@authup/server-core 1.0.0-beta.35 → 1.0.0-beta.37

package/dist/core/provisioning/entities/root/validator.mjs

@@ -0,0 +1,53 @@
+import { ProvisioningStrategyValidator } from "../../strategy/validator.mjs";
+import "../../strategy/index.mjs";
+import { PermissionProvisioningValidator } from "../permission/validator.mjs";
+import "../permission/index.mjs";
+import { RoleProvisioningValidator } from "../role/validator.mjs";
+import "../role/index.mjs";
+import { ScopeProvisioningValidator } from "../scope/validator.mjs";
+import "../scope/index.mjs";
+import { RealmProvisioningValidator } from "../realm/validator.mjs";
+import "../realm/index.mjs";
+import { Container, isValidupError } from "validup";
+import { buildZodIssuesForError, createValidator } from "@validup/adapter-zod";
+import { z } from "zod";
+//#region src/core/provisioning/entities/root/validator.ts
+var RootProvisioningValidator = class extends Container {
+	initialize() {
+		super.initialize();
+		const strategyValidator = new ProvisioningStrategyValidator();
+		this.mount("strategy", { optional: true }, strategyValidator);
+		const realmValidator = new RealmProvisioningValidator();
+		this.mount("realms", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
+			for (let i = 0; i < ctx.value.length; i++) await realmValidator.run(ctx.value[i]);
+		})));
+		const roleValidator = new RoleProvisioningValidator();
+		this.mount("roles", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
+			try {
+				for (let i = 0; i < ctx.value.length; i++) await roleValidator.run(ctx.value[i]);
+			} catch (e) {
+				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
+			}
+		})));
+		const scopeValidator = new ScopeProvisioningValidator();
+		this.mount("scopes", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
+			try {
+				for (let i = 0; i < ctx.value.length; i++) await scopeValidator.run(ctx.value[i]);
+			} catch (e) {
+				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
+			}
+		})));
+		const permissionValidator = new PermissionProvisioningValidator();
+		this.mount("permissions", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
+			try {
+				for (let i = 0; i < ctx.value.length; i++) await permissionValidator.run(ctx.value[i]);
+			} catch (e) {
+				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
+			}
+		})));
+	}
+};
+//#endregion
+export { RootProvisioningValidator };
+
+//# sourceMappingURL=validator.mjs.map

package/dist/core/provisioning/entities/root/validator.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.mjs","names":["buildZodIssuesForError","createValidator","Container","isValidupError","z","ProvisioningStrategyValidator","PermissionProvisioningValidator","RealmProvisioningValidator","RoleProvisioningValidator","ScopeProvisioningValidator","RootProvisioningValidator","initialize","strategyValidator","mount","optional","realmValidator","array","any","check","ctx","i","value","length","run","roleValidator","e","issues","push","scopeValidator","permissionValidator"],"sources":["../../../../../src/core/provisioning/entities/root/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { buildZodIssuesForError, createValidator } from '@validup/adapter-zod';\nimport { Container, isValidupError } from 'validup';\nimport { z } from 'zod';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\nimport { PermissionProvisioningValidator } from '../permission/index.ts';\nimport { RealmProvisioningValidator } from '../realm/index.ts';\nimport { RoleProvisioningValidator } from '../role/index.ts';\nimport { ScopeProvisioningValidator } from '../scope/index.ts';\n\nimport type { RootProvisioningEntity } from './types.ts';\n\nexport class RootProvisioningValidator extends Container<RootProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const realmValidator = new RealmProvisioningValidator();\n        this.mount('realms', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    for (let i = 0; i < ctx.value.length; i++) {\n                        await realmValidator.run(ctx.value[i]);\n                    }\n                }),\n        ));\n\n        const roleValidator = new RoleProvisioningValidator();\n        this.mount('roles', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await roleValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        const scopeValidator = new ScopeProvisioningValidator();\n        this.mount('scopes', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await scopeValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        const permissionValidator = new PermissionProvisioningValidator();\n        this.mount('permissions', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await permissionValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;AAkBA,IAAaU,4BAAb,cAA+CR,UAAAA;CACjCS,aAAa;AACnB,QAAMA,YAAAA;EAEN,MAAMC,oBAAoB,IAAIP,+BAAAA;AAC9B,OAAKQ,MAAM,YAAY,EAAEC,UAAU,MAAK,EAAGF,kBAAAA;EAE3C,MAAMG,iBAAiB,IAAIR,4BAAAA;AAC3B,OAAKM,MAAM,UAAU,EAAEC,UAAU,MAAK,EAAGb,gBACrCG,EACKY,MAAMZ,EAAEa,KAAG,CAAA,CACXC,MAAM,OAAOC,QAAAA;AACV,QAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,IAClC,OAAML,eAAeQ,IAAIJ,IAAIE,MAAMD,GAAE;IAE7C,CAAA,CAAA;EAGR,MAAMI,gBAAgB,IAAIhB,2BAAAA;AAC1B,OAAKK,MAAM,SAAS,EAAEC,UAAU,MAAK,EAAGb,gBACpCG,EACKY,MAAMZ,EAAEa,KAAG,CAAA,CACXC,MAAM,OAAOC,QAAAA;AACV,OAAI;AACA,SAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,IAClC,OAAMI,cAAcD,IAAIJ,IAAIE,MAAMD,GAAE;YAEnCK,GAAG;AACR,QAAItB,eAAesB,EAAAA,CACfN,KAAIO,OAAOC,KAAI,GAAI3B,uBAAuByB,EAAAA,CAAAA;;IAGtD,CAAA,CAAA;EAGR,MAAMG,iBAAiB,IAAInB,4BAAAA;AAC3B,OAAKI,MAAM,UAAU,EAAEC,UAAU,MAAK,EAAGb,gBACrCG,EACKY,MAAMZ,EAAEa,KAAG,CAAA,CACXC,MAAM,OAAOC,QAAAA;AACV,OAAI;AACA,SAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,IAClC,OAAMQ,eAAeL,IAAIJ,IAAIE,MAAMD,GAAE;YAEpCK,GAAG;AACR,QAAItB,eAAesB,EAAAA,CACfN,KAAIO,OAAOC,KAAI,GAAI3B,uBAAuByB,EAAAA,CAAAA;;IAGtD,CAAA,CAAA;EAGR,MAAMI,sBAAsB,IAAIvB,iCAAAA;AAChC,OAAKO,MAAM,eAAe,EAAEC,UAAU,MAAK,EAAGb,gBAC1CG,EACKY,MAAMZ,EAAEa,KAAG,CAAA,CACXC,MAAM,OAAOC,QAAAA;AACV,OAAI;AACA,SAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,IAClC,OAAMS,oBAAoBN,IAAIJ,IAAIE,MAAMD,GAAE;YAEzCK,GAAG;AACR,QAAItB,eAAesB,EAAAA,CACfN,KAAIO,OAAOC,KAAI,GAAI3B,uBAAuByB,EAAAA,CAAAA;;IAGtD,CAAA,CAAA"}

package/dist/core/provisioning/entities/scope/index.mjs

@@ -0,0 +1,2 @@
+import { ScopeProvisioningValidator } from "./validator.mjs";
+export { ScopeProvisioningValidator };

package/dist/core/provisioning/entities/scope/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/provisioning/entities/scope/validator.mjs

