@authup/server-core 1.0.0-beta.4 → 1.0.0-beta.40

package/dist/core/entities/policy/service.mjs

@@ -0,0 +1,128 @@
+import { AbstractEntityService } from "../service.mjs";
+import { PolicyAttributesValidator } from "./attributes-validator.mjs";
+import { PermissionName, PolicyValidator, ValidatorGroup } from "@authup/core-kit";
+import { extendObject, isPropertySet, isUUID, removeObjectProperty } from "@authup/kit";
+import { BuiltInPolicyType, PolicyData } from "@authup/access";
+import { BadRequestError, NotFoundError } from "@ebec/http";
+//#region src/core/entities/policy/service.ts
+var PolicyService = class extends AbstractEntityService {
+	repository;
+	realmRepository;
+	validator;
+	attributesValidator;
+	constructor(ctx) {
+		super();
+		this.repository = ctx.repository;
+		this.realmRepository = ctx.realmRepository;
+		this.validator = new PolicyValidator();
+		this.attributesValidator = new PolicyAttributesValidator({});
+	}
+	async getMany(query, actor) {
+		await actor.permissionEvaluator.preEvaluateOneOf({ name: [
+			PermissionName.PERMISSION_READ,
+			PermissionName.PERMISSION_UPDATE,
+			PermissionName.PERMISSION_DELETE
+		] });
+		return this.repository.findMany(query);
+	}
+	async getOne(idOrName, actor, realm) {
+		await actor.permissionEvaluator.preEvaluateOneOf({ name: [
+			PermissionName.PERMISSION_READ,
+			PermissionName.PERMISSION_UPDATE,
+			PermissionName.PERMISSION_DELETE
+		] });
+		const entity = await this.repository.findOneByIdOrName(idOrName, realm);
+		if (!entity) throw new NotFoundError();
+		return entity;
+	}
+	async create(data, actor) {
+		const { entity } = await this.save(void 0, data, actor);
+		return entity;
+	}
+	async update(idOrName, data, actor) {
+		const { entity } = await this.save(idOrName, data, actor, { updateOnly: true });
+		return entity;
+	}
+	async save(idOrName, data, actor, options = {}) {
+		let group;
+		const realm = typeof data.realm_id === "string" ? await this.realmRepository.resolve(data.realm_id) : void 0;
+		let entity;
+		if (idOrName) {
+			const where = {};
+			if (isUUID(idOrName)) where.id = idOrName;
+			else where.name = idOrName;
+			if (realm) where.realm_id = realm.id;
+			entity = await this.repository.findOneBy(where);
+			if (!entity && options.updateOnly) throw new NotFoundError();
+		} else if (options.updateOnly) throw new NotFoundError();
+		if (entity) {
+			await actor.permissionEvaluator.preEvaluate({ name: PermissionName.PERMISSION_UPDATE });
+			group = ValidatorGroup.UPDATE;
+		} else {
+			await actor.permissionEvaluator.preEvaluate({ name: PermissionName.PERMISSION_CREATE });
+			group = ValidatorGroup.CREATE;
+		}
+		const validated = await this.validate(data, group);
+		await this.repository.validateJoinColumns(validated);
+		if (validated.parent && validated.parent.type !== BuiltInPolicyType.COMPOSITE) throw new BadRequestError("The parent policy must be of type group.");
+		if (entity) {
+			if (entity.built_in) throw new BadRequestError("A built-in policy can not be updated.");
+			await actor.permissionEvaluator.evaluate({
+				name: PermissionName.PERMISSION_UPDATE,
+				input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: {
+					...entity,
+					...validated
+				} })
+			});
+			await this.repository.checkUniqueness(validated, entity);
+			extendObject(entity, validated);
+			await this.repository.saveWithEA(entity);
+			return {
+				entity,
+				created: false
+			};
+		}
+		if (!isPropertySet(validated, "realm_id") && actor.identity) validated.realm_id = this.getActorRealmId(actor) || null;
+		await actor.permissionEvaluator.evaluate({
+			name: PermissionName.PERMISSION_CREATE,
+			input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: validated })
+		});
+		await this.repository.checkUniqueness(validated);
+		entity = this.repository.create(validated);
+		await this.repository.saveWithEA(entity);
+		return {
+			entity,
+			created: true
+		};
+	}
+	async validate(data, group) {
+		const validated = await this.validator.run(data, { group });
+		extendObject(validated, await this.attributesValidator.run(data));
+		if (Array.isArray(data.children)) {
+			if (data.type === BuiltInPolicyType.COMPOSITE) {
+				const promises = data.children.map((child) => this.validate(child, group));
+				validated.children = await Promise.all(promises);
+			}
+		}
+		return validated;
+	}
+	async delete(id, actor) {
+		await actor.permissionEvaluator.preEvaluate({ name: PermissionName.PERMISSION_DELETE });
+		const entity = await this.repository.findOneBy({ id });
+		if (!entity) throw new NotFoundError();
+		if (entity.built_in) throw new BadRequestError("A built-in policy can not be deleted.");
+		await actor.permissionEvaluator.evaluate({
+			name: PermissionName.PERMISSION_DELETE,
+			input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity })
+		});
+		const { id: entityId } = entity;
+		await this.repository.deleteFromTree(entity);
+		entity.id = entityId;
+		removeObjectProperty(entity, "children");
+		return entity;
+	}
+};
+//#endregion
+export { PolicyService };
+
+//# sourceMappingURL=service.mjs.map

