@authup/server-core 1.0.0-beta.4 → 1.0.0-beta.40

package/dist/app/modules/config/read/types.d.ts

@@ -0,0 +1,9 @@
+export type ConfigReadFsOptions = {
+    cwd?: string;
+    file?: string | string[];
+};
+export type ConfigRawReadOptions = {
+    fs?: boolean | ConfigReadFsOptions;
+    env?: boolean;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/app/modules/config/read/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/config/read/types.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,mBAAmB,GAAG;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;CAC3B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IAC/B,EAAE,CAAC,EAAE,OAAO,GAAG,mBAAmB,CAAC;IACnC,GAAG,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC"}

package/dist/app/modules/config/read/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/app/modules/config/types.d.ts

@@ -0,0 +1,190 @@
+import type { RedisClient, RedisClientOptions } from '@authup/server-kit';
+import type { ParseOptions as CookieOptions } from '@routup/basic/cookie';
+import type { OptionsInput as PrometheusOptions } from '@routup/prometheus';
+import type { ParseOptions as QueryOptions } from '@routup/basic/query';
+import type { OptionsInput as RateLimitOptions } from '@routup/rate-limit';
+import type { UIOptions as SwaggerUIOptions } from '@routup/swagger';
+import type { Options as BodyOptions } from '@routup/basic/body';
+import type { CorsOptions } from 'cors';
+import type { DataSourceOptions } from 'typeorm';
+import type { SMTPOptions } from '../mail/adapter/smtp/types.ts';
+export type Config = {
+    /**
+     * Application environment (e.g., 'production').
+     * default: 'development'
+     */
+    env: string;
+    /**
+     * default: process.cwd()
+     */
+    rootPath: string;
+    /**
+     * Relative or absolute path.
+     * If the path is relative, the rootPath will be appended.
+     *
+     * default: writable
+     */
+    writableDirectoryPath: string;
+    /**
+     * default: true
+     */
+    logger: boolean;
+    /**
+     * default driver: better-sqlite3
+     */
+    db?: DataSourceOptions;
+    /**
+     * default: true
+     */
+    redis: string | boolean | RedisClient | RedisClientOptions;
+    /**
+     * default: false
+     */
+    smtp: string | boolean | SMTPOptions;
+    /**
+     * Application port number.
+     * default: 3001
+     */
+    port: number;
+    /**
+     * Application host.
+     * default: localhost
+     */
+    host: string;
+    /**
+     * API base URL.
+     * default: http://localhost:3001
+     */
+    publicUrl: string;
+    /**
+     * use body middleware
+     *
+     * default: true
+     */
+    middlewareBody: boolean | BodyOptions;
+    /**
+     * use cors middleware
+     *
+     * default: true
+     */
+    middlewareCors: boolean | CorsOptions;
+    /**
+     * use cookie middleware
+     *
+     * default: true
+     */
+    middlewareCookie: boolean | CookieOptions;
+    /**
+     * Prometheus middleware (options)
+     */
+    middlewarePrometheus: boolean | PrometheusOptions;
+    /**
+     * Query middleware (options)
+     */
+    middlewareQuery: boolean | QueryOptions;
+    /**
+     * Rate limit middleware (options).
+     */
+    middlewareRateLimit: boolean | RateLimitOptions;
+    /**
+     * Swagger middleware (options)
+     *
+     * default: true
+     */
+    middlewareSwagger: boolean | SwaggerUIOptions;
+    /**
+     * Refresh token validity in seconds (default: 259,200s / 3 days).
+     * default: 259_200s (3days)
+     */
+    tokenRefreshMaxAge: number;
+    /**
+     * Access token validity in seconds (default: 3600s / 1 hour).
+     * default: 3_600s (1h)
+     */
+    tokenAccessMaxAge: number;
+    /**
+     * Enable user registration?
+     * default: false
+     */
+    registrationEnabled: boolean;
+    /**
+     * Require email verification for registration or login?
+     * default: false
+     */
+    emailVerificationEnabled: boolean;
+    /**
+     * Allow password reset via email?
+     * default: false
+     */
+    passwordRecoveryEnabled: boolean;
+    /**
+     * default: false
+     */
+    clientAuthBasic: boolean;
+    /**
+     * Enable a client account for the default realm.
+     * default: false
+     */
+    clientSystemEnabled: boolean;
+    /**
+     * The secret of the default client.
+     */
+    clientSystemSecret: string;
+    /**
+     * Reset client secret on application startup.
+     * default: undefined
+     */
+    clientSystemSecretReset: boolean;
+    /**
+     * default: false
+     */
+    userAuthBasic: boolean;
+    /**
+     * Enable default admin user.
+     * default: true
+     */
+    userAdminEnabled: boolean;
+    /**
+     * The password of the default admin user.
+     * default: 'start123'
+     */
+    userAdminPassword: string;
+    /**
+     * Reset admin password on application startup.
+     * default: undefined
+     */
+    userAdminPasswordReset: boolean;
+    /**
+     * default: false
+     */
+    robotAuthBasic: boolean;
+    /**
+     * Enable a global robot account.
+     * default: false
+     */
+    robotAdminEnabled: boolean;
+    /**
+     * The secret of the default admin user.
+     * default: (**generated**)
+     */
+    robotAdminSecret: string;
+    /**
+     * Reset the robot secret on application startup.
+     * default: false
+     */
+    robotAdminSecretReset: boolean;
+    /**
+     * default: []
+     */
+    permissions: string | string[];
+    /**
+     * Auto-assign system.default policy to new permissions without policies.
+     * Creates an entry in the permission-policy junction table.
+     * default: true
+     *
+     * @deprecated Will be removed in v2.0.0. External systems should assign policies explicitly.
+     */
+    permissionsDefaultPolicyAssignment: boolean;
+};
+export type ConfigInput = Partial<Config>;
+//# sourceMappingURL=types.d.ts.map