@@ -0,0 +1,18 @@
+import { ProvisioningStrategyValidator } from "../../strategy/validator.mjs";
+import "../../strategy/index.mjs";
+import { ScopeValidator } from "@authup/core-kit";
+import { Container } from "validup";
+//#region src/core/provisioning/entities/scope/validator.ts
+var ScopeProvisioningValidator = class extends Container {
+	initialize() {
+		super.initialize();
+		const strategyValidator = new ProvisioningStrategyValidator();
+		this.mount("strategy", { optional: true }, strategyValidator);
+		const attributesValidator = new ScopeValidator();
+		this.mount("attributes", attributesValidator);
+	}
+};
+//#endregion
+export { ScopeProvisioningValidator };
+
+//# sourceMappingURL=validator.mjs.map

package/dist/core/provisioning/entities/scope/validator.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.mjs","names":["ScopeValidator","Container","ProvisioningStrategyValidator","ScopeProvisioningValidator","initialize","strategyValidator","mount","optional","attributesValidator"],"sources":["../../../../../src/core/provisioning/entities/scope/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ScopeValidator } from '@authup/core-kit';\nimport { Container } from 'validup';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\n\nimport type { ScopeProvisioningEntity } from './types.ts';\n\nexport class ScopeProvisioningValidator extends Container<ScopeProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const attributesValidator = new ScopeValidator();\n        this.mount('attributes', attributesValidator);\n    }\n}\n"],"mappings":";;;;;AAaA,IAAaG,6BAAb,cAAgDF,UAAAA;CAClCG,aAAa;AACnB,QAAMA,YAAAA;EAEN,MAAMC,oBAAoB,IAAIH,+BAAAA;AAC9B,OAAKI,MAAM,YAAY,EAAEC,UAAU,MAAK,EAAGF,kBAAAA;EAE3C,MAAMG,sBAAsB,IAAIR,gBAAAA;AAChC,OAAKM,MAAM,cAAcE,oBAAAA"}

package/dist/core/provisioning/entities/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/provisioning/entities/user/index.mjs

@@ -0,0 +1,2 @@
+import { UserProvisioningValidator } from "./validator.mjs";
+export { UserProvisioningValidator };

package/dist/core/provisioning/entities/user/relations-validator.mjs

@@ -0,0 +1,19 @@
+import { Container } from "validup";
+import { createValidator } from "@validup/adapter-zod";
+import { z } from "zod";
+//#region src/core/provisioning/entities/user/relations-validator.ts
+var UserProvisioningRelationsValidator = class extends Container {
+	initialize() {
+		super.initialize();
+		this.mount("clientPermissions", { optional: true }, createValidator(z.record(z.string(), z.array(z.string()))));
+		this.mount("realmPermissions", { optional: true }, createValidator(z.array(z.string())));
+		this.mount("globalPermissions", { optional: true }, createValidator(z.array(z.string())));
+		this.mount("clientRoles", { optional: true }, createValidator(z.record(z.string(), z.array(z.string()))));
+		this.mount("realmRoles", { optional: true }, createValidator(z.array(z.string())));
+		this.mount("globalRoles", { optional: true }, createValidator(z.array(z.string())));
+	}
+};
+//#endregion
+export { UserProvisioningRelationsValidator };
+
+//# sourceMappingURL=relations-validator.mjs.map

package/dist/core/provisioning/entities/user/relations-validator.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"relations-validator.mjs","names":["createValidator","Container","z","UserProvisioningRelationsValidator","initialize","mount","optional","record","string","array"],"sources":["../../../../../src/core/provisioning/entities/user/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { UserProvisioningRelations } from './types.ts';\n\nexport class UserProvisioningRelationsValidator extends Container<UserProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount('clientPermissions', { optional: true }, createValidator(\n            z.record(z.string(), z.array(z.string())),\n        ));\n\n        this.mount('realmPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('clientRoles', { optional: true }, createValidator(\n            z.record(z.string(), z.array(z.string())),\n        ));\n\n        this.mount('realmRoles', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalRoles', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n    }\n}\n"],"mappings":";;;;AAYA,IAAaG,qCAAb,cAAwDF,UAAAA;CAC1CG,aAAa;AACnB,QAAMA,YAAAA;AAEN,OAAKC,MAAM,qBAAqB,EAAEC,UAAU,MAAK,EAAGN,gBAChDE,EAAEK,OAAOL,EAAEM,QAAM,EAAIN,EAAEO,MAAMP,EAAEM,QAAM,CAAA,CAAA,CAAA,CAAA;AAGzC,OAAKH,MAAM,oBAAoB,EAAEC,UAAU,MAAK,EAAGN,gBAC/CE,EAAEO,MAAMP,EAAEM,QAAM,CAAA,CAAA,CAAA;AAGpB,OAAKH,MAAM,qBAAqB,EAAEC,UAAU,MAAK,EAAGN,gBAChDE,EAAEO,MAAMP,EAAEM,QAAM,CAAA,CAAA,CAAA;AAGpB,OAAKH,MAAM,eAAe,EAAEC,UAAU,MAAK,EAAGN,gBAC1CE,EAAEK,OAAOL,EAAEM,QAAM,EAAIN,EAAEO,MAAMP,EAAEM,QAAM,CAAA,CAAA,CAAA,CAAA;AAGzC,OAAKH,MAAM,cAAc,EAAEC,UAAU,MAAK,EAAGN,gBACzCE,EAAEO,MAAMP,EAAEM,QAAM,CAAA,CAAA,CAAA;AAGpB,OAAKH,MAAM,eAAe,EAAEC,UAAU,MAAK,EAAGN,gBAC1CE,EAAEO,MAAMP,EAAEM,QAAM,CAAA,CAAA,CAAA"}

package/dist/core/provisioning/entities/user/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/provisioning/entities/user/validator.mjs

@@ -0,0 +1,21 @@
+import { ProvisioningStrategyValidator } from "../../strategy/validator.mjs";
+import "../../strategy/index.mjs";
+import { UserProvisioningRelationsValidator } from "./relations-validator.mjs";
+import { UserValidator } from "@authup/core-kit";
+import { Container } from "validup";
+//#region src/core/provisioning/entities/user/validator.ts
+var UserProvisioningValidator = class extends Container {
+	initialize() {
+		super.initialize();
+		const strategyValidator = new ProvisioningStrategyValidator();
+		this.mount("strategy", { optional: true }, strategyValidator);
+		const attributesValidator = new UserValidator();
+		this.mount("attributes", attributesValidator);
+		const relationsValidator = new UserProvisioningRelationsValidator();
+		this.mount("relations", { optional: true }, relationsValidator);
+	}
+};
+//#endregion
+export { UserProvisioningValidator };
+
+//# sourceMappingURL=validator.mjs.map

package/dist/core/provisioning/entities/user/validator.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.mjs","names":["UserValidator","Container","ProvisioningStrategyValidator","UserProvisioningRelationsValidator","UserProvisioningValidator","initialize","strategyValidator","mount","optional","attributesValidator","relationsValidator"],"sources":["../../../../../src/core/provisioning/entities/user/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { UserValidator } from '@authup/core-kit';\nimport { Container } from 'validup';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\nimport { UserProvisioningRelationsValidator } from './relations-validator.ts';\nimport type { UserProvisioningEntity } from './types.ts';\n\nexport class UserProvisioningValidator extends Container<UserProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const attributesValidator = new UserValidator();\n        this.mount('attributes', attributesValidator);\n\n        const relationsValidator = new UserProvisioningRelationsValidator();\n        this.mount('relations', { optional: true }, relationsValidator);\n    }\n}\n"],"mappings":";;;;;;AAaA,IAAaI,4BAAb,cAA+CH,UAAAA;CACjCI,aAAa;AACnB,QAAMA,YAAAA;EAEN,MAAMC,oBAAoB,IAAIJ,+BAAAA;AAC9B,OAAKK,MAAM,YAAY,EAAEC,UAAU,MAAK,EAAGF,kBAAAA;EAE3C,MAAMG,sBAAsB,IAAIT,eAAAA;AAChC,OAAKO,MAAM,cAAcE,oBAAAA;EAEzB,MAAMC,qBAAqB,IAAIP,oCAAAA;AAC/B,OAAKI,MAAM,aAAa,EAAEC,UAAU,MAAK,EAAGE,mBAAAA"}

