@authup/server-core 1.0.0-beta.4 → 1.0.0-beta.40

package/dist/core/provisioning/synchronizer/root/index.d.ts

@@ -0,0 +1,3 @@
+export * from './module.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/provisioning/synchronizer/root/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/synchronizer/root/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/core/provisioning/synchronizer/root/index.mjs

@@ -0,0 +1,2 @@
+import { GraphProvisioningSynchronizer } from "./module.mjs";
+export { GraphProvisioningSynchronizer };

package/dist/core/provisioning/synchronizer/root/module.d.ts

@@ -0,0 +1,15 @@
+import type { PolicyProvisioningEntity, RealmProvisioningEntity, RoleProvisioningEntity, RootProvisioningEntity, ScopeProvisioningEntity } from '../../entities/index.ts';
+import type { PermissionProvisioningEntity } from '../../entities/permission/index.ts';
+import type { IProvisioningSynchronizer } from '../../types.ts';
+import { BaseProvisioningSynchronizer } from '../base.ts';
+import type { RootProvisioningSynchronizerContext } from './types.ts';
+export declare class GraphProvisioningSynchronizer extends BaseProvisioningSynchronizer<RootProvisioningEntity> {
+    protected policySynchronizer: IProvisioningSynchronizer<PolicyProvisioningEntity>;
+    protected realmSynchronizer: IProvisioningSynchronizer<RealmProvisioningEntity>;
+    protected permissionSynchronizer: IProvisioningSynchronizer<PermissionProvisioningEntity>;
+    protected roleSynchronizer: IProvisioningSynchronizer<RoleProvisioningEntity>;
+    protected scopeSynchronizer: IProvisioningSynchronizer<ScopeProvisioningEntity>;
+    constructor(ctx: RootProvisioningSynchronizerContext);
+    synchronize(input: RootProvisioningEntity): Promise<RootProvisioningEntity>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/core/provisioning/synchronizer/root/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/synchronizer/root/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,wBAAwB,EACxB,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAEtE,qBAAa,6BAA8B,SAAQ,4BAA4B,CAAC,sBAAsB,CAAC;IACnG,SAAS,CAAC,kBAAkB,EAAE,yBAAyB,CAAC,wBAAwB,CAAC,CAAC;IAElF,SAAS,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;IAEhF,SAAS,CAAC,sBAAsB,EAAG,yBAAyB,CAAC,4BAA4B,CAAC,CAAC;IAE3F,SAAS,CAAC,gBAAgB,EAAE,yBAAyB,CAAC,sBAAsB,CAAC,CAAC;IAE9E,SAAS,CAAC,iBAAiB,EAAE,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;gBAEpE,GAAG,EAAE,mCAAmC;IAU9C,WAAW,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAyBpF"}

package/dist/core/provisioning/synchronizer/root/module.mjs

@@ -0,0 +1,30 @@
+import { BaseProvisioningSynchronizer } from "../base.mjs";
+//#region src/core/provisioning/synchronizer/root/module.ts
+var GraphProvisioningSynchronizer = class extends BaseProvisioningSynchronizer {
+	policySynchronizer;
+	realmSynchronizer;
+	permissionSynchronizer;
+	roleSynchronizer;
+	scopeSynchronizer;
+	constructor(ctx) {
+		super();
+		this.policySynchronizer = ctx.policySynchronizer;
+		this.permissionSynchronizer = ctx.permissionSynchronizer;
+		this.realmSynchronizer = ctx.realmSynchronizer;
+		this.roleSynchronizer = ctx.roleSynchronizer;
+		this.scopeSynchronizer = ctx.scopeSynchronizer;
+	}
+	async synchronize(input) {
+		const output = {};
+		if (input.policies) output.policies = await this.policySynchronizer.synchronizeMany(input.policies);
+		if (input.permissions) output.permissions = await this.permissionSynchronizer.synchronizeMany(input.permissions);
+		if (input.roles) output.roles = await this.roleSynchronizer.synchronizeMany(input.roles);
+		if (input.scopes) output.scopes = await this.scopeSynchronizer.synchronizeMany(input.scopes);
+		if (input.realms) output.realms = await this.realmSynchronizer.synchronizeMany(input.realms);
+		return output;
+	}
+};
+//#endregion
+export { GraphProvisioningSynchronizer };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/provisioning/synchronizer/root/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["BaseProvisioningSynchronizer","GraphProvisioningSynchronizer","policySynchronizer","realmSynchronizer","permissionSynchronizer","roleSynchronizer","scopeSynchronizer","ctx","synchronize","input","output","policies","synchronizeMany","permissions","roles","scopes","realms"],"sources":["../../../../../src/core/provisioning/synchronizer/root/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    PolicyProvisioningEntity,\n    RealmProvisioningEntity,\n    RoleProvisioningEntity,\n    RootProvisioningEntity,\n    ScopeProvisioningEntity,\n} from '../../entities/index.ts';\nimport type { PermissionProvisioningEntity } from '../../entities/permission/index.ts';\nimport type { IProvisioningSynchronizer } from '../../types.ts';\nimport { BaseProvisioningSynchronizer } from '../base.ts';\nimport type { RootProvisioningSynchronizerContext } from './types.ts';\n\nexport class GraphProvisioningSynchronizer extends BaseProvisioningSynchronizer<RootProvisioningEntity> {\n    protected policySynchronizer: IProvisioningSynchronizer<PolicyProvisioningEntity>;\n\n    protected realmSynchronizer: IProvisioningSynchronizer<RealmProvisioningEntity>;\n\n    protected permissionSynchronizer : IProvisioningSynchronizer<PermissionProvisioningEntity>;\n\n    protected roleSynchronizer: IProvisioningSynchronizer<RoleProvisioningEntity>;\n\n    protected scopeSynchronizer: IProvisioningSynchronizer<ScopeProvisioningEntity>;\n\n    constructor(ctx: RootProvisioningSynchronizerContext) {\n        super();\n\n        this.policySynchronizer = ctx.policySynchronizer;\n        this.permissionSynchronizer = ctx.permissionSynchronizer;\n        this.realmSynchronizer = ctx.realmSynchronizer;\n        this.roleSynchronizer = ctx.roleSynchronizer;\n        this.scopeSynchronizer = ctx.scopeSynchronizer;\n    }\n\n    async synchronize(input: RootProvisioningEntity): Promise<RootProvisioningEntity> {\n        const output : RootProvisioningEntity = {};\n\n        if (input.policies) {\n            output.policies = await this.policySynchronizer.synchronizeMany(input.policies);\n        }\n\n        if (input.permissions) {\n            output.permissions = await this.permissionSynchronizer.synchronizeMany(input.permissions);\n        }\n\n        if (input.roles) {\n            output.roles = await this.roleSynchronizer.synchronizeMany(input.roles);\n        }\n\n        if (input.scopes) {\n            output.scopes = await this.scopeSynchronizer.synchronizeMany(input.scopes);\n        }\n\n        if (input.realms) {\n            output.realms = await this.realmSynchronizer.synchronizeMany(input.realms);\n        }\n\n        return output;\n    }\n}\n"],"mappings":";;AAmBA,IAAaC,gCAAb,cAAmDD,6BAAAA;CACrCE;CAEAC;CAEAC;CAEAC;CAEAC;CAEV,YAAYC,KAA0C;AAClD,SAAK;AAEL,OAAKL,qBAAqBK,IAAIL;AAC9B,OAAKE,yBAAyBG,IAAIH;AAClC,OAAKD,oBAAoBI,IAAIJ;AAC7B,OAAKE,mBAAmBE,IAAIF;AAC5B,OAAKC,oBAAoBC,IAAID;;CAGjC,MAAME,YAAYC,OAAgE;EAC9E,MAAMC,SAAkC,EAAC;AAEzC,MAAID,MAAME,SACND,QAAOC,WAAW,MAAM,KAAKT,mBAAmBU,gBAAgBH,MAAME,SAAQ;AAGlF,MAAIF,MAAMI,YACNH,QAAOG,cAAc,MAAM,KAAKT,uBAAuBQ,gBAAgBH,MAAMI,YAAW;AAG5F,MAAIJ,MAAMK,MACNJ,QAAOI,QAAQ,MAAM,KAAKT,iBAAiBO,gBAAgBH,MAAMK,MAAK;AAG1E,MAAIL,MAAMM,OACNL,QAAOK,SAAS,MAAM,KAAKT,kBAAkBM,gBAAgBH,MAAMM,OAAM;AAG7E,MAAIN,MAAMO,OACNN,QAAOM,SAAS,MAAM,KAAKb,kBAAkBS,gBAAgBH,MAAMO,OAAM;AAG7E,SAAON"}