package/dist/core/entities/policy/service.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.mjs","names":["BuiltInPolicyType","PolicyData","extendObject","isPropertySet","isUUID","removeObjectProperty","BadRequestError","NotFoundError","PermissionName","PolicyValidator","ValidatorGroup","AbstractEntityService","PolicyAttributesValidator","PolicyService","repository","realmRepository","validator","attributesValidator","ctx","getMany","query","actor","permissionEvaluator","preEvaluateOneOf","name","PERMISSION_READ","PERMISSION_UPDATE","PERMISSION_DELETE","findMany","getOne","idOrName","realm","entity","findOneByIdOrName","create","data","save","undefined","update","updateOnly","options","group","realm_id","resolve","where","id","findOneBy","preEvaluate","UPDATE","PERMISSION_CREATE","CREATE","validated","validate","validateJoinColumns","parent","type","COMPOSITE","built_in","evaluate","input","ATTRIBUTES","checkUniqueness","saveWithEA","created","identity","getActorRealmId","run","attributes","Array","isArray","children","promises","map","child","Promise","all","delete","entityId","deleteFromTree"],"sources":["../../../../src/core/entities/policy/service.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { BuiltInPolicyType, PolicyData } from '@authup/access';\nimport {\n \n    extendObject, \n    isPropertySet, \n    isUUID, \n    removeObjectProperty, \n} from '@authup/kit';\nimport { BadRequestError, NotFoundError } from '@ebec/http';\nimport {\n    PermissionName,\n    PolicyValidator,\n    ValidatorGroup,\n} from '@authup/core-kit';\nimport type { Policy } from '@authup/core-kit';\nimport type { ActorContext } from '../actor/types.ts';\nimport type { IRealmRepository } from '../realm/types.ts';\nimport { AbstractEntityService } from '../service.ts';\nimport type { EntityRepositoryFindManyResult } from '../types.ts';\nimport { PolicyAttributesValidator } from './attributes-validator.ts';\nimport type { IPolicyRepository, IPolicyService } from './types.ts';\n\nexport type PolicyServiceContext = {\n    repository: IPolicyRepository;\n    realmRepository: IRealmRepository;\n};\n\nexport class PolicyService extends AbstractEntityService implements IPolicyService {\n    protected repository: IPolicyRepository;\n\n    protected realmRepository: IRealmRepository;\n\n    protected validator: PolicyValidator;\n\n    protected attributesValidator: PolicyAttributesValidator;\n\n    constructor(ctx: PolicyServiceContext) {\n        super();\n        this.repository = ctx.repository;\n        this.realmRepository = ctx.realmRepository;\n        this.validator = new PolicyValidator();\n        this.attributesValidator = new PolicyAttributesValidator({});\n    }\n\n    async getMany(\n        query: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<EntityRepositoryFindManyResult<Policy>> {\n        await actor.permissionEvaluator.preEvaluateOneOf({\n            name: [\n                PermissionName.PERMISSION_READ,\n                PermissionName.PERMISSION_UPDATE,\n                PermissionName.PERMISSION_DELETE,\n            ],\n        });\n\n        return this.repository.findMany(query);\n    }\n\n    async getOne(\n        idOrName: string,\n        actor: ActorContext,\n        realm?: string,\n    ): Promise<Policy> {\n        await actor.permissionEvaluator.preEvaluateOneOf({\n            name: [\n                PermissionName.PERMISSION_READ,\n                PermissionName.PERMISSION_UPDATE,\n                PermissionName.PERMISSION_DELETE,\n            ],\n        });\n\n        const entity = await this.repository.findOneByIdOrName(idOrName, realm);\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        return entity;\n    }\n\n    async create(\n        data: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<Policy> {\n        const { entity } = await this.save(undefined, data, actor);\n        return entity;\n    }\n\n    async update(\n        idOrName: string,\n        data: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<Policy> {\n        const { entity } = await this.save(idOrName, data, actor, { updateOnly: true });\n        return entity;\n    }\n\n    async save(\n        idOrName: string | undefined,\n        data: Record<string, any>,\n        actor: ActorContext,\n        options: { updateOnly?: boolean } = {},\n    ): Promise<{\n        entity: Policy,\n        created: boolean \n    }> {\n        let group: string;\n\n        const realm = typeof data.realm_id === 'string' ?\n            await this.realmRepository.resolve(data.realm_id) :\n            undefined;\n\n        let entity: Policy | null | undefined;\n        if (idOrName) {\n            const where: Record<string, any> = {};\n            if (isUUID(idOrName)) {\n                where.id = idOrName;\n            } else {\n                where.name = idOrName;\n            }\n\n            if (realm) {\n                where.realm_id = realm.id;\n            }\n\n            entity = await this.repository.findOneBy(where);\n            if (!entity && options.updateOnly) {\n                throw new NotFoundError();\n            }\n        } else if (options.updateOnly) {\n            throw new NotFoundError();\n        }\n\n        if (entity) {\n            await actor.permissionEvaluator.preEvaluate({ name: PermissionName.PERMISSION_UPDATE });\n            group = ValidatorGroup.UPDATE;\n        } else {\n            await actor.permissionEvaluator.preEvaluate({ name: PermissionName.PERMISSION_CREATE });\n            group = ValidatorGroup.CREATE;\n        }\n\n        const validated = await this.validate(data, group);\n\n        await this.repository.validateJoinColumns(validated);\n\n        if (\n            validated.parent &&\n            validated.parent.type !