package/dist/app/modules/config/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/config/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,KAAK,EAAE,YAAY,IAAI,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,KAAK,EAAE,YAAY,IAAI,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,KAAK,EAAE,YAAY,IAAI,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,KAAK,EAAE,YAAY,IAAI,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,KAAK,EAAE,SAAS,IAAI,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,KAAK,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AACxC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAEjE,MAAM,MAAM,MAAM,GAAG;IACjB;;;OAGG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,qBAAqB,EAAE,MAAM,CAAC;IAI9B;;OAEG;IACH,MAAM,EAAE,OAAO,CAAC;IAEhB;;OAEG;IACH,EAAE,CAAC,EAAE,iBAAiB,CAAC;IAEvB;;OAEG;IACH,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,WAAW,GAAG,kBAAkB,CAAC;IAE3D;;OAEG;IACH,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,WAAW,CAAC;IAIrC;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAC;IAIlB;;;;OAIG;IACH,cAAc,EAAE,OAAO,GAAG,WAAW,CAAC;IAEtC;;;;OAIG;IACH,cAAc,EAAE,OAAO,GAAG,WAAW,CAAC;IAEtC;;;;OAIG;IACH,gBAAgB,EAAE,OAAO,GAAG,aAAa,CAAC;IAE1C;;OAEG;IACH,oBAAoB,EAAE,OAAO,GAAG,iBAAiB,CAAC;IAElD;;OAEG;IACH,eAAe,EAAE,OAAO,GAAG,YAAY,CAAC;IAExC;;OAEG;IACH,mBAAmB,EAAE,OAAO,GAAG,gBAAgB,CAAC;IAEhD;;;;OAIG;IACH,iBAAiB,EAAE,OAAO,GAAG,gBAAgB,CAAC;IAI9C;;;OAGG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAE3B;;;OAGG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAI1B;;;OAGG;IACH,mBAAmB,EAAE,OAAO,CAAC;IAE7B;;;OAGG;IACH,wBAAwB,EAAE,OAAO,CAAC;IAElC;;;OAGG;IACH,uBAAuB,EAAE,OAAO,CAAC;IAIjC;;OAEG;IACH,eAAe,EAAE,OAAO,CAAC;IAEzB;;;OAGG;IACH,mBAAmB,EAAE,OAAO,CAAC;IAE7B;;OAEG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAE3B;;;OAGG;IACH,uBAAuB,EAAE,OAAO,CAAC;IAIjC;;OAEG;IACH,aAAa,EAAE,OAAO,CAAC;IAEvB;;;OAGG;IACH,gBAAgB,EAAE,OAAO,CAAC;IAE1B;;;OAGG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAE1B;;;OAGG;IACH,sBAAsB,EAAE,OAAO,CAAC;IAIhC;;OAEG;IACH,cAAc,EAAE,OAAO,CAAC;IAExB;;;OAGG;IACH,iBAAiB,EAAE,OAAO,CAAC;IAE3B;;;OAGG;IACH,gBAAgB,EAAE,MAAM,CAAC;IAEzB;;;OAGG;IACH,qBAAqB,EAAE,OAAO,CAAC;IAI/B;;OAEG;IACH,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE/B;;;;;;OAMG;IACH,kCAAkC,EAAE,OAAO,CAAC;CAC/C,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC"}

package/dist/app/modules/config/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/app/modules/constants.d.ts

@@ -0,0 +1,17 @@
+export declare const ModuleName: {
+    readonly CONFIG: "config";
+    readonly LOGGER: "logger";
+    readonly CACHE: "cache";
+    readonly MAIL: "mail";
+    readonly RUNTIME: "runtime";
+    readonly SWAGGER: "swagger";
+    readonly DATABASE: "database";
+    readonly PROVISIONING: "provisioning";
+    readonly LDAP: "ldap";
+    readonly AUTHENTICATION: "authentication";
+    readonly IDENTITY: "identity";
+    readonly OAUTH2: "oauth2";
+    readonly COMPONENTS: "components";
+    readonly HTTP: "http";
+};
+//# sourceMappingURL=constants.d.ts.map

package/dist/app/modules/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/app/modules/constants.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;CAeb,CAAC"}

package/dist/app/modules/constants.mjs

@@ -0,0 +1,21 @@
+//#region src/app/modules/constants.ts
+const ModuleName = {
+	CONFIG: "config",
+	LOGGER: "logger",
+	CACHE: "cache",
+	MAIL: "mail",
+	RUNTIME: "runtime",
+	SWAGGER: "swagger",
+	DATABASE: "database",
+	PROVISIONING: "provisioning",
+	LDAP: "ldap",
+	AUTHENTICATION: "authentication",
+	IDENTITY: "identity",
+	OAUTH2: "oauth2",
+	COMPONENTS: "components",
+	HTTP: "http"
+};
+//#endregion
+export { ModuleName };
+
+//# sourceMappingURL=constants.mjs.map

package/dist/app/modules/constants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.mjs","names":["ModuleName","CONFIG","LOGGER","CACHE","MAIL","RUNTIME","SWAGGER","DATABASE","PROVISIONING","LDAP","AUTHENTICATION","IDENTITY","OAUTH2","COMPONENTS","HTTP"],"sources":["../../../src/app/modules/constants.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport const ModuleName = {\n    CONFIG: 'config',\n    LOGGER: 'logger',\n    CACHE: 'cache',\n    MAIL: 'mail',\n    RUNTIME: 'runtime',\n    SWAGGER: 'swagger',\n    DATABASE: 'database',\n    PROVISIONING: 'provisioning',\n    LDAP: 'ldap',\n    AUTHENTICATION: 'authentication',\n    IDENTITY: 'identity',\n    OAUTH2: 'oauth2',\n    COMPONENTS: 'components',\n    HTTP: 'http',\n} as const;\n"],"mappings":";AAOA,MAAaA,aAAa;CACtBC,QAAQ;CACRC,QAAQ;CACRC,OAAO;CACPC,MAAM;CACNC,SAAS;CACTC,SAAS;CACTC,UAAU;CACVC,cAAc;CACdC,MAAM;CACNC,gBAAgB;CAChBC,UAAU;CACVC,QAAQ;CACRC,YAAY;CACZC,MAAM;CACV"}

package/dist/app/modules/database/constants.d.ts

@@ -0,0 +1,6 @@
+import type { DataSource } from 'typeorm';
+import { TypedToken } from 'eldin';
+export declare const DatabaseInjectionKey: {
+    readonly DataSource: TypedToken<DataSource>;
+};
+//# sourceMappingURL=constants.d.ts.map

package/dist/app/modules/database/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/database/constants.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAEnC,eAAO,MAAM,oBAAoB;;CAAoE,CAAC"}

package/dist/app/modules/database/constants.mjs

@@ -0,0 +1,7 @@
+import { TypedToken } from "eldin";
+//#region src/app/modules/database/constants.ts
+const DatabaseInjectionKey = { DataSource: new TypedToken("DataSource") };
+//#endregion
+export { DatabaseInjectionKey };
+
+//# sourceMappingURL=constants.mjs.map