package/dist/core/provisioning/synchronizer/root/types.d.ts

@@ -0,0 +1,14 @@
+import type { PolicyProvisioningEntity } from '../../entities/policy/index.ts';
+import type { ScopeProvisioningEntity } from '../../entities/scope/index.ts';
+import type { PermissionProvisioningEntity } from '../../entities/permission/index.ts';
+import type { RealmProvisioningEntity } from '../../entities/realm/index.ts';
+import type { RoleProvisioningEntity } from '../../entities/role/index.ts';
+import type { IProvisioningSynchronizer } from '../../types.ts';
+export type RootProvisioningSynchronizerContext = {
+    policySynchronizer: IProvisioningSynchronizer<PolicyProvisioningEntity>;
+    permissionSynchronizer: IProvisioningSynchronizer<PermissionProvisioningEntity>;
+    realmSynchronizer: IProvisioningSynchronizer<RealmProvisioningEntity>;
+    roleSynchronizer: IProvisioningSynchronizer<RoleProvisioningEntity>;
+    scopeSynchronizer: IProvisioningSynchronizer<ScopeProvisioningEntity>;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/core/provisioning/synchronizer/root/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/synchronizer/root/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC/E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAEhE,MAAM,MAAM,mCAAmC,GAAG;IAC9C,kBAAkB,EAAE,yBAAyB,CAAC,wBAAwB,CAAC,CAAC;IACxE,sBAAsB,EAAE,yBAAyB,CAAC,4BAA4B,CAAC,CAAC;IAChF,iBAAiB,EAAE,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;IACtE,gBAAgB,EAAE,yBAAyB,CAAC,sBAAsB,CAAC,CAAC;IACpE,iBAAiB,EAAE,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;CACzE,CAAC"}

package/dist/core/provisioning/synchronizer/root/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/provisioning/synchronizer/scope/index.d.ts

@@ -0,0 +1,3 @@
+export * from './module.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/provisioning/synchronizer/scope/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/synchronizer/scope/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/core/provisioning/synchronizer/scope/index.mjs

@@ -0,0 +1,2 @@
+import { ScopeProvisioningSynchronizer } from "./module.mjs";
+export { ScopeProvisioningSynchronizer };

package/dist/core/provisioning/synchronizer/scope/module.d.ts

@@ -0,0 +1,10 @@
+import type { IScopeRepository } from '../../../entities/index.ts';
+import type { ScopeProvisioningEntity } from '../../entities/index.ts';
+import { BaseProvisioningSynchronizer } from '../base.ts';
+import type { ScopeProvisioningSynchronizerContext } from './types.ts';
+export declare class ScopeProvisioningSynchronizer extends BaseProvisioningSynchronizer<ScopeProvisioningEntity> {
+    protected repository: IScopeRepository;
+    constructor(ctx: ScopeProvisioningSynchronizerContext);
+    synchronize(input: ScopeProvisioningEntity): Promise<ScopeProvisioningEntity>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/core/provisioning/synchronizer/scope/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/synchronizer/scope/module.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAEvE,OAAO,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,YAAY,CAAC;AAEvE,qBAAa,6BAA8B,SAAQ,4BAA4B,CAAC,uBAAuB,CAAC;IACpG,SAAS,CAAC,UAAU,EAAG,gBAAgB,CAAC;gBAE5B,GAAG,EAAE,oCAAoC;IAM/C,WAAW,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC;CA4CtF"}