== BuiltInPolicyType.COMPOSITE\n        ) {\n            throw new BadRequestError('The parent policy must be of type group.');\n        }\n\n        if (entity) {\n            if (entity.built_in) {\n                throw new BadRequestError('A built-in policy can not be updated.');\n            }\n\n            await actor.permissionEvaluator.evaluate({\n                name: PermissionName.PERMISSION_UPDATE,\n                input: new PolicyData({\n                    [BuiltInPolicyType.ATTRIBUTES]: {\n                        ...entity,\n                        ...validated,\n                    },\n                }),\n            });\n\n            await this.repository.checkUniqueness(validated, entity);\n\n            extendObject(entity, validated);\n\n            await this.repository.saveWithEA(entity);\n\n            return {\n                entity,\n                created: false, \n            };\n        }\n\n        if (!isPropertySet(validated, 'realm_id') && actor.identity) {\n            validated.realm_id = this.getActorRealmId(actor) || null;\n        }\n\n        await actor.permissionEvaluator.evaluate({\n            name: PermissionName.PERMISSION_CREATE,\n            input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: validated }),\n        });\n\n        await this.repository.checkUniqueness(validated);\n\n        entity = this.repository.create(validated);\n        await this.repository.saveWithEA(entity);\n\n        return {\n            entity,\n            created: true, \n        };\n    }\n\n    private async validate(\n        data: Record<string, any>,\n        group: string,\n    ): Promise<Policy> {\n        const validated = await this.validator.run(data, { group });\n\n        const attributes = await this.attributesValidator.run(data);\n        extendObject(validated, attributes);\n\n        if (Array.isArray(data.children)) {\n            if (data.type === BuiltInPolicyType.COMPOSITE) {\n                const promises = data.children.map(\n                    (child) => this.validate(child, group),\n                );\n                validated.children = await Promise.all(promises);\n            }\n        }\n\n        return validated;\n    }\n\n    async delete(\n        id: string,\n        actor: ActorContext,\n    ): Promise<Policy> {\n        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.PERMISSION_DELETE });\n\n        const entity = await this.repository.findOneBy({ id });\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        if (entity.built_in) {\n            throw new BadRequestError('A built-in policy can not be deleted.');\n        }\n\n        await actor.permissionEvaluator.evaluate({\n            name: PermissionName.PERMISSION_DELETE,\n            input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity }),\n        });\n\n        const { id: entityId } = entity;\n\n        await this.repository.deleteFromTree(entity);\n\n        entity.id = entityId;\n\n        // todo: remove after PolicyEntity - parent delete on cascade\n        removeObjectProperty(entity, 'children');\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;AAkCA,IAAaa,gBAAb,cAAmCF,sBAAAA;CACrBG;CAEAC;CAEAC;CAEAC;CAEV,YAAYC,KAA2B;AACnC,SAAK;AACL,OAAKJ,aAAaI,IAAIJ;AACtB,OAAKC,kBAAkBG,IAAIH;AAC3B,OAAKC,YAAY,IAAIP,iBAAAA;AACrB,OAAKQ,sBAAsB,IAAIL,0BAA0B,EAAC,CAAA;;CAG9D,MAAMO,QACFC,OACAC,OAC+C;AAC/C,QAAMA,MAAMC,oBAAoBC,iBAAiB,EAC7CC,MAAM;GACFhB,eAAeiB;GACfjB,eAAekB;GACflB,eAAemB;GAClB,EACL,CAAA;AAEA,SAAO,KAAKb,WAAWc,SAASR,MAAAA;;CAGpC,MAAMS,OACFC,UACAT,OACAU,OACe;AACf,QAAMV,MAAMC,oBAAoBC,iBAAiB,EAC7CC,MAAM;GACFhB,eAAeiB;GACfjB,eAAekB;GACflB,eAAemB;GAClB,EACL,CAAA;EAEA,MAAMK,SAAS,MAAM,KAAKlB,WAAWmB,kBAAkBH,UAAUC,MAAAA;AACjE,MAAI,CAACC,OACD,OAAM,IAAIzB,eAAAA;AAGd,SAAOyB;;CAGX,MAAME,OACFC,MACAd,OACe;EACf,MAAM,EAAEW,WAAW,MAAM,KAAKI,KAAKC,KAAAA,GAAWF,MAAMd,MAAAA;AACpD,SAAOW;;CAGX,MAAMM,OACFR,UACAK,MACAd,OACe;EACf,MAAM,EAAEW,WAAW,MAAM,KAAKI,KAAKN,UAAUK,MAAMd,OAAO,EAAEkB,YAAY,MAAK,CAAA;AAC7E,SAAOP;;CAGX,MAAMI,KACFN,UACAK,MACAd,OACAmB,UAAoC,EAAE,EAIvC;EACC,IAAIC;EAEJ,MAAMV,QAAQ,OAAOI,KAAKO,aAAa,WACnC,MAAM,KAAK3B,gBAAgB4B,QAAQR,KAAKO,SAAQ,GAChDL,KAAAA;EAEJ,IAAIL;AACJ,MAAIF,UAAU;GACV,MAAMc,QAA6B,EAAC;AACpC,OAAIxC,OAAO0B,SAAAA,CACPc,OAAMC,KAAKf;OAEXc,OAAMpB,OAAOM;AAGjB,OAAIC,MACAa,OAAMF,WAAWX,MAAMc;AAG3Bb,YAAS,MAAM,KAAKlB,WAAWgC,UAAUF,MAAAA;AACzC,OAAI,CAACZ,UAAUQ,QAAQD,WACnB,OAAM,IAAIhC,eAAAA;aAEPiC,QAAQD,WACf,OAAM,IAAIhC,eAAAA;AAGd,MAAIyB,QAAQ;AACR,SAAMX,MAAMC,oBAAoByB,YAAY,EAAEvB,MAAMhB,eAAekB,mBAAkB,CAAA;AACrFe,WAAQ/B,eAAesC;SACpB;AACH,SAAM3B,MAAMC,oBAAoByB,YAAY,EAAEvB,MAAMhB,eAAeyC,mBAAkB,CAAA;AACrFR,WAAQ/B,eAAewC;;EAG3B,MAAMC,YAAY,MAAM,KAAKC,SAASjB,MAAMM,MAAAA;AAE5C,QAAM,KAAK3B,WAAWuC,oBAAoBF,UAAAA;AAE1C,MACIA,UAAUG,UACVH,UAAUG,OAAOC,SAASvD,kBAAkBwD,UAE5C,OAAM,IAAIlD,gBAAgB,2CAAA;AAG9B,MAAI0B,QAAQ;AACR,OAAIA,OAAOyB,SACP,OAAM,IAAInD,gBAAgB,wCAAA;AAG9B,SAAMe,MAAMC,oBAAoBoC,SAAS;IACrClC,MAAMhB,eAAekB;IACrBiC,OAAO,IAAI1D,WAAW,GACjBD,kBAAkB4D,aAAa;KAC5B,GAAG5B;KACH,GAAGmB;KACP,EACJ,CAAA;IACJ,CAAA;AAEA,SAAM,KAAKrC,WAAW+C,gBAAgBV,WAAWnB,OAAAA;AAEjD9B,gBAAa8B,QAAQmB,UAAAA;AAErB,SAAM,KAAKrC,WAAWgD,WAAW9B,OAAAA;AAEjC,UAAO;IACHA;IACA+B,SAAS;IACb;;AAGJ,MAAI,CAAC5D,cAAcgD,WAAW,WAAA,IAAe9B,MAAM2C,SAC/Cb,WAAUT,WAAW,KAAKuB,gBAAgB5C,MAAAA,IAAU;AAGxD,QAAMA,MAAMC,oBAAoBoC,SAAS;GACrClC,MAAMhB,eAAeyC;GACrBU,OAAO,IAAI1D,WAAW,GAAGD,kBAAkB4D,aAAaT,WAAU,CAAA;GACtE,CAAA;AAEA,QAAM,KAAKrC,WAAW+C,gBAAgBV,UAAAA;AAEtCnB,WAAS,KAAKlB,WAAWoB,OAAOiB,UAAAA;AAChC,QAAM,KAAKrC,WAAWgD,WAAW9B,OAAAA;AAEjC,SAAO;GACHA;GACA+B,SAAS;GACb;;CAGJ,MAAcX,SACVjB,MACAM,OACe;EACf,MAAMU,YAAY,MAAM,KAAKnC,UAAUkD,IAAI/B,MAAM,EAAEM,OAAM,CAAA;AAGzDvC,eAAaiD,WAAWgB,MADC,KAAKlD,oBAAoBiD,IAAI/B,KAAAA,CAC9BgC;AAExB,MAAIC,MAAMC,QAAQlC,KAAKmC,SAAQ;OACvBnC,KAAKoB,SAASvD,kBAAkBwD,WAAW;IAC3C,MAAMe,WAAWpC,KAAKmC,SAASE,KAC1BC,UAAU,KAAKrB,SAASqB,OAAOhC,MAAAA,CAAAA;AAEpCU,cAAUmB,WAAW,MAAMI,QAAQC,IAAIJ,SAAAA;;;AAI/C,SAAOpB;;CAGX,MAAMyB,OACF/B,IACAxB,OACe;AACf,QAAMA,MAAMC,oBAAoByB,YAAY,EAAEvB,MAAMhB,eAAemB,mBAAkB,CAAA;EAErF,MAAMK,SAAS,MAAM,KAAKlB,WAAWgC,UAAU,EAAED,IAAG,CAAA;AACpD,MAAI,CAACb,OACD,OAAM,IAAIzB,eAAAA;AAGd,MAAIyB,OAAOyB,SACP,OAAM,IAAInD,gBAAgB,wCAAA;AAG9B,QAAMe,MAAMC,oBAAoBoC,SAAS;GACrClC,MAAMhB,eAAemB;GACrBgC,OAAO,IAAI1D,WAAW,GAAGD,kBAAkB4D,aAAa5B,QAAO,CAAA;GACnE,CAAA;EAEA,MAAM,EAAEa,IAAIgC,aAAa7C;AAEzB,QAAM,KAAKlB,WAAWgE,eAAe9C,OAAAA;AAErCA,SAAOa,KAAKgC;AAGZxE,uBAAqB2B,QAAQ,WAAA;AAE7B,SAAOA"}