package/dist/app/modules/database/constants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.mjs","names":["TypedToken","DatabaseInjectionKey","DataSource"],"sources":["../../../../src/app/modules/database/constants.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { DataSource } from 'typeorm';\nimport { TypedToken } from 'eldin';\n\nexport const DatabaseInjectionKey = { DataSource: new TypedToken<DataSource>('DataSource') } as const;\n"],"mappings":";;AAUA,MAAaC,uBAAuB,EAAEC,YAAY,IAAIF,WAAuB,aAAA,EAAc"}

package/dist/app/modules/database/index.d.ts

@@ -0,0 +1,4 @@
+export * from './constants.ts';
+export * from './module.ts';
+export * from './repositories/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/app/modules/database/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/database/index.ts"],"names":[],"mappings":"AAOA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,yBAAyB,CAAC"}

package/dist/app/modules/database/index.mjs

@@ -0,0 +1,26 @@
+import { DatabaseInjectionKey } from "./constants.mjs";
+import { DatabaseModule } from "./module.mjs";
+import { RealmRepositoryAdapter } from "./repositories/realm/repository.mjs";
+import { ClientRepositoryAdapter } from "./repositories/client/repository.mjs";
+import { ClientPermissionRepositoryAdapter } from "./repositories/client-permission/repository.mjs";
+import { ClientRoleRepositoryAdapter } from "./repositories/client-role/repository.mjs";
+import { ClientScopeRepositoryAdapter } from "./repositories/client-scope/repository.mjs";
+import { IdentityProviderRepositoryAdapter } from "./repositories/identity-provider/repository.mjs";
+import { PermissionRepositoryAdapter } from "./repositories/permission/repository.mjs";
+import { PermissionPolicyRepositoryAdapter } from "./repositories/permission-policy/repository.mjs";
+import { PermissionDatabaseProvider } from "./repositories/permission-provider/module.mjs";
+import { PolicyRepositoryAdapter } from "./repositories/policy/repository.mjs";
+import { RobotRepositoryAdapter } from "./repositories/robot/repository.mjs";
+import { RobotPermissionRepositoryAdapter } from "./repositories/robot-permission/repository.mjs";
+import { RobotRoleRepositoryAdapter } from "./repositories/robot-role/repository.mjs";
+import { RoleRepositoryAdapter } from "./repositories/role/repository.mjs";
+import { RoleAttributeRepositoryAdapter } from "./repositories/role-attribute/repository.mjs";
+import { RolePermissionRepositoryAdapter } from "./repositories/role-permission/repository.mjs";
+import { ScopeRepositoryAdapter } from "./repositories/scope/repository.mjs";
+import { UserRepositoryAdapter } from "./repositories/user/repository.mjs";
+import { UserAttributeRepositoryAdapter } from "./repositories/user-attribute/repository.mjs";
+import { UserPermissionRepositoryAdapter } from "./repositories/user-permission/repository.mjs";
+import { UserRoleRepositoryAdapter } from "./repositories/user-role/repository.mjs";
+import { IdentityProviderRoleMappingRepositoryAdapter } from "./repositories/identity-provider-role-mapping/repository.mjs";
+import "./repositories/index.mjs";
+export { ClientPermissionRepositoryAdapter, ClientRepositoryAdapter, ClientRoleRepositoryAdapter, ClientScopeRepositoryAdapter, DatabaseInjectionKey, DatabaseModule, IdentityProviderRepositoryAdapter, IdentityProviderRoleMappingRepositoryAdapter, PermissionDatabaseProvider, PermissionPolicyRepositoryAdapter, PermissionRepositoryAdapter, PolicyRepositoryAdapter, RealmRepositoryAdapter, RobotPermissionRepositoryAdapter, RobotRepositoryAdapter, RobotRoleRepositoryAdapter, RoleAttributeRepositoryAdapter, RolePermissionRepositoryAdapter, RoleRepositoryAdapter, ScopeRepositoryAdapter, UserAttributeRepositoryAdapter, UserPermissionRepositoryAdapter, UserRepositoryAdapter, UserRoleRepositoryAdapter };

package/dist/app/modules/database/module.d.ts

@@ -0,0 +1,30 @@
+import type { DataSourceOptions } from 'typeorm';
+import { DataSource } from 'typeorm';
+import { DataSourceOptionsBuilder } from '../../../adapters/database/index.ts';
+import type { IModule } from 'orkos';
+import type { IContainer } from 'eldin';
+export type DatabaseModuleOptions = {
+    prepareBuild?: (container: IContainer) => Promise<void>;
+    setup?: (container: IContainer, options: DataSourceOptions) => Promise<void>;
+    migrate?: (container: IContainer, dataSource: DataSource) => Promise<void>;
+};
+export declare class DatabaseModule implements IModule {
+    readonly name: string;
+    readonly dependencies: string[];
+    protected optionsBuilder: DataSourceOptionsBuilder;
+    protected options: DatabaseModuleOptions;
+    constructor(options?: DatabaseModuleOptions);
+    setup(container: IContainer): Promise<void>;
+    teardown(container: IContainer): Promise<void>;
+    protected setupDatabase(container: IContainer, options: DataSourceOptions): Promise<void>;
+    protected migrate(container: IContainer, dataSource: DataSource): Promise<void>;
+    /**
+     * Load data source options for connection.
+     *
+     * @protected
+     */
+    protected buildDataSourceOptions(container: IContainer): Promise<DataSourceOptions>;
+    protected registerRepositories(container: IContainer, dataSource: DataSource): void;
+    protected registerEventPublisher(container: IContainer): void;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/app/modules/database/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/database/module.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,UAAU,EAAmB,MAAM,SAAS,CAAC;AAQtD,OAAO,EACH,wBAAwB,EAM3B,MAAM,qCAAqC,CAAC;AAG7C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAIrC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAGxC,MAAM,MAAM,qBAAqB,GAAG;IAChC,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9E,CAAC;AAEF,qBAAa,cAAe,YAAW,OAAO;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAEhC,SAAS,CAAC,cAAc,EAAG,wBAAwB,CAAC;IAEpD,SAAS,CAAC,OAAO,EAAE,qBAAqB,CAAC;gBAE7B,OAAO,GAAE,qBAA0B;IAQzC,KAAK,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAqC3C,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;cAcpC,aAAa,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;cAgB/E,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAUrF;;;;OAIG;cACa,sBAAsB,CAAC,SAAS,EAAE,UAAU,GAAI,OAAO,CAAC,iBAAiB,CAAC;IAgC1F,SAAS,CAAC,oBAAoB,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,GAAI,IAAI;IAkBpF,SAAS,CAAC,sBAAsB,CAAC,SAAS,EAAE,UAAU;CAazD"}