package/dist/core/provisioning/synchronizer/scope/module.mjs

@@ -0,0 +1,46 @@
+import { ProvisioningEntityStrategyType } from "../../strategy/constants.mjs";
+import { normalizeEntityProvisioningStrategy } from "../../strategy/normalize.mjs";
+import "../../strategy/index.mjs";
+import { BaseProvisioningSynchronizer } from "../base.mjs";
+import { pickRecord } from "@authup/kit";
+//#region src/core/provisioning/synchronizer/scope/module.ts
+var ScopeProvisioningSynchronizer = class extends BaseProvisioningSynchronizer {
+	repository;
+	constructor(ctx) {
+		super();
+		this.repository = ctx.repository;
+	}
+	async synchronize(input) {
+		const strategy = normalizeEntityProvisioningStrategy(input.strategy);
+		let attributes = await this.repository.findOneBy({
+			name: input.attributes.name,
+			realm_id: input.attributes.realm_id || null
+		});
+		if (strategy.type === ProvisioningEntityStrategyType.ABSENT) {
+			if (attributes) await this.repository.remove(attributes);
+			return {
+				...input,
+				attributes: attributes || input.attributes
+			};
+		}
+		if (attributes) switch (strategy.type) {
+			case ProvisioningEntityStrategyType.MERGE:
+				attributes = this.repository.merge(attributes, strategy.attributes ? pickRecord(input.attributes, strategy.attributes) : input.attributes);
+				attributes = await this.repository.save(attributes);
+				break;
+			case ProvisioningEntityStrategyType.REPLACE:
+				input.attributes.id = attributes.id;
+				attributes = await this.repository.save(this.repository.create(input.attributes));
+				break;
+		}
+		else attributes = await this.repository.save(this.repository.create(input.attributes));
+		return {
+			...input,
+			attributes
+		};
+	}
+};
+//#endregion
+export { ScopeProvisioningSynchronizer };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/provisioning/synchronizer/scope/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["pickRecord","ProvisioningEntityStrategyType","normalizeEntityProvisioningStrategy","BaseProvisioningSynchronizer","ScopeProvisioningSynchronizer","repository","ctx","synchronize","input","strategy","attributes","findOneBy","name","realm_id","type","ABSENT","remove","MERGE","merge","save","REPLACE","id","create"],"sources":["../../../../../src/core/provisioning/synchronizer/scope/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { pickRecord } from '@authup/kit';\nimport type { IScopeRepository } from '../../../entities/index.ts';\nimport type { ScopeProvisioningEntity } from '../../entities/index.ts';\nimport { ProvisioningEntityStrategyType, normalizeEntityProvisioningStrategy } from '../../strategy/index.ts';\nimport { BaseProvisioningSynchronizer } from '../base.ts';\nimport type { ScopeProvisioningSynchronizerContext } from './types.ts';\n\nexport class ScopeProvisioningSynchronizer extends BaseProvisioningSynchronizer<ScopeProvisioningEntity> {\n    protected repository : IScopeRepository;\n\n    constructor(ctx: ScopeProvisioningSynchronizerContext) {\n        super();\n\n        this.repository = ctx.repository;\n    }\n\n    async synchronize(input: ScopeProvisioningEntity): Promise<ScopeProvisioningEntity> {\n        const strategy = normalizeEntityProvisioningStrategy(input.strategy);\n\n        let attributes = await this.repository.findOneBy({\n            name: input.attributes.name,\n            realm_id: input.attributes.realm_id || null,\n        });\n\n        if (strategy.type === ProvisioningEntityStrategyType.ABSENT) {\n            if (attributes) {\n                await this.repository.remove(attributes);\n            }\n            return {\n                ...input,\n                attributes: attributes || input.attributes, \n            };\n        }\n\n        if (attributes) {\n            switch (strategy.type) {\n                case ProvisioningEntityStrategyType.MERGE:\n                    attributes = this.repository.merge(\n                        attributes,\n                        strategy.attributes ?\n                            pickRecord(input.attributes, strategy.attributes) :\n                            input.attributes,\n                    );\n\n                    attributes = await this.repository.save(attributes);\n                    break;\n                case ProvisioningEntityStrategyType.REPLACE:\n                    input.attributes.id = attributes.id;\n                    attributes = await this.repository.save(this.repository.create(input.attributes));\n                    break;\n            }\n        } else {\n            attributes = await this.repository.save(this.repository.create(input.attributes));\n        }\n\n        return {\n            ...input,\n            attributes,\n        };\n    }\n}\n"],"mappings":";;;;;;AAcA,IAAaI,gCAAb,cAAmDD,6BAAAA;CACrCE;CAEV,YAAYC,KAA2C;AACnD,SAAK;AAEL,OAAKD,aAAaC,IAAID;;CAG1B,MAAME,YAAYC,OAAkE;EAChF,MAAMC,WAAWP,oCAAoCM,MAAMC,SAAQ;EAEnE,IAAIC,aAAa,MAAM,KAAKL,WAAWM,UAAU;GAC7CC,MAAMJ,MAAME,WAAWE;GACvBC,UAAUL,MAAME,WAAWG,YAAY;GAC3C,CAAA;AAEA,MAAIJ,SAASK,SAASb,+BAA+Bc,QAAQ;AACzD,OAAIL,WACA,OAAM,KAAKL,WAAWW,OAAON,WAAAA;AAEjC,UAAO;IACH,GAAGF;IACHE,YAAYA,cAAcF,MAAME;IACpC;;AAGJ,MAAIA,WACA,SAAQD,SAASK,MAAjB;GACI,KAAKb,+BAA+BgB;AAChCP,iBAAa,KAAKL,WAAWa,MACzBR,YACAD,SAASC,aACLV,WAAWQ,MAAME,YAAYD,SAASC,WAAU,GAChDF,MAAME,WAAU;AAGxBA,iBAAa,MAAM,KAAKL,WAAWc,KAAKT,WAAAA;AACxC;GACJ,KAAKT,+BAA+BmB;AAChCZ,UAAME,WAAWW,KAAKX,WAAWW;AACjCX,iBAAa,MAAM,KAAKL,WAAWc,KAAK,KAAKd,WAAWiB,OAAOd,MAAME,WAAU,CAAA;AAC/E;;MAGRA,cAAa,MAAM,KAAKL,WAAWc,KAAK,KAAKd,WAAWiB,OAAOd,MAAME,WAAU,CAAA;AAGnF,SAAO;GACH,GAAGF;GACHE;GACJ"}

package/dist/core/provisioning/synchronizer/scope/types.d.ts

@@ -0,0 +1,5 @@
+import type { IScopeRepository } from '../../../entities/index.ts';
+export type ScopeProvisioningSynchronizerContext = {
+    repository: IScopeRepository;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/core/provisioning/synchronizer/scope/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/synchronizer/scope/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,MAAM,MAAM,oCAAoC,GAAG;IAC/C,UAAU,EAAE,gBAAgB,CAAC;CAChC,CAAC"}

package/dist/core/provisioning/synchronizer/scope/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/provisioning/synchronizer/user/index.d.ts

@@ -0,0 +1,3 @@
+export * from './module.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/provisioning/synchronizer/user/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/synchronizer/user/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/core/provisioning/synchronizer/user/index.mjs