package/dist/core/entities/policy/types.d.ts

@@ -0,0 +1,22 @@
+import type { Policy } from '@authup/core-kit';
+import type { ActorContext } from '../actor/types.ts';
+import type { EntityRepositoryFindManyResult, IEntityRepository } from '../types.ts';
+export interface IPolicyRepository extends IEntityRepository<Policy> {
+    checkUniqueness(data: Partial<Policy>, existing?: Policy): Promise<void>;
+    saveWithEA(entity: Policy, data?: Record<string, any>): Promise<Policy>;
+    deleteFromTree(entity: Policy): Promise<void>;
+}
+export interface IPolicyService {
+    getMany(query: Record<string, any>, actor: ActorContext): Promise<EntityRepositoryFindManyResult<Policy>>;
+    getOne(idOrName: string, actor: ActorContext, realm?: string): Promise<Policy>;
+    create(data: Record<string, any>, actor: ActorContext): Promise<Policy>;
+    update(idOrName: string, data: Record<string, any>, actor: ActorContext): Promise<Policy>;
+    save(idOrName: string | undefined, data: Record<string, any>, actor: ActorContext, options?: {
+        updateOnly?: boolean;
+    }): Promise<{
+        entity: Policy;
+        created: boolean;
+    }>;
+    delete(id: string, actor: ActorContext): Promise<Policy>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/entities/policy/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/policy/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErF,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB,CAAC,MAAM,CAAC;IAChE,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzE,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAExE,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjD;AAED,MAAM,WAAW,cAAc;IAC3B,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1G,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/E,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1F,IAAI,CACA,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,EACnB,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GACnC,OAAO,CAAC;QACP,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,OAAO,CAAC;KACpB,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC5D"}

package/dist/core/entities/policy/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/entities/realm/index.d.ts

@@ -0,0 +1,3 @@
+export * from './service.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/entities/realm/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/realm/index.ts"],"names":[],"mappings":"AAOA,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}

package/dist/core/entities/realm/index.mjs

@@ -0,0 +1,2 @@
+import { RealmService } from "./service.mjs";
+export { RealmService };

package/dist/core/entities/realm/service.d.ts

@@ -0,0 +1,26 @@
+import { RealmValidator } from '@authup/core-kit';
+import type { Realm } from '@authup/core-kit';
+import type { ActorContext } from '../actor/types.ts';
+import { AbstractEntityService } from '../service.ts';
+import type { EntityRepositoryFindManyResult } from '../types.ts';
+import type { IRealmRepository, IRealmService } from './types.ts';
+export type RealmServiceContext = {
+    repository: IRealmRepository;
+};
+export declare class RealmService extends AbstractEntityService implements IRealmService {
+    protected repository: IRealmRepository;
+    protected validator: RealmValidator;
+    constructor(ctx: RealmServiceContext);
+    getMany(query: Record<string, any>): Promise<EntityRepositoryFindManyResult<Realm>>;
+    getOne(idOrName: string): Promise<Realm>;
+    create(data: Record<string, any>, actor: ActorContext): Promise<Realm>;
+    update(idOrName: string, data: Record<string, any>, actor: ActorContext): Promise<Realm>;
+    save(idOrName: string | undefined, data: Record<string, any>, actor: ActorContext, options?: {
+        updateOnly?: boolean;
+    }): Promise<{
+        entity: Realm;
+        created: boolean;
+    }>;
+    delete(id: string, actor: ActorContext): Promise<Realm>;
+}
+//# sourceMappingURL=service.d.ts.map

package/dist/core/entities/realm/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/realm/service.ts"],"names":[],"mappings":"AAUA,OAAO,EAGH,cAAc,EAEjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAElE,MAAM,MAAM,mBAAmB,GAAG;IAC9B,UAAU,EAAE,gBAAgB,CAAC;CAChC,CAAC;AAEF,qBAAa,YAAa,SAAQ,qBAAsB,YAAW,aAAa;IAC5E,SAAS,CAAC,UAAU,EAAE,gBAAgB,CAAC;IAEvC,SAAS,CAAC,SAAS,EAAE,cAAc,CAAC;gBAExB,GAAG,EAAE,mBAAmB;IAM9B,OAAO,CACT,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC3B,OAAO,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC;IAI3C,MAAM,CACR,QAAQ,EAAE,MAAM,GACjB,OAAO,CAAC,KAAK,CAAC;IASX,MAAM,CACR,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,KAAK,CAAC;IAKX,MAAM,CACR,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,KAAK,CAAC;IAKX,IAAI,CACN,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,EACnB,OAAO,GAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAO,GACvC,OAAO,CAAC;QACP,MAAM,EAAE,KAAK,CAAC;QACd,OAAO,EAAE,OAAO,CAAA;KACnB,CAAC;IAsEI,MAAM,CACR,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,KAAK,CAAC;CAuBpB"}