package/dist/core/provisioning/index.mjs

@@ -0,0 +1,26 @@
+import { ProvisioningEntityStrategyType } from "./strategy/constants.mjs";
+import { normalizeEntityProvisioningStrategy } from "./strategy/normalize.mjs";
+import { ProvisioningStrategyValidator } from "./strategy/validator.mjs";
+import "./strategy/index.mjs";
+import { PermissionProvisioningValidator } from "./entities/permission/validator.mjs";
+import { RoleProvisioningValidator } from "./entities/role/validator.mjs";
+import { ClientProvisioningValidator } from "./entities/client/validator.mjs";
+import { RobotProvisioningValidator } from "./entities/robot/validator.mjs";
+import { ScopeProvisioningValidator } from "./entities/scope/validator.mjs";
+import { UserProvisioningValidator } from "./entities/user/validator.mjs";
+import { RealmProvisioningValidator } from "./entities/realm/validator.mjs";
+import { RootProvisioningValidator } from "./entities/root/validator.mjs";
+import "./entities/index.mjs";
+import { ProvisioningEntityResolver } from "./synchronizer/entity-resolver.mjs";
+import { ProvisioningJunctionSynchronizer } from "./synchronizer/junction-synchronizer.mjs";
+import { ClientProvisioningSynchronizer } from "./synchronizer/client/module.mjs";
+import { PermissionProvisioningSynchronizer } from "./synchronizer/permission/module.mjs";
+import { PolicyProvisioningSynchronizer } from "./synchronizer/policy/module.mjs";
+import { RealmProvisioningSynchronizer } from "./synchronizer/realm/module.mjs";
+import { RoleProvisioningSynchronizer } from "./synchronizer/role/module.mjs";
+import { GraphProvisioningSynchronizer } from "./synchronizer/root/module.mjs";
+import { RobotProvisioningSynchronizer } from "./synchronizer/robot/module.mjs";
+import { ScopeProvisioningSynchronizer } from "./synchronizer/scope/module.mjs";
+import { UserProvisioningSynchronizer } from "./synchronizer/user/module.mjs";
+import "./synchronizer/index.mjs";
+export { ClientProvisioningSynchronizer, ClientProvisioningValidator, GraphProvisioningSynchronizer, PermissionProvisioningSynchronizer, PermissionProvisioningValidator, PolicyProvisioningSynchronizer, ProvisioningEntityResolver, ProvisioningEntityStrategyType, ProvisioningJunctionSynchronizer, ProvisioningStrategyValidator, RealmProvisioningSynchronizer, RealmProvisioningValidator, RobotProvisioningSynchronizer, RobotProvisioningValidator, RoleProvisioningSynchronizer, RoleProvisioningValidator, RootProvisioningValidator, ScopeProvisioningSynchronizer, ScopeProvisioningValidator, UserProvisioningSynchronizer, UserProvisioningValidator, normalizeEntityProvisioningStrategy };

package/dist/core/provisioning/strategy/constants.mjs

@@ -0,0 +1,12 @@
+//#region src/core/provisioning/strategy/constants.ts
+var ProvisioningEntityStrategyType = /* @__PURE__ */ function(ProvisioningEntityStrategyType) {
+	ProvisioningEntityStrategyType["REPLACE"] = "replace";
+	ProvisioningEntityStrategyType["MERGE"] = "merge";
+	ProvisioningEntityStrategyType["CREATE_ONLY"] = "createOnly";
+	ProvisioningEntityStrategyType["ABSENT"] = "absent";
+	return ProvisioningEntityStrategyType;
+}({});
+//#endregion
+export { ProvisioningEntityStrategyType };
+
+//# sourceMappingURL=constants.mjs.map

package/dist/core/provisioning/strategy/constants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.mjs","names":["ProvisioningEntityStrategyType"],"sources":["../../../../src/core/provisioning/strategy/constants.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport enum ProvisioningEntityStrategyType {\n    REPLACE = 'replace',\n    MERGE = 'merge',\n    CREATE_ONLY = 'createOnly',\n    ABSENT = 'absent',\n}\n"],"mappings":";AAOA,IAAO,iCAAKA,yBAAAA,gCAAAA;;;;;QAAAA"}

package/dist/core/provisioning/strategy/index.mjs

@@ -0,0 +1,4 @@
+import { ProvisioningEntityStrategyType } from "./constants.mjs";
+import { normalizeEntityProvisioningStrategy } from "./normalize.mjs";
+import { ProvisioningStrategyValidator } from "./validator.mjs";
+export { ProvisioningEntityStrategyType, ProvisioningStrategyValidator, normalizeEntityProvisioningStrategy };

package/dist/core/provisioning/strategy/normalize.mjs

@@ -0,0 +1,10 @@
+import { ProvisioningEntityStrategyType } from "./constants.mjs";
+//#region src/core/provisioning/strategy/normalize.ts
+function normalizeEntityProvisioningStrategy(input) {
+	if (!input) return { type: ProvisioningEntityStrategyType.CREATE_ONLY };
+	return input;
+}
+//#endregion
+export { normalizeEntityProvisioningStrategy };
+
+//# sourceMappingURL=normalize.mjs.map

package/dist/core/provisioning/strategy/normalize.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.mjs","names":["ProvisioningEntityStrategyType","normalizeEntityProvisioningStrategy","input","type","CREATE_ONLY"],"sources":["../../../../src/core/provisioning/strategy/normalize.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { ObjectLiteral } from '@authup/kit';\nimport { ProvisioningEntityStrategyType } from './constants.ts';\nimport type { ProvisioningEntityStrategy } from './types.ts';\n\nexport function normalizeEntityProvisioningStrategy<A extends ObjectLiteral = ObjectLiteral>(\n    input?: ProvisioningEntityStrategy<A>,\n) : ProvisioningEntityStrategy<A> {\n    if (!input) {\n        return { type: ProvisioningEntityStrategyType.CREATE_ONLY };\n    }\n\n    return input;\n}\n"],"mappings":";;AAWA,SAAgBC,oCACZC,OAAqC;AAErC,KAAI,CAACA,MACD,QAAO,EAAEC,MAAMH,+BAA+BI,aAAY;AAG9D,QAAOF"}

package/dist/core/provisioning/strategy/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/provisioning/strategy/validator.mjs

@@ -0,0 +1,30 @@
+import { Container } from "validup";
+import { createValidator } from "@validup/adapter-zod";
+import { z } from "zod";
+//#region src/core/provisioning/strategy/validator.ts
+var ProvisioningStrategyValidator = class extends Container {
+	constructor(options = {}) {
+		super({
+			...options,
+			oneOf: true
+		});
+	}
+	initialize() {
+		super.initialize();
+		const mergeContainer = new Container();
+		mergeContainer.mount("type", createValidator(z.enum(["merge"])));
+		mergeContainer.mount("attributes", createValidator(z.array(z.string()).optional()));
+		this.mount(mergeContainer);
+		const altContainer = new Container();
+		altContainer.mount("type", createValidator(z.enum([
+			"replace",
+			"createOnly",
+			"absent"
+		])));
+		this.mount(altContainer);
+	}
+};
+//#endregion
+export { ProvisioningStrategyValidator };
+
+//# sourceMappingURL=validator.mjs.map