@@ -0,0 +1,2 @@
+import { UserProvisioningSynchronizer } from "./module.mjs";
+export { UserProvisioningSynchronizer };

package/dist/core/provisioning/synchronizer/user/module.d.ts

@@ -0,0 +1,18 @@
+import type { Permission, Role, UserPermission, UserRole } from '@authup/core-kit';
+import type { IClientRepository, IUserRepository } from '../../../entities/index.ts';
+import type { UserProvisioningEntity } from '../../entities/user/index.ts';
+import { BaseProvisioningSynchronizer } from '../base.ts';
+import { ProvisioningEntityResolver } from '../entity-resolver.ts';
+import { ProvisioningJunctionSynchronizer } from '../junction-synchronizer.ts';
+import type { UserProvisioningSynchronizerContext } from './types.ts';
+export declare class UserProvisioningSynchronizer extends BaseProvisioningSynchronizer<UserProvisioningEntity> {
+    protected userRepository: IUserRepository;
+    protected clientRepository: IClientRepository;
+    protected permissionResolver: ProvisioningEntityResolver<Permission>;
+    protected roleResolver: ProvisioningEntityResolver<Role>;
+    protected permissionJunction: ProvisioningJunctionSynchronizer<UserPermission>;
+    protected roleJunction: ProvisioningJunctionSynchronizer<UserRole>;
+    constructor(ctx: UserProvisioningSynchronizerContext);
+    synchronize(input: UserProvisioningEntity): Promise<UserProvisioningEntity>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/core/provisioning/synchronizer/user/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/synchronizer/user/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,UAAU,EACV,IAAI,EACJ,cAAc,EACd,QAAQ,EACX,MAAM,kBAAkB,CAAC;AAG1B,OAAO,KAAK,EACR,iBAAiB,EACjB,eAAe,EAClB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAE3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,gCAAgC,EAAE,MAAM,6BAA6B,CAAC;AAC/E,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAEtE,qBAAa,4BAA6B,SAAQ,4BAA4B,CAAC,sBAAsB,CAAC;IAClG,SAAS,CAAC,cAAc,EAAE,eAAe,CAAC;IAE1C,SAAS,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;IAE9C,SAAS,CAAC,kBAAkB,EAAE,0BAA0B,CAAC,UAAU,CAAC,CAAC;IAErE,SAAS,CAAC,YAAY,EAAE,0BAA0B,CAAC,IAAI,CAAC,CAAC;IAEzD,SAAS,CAAC,kBAAkB,EAAE,gCAAgC,CAAC,cAAc,CAAC,CAAC;IAE/E,SAAS,CAAC,YAAY,EAAE,gCAAgC,CAAC,QAAQ,CAAC,CAAC;gBAEvD,GAAG,EAAE,mCAAmC;IAqB9C,WAAW,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAgJpF"}