package/dist/core/entities/realm/service.mjs

@@ -0,0 +1,95 @@
+import { AbstractEntityService } from "../service.mjs";
+import { PermissionName, REALM_MASTER_NAME, RealmValidator, ValidatorGroup } from "@authup/core-kit";
+import { isPropertySet, isUUID } from "@authup/kit";
+import { BuiltInPolicyType, PolicyData } from "@authup/access";
+import { BadRequestError, NotFoundError } from "@ebec/http";
+//#region src/core/entities/realm/service.ts
+var RealmService = class extends AbstractEntityService {
+	repository;
+	validator;
+	constructor(ctx) {
+		super();
+		this.repository = ctx.repository;
+		this.validator = new RealmValidator();
+	}
+	async getMany(query) {
+		return this.repository.findMany(query);
+	}
+	async getOne(idOrName) {
+		const entity = await this.repository.findOneByIdOrName(idOrName);
+		if (!entity) throw new NotFoundError();
+		return entity;
+	}
+	async create(data, actor) {
+		const { entity } = await this.save(void 0, data, actor);
+		return entity;
+	}
+	async update(idOrName, data, actor) {
+		const { entity } = await this.save(idOrName, data, actor, { updateOnly: true });
+		return entity;
+	}
+	async save(idOrName, data, actor, options = {}) {
+		let group;
+		let entity;
+		if (idOrName) {
+			const where = {};
+			if (isUUID(idOrName)) where.id = idOrName;
+			else where.name = idOrName;
+			entity = await this.repository.findOneBy(where);
+			if (!entity && options.updateOnly) throw new NotFoundError();
+		} else if (options.updateOnly) throw new NotFoundError();
+		if (entity) {
+			await actor.permissionEvaluator.preEvaluate({ name: PermissionName.REALM_UPDATE });
+			group = ValidatorGroup.UPDATE;
+		} else {
+			await actor.permissionEvaluator.preEvaluate({ name: PermissionName.REALM_CREATE });
+			group = ValidatorGroup.CREATE;
+		}
+		const validated = await this.validator.run(data, { group });
+		await this.repository.validateJoinColumns(validated);
+		if (entity) {
+			await actor.permissionEvaluator.evaluate({
+				name: PermissionName.REALM_UPDATE,
+				input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: {
+					...entity,
+					...validated
+				} })
+			});
+			if (entity.name === REALM_MASTER_NAME && isPropertySet(validated, "name") && entity.name !== validated.name) throw new BadRequestError(`The name of the ${REALM_MASTER_NAME} can not be changed.`);
+			entity = this.repository.merge(entity, validated);
+			await this.repository.save(entity);
+			return {
+				entity,
+				created: false
+			};
+		}
+		await actor.permissionEvaluator.evaluate({
+			name: PermissionName.REALM_CREATE,
+			input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: validated })
+		});
+		entity = this.repository.create(validated);
+		await this.repository.save(entity);
+		return {
+			entity,
+			created: true
+		};
+	}
+	async delete(id, actor) {
+		await actor.permissionEvaluator.preEvaluate({ name: PermissionName.REALM_DELETE });
+		const entity = await this.repository.findOneBy({ id });
+		if (!entity) throw new NotFoundError();
+		if (entity.built_in) throw new BadRequestError("A built-in realm can not be deleted.");
+		await actor.permissionEvaluator.evaluate({
+			name: PermissionName.REALM_DELETE,
+			input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity })
+		});
+		const { id: entityId } = entity;
+		await this.repository.remove(entity);
+		entity.id = entityId;
+		return entity;
+	}
+};
+//#endregion
+export { RealmService };
+
+//# sourceMappingURL=service.mjs.map

