+			if (!entity && options.updateOnly) throw new NotFoundError();
+		} else if (options.updateOnly) throw new NotFoundError();
+		if (entity) {
+			await actor.permissionEvaluator.preEvaluate({ name: PermissionName.SCOPE_UPDATE });
+			group = ValidatorGroup.UPDATE;
+		} else {
+			await actor.permissionEvaluator.preEvaluate({ name: PermissionName.SCOPE_CREATE });
+			group = ValidatorGroup.CREATE;
+		}
+		const validated = await this.validator.run(data, { group });
+		await this.repository.validateJoinColumns(validated);
+		if (entity) {
+			await actor.permissionEvaluator.evaluate({
+				name: PermissionName.SCOPE_UPDATE,
+				input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: {
+					...entity,
+					...validated
+				} })
+			});
+			await this.repository.checkUniqueness(validated, entity);
+			entity = this.repository.merge(entity, validated);
+			await this.repository.save(entity);
+			return {
+				entity,
+				created: false
+			};
+		}
+		if (!isPropertySet(validated, "realm_id") && actor.identity) validated.realm_id = this.getActorRealmId(actor) || null;
+		await actor.permissionEvaluator.evaluate({
+			name: PermissionName.SCOPE_CREATE,
+			input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: validated })
+		});
+		await this.repository.checkUniqueness(validated);
+		entity = this.repository.create(validated);
+		await this.repository.save(entity);
+		return {
+			entity,
+			created: true
+		};
+	}
+	async delete(id, actor) {
+		await actor.permissionEvaluator.preEvaluate({ name: PermissionName.SCOPE_DELETE });
+		const entity = await this.repository.findOneBy({ id });
+		if (!entity) throw new NotFoundError();
+		await actor.permissionEvaluator.evaluate({
+			name: PermissionName.SCOPE_DELETE,
+			input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity })
+		});
+		const { id: entityId } = entity;
+		await this.repository.remove(entity);
+		entity.id = entityId;
+		return entity;
+	}
+};
+//#endregion
+export { ScopeService };
+
+//# sourceMappingURL=service.mjs.map

package/dist/core/entities/scope/service.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.mjs","names":["BuiltInPolicyType","PolicyData","isPropertySet","isUUID","NotFoundError","PermissionName","ScopeValidator","ValidatorGroup","AbstractEntityService","ScopeService","repository","realmRepository","validator","ctx","getMany","query","actor","permissionEvaluator","preEvaluateOneOf","name","SCOPE_READ","SCOPE_UPDATE","SCOPE_DELETE","findMany","getOne","idOrName","entity","findOneByIdOrName","create","data","save","undefined","update","updateOnly","options","group","realm","realm_id","resolve","where","id","findOneBy","preEvaluate","UPDATE","SCOPE_CREATE","CREATE","validated","run","validateJoinColumns","evaluate","input","ATTRIBUTES","checkUniqueness","merge","created","identity","getActorRealmId","delete","entityId","remove"],"sources":["../../../../src/core/entities/scope/service.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { BuiltInPolicyType, PolicyData } from '@authup/access';\nimport { isPropertySet, isUUID } from '@authup/kit';\nimport { NotFoundError } from '@ebec/http';\nimport {\n    PermissionName,\n    ScopeValidator,\n    ValidatorGroup,\n} from '@authup/core-kit';\nimport type { Scope } from '@authup/core-kit';\nimport type { ActorContext } from '../actor/types.ts';\nimport type { IRealmRepository } from '../realm/types.ts';\nimport { AbstractEntityService } from '../service.ts';\nimport type { EntityRepositoryFindManyResult } from '../types.ts';\nimport type { IScopeRepository, IScopeService } from './types.ts';\n\nexport type ScopeServiceContext = {\n    repository: IScopeRepository;\n    realmRepository: IRealmRepository;\n};\n\nexport class ScopeService extends AbstractEntityService implements IScopeService {\n    protected repository: IScopeRepository;\n\n    protected realmRepository: IRealmRepository;\n\n    protected validator: ScopeValidator;\n\n    constructor(ctx: ScopeServiceContext) {\n        super();\n        this.repository = ctx.repository;\n        this.realmRepository = ctx.realmRepository;\n        this.validator = new ScopeValidator();\n    }\n\n    async getMany(\n        query: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<EntityRepositoryFindManyResult<Scope>> {\n        await actor.permissionEvaluator.preEvaluateOneOf({\n            name: [\n                PermissionName.SCOPE_READ,\n                PermissionName.SCOPE_UPDATE,\n                PermissionName.SCOPE_DELETE,\n            ],\n        });\n\n        return this.repository.findMany(query);\n    }\n\n    async getOne(\n        idOrName: string,\n        actor: ActorContext,\n    ): Promise<Scope> {\n        await actor.permissionEvaluator.preEvaluateOneOf({\n            name: [\n                PermissionName.SCOPE_READ,\n                PermissionName.SCOPE_UPDATE,\n                PermissionName.SCOPE_DELETE,\n            ],\n        });\n\n        const entity = await this.repository.findOneByIdOrName(idOrName);\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        return entity;\n    }\n\n    async create(\n        data: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<Scope> {\n        const { entity } = await this.save(undefined, data, actor);\n        return entity;\n    }\n\n    async update(\n        idOrName: string,\n        data: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<Scope> {\n        const { entity } = await this.save(idOrName, data, actor, { updateOnly: true });\n        return entity;\n    }\n\n    async save(\n        idOrName: string | undefined,\n        data: Record<string, any>,\n        actor: ActorContext,\n        options: { updateOnly?: boolean } = {},\n    ): Promise<{\n        entity: Scope,\n        created: boolean \n    }> {\n        let group: string;\n\n        const realm = typeof data.realm_id === 'string' ?\n            await this.realmRepository.resolve(data.realm_id) :\n            undefined;\n\n        let entity: Scope | null | undefined;\n        if (idOrName) {\n            const where: Record<string, any> = {};\n            if (isUUID(idOrName)) {\n                where.id = idOrName;\n            } else {\n                where.name = idOrName;\n            }\n\n            if (realm) {\n                where.realm_id = realm.id;\n            }\n\n            entity = await this.repository.findOneBy(where);\n            if (!entity && options.updateOnly) {\n                throw new NotFoundError();\n            }\n        } else if (options.updateOnly) {\n            throw new NotFoundError();\n        }\n\n        if (entity) {\n            await actor.permissionEvaluator.preEvaluate({ name: PermissionName.SCOPE_UPDATE });\n            group = ValidatorGroup.UPDATE;\n        } else {\n            await actor.permissionEvaluator.preEvaluate({ name: PermissionName.SCOPE_CREATE });\n            group = ValidatorGroup.CREATE;\n        }\n\n        const validated = await this.validator.run(data, { group });\n\n        await this.repository.validateJoinColumns(validated);\n\n        if (entity) {\n            await actor.permissionEvaluator.evaluate({\n                name: PermissionName.SCOPE_UPDATE,\n                input: new PolicyData({\n                    [BuiltInPolicyType.ATTRIBUTES]: {\n                        ...entity,\n                        ...validated,\n                    },\n                }),\n            });\n\n            await this.repository.checkUniqueness(validated, entity);\n\n            entity = this.repository.merge(entity, validated);\n            await this.repository.save(entity);\n\n            return {\n                entity,\n                created: false, \n            };\n        }\n\n        if (!isPropertySet(validated, 'realm_id') && actor.identity) {\n            validated.realm_id = this.getActorRealmId(actor) || null;\n        }\n\n        await actor.permissionEvaluator.evaluate({\n            name: PermissionName.SCOPE_CREATE,\n            input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: validated }),\n        });\n\n        await this.repository.checkUniqueness(validated);\n\n        entity = this.repository.create(validated);\n        await this.repository.save(entity);\n\n        return {\n            entity,\n            created: true, \n        };\n    }\n\n    async delete(\n        id: string,\n        actor: ActorContext,\n    ): Promise<Scope> {\n        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.SCOPE_DELETE });\n\n        const entity = await this.repository.findOneBy({ id });\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        await actor.permissionEvaluator.evaluate({\n            name: PermissionName.SCOPE_DELETE,\n            input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity }),\n        });\n\n        const { id: entityId } = entity;\n        await this.repository.remove(entity);\n        entity.id = entityId;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;AA2BA,IAAaS,eAAb,cAAkCD,sBAAAA;CACpBE;CAEAC;CAEAC;CAEV,YAAYC,KAA0B;AAClC,SAAK;AACL,OAAKH,aAAaG,IAAIH;AACtB,OAAKC,kBAAkBE,IAAIF;AAC3B,OAAKC,YAAY,IAAIN,gBAAAA;;CAGzB,MAAMQ,QACFC,OACAC,OAC8C;AAC9C,QAAMA,MAAMC,oBAAoBC,iBAAiB,EAC7CC,MAAM;GACFd,eAAee;GACff,eAAegB;GACfhB,eAAeiB;GAClB,EACL,CAAA;AAEA,SAAO,KAAKZ,WAAWa,SAASR,MAAAA;;CAGpC,MAAMS,OACFC,UACAT,OACc;AACd,QAAMA,MAAMC,oBAAoBC,iBAAiB,EAC7CC,MAAM;GACFd,eAAee;GACff,eAAegB;GACfhB,eAAeiB;GAClB,EACL,CAAA;EAEA,MAAMI,SAAS,MAAM,KAAKhB,WAAWiB,kBAAkBF,SAAAA;AACvD,MAAI,CAACC,OACD,OAAM,IAAItB,eAAAA;AAGd,SAAOsB;;CAGX,MAAME,OACFC,MACAb,OACc;EACd,MAAM,EAAEU,WAAW,MAAM,KAAKI,KAAKC,KAAAA,GAAWF,MAAMb,MAAAA;AACpD,SAAOU;;CAGX,MAAMM,OACFP,UACAI,MACAb,OACc;EACd,MAAM,EAAEU,WAAW,MAAM,KAAKI,KAAKL,UAAUI,MAAMb,OAAO,EAAEiB,YAAY,MAAK,CAAA;AAC7E,SAAOP;;CAGX,MAAMI,KACFL,UACAI,MACAb,OACAkB,UAAoC,EAAE,EAIvC;EACC,IAAIC;EAEJ,MAAMC,QAAQ,OAAOP,KAAKQ,aAAa,WACnC,MAAM,KAAK1B,gBAAgB2B,QAAQT,KAAKQ,SAAQ,GAChDN,KAAAA;EAEJ,IAAIL;AACJ,MAAID,UAAU;GACV,MAAMc,QAA6B,EAAC;AACpC,OAAIpC,OAAOsB,SAAAA,CACPc,OAAMC,KAAKf;OAEXc,OAAMpB,OAAOM;AAGjB,OAAIW,MACAG,OAAMF,WAAWD,MAAMI;AAG3Bd,YAAS,MAAM,KAAKhB,WAAW+B,UAAUF,MAAAA;AACzC,OAAI,CAACb,UAAUQ,QAAQD,WACnB,OAAM,IAAI7B,eAAAA;aAEP8B,QAAQD,WACf,OAAM,IAAI7B,eAAAA;AAGd,MAAIsB,QAAQ;AACR,SAAMV,MAAMC,oBAAoByB,YAAY,EAAEvB,MAAMd,eAAegB,cAAa,CAAA;AAChFc,WAAQ5B,eAAeoC;SACpB;AACH,SAAM3B,MAAMC,oBAAoByB,YAAY,EAAEvB,MAAMd,eAAeuC,cAAa,CAAA;AAChFT,WAAQ5B,eAAesC;;EAG3B,MAAMC,YAAY,MAAM,KAAKlC,UAAUmC,IAAIlB,MAAM,EAAEM,OAAM,CAAA;AAEzD,QAAM,KAAKzB,WAAWsC,oBAAoBF,UAAAA;AAE1C,MAAIpB,QAAQ;AACR,SAAMV,MAAMC,oBAAoBgC,SAAS;IACrC9B,MAAMd,eAAegB;IACrB6B,OAAO,IAAIjD,WAAW,GACjBD,kBAAkBmD,aAAa;KAC5B,GAAGzB;KACH,GAAGoB;KACP,EACJ,CAAA;IACJ,CAAA;AAEA,SAAM,KAAKpC,WAAW0C,gBAAgBN,WAAWpB,OAAAA;AAEjDA,YAAS,KAAKhB,WAAW2C,MAAM3B,QAAQoB,UAAAA;AACvC,SAAM,KAAKpC,WAAWoB,KAAKJ,OAAAA;AAE3B,UAAO;IACHA;IACA4B,SAAS;IACb;;AAGJ,MAAI,CAACpD,cAAc4C,WAAW,WAAA,IAAe9B,MAAMuC,SAC/CT,WAAUT,WAAW,KAAKmB,gBAAgBxC,MAAAA,IAAU;AAGxD,QAAMA,MAAMC,oBAAoBgC,SAAS;GACrC9B,MAAMd,eAAeuC;GACrBM,OAAO,IAAIjD,WAAW,GAAGD,kBAAkBmD,aAAaL,WAAU,CAAA;GACtE,CAAA;AAEA,QAAM,KAAKpC,WAAW0C,gBAAgBN,UAAAA;AAEtCpB,WAAS,KAAKhB,WAAWkB,OAAOkB,UAAAA;AAChC,QAAM,KAAKpC,WAAWoB,KAAKJ,OAAAA;AAE3B,SAAO;GACHA;GACA4B,SAAS;GACb;;CAGJ,MAAMG,OACFjB,IACAxB,OACc;AACd,QAAMA,MAAMC,oBAAoByB,YAAY,EAAEvB,MAAMd,eAAeiB,cAAa,CAAA;EAEhF,MAAMI,SAAS,MAAM,KAAKhB,WAAW+B,UAAU,EAAED,IAAG,CAAA;AACpD,MAAI,CAACd,OACD,OAAM,IAAItB,eAAAA;AAGd,QAAMY,MAAMC,oBAAoBgC,SAAS;GACrC9B,MAAMd,eAAeiB;GACrB4B,OAAO,IAAIjD,WAAW,GAAGD,kBAAkBmD,aAAazB,QAAO,CAAA;GACnE,CAAA;EAEA,MAAM,EAAEc,IAAIkB,aAAahC;AACzB,QAAM,KAAKhB,WAAWiD,OAAOjC,OAAAA;AAC7BA,SAAOc,KAAKkB;AAEZ,SAAOhC"}

package/dist/core/entities/scope/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/entities/service.mjs

@@ -0,0 +1,21 @@
+import { REALM_MASTER_NAME } from "@authup/core-kit";
+import { isObject } from "@authup/kit";
+//#region src/core/entities/service.ts
+var AbstractEntityService = class {
+	isActorMasterRealmMember(actor) {
+		if (!actor.identity) return false;
+		const { data } = actor.identity;
+		if ("realm" in data && data.realm && typeof data.realm === "object" && "name" in data.realm) return data.realm.name === REALM_MASTER_NAME;
+		return false;
+	}
+	getActorRealmId(actor) {
+		if (!actor.identity) return;
+		const { data } = actor.identity;
+		if (data.realm_id) return data.realm_id;
+		if ("realm" in data && isObject(data.realm) && "id" in data.realm) return data.realm.id;
+	}
+};
+//#endregion
+export { AbstractEntityService };
+
+//# sourceMappingURL=service.mjs.map

package/dist/core/entities/service.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.mjs","names":["REALM_MASTER_NAME","isObject","AbstractEntityService","isActorMasterRealmMember","actor","identity","data","realm","name","getActorRealmId","undefined","realm_id","id"],"sources":["../../../src/core/entities/service.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { REALM_MASTER_NAME } from '@authup/core-kit';\nimport { isObject } from '@authup/kit';\nimport type { ActorContext } from './actor/types.ts';\n\nexport abstract class AbstractEntityService {\n    protected isActorMasterRealmMember(actor: ActorContext): boolean {\n        if (!actor.identity) {\n            return false;\n        }\n\n        const { data } = actor.identity;\n        if ('realm' in data && data.realm && typeof data.realm === 'object' && 'name' in data.realm) {\n            return data.realm.name === REALM_MASTER_NAME;\n        }\n\n        return false;\n    }\n\n    protected getActorRealmId(actor: ActorContext): string | undefined {\n        if (!actor.identity) {\n            return undefined;\n        }\n\n        const { data } = actor.identity;\n        if (data.realm_id) {\n            return data.realm_id;\n        }\n\n        if ('realm' in data && isObject(data.realm) && 'id' in data.realm) {\n            return data.realm.id;\n        }\n\n        return undefined;\n    }\n}\n"],"mappings":";;;AAWA,IAAsBE,wBAAtB,MAAsBA;CACRC,yBAAyBC,OAA8B;AAC7D,MAAI,CAACA,MAAMC,SACP,QAAO;EAGX,MAAM,EAAEC,SAASF,MAAMC;AACvB,MAAI,WAAWC,QAAQA,KAAKC,SAAS,OAAOD,KAAKC,UAAU,YAAY,UAAUD,KAAKC,MAClF,QAAOD,KAAKC,MAAMC,SAASR;AAG/B,SAAO;;CAGDS,gBAAgBL,OAAyC;AAC/D,MAAI,CAACA,MAAMC,SACP;EAGJ,MAAM,EAAEC,SAASF,MAAMC;AACvB,MAAIC,KAAKK,SACL,QAAOL,KAAKK;AAGhB,MAAI,WAAWL,QAAQL,SAASK,KAAKC,MAAK,IAAK,QAAQD,KAAKC,MACxD,QAAOD,KAAKC,MAAMK"}

package/dist/core/entities/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/entities/user/index.mjs

@@ -0,0 +1,2 @@
+import { UserService } from "./service.mjs";
+export { UserService };