package/dist/core/provisioning/synchronizer/user/module.mjs

@@ -0,0 +1,103 @@
+import { ProvisioningEntityStrategyType } from "../../strategy/constants.mjs";
+import { normalizeEntityProvisioningStrategy } from "../../strategy/normalize.mjs";
+import "../../strategy/index.mjs";
+import { BaseProvisioningSynchronizer } from "../base.mjs";
+import { ProvisioningEntityResolver } from "../entity-resolver.mjs";
+import { ProvisioningJunctionSynchronizer } from "../junction-synchronizer.mjs";
+import { buildUserFakeEmail } from "@authup/core-kit";
+import { pickRecord } from "@authup/kit";
+//#region src/core/provisioning/synchronizer/user/module.ts
+var UserProvisioningSynchronizer = class extends BaseProvisioningSynchronizer {
+	userRepository;
+	clientRepository;
+	permissionResolver;
+	roleResolver;
+	permissionJunction;
+	roleJunction;
+	constructor(ctx) {
+		super();
+		this.userRepository = ctx.userRepository;
+		this.clientRepository = ctx.clientRepository;
+		this.permissionResolver = new ProvisioningEntityResolver(ctx.permissionRepository);
+		this.roleResolver = new ProvisioningEntityResolver(ctx.roleRepository);
+		this.permissionJunction = new ProvisioningJunctionSynchronizer({
+			repository: ctx.userPermissionRepository,
+			ownerKey: "user_id",
+			ownerRealmKey: "user_realm_id"
+		});
+		this.roleJunction = new ProvisioningJunctionSynchronizer({
+			repository: ctx.userRoleRepository,
+			ownerKey: "user_id",
+			ownerRealmKey: "user_realm_id"
+		});
+	}
+	async synchronize(input) {
+		const strategy = normalizeEntityProvisioningStrategy(input.strategy);
+		let attributes = await this.userRepository.findOneBy({
+			name: input.attributes.name,
+			realm_id: input.attributes.realm_id || null,
+			client_id: input.attributes.client_id || null
+		});
+		if (strategy.type === ProvisioningEntityStrategyType.ABSENT) {
+			if (attributes) await this.userRepository.remove(attributes);
+			return {
+				...input,
+				attributes: attributes || input.attributes
+			};
+		}
+		if (attributes) switch (strategy.type) {
+			case ProvisioningEntityStrategyType.MERGE:
+				if (strategy.attributes && strategy.attributes.includes("email")) input.attributes.email = input.attributes.email || attributes.email || buildUserFakeEmail(input.attributes.name || attributes.name);
+				attributes = this.userRepository.merge(attributes, strategy.attributes ? pickRecord(input.attributes, strategy.attributes) : input.attributes);
+				attributes = await this.userRepository.save(attributes);
+				break;
+			case ProvisioningEntityStrategyType.REPLACE:
+				input.attributes.email = input.attributes.email || attributes.email || (input.attributes.name ? buildUserFakeEmail(input.attributes.name) : void 0);
+				input.attributes.id = attributes.id;
+				attributes = await this.userRepository.save(this.userRepository.create(input.attributes));
+				break;
+		}
+		else {
+			if (!input.attributes.email && input.attributes.name) input.attributes.email = buildUserFakeEmail(input.attributes.name);
+			attributes = await this.userRepository.save(this.userRepository.create(input.attributes));
+		}
+		const permissions = [...await this.permissionResolver.resolveGlobal(input.relations && input.relations.globalPermissions), ...attributes.realm_id ? await this.permissionResolver.resolveRealm(input.relations && input.relations.realmPermissions, attributes.realm_id) : []];
+		if (input.relations && input.relations.clientPermissions) {
+			const clientKeys = Object.keys(input.relations.clientPermissions);
+			for (const clientKey of clientKeys) {
+				const client = await this.clientRepository.findOneBy({
+					name: clientKey,
+					realm_id: attributes.realm_id
+				});
+				if (client) {
+					const entities = await this.permissionResolver.resolveClient(input.relations.clientPermissions[clientKey], attributes.realm_id, client.id);
+					permissions.push(...entities);
+				}
+			}
+		}
+		if (permissions.length > 0) await this.permissionJunction.synchronize(attributes, permissions, "permission_id", "permission_realm_id");
+		const roles = [...await this.roleResolver.resolveGlobal(input.relations && input.relations.globalRoles), ...attributes.realm_id ? await this.roleResolver.resolveRealm(input.relations && input.relations.realmRoles, attributes.realm_id) : []];
+		if (input.relations && input.relations.clientRoles) {
+			const clientKeys = Object.keys(input.relations.clientRoles);
+			for (const clientKey of clientKeys) {
+				const client = await this.clientRepository.findOneBy({
+					name: clientKey,
+					realm_id: attributes.realm_id
+				});
+				if (client) {
+					const entities = await this.roleResolver.resolveClient(input.relations.clientRoles[clientKey], attributes.realm_id, client.id);
+					roles.push(...entities);
+				}
+			}
+		}
+		if (roles.length > 0) await this.roleJunction.synchronize(attributes, roles, "role_id", "role_realm_id");
+		return {
+			...input,
+			attributes
+		};
+	}
+};
+//#endregion
+export { UserProvisioningSynchronizer };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/provisioning/synchronizer/user/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["buildUserFakeEmail","pickRecord","ProvisioningEntityStrategyType","normalizeEntityProvisioningStrategy","BaseProvisioningSynchronizer","ProvisioningEntityResolver","ProvisioningJunctionSynchronizer","UserProvisioningSynchronizer","userRepository","clientRepository","permissionResolver","roleResolver","permissionJunction","roleJunction","ctx","permissionRepository","roleRepository","repository","userPermissionRepository","ownerKey","ownerRealmKey","userRoleRepository","synchronize","input","strategy","attributes","findOneBy","name","realm_id","client_id","type","ABSENT","remove","MERGE","includes","email","merge","save","REPLACE","undefined","id","create","permissions","resolveGlobal","relations","globalPermissions","resolveRealm","realmPermissions","clientPermissions","clientKeys","Object","keys","clientKey","client","entities","resolveClient","push","length","roles","globalRoles","realmRoles","clientRoles"],"sources":["../../../../../src/core/provisioning/synchronizer/user/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    Permission, \n    Role, \n    UserPermission, \n    UserRole,\n} from '@authup/core-kit';\nimport { buildUserFakeEmail } from '@authup/core-kit';\nimport { pickRecord } from '@authup/kit';\nimport type {\n    IClientRepository,\n    IUserRepository,\n} from '../../../entities/index.ts';\nimport type { UserProvisioningEntity } from '../../entities/user/index.ts';\nimport { ProvisioningEntityStrategyType, normalizeEntityProvisioningStrategy } from '../../strategy/index.ts';\nimport { BaseProvisioningSynchronizer } from '../base.ts';\nimport { ProvisioningEntityResolver } from '../entity-resolver.ts';\nimport { ProvisioningJunctionSynchronizer } from '../junction-synchronizer.ts';\nimport type { UserProvisioningSynchronizerContext } from './types.ts';\n\nexport class UserProvisioningSynchronizer extends BaseProvisioningSynchronizer<UserProvisioningEntity> {\n    protected userRepository: IUserRepository;\n\n    protected clientRepository: IClientRepository;\n\n    protected permissionResolver: ProvisioningEntityResolver<Permission>;\n\n    protected roleResolver: ProvisioningEntityResolver<Role>;\n\n    protected permissionJunction: ProvisioningJunctionSynchronizer<UserPermission>;\n\n    protected roleJunction: ProvisioningJunctionSynchronizer<UserRole>;\n\n    constructor(ctx: UserProvisioningSynchronizerContext) {\n        super();\n\n        this.userRepository = ctx.userRepository;\n        this.clientRepository = ctx.clientRepository;\n\n        this.permissionResolver = new ProvisioningEntityResolver(ctx.permissionRepository);\n        this.roleResolver = new ProvisioningEntityResolver(ctx.roleRepository);\n\n        this.permissionJunction = new ProvisioningJunctionSynchronizer({\n            repository: ctx.userPermissionRepository,\n            ownerKey: 'user_id',\n            ownerRealmKey: 'user_realm_id',\n        });\n        this.roleJunction = new ProvisioningJunctionSynchronizer({\n            repository: ctx.userRoleRepository,\n            ownerKey: 'user_id',\n            ownerRealmKey: 'user_realm_id',\n        });\n    }\n\n    async synchronize(input: UserProvisioningEntity): Promise<UserProvisioningEntity> {\n        