package/dist/app/modules/database/module.mjs

@@ -0,0 +1,116 @@
+import { setDomainEventPublisher } from "../../../adapters/database/event-publisher/module.mjs";
+import "../../../adapters/database/event-publisher/index.mjs";
+import { CacheInjectionKey } from "../cache/constants.mjs";
+import { ModuleName } from "../constants.mjs";
+import { ConfigInjectionKey } from "../config/constants.mjs";
+import "../config/index.mjs";
+import "../cache/index.mjs";
+import { DatabaseInjectionKey } from "./constants.mjs";
+import { DatabaseQueryResultCache } from "../../../adapters/database/cache/module.mjs";
+import { DataSourceOptionsBuilder } from "../../../adapters/database/data-source/options/module.mjs";
+import { setDataSourceSync, unsetDataSourceSync } from "../../../adapters/database/data-source/singleton.mjs";
+import { isDatabaseTypeSupported, isDatabaseTypeSupportedForEnvironment } from "../../../adapters/database/helpers/is-supported.mjs";
+import "../../../adapters/database/index.mjs";
+import { LoggerInjectionKey } from "../logger/constants.mjs";
+import "../logger/index.mjs";
+import { DataSource, InstanceChecker } from "typeorm";
+import { DomainEventPublisher, DomainEventRedisPublisher, DomainEventSocketPublisher, createRedisClient } from "@authup/server-kit";
+import { AuthupError } from "@authup/errors";
+import { checkDatabase, createDatabase, setDataSource, synchronizeDatabaseSchema, unsetDataSource } from "typeorm-extension";
+//#region src/app/modules/database/module.ts
+var DatabaseModule = class {
+	name;
+	dependencies;
+	optionsBuilder;
+	options;
+	constructor(options = {}) {
+		this.name = ModuleName.DATABASE;
+		this.dependencies = [ModuleName.CONFIG, ModuleName.LOGGER];
+		this.optionsBuilder = new DataSourceOptionsBuilder();
+		this.options = options;
+	}
+	async setup(container) {
+		const logger = container.resolve(LoggerInjectionKey);
+		if (this.options.prepareBuild) await this.options.prepareBuild(container);
+		const dataSourceOptions = await this.buildDataSourceOptions(container);
+		if (this.options.setup) await this.options.setup(container, dataSourceOptions);
+		else await this.setupDatabase(container, dataSourceOptions);
+		const dataSource = new DataSource(dataSourceOptions);
+		logger.debug("Establishing database connection...");
+		await dataSource.initialize();
+		logger.debug("Established database connection.");
+		setDataSource(dataSource);
+		setDataSourceSync(dataSource);
+		if (this.options.migrate) await this.options.migrate(container, dataSource);
+		else await this.migrate(container, dataSource);
+		container.register(DatabaseInjectionKey.DataSource, { useValue: dataSource });
+		this.registerRepositories(container, dataSource);
+		this.registerEventPublisher(container);
+	}
+	async teardown(container) {
+		const dataSource = container.tryResolve(DatabaseInjectionKey.DataSource);
+		if (dataSource.success) {
+			await dataSource.data.destroy();
+			container.unregister(DatabaseInjectionKey.DataSource);
+		}
+		unsetDataSource();
+		unsetDataSourceSync();
+	}
+	async setupDatabase(container, options) {
+		const logger = container.resolve(LoggerInjectionKey);
+		if (!(await checkDatabase({ options })).exists) {
+			logger.debug("Creating database...");
+			await createDatabase({
+				options,
+				synchronize: false,
+				ifNotExist: true
+			});
+			logger.debug("Created database");
+		}
+	}
+	async migrate(container, dataSource) {
+		const logger = container.resolve(LoggerInjectionKey);
+		logger.debug("Migrating database...");
+		await synchronizeDatabaseSchema(dataSource);
+		logger.debug("Migrated database");
+	}
+	/**
+	* Load data source options for connection.
+	*
+	* @protected
+	*/ async buildDataSourceOptions(container) {
+		const config = container.resolve(ConfigInjectionKey);
+		let options;
+		if (config.db) options = this.optionsBuilder.buildWith(config.db);
+		else options = this.optionsBuilder.buildWithEnv();
+		if (!isDatabaseTypeSupported(options.type)) throw new AuthupError(`Database type ${options.type} is not supported (only: mysql, better-sqlite3 and postgres).`);
+		if (!isDatabaseTypeSupportedForEnvironment(options.type, config.env)) throw new AuthupError(`Database type ${options.type} is not supported for ${config.env}.`);
+		const cacheResult = container.tryResolve(CacheInjectionKey);
+		if (cacheResult.success) Object.assign(options, { cache: { provider() {
+			return new DatabaseQueryResultCache(cacheResult.data);
+		} } });
+		return options;
+	}
+	registerRepositories(container, dataSource) {
+		const entities = dataSource.options.entities || [];
+		if (!Array.isArray(entities)) return;
+		for (const entity of entities) {
+			if (InstanceChecker.isEntitySchema(entity)) continue;
+			container.register(entity, { useFactory: () => dataSource.getRepository(entity) });
+		}
+	}
+	registerEventPublisher(container) {
+		const config = container.resolve(ConfigInjectionKey);
+		const publisher = new DomainEventPublisher();
+		if (config.redis) {
+			const client = createRedisClient(config.redis);
+			publisher.mount(new DomainEventRedisPublisher(client));
+			publisher.mount(new DomainEventSocketPublisher(client));
+		}
+		setDomainEventPublisher(publisher);
+	}
+};
+//#endregion
+export { DatabaseModule };
+
+//# sourceMappingURL=module.mjs.map