package/dist/core/provisioning/strategy/validator.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.mjs","names":["createValidator","Container","z","ProvisioningStrategyValidator","options","oneOf","initialize","mergeContainer","mount","enum","array","string","optional","altContainer"],"sources":["../../../../src/core/provisioning/strategy/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport type { ContainerOptions } from 'validup';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { ProvisioningEntityMergeStrategy, ProvisioningEntityReplaceStrategy, ProvisioningEntityStrategy } from './types.ts';\n\nexport class ProvisioningStrategyValidator extends Container<ProvisioningEntityStrategy> {\n    constructor(options: ContainerOptions<ProvisioningEntityStrategy> = {}) {\n        super({\n            ...options,\n            oneOf: true,\n        });\n    }\n\n    protected initialize() {\n        super.initialize();\n\n        const mergeContainer = new Container<ProvisioningEntityMergeStrategy>();\n        mergeContainer.mount('type', createValidator(\n            z\n                .enum(['merge']),\n        ));\n        mergeContainer.mount('attributes', createValidator(\n            z\n                .array(z.string())\n                .optional(),\n        ));\n        this.mount(mergeContainer);\n\n        const altContainer = new Container<ProvisioningEntityReplaceStrategy>();\n        altContainer.mount('type', createValidator(\n            z\n                .enum(['replace', 'createOnly', 'absent']),\n        ));\n        this.mount(altContainer);\n    }\n}\n"],"mappings":";;;;AAaA,IAAaG,gCAAb,cAAmDF,UAAAA;CAC/C,YAAYG,UAAwD,EAAE,EAAE;AACpE,QAAM;GACF,GAAGA;GACHC,OAAO;GACX,CAAA;;CAGMC,aAAa;AACnB,QAAMA,YAAAA;EAEN,MAAMC,iBAAiB,IAAIN,WAAAA;AAC3BM,iBAAeC,MAAM,QAAQR,gBACzBE,EACKO,KAAK,CAAC,QAAQ,CAAA,CAAA,CAAA;AAEvBF,iBAAeC,MAAM,cAAcR,gBAC/BE,EACKQ,MAAMR,EAAES,QAAM,CAAA,CACdC,UAAQ,CAAA,CAAA;AAEjB,OAAKJ,MAAMD,eAAAA;EAEX,MAAMM,eAAe,IAAIZ,WAAAA;AACzBY,eAAaL,MAAM,QAAQR,gBACvBE,EACKO,KAAK;GAAC;GAAW;GAAc;GAAS,CAAA,CAAA,CAAA;AAEjD,OAAKD,MAAMK,aAAAA"}

package/dist/core/provisioning/synchronizer/base.mjs

@@ -0,0 +1,12 @@
+//#region src/core/provisioning/synchronizer/base.ts
+var BaseProvisioningSynchronizer = class {
+	async synchronizeMany(input) {
+		const output = [];
+		for (const entity of input) output.push(await this.synchronize(entity));
+		return output;
+	}
+};
+//#endregion
+export { BaseProvisioningSynchronizer };
+
+//# sourceMappingURL=base.mjs.map

package/dist/core/provisioning/synchronizer/base.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.mjs","names":["BaseProvisioningSynchronizer","synchronizeMany","input","output","entity","push","synchronize"],"sources":["../../../../src/core/provisioning/synchronizer/base.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IProvisioningSynchronizer } from '../types.ts';\n\nexport abstract class BaseProvisioningSynchronizer<T> implements IProvisioningSynchronizer<T> {\n    // Sequential to avoid race conditions on concurrent upserts.\n    // Can be switched to Promise.all() if callers guarantee unique inputs.\n    async synchronizeMany(input: T[]): Promise<T[]> {\n        const output: T[] = [];\n        for (const entity of input) {\n            output.push(await this.synchronize(entity));\n        }\n        return output;\n    }\n\n    abstract synchronize(input: T): Promise<T>;\n}\n"],"mappings":";AASA,IAAsBA,+BAAtB,MAAsBA;CAGlB,MAAMC,gBAAgBC,OAA0B;EAC5C,MAAMC,SAAc,EAAE;AACtB,OAAK,MAAMC,UAAUF,MACjBC,QAAOE,KAAK,MAAM,KAAKC,YAAYF,OAAAA,CAAAA;AAEvC,SAAOD"}

package/dist/core/provisioning/synchronizer/client/index.mjs

@@ -0,0 +1,2 @@
+import { ClientProvisioningSynchronizer } from "./module.mjs";
+export { ClientProvisioningSynchronizer };