const strategy = normalizeEntityProvisioningStrategy(input.strategy);\n\n        let attributes = await this.userRepository.findOneBy({\n            name: input.attributes.name,\n            realm_id: input.attributes.realm_id || null,\n            client_id: input.attributes.client_id || null,\n        });\n\n        if (strategy.type === ProvisioningEntityStrategyType.ABSENT) {\n            if (attributes) {\n                await this.userRepository.remove(attributes);\n            }\n            return {\n                ...input,\n                attributes: attributes || input.attributes, \n            };\n        }\n\n        if (attributes) {\n            switch (strategy.type) {\n                case ProvisioningEntityStrategyType.MERGE:\n                    if (\n                        strategy.attributes &&\n                        strategy.attributes.includes('email')\n                    ) {\n                        input.attributes.email = input.attributes.email ||\n                            attributes.email ||\n                            buildUserFakeEmail(input.attributes.name || attributes.name);\n                    }\n\n                    attributes = this.userRepository.merge(\n                        attributes,\n                        strategy.attributes ?\n                            pickRecord(input.attributes, strategy.attributes) :\n                            input.attributes,\n                    );\n\n                    attributes = await this.userRepository.save(attributes);\n                    break;\n                case ProvisioningEntityStrategyType.REPLACE:\n                    input.attributes.email = input.attributes.email ||\n                        attributes.email ||\n                        (input.attributes.name ? buildUserFakeEmail(input.attributes.name) : undefined);\n\n                    input.attributes.id = attributes.id;\n                    attributes = await this.userRepository.save(this.userRepository.create(input.attributes));\n                    break;\n            }\n        } else {\n            if (!input.attributes.email && input.attributes.name) {\n                input.attributes.email = buildUserFakeEmail(input.attributes.name);\n            }\n\n            attributes = await this.userRepository.save(this.userRepository.create(input.attributes));\n        }\n\n        // Permissions (Global, Realm & Client)\n        const permissions : Permission[] = [\n            ...await this.permissionResolver.resolveGlobal(\n                input.relations && input.relations.globalPermissions,\n            ),\n            ...(attributes.realm_id ?\n                await this.permissionResolver.resolveRealm(\n                    input.relations && input.relations.realmPermissions,\n                    attributes.realm_id,\n                ) :\n                []),\n        ];\n\n        if (input.relations && input.relations.clientPermissions) {\n            const clientKeys = Object.keys(input.relations.clientPermissions);\n            for (const clientKey of clientKeys) {\n                const client = await this.clientRepository.findOneBy({\n                    name: clientKey,\n                    realm_id: attributes.realm_id,\n                });\n\n                if (client) {\n                    const entities = await this.permissionResolver.resolveClient(\n                        input.relations.clientPermissions[clientKey],\n                        attributes.realm_id,\n                        client.id,\n                    );\n                    permissions.push(...entities);\n                }\n            }\n        }\n\n        if (permissions.length > 0) {\n            await this.permissionJunction.synchronize(\n                attributes,\n                permissions,\n                'permission_id',\n                'permission_realm_id',\n            );\n        }\n\n        // Roles (Global, Realm & Client)\n        const roles : Role[] = [\n            ...await this.roleResolver.resolveGlobal(\n                input.relations && input.relations.globalRoles,\n            ),\n            ...(attributes.realm_id ?\n                await this.roleResolver.resolveRealm(\n                    input.relations && input.relations.realmRoles,\n                    attributes.realm_id,\n                ) :\n                []),\n        ];\n\n        if (input.relations && input.relations.clientRoles) {\n            const clientKeys = Object.keys(input.relations.clientRoles);\n            for (const clientKey of clientKeys) {\n                const client = await this.clientRepository.findOneBy({\n                    name: clientKey,\n                    realm_id: attributes.realm_id,\n                });\n\n                if (client) {\n                    const entities = await this.roleResolver.resolveClient(\n                        input.relations.clientRoles[clientKey],\n                        attributes.realm_id,\n                        client.id,\n                    );\n                    roles.push(...entities);\n                }\n            }\n        }\n\n        if (roles.length > 0) {\n            await this.roleJunction.synchronize(\n                attributes,\n                roles,\n                'role_id',\n                'role_realm_id',\n            );\n        }\n\n        return {\n            ...input,\n            attributes,\n        };\n    }\n}\n"],"mappings":";;;;;;;;;AA0BA,IAAaO,+BAAb,cAAkDH,6BAAAA;CACpCI;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEV,YAAYC,KAA0C;AAClD,SAAK;AAEL,OAAKN,iBAAiBM,IAAIN;AAC1B,OAAKC,mBAAmBK,IAAIL;AAE5B,OAAKC,qBAAqB,IAAIL,2BAA2BS,IAAIC,qBAAoB;AACjF,OAAKJ,eAAe,IAAIN,2BAA2BS,IAAIE,eAAc;AAErE,OAAKJ,qBAAqB,IAAIN,iCAAiC;GAC3DW,YAAYH,IAAII;GAChBC,UAAU;GACVC,eAAe;GACnB,CAAA;AACA,OAAKP,eAAe,IAAIP,iCAAiC;GACrDW,YAAYH,IAAIO;GAChBF,UAAU;GACVC,eAAe;GACnB,CAAA;;CAGJ,MAAME,YAAYC,OAAgE;EAC9E,MAAMC,WAAWrB,oCAAoCoB,MAAMC,SAAQ;EAEnE,IAAIC,aAAa,MAAM,KAAKjB,eAAekB,UAAU;GACjDC,MAAMJ,MAAME,WAAWE;GACvBC,UAAUL,MAAME,WAAWG,YAAY;GACvCC,WAAWN,MAAME,WAAWI,aAAa;GAC7C,CAAA;AAEA,MAAIL,SAASM,SAAS5B,+BAA+B6B,QAAQ;AACzD,OAAIN,WACA,OAAM,KAAKjB,eAAewB,OAAOP,WAAAA;AAErC,UAAO;IACH,GAAGF;IACHE,YAAYA,cAAcF,MAAME;IACpC;;AAGJ,MAAIA,WACA,SAAQD,SAASM,MAAjB;GACI,KAAK5B,+BAA+B+B;AAChC,QACIT,SAASC,cACTD,SAASC,WAAWS,SAAS,QAAA,CAE7BX,OAAME,WAAWU,QAAQZ,MAAME,WAAWU,SACtCV,WAAWU,SACXnC,mBAAmBuB,MAAME,WAAWE,QAAQF,WAAWE,KAAI;AAGnEF,iBAAa,KAAKjB,eAAe4B,MAC7BX,YACAD,SAASC,aACLxB,WAAWsB,MAAME,YAAYD,SAASC,WAAU,GAChDF,MAAME,WAAU;AAGxBA,iBAAa,MAAM,KAAKjB,eAAe6B,KAAKZ,WAAAA;AAC5C;GACJ,KAAKvB,+BAA+BoC;AAChCf,UAAME,WAAWU,QAAQZ,MAAME,WAAWU,SACtCV,WAAWU,UACVZ,MAAME,WAAWE,OAAO3B,mBAAmBuB,MAAME,WAAWE,KAAI,GAAIY,KAAAA;AAEzEhB,UAAME,WAAWe,KAAKf,WAAWe;AACjCf,iBAAa,MAAM,KAAKjB,eAAe6B,KAAK,KAAK7B,eAAeiC,OAAOlB,MAAME,WAAU,CAAA;AACvF;;OAEL;AACH,OAAI,CAACF,MAAME,WAAWU,SAASZ,MAAME,WAAWE,KAC5CJ,OAAME,WAAWU,QAAQnC,mBAAmBuB,MAAME,WAAWE,KAAI;AAGrEF,gBAAa,MAAM,KAAKjB,eAAe6B,KAAK,KAAK7B,eAAeiC,OAAOlB,MAAME,WAAU,CAAA;;EAI3F,MAAMiB,cAA6B,CAAA,GAC5B,MAAM,KAAKhC,mBAAmBiC,cAC7BpB,MAAMqB,aAAarB,MAAMqB,UAAUC,kBAAiB,EAAA,GAEpDpB,WAAWG,WACX,MAAM,KAAKlB,mBAAmBoC,aAC1BvB,MAAMqB,aAAarB,MAAMqB,UAAUG,kBACnCtB,WAAWG,SAAQ,GAEvB,EAAE,CACT;AAED,MAAIL,MAAMqB,aAAarB,MAAMqB,UAAUI,mBAAmB;GACtD,MAAMC,aAAaC,OAAOC,KAAK5B,MAAMqB,UAAUI,kBAAiB;AAChE,QAAK,MAAMI,aAAaH,YAAY;IAChC,MAAMI,SAAS,MAAM,KAAK5C,iBAAiBiB,UAAU;KACjDC,MAAMyB;KACNxB,UAAUH,WAAWG;KACzB,CAAA;AAEA,QAAIyB,QAAQ;KACR,MAAMC,WAAW,MAAM,KAAK5C,mBAAmB6C,cAC3ChC,MAAMqB,UAAUI,kBAAkBI,YAClC3B,WAAWG,UACXyB,OAAOb,GAAE;AAEbE,iBAAYc,KAAI,GAAIF,SAAAA;;;;AAKhC,MAAIZ,YAAYe,SAAS,EACrB,OAAM,KAAK7C,mBAAmBU,YAC1BG,YACAiB,aACA,iBACA,sBAAA;EAKR,MAAMgB,QAAiB,CAAA,GAChB,MAAM,KAAK/C,aAAagC,cACvBpB,MAAMqB,aAAarB,MAAMqB,UAAUe,YAAW,EAAA,GAE9ClC,WAAWG,WACX,MAAM,KAAKjB,aAAamC,aACpBvB,MAAMqB,aAAarB,MAAMqB,UAAUgB,YACnCnC,WAAWG,SAAQ,GAEvB,EAAE,CACT;AAED,MAAIL,MAAMqB,aAAarB,MAAMqB,UAAUiB,aAAa;GAChD,MAAMZ,aAAaC,OAAOC,KAAK5B,MAAMqB,UAAUiB,YAAW;AAC1D,QAAK,MAAMT,aAAaH,YAAY;IAChC,MAAMI,SAAS,MAAM,KAAK5C,iBAAiBiB,UAAU;KACjDC,MAAMyB;KACNxB,UAAUH,WAAWG;KACzB,CAAA;AAEA,QAAIyB,QAAQ;KACR,MAAMC,WAAW,MAAM,KAAK3C,aAAa4C,cACrChC,MAAMqB,UAAUiB,YAAYT,YAC5B3B,WAAWG,UACXyB,OAAOb,GAAE;AAEbkB,WAAMF,KAAI,GAAIF,SAAAA;;;;AAK1B,MAAII,MAAMD,SAAS,EACf,OAAM,KAAK5C,aAAaS,YACpBG,YACAiC,OACA,WACA,gBAAA;AAIR,SAAO;GACH,GAAGnC;GACHE;GACJ"}