package/dist/app/modules/database/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["DomainEventPublisher","DomainEventRedisPublisher","DomainEventSocketPublisher","createRedisClient","AuthupError","DataSource","InstanceChecker","checkDatabase","createDatabase","setDataSource","synchronizeDatabaseSchema","unsetDataSource","DataSourceOptionsBuilder","DatabaseQueryResultCache","isDatabaseTypeSupported","isDatabaseTypeSupportedForEnvironment","setDataSourceSync","unsetDataSourceSync","setDomainEventPublisher","CacheInjectionKey","ModuleName","DatabaseInjectionKey","ConfigInjectionKey","LoggerInjectionKey","DatabaseModule","name","dependencies","optionsBuilder","options","DATABASE","CONFIG","LOGGER","setup","container","logger","resolve","prepareBuild","dataSourceOptions","buildDataSourceOptions","setupDatabase","dataSource","debug","initialize","migrate","register","useValue","registerRepositories","registerEventPublisher","teardown","tryResolve","success","data","destroy","unregister","check","exists","synchronize","ifNotExist","config","db","buildWith","buildWithEnv","type","env","cacheResult","Object","assign","cache","provider","entities","Array","isArray","entity","isEntitySchema","useFactory","getRepository","publisher","redis","client","mount"],"sources":["../../../../src/app/modules/database/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DomainEventPublisher, \n    DomainEventRedisPublisher,\n    DomainEventSocketPublisher, \n    createRedisClient,\n} from '@authup/server-kit';\nimport { AuthupError } from '@authup/errors';\nimport type { DataSourceOptions } from 'typeorm';\nimport { DataSource, InstanceChecker } from 'typeorm';\nimport {\n    checkDatabase,\n    createDatabase,\n    setDataSource,\n    synchronizeDatabaseSchema,\n    unsetDataSource,\n} from 'typeorm-extension';\nimport {\n    DataSourceOptionsBuilder,\n    DatabaseQueryResultCache,\n    isDatabaseTypeSupported,\n    isDatabaseTypeSupportedForEnvironment,\n    setDataSourceSync,\n    unsetDataSourceSync,\n} from '../../../adapters/database/index.ts';\nimport { setDomainEventPublisher } from '../../../adapters/database/event-publisher/index.ts';\nimport { CacheInjectionKey } from '../cache/index.ts';\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\nimport { DatabaseInjectionKey } from './constants.ts';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport type { IContainer } from 'eldin';\nimport { LoggerInjectionKey } from '../logger/index.ts';\n\nexport type DatabaseModuleOptions = {\n    prepareBuild?: (container: IContainer) => Promise<void>;\n    setup?: (container: IContainer, options: DataSourceOptions) => Promise<void>;\n    migrate?: (container: IContainer, dataSource: DataSource) => Promise<void>;\n};\n\nexport class DatabaseModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    protected optionsBuilder : DataSourceOptionsBuilder;\n\n    protected options: DatabaseModuleOptions;\n\n    constructor(options: DatabaseModuleOptions = {}) {\n        this.name = ModuleName.DATABASE;\n        this.dependencies = [ModuleName.CONFIG, ModuleName.LOGGER];\n\n        this.optionsBuilder = new DataSourceOptionsBuilder();\n        this.options = options;\n    }\n\n    async setup(container: IContainer): Promise<void> {\n        const logger = container.resolve(LoggerInjectionKey);\n\n        if (this.options.prepareBuild) {\n            await this.options.prepareBuild(container);\n        }\n\n        const dataSourceOptions = await this.buildDataSourceOptions(container);\n\n        if (this.options.setup) {\n            await this.options.setup(container, dataSourceOptions);\n        } else {\n            await this.setupDatabase(container, dataSourceOptions);\n        }\n\n        const dataSource = new DataSource(dataSourceOptions);\n\n        logger.debug('Establishing database connection...');\n        await dataSource.initialize();\n        logger.debug('Established database connection.');\n\n        // todo: maybe remove this\n        setDataSource(dataSource);\n        setDataSourceSync(dataSource);\n\n        if (this.options.migrate) {\n            await this.options.migrate(container, dataSource);\n        } else {\n            await this.migrate(container, dataSource);\n        }\n\n        container.register(DatabaseInjectionKey.DataSource, { useValue: dataSource });\n\n        this.registerRepositories(container, dataSource);\n        this.registerEventPublisher(container);\n    }\n\n    async teardown(container: IContainer): Promise<void> {\n        const dataSource = container.tryResolve(DatabaseInjectionKey.DataSource);\n        if (dataSource.success) {\n            await dataSource.data.destroy();\n\n            container.unregister(DatabaseInjectionKey.DataSource);\n        }\n\n        unsetDataSource();\n        unsetDataSourceSync();\n    }\n\n    // ----------------------------------------------------\n\n    protected async setupDatabase(container: IContainer, options: DataSourceOptions): Promise<void> {\n        const logger = container.resolve(LoggerInjectionKey);\n\n        const check = await checkDatabase({ options });\n\n        if (!check.exists) {\n            logger.debug('Creating database...');\n            await createDatabase({\n                options,\n                synchronize: false,\n                ifNotExist: true, \n            });\n            logger.debug('Created database');\n        }\n    }\n\n    protected async migrate(container: IContainer, dataSource: DataSource): Promise<void> {\n        const logger = container.resolve(LoggerInjectionKey);\n\n        logger.debug('Migrating database...');\n        await synchronizeDatabaseSchema(dataSource);\n        logger.debug('Migrated database');\n    }\n\n    // ----------------------------------------------------\n\n    /**\n     * Load data source options for connection.