package/dist/core/entities/realm/service.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.mjs","names":["BuiltInPolicyType","PolicyData","isPropertySet","isUUID","BadRequestError","NotFoundError","PermissionName","REALM_MASTER_NAME","RealmValidator","ValidatorGroup","AbstractEntityService","RealmService","repository","validator","ctx","getMany","query","findMany","getOne","idOrName","entity","findOneByIdOrName","create","data","actor","save","undefined","update","updateOnly","options","group","where","id","name","findOneBy","permissionEvaluator","preEvaluate","REALM_UPDATE","UPDATE","REALM_CREATE","CREATE","validated","run","validateJoinColumns","evaluate","input","ATTRIBUTES","merge","created","delete","REALM_DELETE","built_in","entityId","remove"],"sources":["../../../../src/core/entities/realm/service.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { BuiltInPolicyType, PolicyData } from '@authup/access';\nimport { isPropertySet, isUUID } from '@authup/kit';\nimport { BadRequestError, NotFoundError } from '@ebec/http';\nimport {\n    PermissionName,\n    REALM_MASTER_NAME,\n    RealmValidator,\n    ValidatorGroup,\n} from '@authup/core-kit';\nimport type { Realm } from '@authup/core-kit';\nimport type { ActorContext } from '../actor/types.ts';\nimport { AbstractEntityService } from '../service.ts';\nimport type { EntityRepositoryFindManyResult } from '../types.ts';\nimport type { IRealmRepository, IRealmService } from './types.ts';\n\nexport type RealmServiceContext = {\n    repository: IRealmRepository;\n};\n\nexport class RealmService extends AbstractEntityService implements IRealmService {\n    protected repository: IRealmRepository;\n\n    protected validator: RealmValidator;\n\n    constructor(ctx: RealmServiceContext) {\n        super();\n        this.repository = ctx.repository;\n        this.validator = new RealmValidator();\n    }\n\n    async getMany(\n        query: Record<string, any>,\n    ): Promise<EntityRepositoryFindManyResult<Realm>> {\n        return this.repository.findMany(query);\n    }\n\n    async getOne(\n        idOrName: string,\n    ): Promise<Realm> {\n        const entity = await this.repository.findOneByIdOrName(idOrName);\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        return entity;\n    }\n\n    async create(\n        data: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<Realm> {\n        const { entity } = await this.save(undefined, data, actor);\n        return entity;\n    }\n\n    async update(\n        idOrName: string,\n        data: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<Realm> {\n        const { entity } = await this.save(idOrName, data, actor, { updateOnly: true });\n        return entity;\n    }\n\n    async save(\n        idOrName: string | undefined,\n        data: Record<string, any>,\n        actor: ActorContext,\n        options: { updateOnly?: boolean } = {},\n    ): Promise<{\n        entity: Realm,\n        created: boolean \n    }> {\n        let group: string;\n\n        let entity: Realm | null | undefined;\n        if (idOrName) {\n            const where: Record<string, any> = {};\n            if (isUUID(idOrName)) {\n                where.id = idOrName;\n            } else {\n                where.name = idOrName;\n            }\n\n            entity = await this.repository.findOneBy(where);\n            if (!entity && options.updateOnly) {\n                throw new NotFoundError();\n            }\n        } else if (options.updateOnly) {\n            throw new NotFoundError();\n        }\n\n        if (entity) {\n            await actor.permissionEvaluator.preEvaluate({ name: PermissionName.REALM_UPDATE });\n            group = ValidatorGroup.UPDATE;\n        } else {\n            await actor.permissionEvaluator.preEvaluate({ name: PermissionName.REALM_CREATE });\n            group = ValidatorGroup.CREATE;\n        }\n\n        const validated = await this.validator.run(data, { group });\n\n        await this.repository.validateJoinColumns(validated);\n\n        if (entity) {\n            await actor.permissionEvaluator.evaluate({\n                name: PermissionName.REALM_UPDATE,\n                input: new PolicyData({\n                    [BuiltInPolicyType.ATTRIBUTES]: {\n                        ...entity,\n                        ...validated,\n                    },\n                }),\n            });\n\n            if (entity.name === REALM_MASTER_NAME && isPropertySet(validated, 'name') && entity.name !== validated.name) {\n                throw new BadRequestError(`The name of the ${REALM_MASTER_NAME} can not be changed.`);\n            }\n\n            entity = this.repository.merge(entity, validated);\n            await this.repository.save(entity);\n\n            return {\n                entity,\n                created: false, \n            };\n        }\n\n        await actor.permissionEvaluator.evaluate({\n            name: PermissionName.REALM_CREATE,\n            input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: validated }),\n        });\n\n        entity = this.repository.create(validated);\n        await this.repository.save(entity);\n\n        return {\n            entity,\n            created: true, \n        };\n    }\n\n    async delete(\n        id: string,\n        actor: ActorContext,\n    ): Promise<Realm> {\n        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.REALM_DELETE });\n\n        const entity = await this.repository.findOneBy({ id });\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        if (entity.built_in) {\n            throw new BadRequestError('A built-in realm can not be deleted.');\n        }\n\n        await actor.permissionEvaluator.evaluate({\n            name: PermissionName.REALM_DELETE,\n            input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity }),\n        });\n\n        const { id: entityId } = entity;\n        await this.repository.remove(entity);\n        entity.id = entityId;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;AA0BA,IAAaW,eAAb,cAAkCD,sBAAAA;CACpBE;CAEAC;CAEV,YAAYC,KAA0B;AAClC,SAAK;AACL,OAAKF,aAAaE,IAAIF;AACtB,OAAKC,YAAY,IAAIL,gBAAAA;;CAGzB,MAAMO,QACFC,OAC8C;AAC9C,SAAO,KAAKJ,WAAWK,SAASD,MAAAA;;CAGpC,MAAME,OACFC,UACc;EACd,MAAMC,SAAS,MAAM,KAAKR,WAAWS,kBAAkBF,SAAAA;AACvD,MAAI,CAACC,OACD,OAAM,IAAIf,eAAAA;AAGd,SAAOe;;CAGX,MAAME,OACFC,MACAC,OACc;EACd,MAAM,EAAEJ,WAAW,MAAM,KAAKK,KAAKC,KAAAA,GAAWH,MAAMC,MAAAA;AACpD,SAAOJ;;CAGX,MAAMO,OACFR,UACAI,MACAC,OACc;EACd,MAAM,EAAEJ,WAAW,MAAM,KAAKK,KAAKN,UAAUI,MAAMC,OAAO,EAAEI,YAAY,MAAK,CAAA;AAC7E,SAAOR;;CAGX,MAAMK,KACFN,UACAI,MACAC,OACAK,UAAoC,EAAE,EAIvC;EACC,IAAIC;EAEJ,IAAIV;AACJ,MAAID,UAAU;GACV,MAAMY,QAA6B,EAAC;AACpC,OAAI5B,OAAOgB,SAAAA,CACPY,OAAMC,KAAKb;OAEXY,OAAME,OAAOd;AAGjBC,YAAS,MAAM,KAAKR,WAAWsB,UAAUH,MAAAA;AACzC,OAAI,CAACX,UAAUS,QAAQD,WACnB,OAAM,IAAIvB,eAAAA;aAEPwB,QAAQD,WACf,OAAM,IAAIvB,eAAAA;AAGd,MAAIe,QAAQ;AACR,SAAMI,MAAMW,oBAAoBC,YAAY,EAAEH,MAAM3B,eAAe+B,cAAa,CAAA;AAChFP,WAAQrB,eAAe6B;SACpB;AACH,SAAMd,MAAMW,oBAAoBC,YAAY,EAAEH,MAAM3B,eAAeiC,cAAa,CAAA;AAChFT,WAAQrB,eAAe+B;;EAG3B,MAAMC,YAAY,MAAM,KAAK5B,UAAU6B,IAAInB,MAAM,EAAEO,OAAM,CAAA;AAEzD,QAAM,KAAKlB,WAAW+B,oBAAoBF,UAAAA;AAE1C,MAAIrB,QAAQ;AACR,SAAMI,MAAMW,oBAAoBS,SAAS;IACrCX,MAAM3B,eAAe+B;IACrBQ,OAAO,IAAI5C,WAAW,GACjBD,kBAAkB8C,aAAa;KAC5B,GAAG1B;KACH,GAAGqB;KACP,EACJ,CAAA;IACJ,CAAA;AAEA,OAAIrB,OAAOa,SAAS1B,qBAAqBL,cAAcuC,WAAW,OAAA,IAAWrB,OAAOa,SAASQ,UAAUR,KACnG,OAAM,IAAI7B,gBAAgB,mBAAmBG,kBAAkB,sBAAqB;AAGxFa,YAAS,KAAKR,WAAWmC,MAAM3B,QAAQqB,UAAAA;AACvC,SAAM,KAAK7B,WAAWa,KAAKL,OAAAA;AAE3B,UAAO;IACHA;IACA4B,SAAS;IACb;;AAGJ,QAAMxB,MAAMW,oBAAoBS,SAAS;GACrCX,MAAM3B,eAAeiC;GACrBM,OAAO,IAAI5C,WAAW,GAAGD,kBAAkB8C,aAAaL,WAAU,CAAA;GACtE,CAAA;AAEArB,WAAS,KAAKR,WAAWU,OAAOmB,UAAAA;AAChC,QAAM,KAAK7B,WAAWa,KAAKL,OAAAA;AAE3B,SAAO;GACHA;GACA4B,SAAS;GACb;;CAGJ,MAAMC,OACFjB,IACAR,OACc;AACd,QAAMA,MAAMW,oBAAoBC,YAAY,EAAEH,MAAM3B,eAAe4C,cAAa,CAAA;EAEhF,MAAM9B,SAAS,MAAM,KAAKR,WAAWsB,UAAU,EAAEF,IAAG,CAAA;AACpD,MAAI,CAACZ,OACD,OAAM,IAAIf,eAAAA;AAGd,MAAIe,OAAO+B,SACP,OAAM,IAAI/C,gBAAgB,uCAAA;AAG9B,QAAMoB,MAAMW,oBAAoBS,SAAS;GACrCX,MAAM3B,eAAe4C;GACrBL,OAAO,IAAI5C,WAAW,GAAGD,kBAAkB8C,aAAa1B,QAAO,CAAA;GACnE,CAAA;EAEA,MAAM,EAAEY,IAAIoB,aAAahC;AACzB,QAAM,KAAKR,WAAWyC,OAAOjC,OAAAA;AAC7BA,SAAOY,KAAKoB;AAEZ,SAAOhC"}