package/dist/core/provisioning/synchronizer/user/types.d.ts

@@ -0,0 +1,10 @@
+import type { IClientRepository, IPermissionRepository, IRoleRepository, IUserPermissionRepository, IUserRepository, IUserRoleRepository } from '../../../entities/index.ts';
+export type UserProvisioningSynchronizerContext = {
+    userRepository: IUserRepository;
+    userRoleRepository: IUserRoleRepository;
+    userPermissionRepository: IUserPermissionRepository;
+    clientRepository: IClientRepository;
+    roleRepository: IRoleRepository;
+    permissionRepository: IPermissionRepository;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/core/provisioning/synchronizer/user/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/synchronizer/user/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,iBAAiB,EACjB,qBAAqB,EACrB,eAAe,EACf,yBAAyB,EACzB,eAAe,EACf,mBAAmB,EACtB,MAAM,4BAA4B,CAAC;AAEpC,MAAM,MAAM,mCAAmC,GAAG;IAC9C,cAAc,EAAE,eAAe,CAAC;IAChC,kBAAkB,EAAE,mBAAmB,CAAC;IACxC,wBAAwB,EAAE,yBAAyB,CAAC;IAEpD,gBAAgB,EAAE,iBAAiB,CAAC;IACpC,cAAc,EAAE,eAAe,CAAC;IAChC,oBAAoB,EAAE,qBAAqB,CAAC;CAC/C,CAAC"}

package/dist/core/provisioning/synchronizer/user/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/provisioning/types.d.ts

@@ -0,0 +1,10 @@
+import type { RootProvisioningEntity } from './entities/index.ts';
+import type { IContainer } from 'eldin';
+export interface IProvisioningSource {
+    load(container: IContainer): Promise<RootProvisioningEntity>;
+}
+export interface IProvisioningSynchronizer<T> {
+    synchronize(input: T): Promise<T>;
+    synchronizeMany(input: T[]): Promise<T[]>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/provisioning/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/provisioning/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAExC,MAAM,WAAW,mBAAmB;IAChC,IAAI,CAAC,SAAS,EAAE,UAAU,GAAI,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACjE;AAED,MAAM,WAAW,yBAAyB,CAAC,CAAC;IACxC,WAAW,CAAC,KAAK,EAAE,CAAC,GAAI,OAAO,CAAC,CAAC,CAAC,CAAC;IACnC,eAAe,CAAC,KAAK,EAAE,CAAC,EAAE,GAAI,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;CAC9C"}

package/dist/core/provisioning/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/core/security/index.d.ts

@@ -0,0 +1,2 @@
+export * from './policy/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/security/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/security/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC"}

package/dist/core/security/index.mjs

@@ -0,0 +1,4 @@
+import { PermissionBindingPolicyEvaluator } from "./policy/evaluator.mjs";
+import { PolicyEngine } from "./policy/engine.mjs";
+import "./policy/index.mjs";
+export { PermissionBindingPolicyEvaluator, PolicyEngine };

package/dist/core/security/policy/engine.d.ts

@@ -0,0 +1,6 @@
+import { PolicyEngine as BasePolicyEngine } from '@authup/access';
+import type { IIdentityPermissionProvider } from '../../identity/permission/types.ts';
+export declare class PolicyEngine extends BasePolicyEngine {
+    constructor(identityPermissionProvider: IIdentityPermissionProvider);
+}
+//# sourceMappingURL=engine.d.ts.map

package/dist/core/security/policy/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../../src/core/security/policy/engine.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,YAAY,IAAI,gBAAgB,EAA8C,MAAM,gBAAgB,CAAC;AAC9G,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AAGtF,qBAAa,YAAa,SAAQ,gBAAgB;gBAClC,0BAA0B,EAAE,2BAA2B;CAKtE"}

package/dist/core/security/policy/engine.mjs

@@ -0,0 +1,13 @@
+import { PermissionBindingPolicyEvaluator } from "./evaluator.mjs";
+import { BuiltInPolicyType, PolicyDefaultEvaluators, PolicyEngine as PolicyEngine$1 } from "@authup/access";
+//#region src/core/security/policy/engine.ts
+var PolicyEngine = class extends PolicyEngine$1 {
+	constructor(identityPermissionProvider) {
+		super(PolicyDefaultEvaluators);
+		this.registerEvaluator(BuiltInPolicyType.PERMISSION_BINDING, new PermissionBindingPolicyEvaluator(identityPermissionProvider));
+	}
+};
+//#endregion
+export { PolicyEngine };
+
+//# sourceMappingURL=engine.mjs.map