\n     *\n     * @protected\n     */\n    protected async buildDataSourceOptions(container: IContainer) : Promise<DataSourceOptions> {\n        const config = container.resolve(ConfigInjectionKey);\n\n        let options : DataSourceOptions | undefined;\n        if (config.db) {\n            options = this.optionsBuilder.buildWith(config.db);\n        } else {\n            options = this.optionsBuilder.buildWithEnv();\n        }\n\n        if (!isDatabaseTypeSupported(options.type)) {\n            throw new AuthupError(`Database type ${options.type} is not supported (only: mysql, better-sqlite3 and postgres).`);\n        }\n\n        if (!isDatabaseTypeSupportedForEnvironment(options.type, config.env)) {\n            throw new AuthupError(`Database type ${options.type} is not supported for ${config.env}.`);\n        }\n\n        const cacheResult = container.tryResolve(CacheInjectionKey);\n        if (cacheResult.success) {\n            Object.assign(options, {\n                cache: {\n                    provider() {\n                        return new DatabaseQueryResultCache(cacheResult.data);\n                    },\n                },\n            } satisfies Partial<DataSourceOptions>);\n        }\n\n        return options;\n    }\n\n    protected registerRepositories(container: IContainer, dataSource: DataSource) : void {\n        const entities = dataSource.options.entities || [];\n        if (!Array.isArray(entities)) {\n            return;\n        }\n\n        for (const entity of entities) {\n            if (InstanceChecker.isEntitySchema(entity)) {\n                continue;\n            }\n\n            // eslint-disable-next-line @typescript-eslint/ban-ts-comment\n            // @ts-expect-error\n            container.register(entity, { useFactory: () => dataSource.getRepository(entity) });\n        }\n    }\n\n    // todo: move, wrong place\n    protected registerEventPublisher(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        const publisher = new DomainEventPublisher();\n        if (config.redis) {\n            const client = createRedisClient(config.redis);\n\n            publisher.mount(new DomainEventRedisPublisher(client));\n            publisher.mount(new DomainEventSocketPublisher(client));\n        }\n\n        setDomainEventPublisher(publisher);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA8CA,IAAawB,iBAAb,MAAaA;CACAC;CAEAC;CAECC;CAEAC;CAEV,YAAYA,UAAiC,EAAE,EAAE;AAC7C,OAAKH,OAAOL,WAAWS;AACvB,OAAKH,eAAe,CAACN,WAAWU,QAAQV,WAAWW,OAAO;AAE1D,OAAKJ,iBAAiB,IAAIf,0BAAAA;AAC1B,OAAKgB,UAAUA;;CAGnB,MAAMI,MAAMC,WAAsC;EAC9C,MAAMC,SAASD,UAAUE,QAAQZ,mBAAAA;AAEjC,MAAI,KAAKK,QAAQQ,aACb,OAAM,KAAKR,QAAQQ,aAAaH,UAAAA;EAGpC,MAAMI,oBAAoB,MAAM,KAAKC,uBAAuBL,UAAAA;AAE5D,MAAI,KAAKL,QAAQI,MACb,OAAM,KAAKJ,QAAQI,MAAMC,WAAWI,kBAAAA;MAEpC,OAAM,KAAKE,cAAcN,WAAWI,kBAAAA;EAGxC,MAAMG,aAAa,IAAInC,WAAWgC,kBAAAA;AAElCH,SAAOO,MAAM,sCAAA;AACb,QAAMD,WAAWE,YAAU;AAC3BR,SAAOO,MAAM,mCAAA;AAGbhC,gBAAc+B,WAAAA;AACdxB,oBAAkBwB,WAAAA;AAElB,MAAI,KAAKZ,QAAQe,QACb,OAAM,KAAKf,QAAQe,QAAQV,WAAWO,WAAAA;MAEtC,OAAM,KAAKG,QAAQV,WAAWO,WAAAA;AAGlCP,YAAUW,SAASvB,qBAAqBhB,YAAY,EAAEwC,UAAUL,YAAW,CAAA;AAE3E,OAAKM,qBAAqBb,WAAWO,WAAAA;AACrC,OAAKO,uBAAuBd,UAAAA;;CAGhC,MAAMe,SAASf,WAAsC;EACjD,MAAMO,aAAaP,UAAUgB,WAAW5B,qBAAqBhB,WAAU;AACvE,MAAImC,WAAWU,SAAS;AACpB,SAAMV,WAAWW,KAAKC,SAAO;AAE7BnB,aAAUoB,WAAWhC,qBAAqBhB,WAAU;;AAGxDM,mBAAAA;AACAM,uBAAAA;;CAKJ,MAAgBsB,cAAcN,WAAuBL,SAA2C;EAC5F,MAAMM,SAASD,UAAUE,QAAQZ,mBAAAA;AAIjC,MAAI,EAAC+B,MAFe/C,cAAc,EAAEqB,SAAQ,CAAA,EAEjC2B,QAAQ;AACfrB,UAAOO,MAAM,uBAAA;AACb,SAAMjC,eAAe;IACjBoB;IACA4B,aAAa;IACbC,YAAY;IAChB,CAAA;AACAvB,UAAOO,MAAM,mBAAA;;;CAIrB,MAAgBE,QAAQV,WAAuBO,YAAuC;EAClF,MAAMN,SAASD,UAAUE,QAAQZ,mBAAAA;AAEjCW,SAAOO,MAAM,wBAAA;AACb,QAAM/B,0BAA0B8B,WAAAA;AAChCN,SAAOO,MAAM,oBAAA;;;;;;IAUjB,MAAgBH,uBAAuBL,WAAoD;EACvF,MAAMyB,SAASzB,UAAUE,QAAQb,mBAAAA;EAEjC,IAAIM;AACJ,MAAI8B,OAAOC,GACP/B,WAAU,KAAKD,eAAeiC,UAAUF,OAAOC,GAAE;MAEjD/B,WAAU,KAAKD,eAAekC,cAAY;AAG9C,MAAI,CAAC/C,wBAAwBc,QAAQkC,KAAI,CACrC,OAAM,IAAI1D,YAAY,iBAAiBwB,QAAQkC,KAAK,+DAA8D;AAGtH,MAAI,CAAC/C,sCAAsCa,QAAQkC,MAAMJ,OAAOK,IAAG,CAC/D,OAAM,IAAI3D,YAAY,iBAAiBwB,QAAQkC,KAAK,wBAAwBJ,OAAOK,IAAI,GAAE;EAG7F,MAAMC,cAAc/B,UAAUgB,WAAW9B,kBAAAA;AACzC,MAAI6C,YAAYd,QACZe,QAAOC,OAAOtC,SAAS,EACnBuC,OAAO,EACHC,WAAAA;AACI,UAAO,IAAIvD,yBAAyBmD,YAAYb,KAAI;KAE5D,EACJ,CAAA;AAGJ,SAAOvB;;CAGDkB,qBAAqBb,WAAuBO,YAA+B;EACjF,MAAM6B,WAAW7B,WAAWZ,QAAQyC,YAAY,EAAE;AAClD,MAAI,CAACC,MAAMC,QAAQF,SAAAA,CACf;AAGJ,OAAK,MAAMG,UAAUH,UAAU;AAC3B,OAAI/D,gBAAgBmE,eAAeD,OAAAA,CAC/B;AAKJvC,aAAUW,SAAS4B,QAAQ,EAAEE,kBAAkBlC,WAAWmC,cAAcH,OAAAA,EAAQ,CAAA;;;CAK9EzB,uBAAuBd,WAAuB;EACpD,MAAMyB,SAASzB,UAAUE,QAAQb,mBAAAA;EAEjC,MAAMsD,YAAY,IAAI5E,sBAAAA;AACtB,MAAI0D,OAAOmB,OAAO;GACd,MAAMC,SAAS3E,kBAAkBuD,OAAOmB,MAAK;AAE7CD,aAAUG,MAAM,IAAI9E,0BAA0B6E,OAAAA,CAAAA;AAC9CF,aAAUG,MAAM,IAAI7E,2BAA2B4E,OAAAA,CAAAA;;AAGnD5D,0BAAwB0D,UAAAA"}