package/dist/core/provisioning/synchronizer/client/module.mjs

@@ -0,0 +1,88 @@
+import { ProvisioningEntityStrategyType } from "../../strategy/constants.mjs";
+import { normalizeEntityProvisioningStrategy } from "../../strategy/normalize.mjs";
+import "../../strategy/index.mjs";
+import { BaseProvisioningSynchronizer } from "../base.mjs";
+import { ProvisioningEntityResolver } from "../entity-resolver.mjs";
+import { ProvisioningJunctionSynchronizer } from "../junction-synchronizer.mjs";
+import { pickRecord } from "@authup/kit";
+//#region src/core/provisioning/synchronizer/client/module.ts
+var ClientProvisioningSynchronizer = class extends BaseProvisioningSynchronizer {
+	clientRepository;
+	permissionResolver;
+	roleResolver;
+	permissionJunction;
+	roleJunction;
+	permissionSynchronizer;
+	roleSynchronizer;
+	constructor(ctx) {
+		super();
+		this.clientRepository = ctx.clientRepository;
+		this.permissionResolver = new ProvisioningEntityResolver(ctx.permissionRepository);
+		this.roleResolver = new ProvisioningEntityResolver(ctx.roleRepository);
+		this.permissionJunction = new ProvisioningJunctionSynchronizer({
+			repository: ctx.clientPermissionRepository,
+			ownerKey: "client_id",
+			ownerRealmKey: "client_realm_id"
+		});
+		this.roleJunction = new ProvisioningJunctionSynchronizer({
+			repository: ctx.clientRoleRepository,
+			ownerKey: "client_id",
+			ownerRealmKey: "client_realm_id"
+		});
+		this.permissionSynchronizer = ctx.permissionSynchronizer;
+		this.roleSynchronizer = ctx.roleSynchronizer;
+	}
+	async synchronize(input) {
+		const strategy = normalizeEntityProvisioningStrategy(input.strategy);
+		let attributes = await this.clientRepository.findOneBy({
+			name: input.attributes.name,
+			realm_id: input.attributes.realm_id || null
+		});
+		if (strategy.type === ProvisioningEntityStrategyType.ABSENT) {
+			if (attributes) await this.clientRepository.remove(attributes);
+			return {
+				...input,
+				attributes: attributes || input.attributes
+			};
+		}
+		if (attributes) switch (strategy.type) {
+			case ProvisioningEntityStrategyType.MERGE:
+				attributes = this.clientRepository.merge(attributes, strategy.attributes ? pickRecord(input.attributes, strategy.attributes) : input.attributes);
+				attributes = await this.clientRepository.save(attributes);
+				break;
+			case ProvisioningEntityStrategyType.REPLACE:
+				input.attributes.id = attributes.id;
+				attributes = await this.clientRepository.save(this.clientRepository.create(input.attributes));
+				break;
+		}
+		else attributes = await this.clientRepository.save(this.clientRepository.create(input.attributes));
+		const permissions = [...await this.permissionResolver.resolveGlobal(input.relations && input.relations.globalPermissions), ...attributes.realm_id ? await this.permissionResolver.resolveRealm(input.relations && input.relations.realmPermissions, attributes.realm_id) : []];
+		if (permissions.length > 0) await this.permissionJunction.synchronize(attributes, permissions, "permission_id", "permission_realm_id");
+		const roles = [...await this.roleResolver.resolveGlobal(input.relations && input.relations.globalRoles), ...attributes.realm_id ? await this.roleResolver.resolveRealm(input.relations && input.relations.realmRoles, attributes.realm_id) : []];
+		if (roles.length > 0) await this.roleJunction.synchronize(attributes, roles, "role_id", "role_realm_id");
+		if (input.relations && input.relations.permissions) {
+			const children = input.relations.permissions.map((child) => {
+				child.attributes.client_id = attributes.id;
+				child.attributes.client = attributes;
+				return child;
+			});
+			await this.permissionSynchronizer.synchronizeMany(children);
+		}
+		if (input.relations && input.relations.roles) {
+			const children = input.relations.roles.map((child) => {
+				child.attributes.client_id = attributes.id;
+				child.attributes.client = attributes;
+				return child;
+			});
+			await this.roleSynchronizer.synchronizeMany(children);
+		}
+		return {
+			...input,
+			attributes
+		};
+	}
+};
+//#endregion
+export { ClientProvisioningSynchronizer };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/provisioning/synchronizer/client/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["pickRecord","ProvisioningEntityStrategyType","normalizeEntityProvisioningStrategy","BaseProvisioningSynchronizer","ProvisioningEntityResolver","ProvisioningJunctionSynchronizer","ClientProvisioningSynchronizer","clientRepository","permissionResolver","roleResolver","permissionJunction","roleJunction","permissionSynchronizer","roleSynchronizer","ctx","permissionRepository","roleRepository","repository","clientPermissionRepository","ownerKey","ownerRealmKey","clientRoleRepository","synchronize","input","strategy","attributes","findOneBy","name","realm_id","type","ABSENT","remove","MERGE","merge","save","REPLACE","id","create","permissions","resolveGlobal","relations","globalPermissions","resolveRealm","realmPermissions","length","roles","globalRoles","realmRoles","children","map","child","client_id","client","synchronizeMany"],"sources":["../../../../../src/core/provisioning/synchronizer/client/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    ClientPermission, \n    ClientRole, \n    Permission, \n    Role,\n} from '@authup/core-kit';\nimport { pickRecord } from '@authup/kit';\nimport type { IClientRepository } from '../../../entities/index.ts';\nimport type { ClientProvisioningEntity } from '../../entities/client';\nimport type { PermissionProvisioningEntity } from '../../entities/permission';\nimport type { RoleProvisioningEntity } from '../../entities/role';\nimport { ProvisioningEntityStrategyType, normalizeEntityProvisioningStrategy } from '../../strategy/index.ts';\nimport type { IProvisioningSynchronizer } from '../../types.ts';\nimport { BaseProvisioningSynchronizer } from '../base.ts';\nimport { ProvisioningEntityResolver } from '../entity-resolver.ts';\nimport { ProvisioningJunctionSynchronizer } from '../junction-synchronizer.ts';\nimport type { ClientProvisioningSynchronizerContext } from './types.ts';\n\nexport class ClientProvisioningSynchronizer extends BaseProvisioningSynchronizer<ClientProvisioningEntity> {\n    protected clientRepository: IClientRepository;\n\n    protected permissionResolver: ProvisioningEntityResolver<Permission>;\n\n    protected roleResolver: ProvisioningEntityResolver<Role>;\n\n    protected permissionJunction: ProvisioningJunctionSynchronizer<ClientPermission>;\n\n    protected roleJunction: ProvisioningJunctionSynchronizer<ClientRole>;\n\n    protected permissionSynchronizer: IProvisioningSynchronizer<PermissionProvisioningEntity>;\n\n    protected roleSynchronizer: IProvisioningSynchronizer<RoleProvisioningEntity>;\n\n    constructor(ctx: ClientProvisioningSynchronizerContext) {\n        super();\n\n        this.clientRepository = ctx.clientRepository;\n\n        this.permissionResolver = new ProvisioningEntityResolver(ctx.permissionRepository);\n        this.roleResolver = new ProvisioningEntityResolver(ctx.roleRepository);\n\n        this.permissionJunction = new ProvisioningJunctionSynchronizer({\n            repository: ctx.clientPermissionRepository,\n            ownerKey: 'client_id',\n            ownerRealmKey: 'client_realm_id',\n        });\n        this.roleJunction = new ProvisioningJunctionSynchronizer({\n            repository: ctx.clientRoleRepository,\n            ownerKey: 'client_id',\n            ownerRealmKey: 'client_realm_id',\n        });\n\n        this.permissionSynchronizer = ctx.permissionSynchronizer;\n        this.roleSynchronizer = ctx.roleSynchronizer;\n    }\n\n    async synchronize(input: ClientProvisioningEntity): Promise<ClientProvisioningEntity> {\n        const strategy = normalizeEntityProvisioningStrategy(input.strategy);\n\n        let attributes = await this.clientRepository.findOneBy({\n            name: input.attributes.name,\n            realm_id: input.attributes.realm_id || null,\n        });\n\n        if (strategy.type === ProvisioningEntityStrategyType.ABSENT) {\n            if (attributes) {\n                await this.clientRepository.remove(attributes);\n            }\n            return {\n                ...input,\n                attributes: attributes || input.attributes, \n            };\n        }\n\n        if (attributes) {\n            switch (strategy.type) {\n                case ProvisioningEntityStrategyType.MERGE:\n                    attributes = this.clientRepository.merge(\n                        attributes,\n                        strategy.attributes ?\n                            pickRecord(input.attributes, strategy.attributes) :\n                            input.attributes,\n                    );\n                    attributes = await this.clientRepository.save(attributes);\n                    break;\n                case ProvisioningEntityStrategyType.REPLACE:\n                    input.attributes.id = attributes.id;\n                    attributes = await this.clientRepository.save(this.clientRepository.create(input.attributes));\n                    break;\n            }\n        } else {\n            attributes = await this.clientRepository.save(this.clientRepository.create(input.attributes));\n        }\n\n        // Permissions (Global + Realm)\n        const permissions = [\n            ...await this.permissionResolver.resolveGlobal(\n                input.relations && input.relations.globalPermissions,\n            ),\n            ...(attributes.realm_id ?\n                await this.permissionResolver.resolveRealm(\n                    input.relations && input.relations.realmPermissions,\n                    attributes.realm_id,\n                ) :\n                []),\n        ];\n\n        if (permissions.length > 0) {\n            await this.permissionJunction.synchronize(\n                attributes,\n                permissions,\n                'permission_id',\n                'permission_realm_id',\n            );\n        }\n\n        // Roles (Global + Realm)\n        const roles = [\n            ...await this.roleResolver.resolveGlobal(\n                input.relations && input.relations.globalRoles,\n            ),\n            ...(attributes.realm_id ?\n                await this.roleResolver.resolveRealm(\n                    input.relations && input.relations.realmRoles,\n                    attributes.realm_id,\n                ) :\n                []),\n        ];\n\n        if (roles.length > 0) {\n            await this.roleJunction.synchronize(\n                attributes,\n                roles,\n                'role_id',\n                'role_realm_id',\n            );\n        }\n\n        // Containers\n\n        if (input.relations && input.relations.permissions) {\n            const children = input.relations.permissions.map((child) => {\n                child.attributes.client_id = attributes.id;\n                child.attributes.client = attributes;\n                return child;\n            });\n\n            await this.permissionSynchronizer.synchronizeMany(children);\n        }\n\n        if (input.relations && input.relations.roles) {\n            const children = input.relations.roles.map((child) => {\n                child.attributes.client_id = attributes.id;\n                child.attributes.client = attributes;\n                return child;\n            });\n\n            await this.roleSynchronizer.synchronizeMany(children);\n        }\n\n        return {\n            ...input,\n            attributes,\n        };\n    }\n}\n"],"mappings":";;;;;;;;AAyBA,IAAaM,iCAAb,cAAoDH,6BAAAA;CACtCI;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEV,YAAYC,KAA4C;AACpD,SAAK;AAEL,OAAKP,mBAAmBO,IAAIP;AAE5B,OAAKC,qBAAqB,IAAIJ,2BAA2BU,IAAIC,qBAAoB;AACjF,OAAKN,eAAe,IAAIL,2BAA2BU,IAAIE,eAAc;AAErE,OAAKN,qBAAqB,IAAIL,iCAAiC;GAC3DY,YAAYH,IAAII;GAChBC,UAAU;GACVC,eAAe;GACnB,CAAA;AACA,OAAKT,eAAe,IAAIN,iCAAiC;GACrDY,YAAYH,IAAIO;GAChBF,UAAU;GACVC,eAAe;GACnB,CAAA;AAEA,OAAKR,yBAAyBE,IAAIF;AAClC,OAAKC,mBAAmBC,IAAID;;CAGhC,MAAMS,YAAYC,OAAoE;EAClF,MAAMC,WAAWtB,oCAAoCqB,MAAMC,SAAQ;EAEnE,IAAIC,aAAa,MAAM,KAAKlB,iBAAiBmB,UAAU;GACnDC,MAAMJ,MAAME,WAAWE;GACvBC,UAAUL,MAAME,WAAWG,YAAY;GAC3C,CAAA;AAEA,MAAIJ,SAASK,SAAS5B,+BAA+B6B,QAAQ;AACzD,OAAIL,WACA,OAAM,KAAKlB,iBAAiBwB,OAAON,WAAAA;AAEvC,UAAO;IACH,GAAGF;IACHE,YAAYA,cAAcF,MAAME;IACpC;;AAGJ,MAAIA,WACA,SAAQD,SAASK,MAAjB;GACI,KAAK5B,+BAA+B+B;AAChCP,iBAAa,KAAKlB,iBAAiB0B,MAC/BR,YACAD,SAASC,aACLzB,WAAWuB,MAAME,YAAYD,SAASC,WAAU,GAChDF,MAAME,WAAU;AAExBA,iBAAa,MAAM,KAAKlB,iBAAiB2B,KAAKT,WAAAA;AAC9C;GACJ,KAAKxB,+BAA+BkC;AAChCZ,UAAME,WAAWW,KAAKX,WAAWW;AACjCX,iBAAa,MAAM,KAAKlB,iBAAiB2B,KAAK,KAAK3B,iBAAiB8B,OAAOd,MAAME,WAAU,CAAA;AAC3F;;MAGRA,cAAa,MAAM,KAAKlB,iBAAiB2B,KAAK,KAAK3B,iBAAiB8B,OAAOd,MAAME,WAAU,CAAA;EAI/F,MAAMa,cAAc,CAAA,GACb,MAAM,KAAK9B,mBAAmB+B,cAC7BhB,MAAMiB,aAAajB,MAAMiB,UAAUC,kBAAiB,EAAA,GAEpDhB,WAAWG,WACX,MAAM,KAAKpB,mBAAmBkC,aAC1BnB,MAAMiB,aAAajB,MAAMiB,UAAUG,kBACnClB,WAAWG,SAAQ,GAEvB,EAAE,CACT;AAED,MAAIU,YAAYM,SAAS,EACrB,OAAM,KAAKlC,mBAAmBY,YAC1BG,YACAa,aACA,iBACA,sBAAA;EAKR,MAAMO,QAAQ,CAAA,GACP,MAAM,KAAKpC,aAAa8B,cACvBhB,MAAMiB,aAAajB,MAAMiB,UAAUM,YAAW,EAAA,GAE9CrB,WAAWG,WACX,MAAM,KAAKnB,aAAaiC,aACpBnB,MAAMiB,aAAajB,MAAMiB,UAAUO,YACnCtB,WAAWG,SAAQ,GAEvB,EAAE,CACT;AAED,MAAIiB,MAAMD,SAAS,EACf,OAAM,KAAKjC,aAAaW,YACpBG,YACAoB,OACA,WACA,gBAAA;AAMR,MAAItB,MAAMiB,aAAajB,MAAMiB,UAAUF,aAAa;GAChD,MAAMU,WAAWzB,MAAMiB,UAAUF,YAAYW,KAAKC,UAAAA;AAC9CA,UAAMzB,WAAW0B,YAAY1B,WAAWW;AACxCc,UAAMzB,WAAW2B,SAAS3B;AAC1B,WAAOyB;KACX;AAEA,SAAM,KAAKtC,uBAAuByC,gBAAgBL,SAAAA;;AAGtD,MAAIzB,MAAMiB,aAAajB,MAAMiB,UAAUK,OAAO;GAC1C,MAAMG,WAAWzB,MAAMiB,UAAUK,MAAMI,KAAKC,UAAAA;AACxCA,UAAMzB,WAAW0B,YAAY1B,WAAWW;AACxCc,UAAMzB,WAAW2B,SAAS3B;AAC1B,WAAOyB;KACX;AAEA,SAAM,KAAKrC,iBAAiBwC,gBAAgBL,SAAAA;;AAGhD,SAAO;GACH,GAAGzB;GACHE;GACJ"}