package/dist/core/entities/realm/types.d.ts

@@ -0,0 +1,21 @@
+import type { Realm } from '@authup/core-kit';
+import type { ActorContext } from '../actor/types.ts';
+import type { EntityRepositoryFindManyResult, IEntityRepository } from '../types.ts';
+export interface IRealmRepository extends IEntityRepository<Realm> {
+    resolve(id: string | undefined, withFallback: true): Promise<Realm>;
+    resolve(id: string | undefined, withFallback?: boolean): Promise<Realm | null>;
+}
+export interface IRealmService {
+    getMany(query: Record<string, any>): Promise<EntityRepositoryFindManyResult<Realm>>;
+    getOne(idOrName: string): Promise<Realm>;
+    create(data: Record<string, any>, actor: ActorContext): Promise<Realm>;
+    update(idOrName: string, data: Record<string, any>, actor: ActorContext): Promise<Realm>;
+    save(idOrName: string | undefined, data: Record<string, any>, actor: ActorContext, options?: {
+        updateOnly?: boolean;
+    }): Promise<{
+        entity: Realm;
+        created: boolean;
+    }>;
+    delete(id: string, actor: ActorContext): Promise<Realm>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/entities/realm/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/realm/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErF,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB,CAAC,KAAK,CAAC;IAC9D,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,EAAE,YAAY,EAAE,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACpE,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,EAAE,YAAY,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;CAClF;AAED,MAAM,WAAW,aAAa;IAC1B,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC,CAAC;IACpF,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACzF,IAAI,CACA,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,EACnB,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GACnC,OAAO,CAAC;QACP,MAAM,EAAE,KAAK,CAAC;QACd,OAAO,EAAE,OAAO,CAAA;KACnB,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;CAC3D"}

package/dist/core/entities/realm/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/entities/robot/index.d.ts

@@ -0,0 +1,3 @@
+export * from './service.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/entities/robot/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/robot/index.ts"],"names":[],"mappings":"AAOA,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}

package/dist/core/entities/robot/index.mjs

@@ -0,0 +1,2 @@
+import { RobotService } from "./service.mjs";
+export { RobotService };

package/dist/core/entities/robot/service.d.ts

@@ -0,0 +1,29 @@
+import { RobotValidator } from '@authup/core-kit';
+import type { Robot } from '@authup/core-kit';
+import type { ActorContext } from '../actor/types.ts';
+import type { IRealmRepository } from '../realm/types.ts';
+import { AbstractEntityService } from '../service.ts';
+import type { EntityRepositoryFindManyResult } from '../types.ts';
+import type { IRobotRepository, IRobotService } from './types.ts';
+export type RobotServiceContext = {
+    repository: IRobotRepository;
+    realmRepository: IRealmRepository;
+};
+export declare class RobotService extends AbstractEntityService implements IRobotService {
+    protected repository: IRobotRepository;
+    protected realmRepository: IRealmRepository;
+    protected validator: RobotValidator;
+    constructor(ctx: RobotServiceContext);
+    getMany(query: Record<string, any>, actor: ActorContext): Promise<EntityRepositoryFindManyResult<Robot>>;
+    getOne(idOrName: string, actor: ActorContext, query?: Record<string, any>, realmId?: string): Promise<Robot>;
+    create(data: Record<string, any>, actor: ActorContext): Promise<Robot>;
+    update(idOrName: string, data: Record<string, any>, actor: ActorContext): Promise<Robot>;
+    save(idOrName: string | undefined, data: Record<string, any>, actor: ActorContext, options?: {
+        updateOnly?: boolean;
+    }): Promise<{
+        entity: Robot;
+        created: boolean;
+    }>;
+    delete(id: string, actor: ActorContext): Promise<Robot>;
+}
+//# sourceMappingURL=service.d.ts.map

package/dist/core/entities/robot/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/robot/service.ts"],"names":[],"mappings":"AAUA,OAAO,EAEH,cAAc,EAEjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,aAAa,CAAC;AAElE,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAElE,MAAM,MAAM,mBAAmB,GAAG;IAC9B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,eAAe,EAAE,gBAAgB,CAAC;CACrC,CAAC;AAEF,qBAAa,YAAa,SAAQ,qBAAsB,YAAW,aAAa;IAC5E,SAAS,CAAC,UAAU,EAAE,gBAAgB,CAAC;IAEvC,SAAS,CAAC,eAAe,EAAE,gBAAgB,CAAC;IAE5C,SAAS,CAAC,SAAS,EAAE,cAAc,CAAC;gBAExB,GAAG,EAAE,mBAAmB;IAO9B,OAAO,CACT,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC;IAoD3C,MAAM,CACR,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,YAAY,EACnB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC3B,OAAO,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,KAAK,CAAC;IAsCX,MAAM,CACR,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,KAAK,CAAC;IAKX,MAAM,CACR,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,KAAK,CAAC;IAKX,IAAI,CACN,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,EACnB,OAAO,GAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAO,GACvC,OAAO,CAAC;QACP,MAAM,EAAE,KAAK,CAAC;QACd,OAAO,EAAE,OAAO,CAAA;KACnB,CAAC;IAuHI,MAAM,CACR,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,KAAK,CAAC;CA0CpB"}