package/dist/app/modules/database/repositories/bindings.d.ts

@@ -0,0 +1,17 @@
+import type { EntityManager, EntityTarget, FindOptionsWhere, ObjectLiteral } from 'typeorm';
+import type { PermissionPolicyBinding } from '@authup/access';
+import type { Permission } from '@authup/core-kit';
+export type LoadBoundPermissionsOptions<E extends ObjectLiteral> = {
+    manager: EntityManager;
+    junctionTarget: EntityTarget<E>;
+    where: FindOptionsWhere<E>;
+    cachePrefix: string;
+    cacheKey: string;
+};
+type PermissionJunction = {
+    permission: Permission;
+    policy_id?: string | null;
+};
+export declare function loadBoundPermissions<E extends PermissionJunction & ObjectLiteral>(options: LoadBoundPermissionsOptions<E>): Promise<PermissionPolicyBinding[]>;
+export {};
+//# sourceMappingURL=bindings.d.ts.map

package/dist/app/modules/database/repositories/bindings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bindings.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/database/repositories/bindings.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,aAAa,EACb,YAAY,EAEZ,gBAAgB,EAChB,aAAa,EAChB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAc,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAInD,MAAM,MAAM,2BAA2B,CAAC,CAAC,SAAS,aAAa,IAAI;IAC/D,OAAO,EAAE,aAAa,CAAC;IACvB,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;IAChC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,KAAK,kBAAkB,GAAG;IACtB,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,CAAC;AAEF,wBAAsB,oBAAoB,CAAC,CAAC,SAAS,kBAAkB,GAAG,aAAa,EACnF,OAAO,EAAE,2BAA2B,CAAC,CAAC,CAAC,GACxC,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAiCpC"}

package/dist/app/modules/database/repositories/bindings.mjs

@@ -0,0 +1,40 @@
+import { PolicyRepository } from "../../../../adapters/database/domains/policy/repository.mjs";
+import "../../../../adapters/database/domains/policy/index.mjs";
+import { buildRedisKeyPath } from "@authup/server-kit";
+//#region src/app/modules/database/repositories/bindings.ts
+async function loadBoundPermissions(options) {
+	const entries = await options.manager.getRepository(options.junctionTarget).find({
+		where: options.where,
+		relations: { permission: true },
+		cache: {
+			id: buildRedisKeyPath({
+				prefix: options.cachePrefix,
+				key: options.cacheKey
+			}),
+			milliseconds: 6e4
+		}
+	});
+	const policyIds = /* @__PURE__ */ new Set();
+	for (const entry of entries) if (entry.policy_id) policyIds.add(entry.policy_id);
+	const policyTrees = await loadPolicyTrees(options.manager, [...policyIds]);
+	return entries.map((entry) => {
+		const policies = [];
+		if (entry.policy_id && policyTrees[entry.policy_id]) policies.push(policyTrees[entry.policy_id]);
+		return {
+			permission: entry.permission,
+			policies: policies.length > 0 ? policies : void 0
+		};
+	});
+}
+async function loadPolicyTrees(manager, policyIds) {
+	if (policyIds.length === 0) return {};
+	const policyRepository = new PolicyRepository(manager);
+	const trees = await Promise.all(policyIds.map((id) => policyRepository.findDescendantsTreeById(id).then((tree) => [id, tree])));
+	const result = {};
+	for (const [id, tree] of trees) if (tree) result[id] = tree;
+	return result;
+}
+//#endregion
+export { loadBoundPermissions };
+
+//# sourceMappingURL=bindings.mjs.map