package/dist/core/provisioning/synchronizer/client/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/provisioning/synchronizer/entity-resolver.mjs

@@ -0,0 +1,47 @@
+//#region src/core/provisioning/synchronizer/entity-resolver.ts
+var ProvisioningEntityResolver = class {
+	repository;
+	constructor(repository) {
+		this.repository = repository;
+	}
+	async resolveGlobal(names) {
+		if (!names || names.length === 0) return [];
+		if (names.includes("*")) return this.repository.findManyBy({
+			realm_id: null,
+			client_id: null
+		});
+		return this.repository.findManyBy({
+			name: names,
+			realm_id: null,
+			client_id: null
+		});
+	}
+	async resolveRealm(names, realmId) {
+		if (!names || names.length === 0) return [];
+		if (names.includes("*")) return this.repository.findManyBy({
+			realm_id: realmId,
+			client_id: null
+		});
+		return this.repository.findManyBy({
+			name: names,
+			realm_id: realmId,
+			client_id: null
+		});
+	}
+	async resolveClient(names, realmId, clientId) {
+		if (!names || names.length === 0) return [];
+		if (names.includes("*")) return this.repository.findManyBy({
+			realm_id: realmId,
+			client_id: clientId
+		});
+		return this.repository.findManyBy({
+			name: names,
+			realm_id: realmId,
+			client_id: clientId
+		});
+	}
+};
+//#endregion
+export { ProvisioningEntityResolver };
+
+//# sourceMappingURL=entity-resolver.mjs.map