package/dist/core/entities/robot/service.mjs

@@ -0,0 +1,180 @@
+import { RobotCredentialsService } from "../../authentication/credential/entities/robot/module.mjs";
+import { AbstractEntityService } from "../service.mjs";
+import { PermissionName, RobotValidator, ValidatorGroup } from "@authup/core-kit";
+import { isUUID } from "@authup/kit";
+import { BuiltInPolicyType, PolicyData } from "@authup/access";
+import { NotFoundError } from "@ebec/http";
+//#region src/core/entities/robot/service.ts
+var RobotService = class extends AbstractEntityService {
+	repository;
+	realmRepository;
+	validator;
+	constructor(ctx) {
+		super();
+		this.repository = ctx.repository;
+		this.realmRepository = ctx.realmRepository;
+		this.validator = new RobotValidator();
+	}
+	async getMany(query, actor) {
+		await actor.permissionEvaluator.preEvaluateOneOf({ name: [
+			PermissionName.ROBOT_READ,
+			PermissionName.ROBOT_UPDATE,
+			PermissionName.ROBOT_DELETE
+		] });
+		const { data: entities, meta } = await this.repository.findMany(query);
+		const data = [];
+		let { total } = meta;
+		for (const entity of entities) {
+			if (actor.identity && actor.identity.type === "robot" && actor.identity.data.id === entity.id) {
+				data.push(entity);
+				continue;
+			}
+			try {
+				await actor.permissionEvaluator.evaluateOneOf({
+					name: [
+						PermissionName.ROBOT_READ,
+						PermissionName.ROBOT_UPDATE,
+						PermissionName.ROBOT_DELETE
+					],
+					input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity })
+				});
+				data.push(entity);
+			} catch {
+				total -= 1;
+			}
+		}
+		return {
+			data,
+			meta: {
+				...meta,
+				total
+			}
+		};
+	}
+	async getOne(idOrName, actor, query, realmId) {
+		const permissionNames = [
+			PermissionName.ROBOT_READ,
+			PermissionName.ROBOT_UPDATE,
+			PermissionName.ROBOT_DELETE
+		];
+		let isMe = !!actor.identity && actor.identity.type === "robot" && (actor.identity.data.id === idOrName || actor.identity.data.name === idOrName);
+		if (!isMe) await actor.permissionEvaluator.preEvaluateOneOf({ name: permissionNames });
+		const entity = await this.repository.findOne(idOrName, query, realmId);
+		if (!entity) throw new NotFoundError();
+		if (isMe && actor.identity.data.id !== entity.id) {
+			isMe = false;
+			await actor.permissionEvaluator.preEvaluateOneOf({ name: permissionNames });
+		}
+		if (!isMe) await actor.permissionEvaluator.evaluateOneOf({
+			name: permissionNames,
+			input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity })
+		});
+		return entity;
+	}
+	async create(data, actor) {
+		const { entity } = await this.save(void 0, data, actor);
+		return entity;
+	}
+	async update(idOrName, data, actor) {
+		const { entity } = await this.save(idOrName, data, actor, { updateOnly: true });
+		return entity;
+	}
+	async save(idOrName, data, actor, options = {}) {
+		let group;
+		const realm = typeof data.realm_id === "string" ? await this.realmRepository.resolve(data.realm_id) : void 0;
+		let entity;
+		if (idOrName) {
+			const where = {};
+			if (isUUID(idOrName)) where.id = idOrName;
+			else where.name = idOrName;
+			if (realm) where.realm_id = realm.id;
+			entity = await this.repository.findOneBy(where);
+			if (!entity && options.updateOnly) throw new NotFoundError();
+		} else if (options.updateOnly) throw new NotFoundError();
+		let isSelfEdit = false;
+		if (entity) {
+			try {
+				await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_UPDATE });
+			} catch (e) {
+				if (!actor.identity || actor.identity.type !== "robot" || actor.identity.data.id !== entity.id) throw e;
+				isSelfEdit = true;
+				await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_SELF_MANAGE });
+			}
+			group = ValidatorGroup.UPDATE;
+		} else {
+			await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_CREATE });
+			group = ValidatorGroup.CREATE;
+		}
+		const validated = await this.validator.run(data, { group });
+		await this.repository.validateJoinColumns(validated);
+		await this.repository.checkUniqueness(validated, entity || void 0);
+		const credentialsService = new RobotCredentialsService();
+		if (entity) {
+			if (isSelfEdit) await actor.permissionEvaluator.evaluate({
+				name: PermissionName.ROBOT_SELF_MANAGE,
+				input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: validated })
+			});
+			else await actor.permissionEvaluator.evaluate({
+				name: PermissionName.ROBOT_UPDATE,
+				input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: {
+					...entity,
+					...validated
+				} })
+			});
+			entity = this.repository.merge(entity, validated);
+			if (validated.secret) entity.secret = await credentialsService.protect(validated.secret);
+			await this.repository.save(entity);
+			if (validated.secret) entity.secret = validated.secret;
+			return {
+				entity,
+				created: false
+			};
+		}
+		if (!validated.realm_id) {
+			const actorRealmId = this.getActorRealmId(actor);
+			if (actorRealmId) validated.realm_id = actorRealmId;
+		}
+		await actor.permissionEvaluator.evaluate({
+			name: PermissionName.ROBOT_CREATE,
+			input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: validated })
+		});
+		if (!validated.secret) validated.secret = credentialsService.generateSecret();
+		entity = this.repository.create(validated);
+		entity.secret = await credentialsService.protect(validated.secret);
+		await this.repository.save(entity);
+		entity.secret = validated.secret;
+		return {
+			entity,
+			created: true
+		};
+	}
+	async delete(id, actor) {
+		const entity = await this.repository.findOneBy({ id });
+		if (!entity) throw new NotFoundError();
+		const isOwner = entity.user_id && actor.identity && actor.identity.type === "user" && actor.identity.data.id === entity.user_id;
+		let isSelfDelete = false;
+		try {
+			await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_DELETE });
+		} catch (e) {
+			if (!isOwner) throw e;
+			isSelfDelete = true;
+			await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_SELF_MANAGE });
+		}
+		if (isSelfDelete) await actor.permissionEvaluator.evaluate({
+			name: PermissionName.ROBOT_SELF_MANAGE,
+			input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: {} })
+		});
+		else await actor.permissionEvaluator.evaluate({
+			name: PermissionName.ROBOT_DELETE,
+			input: new PolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity })
+		});
+		const { id: entityId } = entity;
+		await this.repository.remove(entity);
+		entity.id = entityId;
+		return entity;
+	}
+};
+//#endregion
+export { RobotService };
+
+//# sourceMappingURL=service.mjs.map