package/dist/app/modules/database/repositories/bindings.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"bindings.mjs","names":["buildRedisKeyPath","PolicyRepository","loadBoundPermissions","options","repository","manager","getRepository","junctionTarget","relations","permission","entries","find","where","cache","id","prefix","cachePrefix","key","cacheKey","milliseconds","policyIds","Set","entry","policy_id","add","policyTrees","loadPolicyTrees","map","policies","push","length","undefined","policyRepository","trees","Promise","all","findDescendantsTreeById","then","tree","result"],"sources":["../../../../../src/app/modules/database/repositories/bindings.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    EntityManager,\n    EntityTarget,\n    FindOptionsRelations,\n    FindOptionsWhere,\n    ObjectLiteral,\n} from 'typeorm';\nimport type { BasePolicy, PermissionPolicyBinding } from '@authup/access';\nimport type { Permission } from '@authup/core-kit';\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport { PolicyRepository } from '../../../../adapters/database/domains/policy/index.ts';\n\nexport type LoadBoundPermissionsOptions<E extends ObjectLiteral> = {\n    manager: EntityManager;\n    junctionTarget: EntityTarget<E>;\n    where: FindOptionsWhere<E>;\n    cachePrefix: string;\n    cacheKey: string;\n};\n\ntype PermissionJunction = {\n    permission: Permission;\n    policy_id?: string | null;\n};\n\nexport async function loadBoundPermissions<E extends PermissionJunction & ObjectLiteral>(\n    options: LoadBoundPermissionsOptions<E>,\n): Promise<PermissionPolicyBinding[]> {\n    const repository = options.manager.getRepository(options.junctionTarget);\n    const relations = { permission: true } as FindOptionsRelations<E>;\n\n    const entries = await repository.find({\n        where: options.where,\n        relations,\n        cache: {\n            id: buildRedisKeyPath({ prefix: options.cachePrefix, key: options.cacheKey }),\n            milliseconds: 60_000,\n        },\n    });\n\n    const policyIds = new Set<string>();\n    for (const entry of entries) {\n        if (entry.policy_id) {\n            policyIds.add(entry.policy_id);\n        }\n    }\n\n    const policyTrees = await loadPolicyTrees(options.manager, [...policyIds]);\n\n    return entries.map((entry) => {\n        const policies: BasePolicy[] = [];\n        if (entry.policy_id && policyTrees[entry.policy_id]) {\n            policies.push(policyTrees[entry.policy_id]);\n        }\n\n        return {\n            permission: entry.permission,\n            policies: policies.length > 0 ? policies : undefined,\n        };\n    });\n}\n\nasync function loadPolicyTrees(\n    manager: EntityManager,\n    policyIds: string[],\n): Promise<Record<string, BasePolicy>> {\n    if (policyIds.length === 0) {\n        return {};\n    }\n\n    const policyRepository = new PolicyRepository(manager);\n    const trees = await Promise.all(\n        policyIds.map((id) => policyRepository.findDescendantsTreeById(id)\n            .then((tree) => [id, tree] as const)),\n    );\n\n    const result: Record<string, BasePolicy> = {};\n    for (const [id, tree] of trees) {\n        if (tree) {\n            result[id] = tree;\n        }\n    }\n    return result;\n}\n"],"mappings":";;;;AAgCA,eAAsBE,qBAClBC,SAAuC;CAKvC,MAAMO,UAAU,MAHGP,QAAQE,QAAQC,cAAcH,QAAQI,eAGnCH,CAAWO,KAAK;EAClCC,OAAOT,QAAQS;EACfJ,WAAAA,EAJgBC,YAAY,MAI5BD;EACAK,OAAO;GACHC,IAAId,kBAAkB;IAAEe,QAAQZ,QAAQa;IAAaC,KAAKd,QAAQe;IAAS,CAAA;GAC3EC,cAAc;GAClB;EACJ,CAAA;CAEA,MAAMC,4BAAY,IAAIC,KAAAA;AACtB,MAAK,MAAMC,SAASZ,QAChB,KAAIY,MAAMC,UACNH,WAAUI,IAAIF,MAAMC,UAAS;CAIrC,MAAME,cAAc,MAAMC,gBAAgBvB,QAAQE,SAAS,CAAA,GAAIe,UAAU,CAAA;AAEzE,QAAOV,QAAQiB,KAAKL,UAAAA;EAChB,MAAMM,WAAyB,EAAE;AACjC,MAAIN,MAAMC,aAAaE,YAAYH,MAAMC,WACrCK,UAASC,KAAKJ,YAAYH,MAAMC,WAAU;AAG9C,SAAO;GACHd,YAAYa,MAAMb;GAClBmB,UAAUA,SAASE,SAAS,IAAIF,WAAWG,KAAAA;GAC/C;GACJ;;AAGJ,eAAeL,gBACXrB,SACAe,WAAmB;AAEnB,KAAIA,UAAUU,WAAW,EACrB,QAAO,EAAC;CAGZ,MAAME,mBAAmB,IAAI/B,iBAAiBI,QAAAA;CAC9C,MAAM4B,QAAQ,MAAMC,QAAQC,IACxBf,UAAUO,KAAKb,OAAOkB,iBAAiBI,wBAAwBtB,GAAAA,CAC1DuB,MAAMC,SAAS,CAACxB,IAAIwB,KAAK,CAAA,CAAA,CAAA;CAGlC,MAAMC,SAAqC,EAAC;AAC5C,MAAK,MAAM,CAACzB,IAAIwB,SAASL,MACrB,KAAIK,KACAC,QAAOzB,MAAMwB;AAGrB,QAAOC"}

package/dist/app/modules/database/repositories/client/index.d.ts

@@ -0,0 +1,2 @@
+export * from './repository.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/app/modules/database/repositories/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/client/index.ts"],"names":[],"mappings":"AAOA,cAAc,iBAAiB,CAAC"}

package/dist/app/modules/database/repositories/client/index.mjs

@@ -0,0 +1,2 @@
+import { ClientRepositoryAdapter } from "./repository.mjs";
+export { ClientRepositoryAdapter };

package/dist/app/modules/database/repositories/client/repository.d.ts

@@ -0,0 +1,30 @@
+import type { Client, Realm, Role } from '@authup/core-kit';
+import type { PermissionPolicyBinding } from '@authup/access';
+import type { Repository } from 'typeorm';
+import type { EntityRepositoryFindManyResult, IClientRepository } from '../../../../../core/index.ts';
+export type ClientRepositoryAdapterContext = {
+    repository: Repository<Client>;
+    realmRepository: Repository<Realm>;
+};
+export declare class ClientRepositoryAdapter implements IClientRepository {
+    private readonly repository;
+    private readonly realmRepository;
+    constructor(ctx: ClientRepositoryAdapterContext);
+    findMany(query: Record<string, any>): Promise<EntityRepositoryFindManyResult<Client>>;
+    findOneById(id: string): Promise<Client | null>;
+    findOneByName(name: string, realmKey?: string): Promise<Client | null>;
+    findOne(id: string, query?: Record<string, any>, realmKey?: string): Promise<Client | null>;
+    findOneByIdOrName(idOrName: string, realm?: string): Promise<Client | null>;
+    findManyBy(where: Record<string, any>): Promise<Client[]>;
+    findOneBy(where: Record<string, any>): Promise<Client | null>;
+    findOneWithSecret(where: Record<string, any>): Promise<Client | null>;
+    create(data: Partial<Client>): Client;
+    merge(entity: Client, data: Partial<Client>): Client;
+    save(entity: Client): Promise<Client>;
+    remove(entity: Client): Promise<void>;
+    validateJoinColumns(data: Partial<Client>): Promise<void>;
+    checkUniqueness(data: Partial<Client>, existing?: Client): Promise<void>;
+    getBoundRoles(entity: string | Client): Promise<Role[]>;
+    getBoundPermissions(entity: string | Client): Promise<PermissionPolicyBinding[]>;
+}
+//# sourceMappingURL=repository.d.ts.map

package/dist/app/modules/database/repositories/client/repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/client/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAG9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,8BAA8B,EAAE,iBAAiB,EAAoB,MAAM,8BAA8B,CAAC;AAYxH,MAAM,MAAM,8BAA8B,GAAG;IACzC,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/B,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;CACtC,CAAC;AAEF,qBAAa,uBAAwB,YAAW,iBAAiB;IAC7D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IAEhD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;gBAEvC,GAAG,EAAE,8BAA8B;IAKzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAkD3F,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAIzC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IActE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA+C3F,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAM3E,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAIzD,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAI7D,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAY3E,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM;IAIrC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM;IAI9C,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIrC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAOzD,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAaxE,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAmBvD,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC;CAUzF"}