package/dist/core/provisioning/synchronizer/entity-resolver.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-resolver.mjs","names":["ProvisioningEntityResolver","repository","resolveGlobal","names","length","hasWildcard","includes","findManyBy","realm_id","client_id","name","resolveRealm","realmId","resolveClient","clientId"],"sources":["../../../../src/core/provisioning/synchronizer/entity-resolver.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { ObjectLiteral } from '@authup/kit';\nimport type { IEntityRepository } from '../../entities/index.ts';\n\nexport class ProvisioningEntityResolver<T extends ObjectLiteral = ObjectLiteral> {\n    protected repository: IEntityRepository<T>;\n\n    constructor(repository: IEntityRepository<T>) {\n        this.repository = repository;\n    }\n\n    async resolveGlobal(names?: string[]): Promise<T[]> {\n        if (!names || names.length === 0) {\n            return [];\n        }\n\n        const hasWildcard = names.includes('*');\n        if (hasWildcard) {\n            return this.repository.findManyBy({\n                realm_id: null,\n                client_id: null,\n            });\n        }\n\n        return this.repository.findManyBy({\n            name: names,\n            realm_id: null,\n            client_id: null,\n        });\n    }\n\n    async resolveRealm(names: string[] | undefined, realmId: string): Promise<T[]> {\n        if (!names || names.length === 0) {\n            return [];\n        }\n\n        const hasWildcard = names.includes('*');\n        if (hasWildcard) {\n            return this.repository.findManyBy({\n                realm_id: realmId,\n                client_id: null,\n            });\n        }\n\n        return this.repository.findManyBy({\n            name: names,\n            realm_id: realmId,\n            client_id: null,\n        });\n    }\n\n    async resolveClient(names: string[] | undefined, realmId: string, clientId: string): Promise<T[]> {\n        if (!names || names.length === 0) {\n            return [];\n        }\n\n        const hasWildcard = names.includes('*');\n        if (hasWildcard) {\n            return this.repository.findManyBy({\n                realm_id: realmId,\n                client_id: clientId,\n            });\n        }\n\n        return this.repository.findManyBy({\n            name: names,\n            realm_id: realmId,\n            client_id: clientId,\n        });\n    }\n}\n"],"mappings":";AAUA,IAAaA,6BAAb,MAAaA;CACCC;CAEV,YAAYA,YAAkC;AAC1C,OAAKA,aAAaA;;CAGtB,MAAMC,cAAcC,OAAgC;AAChD,MAAI,CAACA,SAASA,MAAMC,WAAW,EAC3B,QAAO,EAAE;AAIb,MADoBD,MAAMG,SAAS,IAC/BD,CACA,QAAO,KAAKJ,WAAWM,WAAW;GAC9BC,UAAU;GACVC,WAAW;GACf,CAAA;AAGJ,SAAO,KAAKR,WAAWM,WAAW;GAC9BG,MAAMP;GACNK,UAAU;GACVC,WAAW;GACf,CAAA;;CAGJ,MAAME,aAAaR,OAA6BS,SAA+B;AAC3E,MAAI,CAACT,SAASA,MAAMC,WAAW,EAC3B,QAAO,EAAE;AAIb,MADoBD,MAAMG,SAAS,IAC/BD,CACA,QAAO,KAAKJ,WAAWM,WAAW;GAC9BC,UAAUI;GACVH,WAAW;GACf,CAAA;AAGJ,SAAO,KAAKR,WAAWM,WAAW;GAC9BG,MAAMP;GACNK,UAAUI;GACVH,WAAW;GACf,CAAA;;CAGJ,MAAMI,cAAcV,OAA6BS,SAAiBE,UAAgC;AAC9F,MAAI,CAACX,SAASA,MAAMC,WAAW,EAC3B,QAAO,EAAE;AAIb,MADoBD,MAAMG,SAAS,IAC/BD,CACA,QAAO,KAAKJ,WAAWM,WAAW;GAC9BC,UAAUI;GACVH,WAAWK;GACf,CAAA;AAGJ,SAAO,KAAKb,WAAWM,WAAW;GAC9BG,MAAMP;GACNK,UAAUI;GACVH,WAAWK;GACf,CAAA"}

package/dist/core/provisioning/synchronizer/index.mjs

@@ -0,0 +1,19 @@
+import { ProvisioningEntityResolver } from "./entity-resolver.mjs";
+import { ProvisioningJunctionSynchronizer } from "./junction-synchronizer.mjs";
+import { ClientProvisioningSynchronizer } from "./client/module.mjs";
+import "./client/index.mjs";
+import { PermissionProvisioningSynchronizer } from "./permission/module.mjs";
+import "./permission/index.mjs";
+import { PolicyProvisioningSynchronizer } from "./policy/module.mjs";
+import { RealmProvisioningSynchronizer } from "./realm/module.mjs";
+import "./realm/index.mjs";
+import { RoleProvisioningSynchronizer } from "./role/module.mjs";
+import "./role/index.mjs";
+import { GraphProvisioningSynchronizer } from "./root/module.mjs";
+import { RobotProvisioningSynchronizer } from "./robot/module.mjs";
+import "./robot/index.mjs";
+import { ScopeProvisioningSynchronizer } from "./scope/module.mjs";
+import "./scope/index.mjs";
+import { UserProvisioningSynchronizer } from "./user/module.mjs";
+import "./user/index.mjs";
+export { ClientProvisioningSynchronizer, GraphProvisioningSynchronizer, PermissionProvisioningSynchronizer, PolicyProvisioningSynchronizer, ProvisioningEntityResolver, ProvisioningJunctionSynchronizer, RealmProvisioningSynchronizer, RobotProvisioningSynchronizer, RoleProvisioningSynchronizer, ScopeProvisioningSynchronizer, UserProvisioningSynchronizer };

package/dist/core/provisioning/synchronizer/junction-synchronizer.mjs

@@ -0,0 +1,26 @@
+//#region src/core/provisioning/synchronizer/junction-synchronizer.ts
+var ProvisioningJunctionSynchronizer = class {
+	ctx;
+	constructor(ctx) {
+		this.ctx = ctx;
+	}
+	async synchronize(owner, targets, targetKey, targetRealmKey, extraAttributes) {
+		for (const target of targets) if (!await this.ctx.repository.findOneBy({
+			[this.ctx.ownerKey]: owner.id,
+			[targetKey]: target.id
+		})) {
+			const entity = this.ctx.repository.create({
+				[this.ctx.ownerKey]: owner.id,
+				[this.ctx.ownerRealmKey]: owner.realm_id,
+				[targetKey]: target.id,
+				[targetRealmKey]: target.realm_id,
+				...extraAttributes || {}
+			});
+			await this.ctx.repository.save(entity);
+		}
+	}
+};
+//#endregion
+export { ProvisioningJunctionSynchronizer };
+
+//# sourceMappingURL=junction-synchronizer.mjs.map

package/dist/core/provisioning/synchronizer/junction-synchronizer.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"junction-synchronizer.mjs","names":["ProvisioningJunctionSynchronizer","ctx","synchronize","owner","targets","targetKey","targetRealmKey","extraAttributes","target","existing","repository","findOneBy","ownerKey","id","entity","create","ownerRealmKey","realm_id","save"],"sources":["../../../../src/core/provisioning/synchronizer/junction-synchronizer.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { ObjectLiteral } from '@authup/kit';\nimport type { IEntityRepository } from '../../entities/index.ts';\n\nexport type ProvisioningJunctionSynchronizerContext<T extends ObjectLiteral = ObjectLiteral> = {\n    repository: IEntityRepository<T>,\n    ownerKey: string,\n    ownerRealmKey: string,\n};\n\nexport class ProvisioningJunctionSynchronizer<T extends ObjectLiteral = ObjectLiteral> {\n    protected ctx: ProvisioningJunctionSynchronizerContext<T>;\n\n    constructor(ctx: ProvisioningJunctionSynchronizerContext<T>) {\n        this.ctx = ctx;\n    }\n\n    async synchronize(\n        owner: {\n            id: string,\n            realm_id?: string | null \n        },\n        targets: Array<{\n            id: string,\n            realm_id?: string | null \n        }>,\n        targetKey: string,\n        targetRealmKey: string,\n        extraAttributes?: Record<string, unknown>,\n    ): Promise<void> {\n        for (const target of targets) {\n            const existing = await this.ctx.repository.findOneBy({\n                [this.ctx.ownerKey]: owner.id,\n                [targetKey]: target.id,\n            });\n\n            if (!existing) {\n                const entity = this.ctx.repository.create({\n                    [this.ctx.ownerKey]: owner.id,\n                    [this.ctx.ownerRealmKey]: owner.realm_id,\n                    [targetKey]: target.id,\n                    [targetRealmKey]: target.realm_id,\n                    ...(extraAttributes || {}),\n                } as Partial<T>);\n\n                await this.ctx.repository.save(entity);\n            }\n        }\n    }\n}\n"],"mappings":";AAgBA,IAAaA,mCAAb,MAAaA;CACCC;CAEV,YAAYA,KAAiD;AACzD,OAAKA,MAAMA;;CAGf,MAAMC,YACFC,OAIAC,SAIAC,WACAC,gBACAC,iBACa;AACb,OAAK,MAAMC,UAAUJ,QAMjB,KAAI,CAACK,MALkB,KAAKR,IAAIS,WAAWC,UAAU;IAChD,KAAKV,IAAIW,WAAWT,MAAMU;IAC1BR,YAAYG,OAAOK;GACxB,CAAA,EAEe;GACX,MAAMC,SAAS,KAAKb,IAAIS,WAAWK,OAAO;KACrC,KAAKd,IAAIW,WAAWT,MAAMU;KAC1B,KAAKZ,IAAIe,gBAAgBb,MAAMc;KAC/BZ,YAAYG,OAAOK;KACnBP,iBAAiBE,OAAOS;IACzB,GAAIV,mBAAmB,EAAE;IAC7B,CAAA;AAEA,SAAM,KAAKN,IAAIS,WAAWQ,KAAKJ,OAAAA"}

package/dist/core/provisioning/synchronizer/permission/index.mjs

@@ -0,0 +1,2 @@
+import { PermissionProvisioningSynchronizer } from "./module.mjs";
+export { PermissionProvisioningSynchronizer };

package/dist/core/provisioning/synchronizer/permission/module.mjs

@@ -0,0 +1,47 @@
+import { ProvisioningEntityStrategyType } from "../../strategy/constants.mjs";
+import { normalizeEntityProvisioningStrategy } from "../../strategy/normalize.mjs";
+import "../../strategy/index.mjs";
+import { BaseProvisioningSynchronizer } from "../base.mjs";
+import { pickRecord } from "@authup/kit";
+//#region src/core/provisioning/synchronizer/permission/module.ts
+var PermissionProvisioningSynchronizer = class extends BaseProvisioningSynchronizer {
+	repository;
+	constructor(ctx) {
+		super();
+		this.repository = ctx.repository;
+	}
+	async synchronize(input) {
+		const strategy = normalizeEntityProvisioningStrategy(input.strategy);
+		let attributes = await this.repository.findOneBy({
+			name: input.attributes.name,
+			realm_id: input.attributes.realm_id || null,
+			client_id: input.attributes.client_id || null
+		});
+		if (strategy.type === ProvisioningEntityStrategyType.ABSENT) {
+			if (attributes) await this.repository.remove(attributes);
+			return {
+				...input,
+				attributes: attributes || input.attributes
+			};
+		}
+		if (attributes) switch (strategy.type) {
+			case ProvisioningEntityStrategyType.MERGE:
+				attributes = this.repository.merge(attributes, strategy.attributes ? pickRecord(input.attributes, strategy.attributes) : input.attributes);
+				attributes = await this.repository.save(attributes);
+				break;
+			case ProvisioningEntityStrategyType.REPLACE:
+				input.attributes.id = attributes.id;
+				attributes = await this.repository.save(this.repository.create(input.attributes));
+				break;
+		}
+		else attributes = await this.repository.save(this.repository.create(input.attributes));
+		return {
+			...input,
+			attributes
+		};
+	}
+};
+//#endregion
+export { PermissionProvisioningSynchronizer };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/provisioning/synchronizer/permission/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["pickRecord","ProvisioningEntityStrategyType","normalizeEntityProvisioningStrategy","BaseProvisioningSynchronizer","PermissionProvisioningSynchronizer","repository","ctx","synchronize","input","strategy","attributes","findOneBy","name","realm_id","client_id","type","ABSENT","remove","MERGE","merge","save","REPLACE","id","create"],"sources":["../../../../../src/core/provisioning/synchronizer/permission/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { pickRecord } from '@authup/kit';\nimport type { IPermissionRepository } from '../../../entities/index.ts';\nimport type { PermissionProvisioningEntity } from '../../entities/permission';\nimport { ProvisioningEntityStrategyType, normalizeEntityProvisioningStrategy } from '../../strategy/index.ts';\nimport { BaseProvisioningSynchronizer } from '../base.ts';\nimport type { PermissionProvisioningSynchronizerContext } from './types.ts';\n\nexport class PermissionProvisioningSynchronizer extends BaseProvisioningSynchronizer<PermissionProvisioningEntity> {\n    protected repository : IPermissionRepository;\n\n    constructor(ctx: PermissionProvisioningSynchronizerContext) {\n        super();\n\n        this.repository = ctx.repository;\n    }\n\n    async synchronize(input: PermissionProvisioningEntity): Promise<PermissionProvisioningEntity> {\n        const strategy = normalizeEntityProvisioningStrategy(input.strategy);\n\n        let attributes = await this.repository.findOneBy({\n            name: input.attributes.name,\n            realm_id: input.attributes.realm_id || null,\n            client_id: input.attributes.client_id || null,\n        });\n\n        if (strategy.type === ProvisioningEntityStrategyType.ABSENT) {\n            if (attributes) {\n                await this.repository.remove(attributes);\n            }\n            return {\n                ...input,\n                attributes: attributes || input.attributes, \n            };\n        }\n\n        if (attributes) {\n            switch (strategy.type) {\n                case ProvisioningEntityStrategyType.MERGE:\n                    attributes = this.repository.merge(\n                        attributes,\n                        strategy.attributes ?\n                            pickRecord(input.attributes, strategy.attributes) :\n                            input.attributes,\n                    );\n\n                    attributes = await this.repository.save(attributes);\n                    break;\n                case ProvisioningEntityStrategyType.REPLACE:\n                    input.attributes.id = attributes.id;\n                    attributes = await this.repository.save(this.repository.create(input.attributes));\n                    break;\n            }\n        } else {\n            attributes = await this.repository.save(this.repository.create(input.attributes));\n        }\n\n        return {\n            ...input,\n            attributes,\n        };\n    }\n}\n"],"mappings":";;;;;;AAcA,IAAaI,qCAAb,cAAwDD,6BAAAA;CAC1CE;CAEV,YAAYC,KAAgD;AACxD,SAAK;AAEL,OAAKD,aAAaC,IAAID;;CAG1B,MAAME,YAAYC,OAA4E;EAC1F,MAAMC,WAAWP,oCAAoCM,MAAMC,SAAQ;EAEnE,IAAIC,aAAa,MAAM,KAAKL,WAAWM,UAAU;GAC7CC,MAAMJ,MAAME,WAAWE;GACvBC,UAAUL,MAAME,WAAWG,YAAY;GACvCC,WAAWN,MAAME,WAAWI,aAAa;GAC7C,CAAA;AAEA,MAAIL,SAASM,SAASd,+BAA+Be,QAAQ;AACzD,OAAIN,WACA,OAAM,KAAKL,WAAWY,OAAOP,WAAAA;AAEjC,UAAO;IACH,GAAGF;IACHE,YAAYA,cAAcF,MAAME;IACpC;;AAGJ,MAAIA,WACA,SAAQD,SAASM,MAAjB;GACI,KAAKd,+BAA+BiB;AAChCR,iBAAa,KAAKL,WAAWc,MACzBT,YACAD,SAASC,aACLV,WAAWQ,MAAME,YAAYD,SAASC,WAAU,GAChDF,MAAME,WAAU;AAGxBA,iBAAa,MAAM,KAAKL,WAAWe,KAAKV,WAAAA;AACxC;GACJ,KAAKT,+BAA+BoB;AAChCb,UAAME,WAAWY,KAAKZ,WAAWY;AACjCZ,iBAAa,MAAM,KAAKL,WAAWe,KAAK,KAAKf,WAAWkB,OAAOf,MAAME,WAAU,CAAA;AAC/E;;MAGRA,cAAa,MAAM,KAAKL,WAAWe,KAAK,KAAKf,WAAWkB,OAAOf,MAAME,WAAU,CAAA;AAGnF,SAAO;GACH,GAAGF;GACHE;GACJ"}

package/dist/core/provisioning/synchronizer/permission/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/provisioning/synchronizer/policy/index.mjs

@@ -0,0 +1,2 @@
+import { PolicyProvisioningSynchronizer } from "./module.mjs";
+export { PolicyProvisioningSynchronizer };