package/dist/core/security/policy/engine.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.mjs","names":["PolicyEngine","BasePolicyEngine","BuiltInPolicyType","PolicyDefaultEvaluators","PermissionBindingPolicyEvaluator","identityPermissionProvider","registerEvaluator","PERMISSION_BINDING"],"sources":["../../../../src/core/security/policy/engine.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { PolicyEngine as BasePolicyEngine, BuiltInPolicyType, PolicyDefaultEvaluators } from '@authup/access';\nimport type { IIdentityPermissionProvider } from '../../identity/permission/types.ts';\nimport { PermissionBindingPolicyEvaluator } from './evaluator.ts';\n\nexport class PolicyEngine extends BasePolicyEngine {\n    constructor(identityPermissionProvider: IIdentityPermissionProvider) {\n        super(PolicyDefaultEvaluators);\n\n        this.registerEvaluator(BuiltInPolicyType.PERMISSION_BINDING, new PermissionBindingPolicyEvaluator(identityPermissionProvider));\n    }\n}\n"],"mappings":";;;AAWA,IAAaA,eAAb,cAAkCC,eAAAA;CAC9B,YAAYI,4BAAyD;AACjE,QAAMF,wBAAAA;AAEN,OAAKG,kBAAkBJ,kBAAkBK,oBAAoB,IAAIH,iCAAiCC,2BAAAA,CAAAA"}

package/dist/core/security/policy/evaluator.d.ts

@@ -0,0 +1,13 @@
+import type { IPolicyEvaluator, PermissionPolicyBinding, PolicyEvaluationContext, PolicyEvaluationResult } from '@authup/access';
+import { AttributesPolicyEvaluator, IdentityPolicyEvaluator, PermissionBindingPolicyValidator } from '@authup/access';
+import type { IIdentityPermissionProvider } from '../../identity/permission/types.ts';
+export declare class PermissionBindingPolicyEvaluator implements IPolicyEvaluator {
+    protected validator: PermissionBindingPolicyValidator;
+    protected identityEvaluator: IdentityPolicyEvaluator;
+    protected attributesEvaluator: AttributesPolicyEvaluator;
+    protected identityPermissionProvider: IIdentityPermissionProvider;
+    constructor(identityPermissionProvider: IIdentityPermissionProvider);
+    accessData(ctx: PolicyEvaluationContext): Promise<PermissionPolicyBinding | null>;
+    evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
+}
+//# sourceMappingURL=evaluator.d.ts.map

package/dist/core/security/policy/evaluator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../../src/core/security/policy/evaluator.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAGR,gBAAgB,EAChB,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACH,yBAAyB,EAEzB,uBAAuB,EACvB,gCAAgC,EAMnC,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AAEtF,qBAAa,gCAAiC,YAAW,gBAAgB;IACrE,SAAS,CAAC,SAAS,EAAG,gCAAgC,CAAC;IAEvD,SAAS,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;IAErD,SAAS,CAAC,mBAAmB,EAAG,yBAAyB,CAAC;IAE1D,SAAS,CAAC,0BAA0B,EAAE,2BAA2B,CAAC;gBAEtD,0BAA0B,EAAE,2BAA2B;IAO7D,UAAU,CAAC,GAAG,EAAE,uBAAuB,GAAI,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC;IAiBlF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CA+E5G"}

package/dist/core/security/policy/evaluator.mjs

@@ -0,0 +1,69 @@
+import { AttributesPolicyEvaluator, BuiltInPolicyType, IdentityPolicyEvaluator, PermissionBindingPolicyValidator, PolicyEngine, PolicyIssueCode, definePolicyIssueItem, maybeInvertPolicyOutcome, mergePermissionPolicyBindings } from "@authup/access";
+//#region src/core/security/policy/evaluator.ts
+var PermissionBindingPolicyEvaluator = class {
+	validator;
+	identityEvaluator;
+	attributesEvaluator;
+	identityPermissionProvider;
+	constructor(identityPermissionProvider) {
+		this.validator = new PermissionBindingPolicyValidator();
+		this.identityEvaluator = new IdentityPolicyEvaluator();
+		this.attributesEvaluator = new AttributesPolicyEvaluator();
+		this.identityPermissionProvider = identityPermissionProvider;
+	}
+	async accessData(ctx) {
+		if (!ctx.data.has(BuiltInPolicyType.PERMISSION_BINDING)) return null;
+		if (ctx.data.isValidated(BuiltInPolicyType.PERMISSION_BINDING)) return ctx.data.get(BuiltInPolicyType.PERMISSION_BINDING);
+		const data = ctx.data.get(BuiltInPolicyType.PERMISSION_BINDING);
+		ctx.data.set(BuiltInPolicyType.PERMISSION_BINDING, data);
+		ctx.data.setValidated(BuiltInPolicyType.PERMISSION_BINDING);
+		return data;
+	}
+	async evaluate(value, ctx) {
+		const policy = await this.validator.run(value);
+		const identity = await this.identityEvaluator.accessData(ctx);
+		if (!identity) return {
+			success: false,
+			issues: [definePolicyIssueItem({
+				code: PolicyIssueCode.DATA_MISSING,
+				message: "The data property identity is missing",
+				path: ctx.path
+			})]
+		};
+		const binding = await this.accessData(ctx);
+		if (!binding) return {
+			success: false,
+			issues: [definePolicyIssueItem({
+				code: PolicyIssueCode.DATA_MISSING,
+				message: "The data property permission is missing",
+				path: ctx.path
+			})]
+		};
+		const identityBindings = await this.identityPermissionProvider.getFor(identity).then((bindings) => bindings.filter((item) => {
+			if (item.permission.name !== binding.permission.name) return false;
+			return (binding.permission.realm_id ?? null) === (item.permission.realm_id ?? null) && (binding.permission.client_id ?? null) === (item.permission.client_id ?? null);
+		}));
+		if (identityBindings.length === 0) return { success: maybeInvertPolicyOutcome(false, policy.invert) };
+		const bindingsMerged = mergePermissionPolicyBindings(identityBindings);
+		if (bindingsMerged.length === 0) return { success: maybeInvertPolicyOutcome(false, policy.invert) };
+		const policies = bindingsMerged.flatMap((b) => b.policies || []);
+		if (policies.length === 0) return { success: maybeInvertPolicyOutcome(true, policy.invert) };
+		if (!ctx.evaluators) return { success: maybeInvertPolicyOutcome(false, policy.invert) };
+		const compositePolicy = {
+			children: policies,
+			type: BuiltInPolicyType.COMPOSITE
+		};
+		const outcome = await new PolicyEngine(ctx.evaluators).evaluate(compositePolicy, {
+			...ctx,
+			path: [...ctx.path || [], ...compositePolicy.type ? [compositePolicy.type] : []]
+		});
+		return {
+			...outcome,
+			success: maybeInvertPolicyOutcome(outcome.success, policy.invert)
+		};
+	}
+};
+//#endregion
+export { PermissionBindingPolicyEvaluator };
+
+//# sourceMappingURL=evaluator.mjs.map

package/dist/core/security/policy/evaluator.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator.mjs","names":["AttributesPolicyEvaluator","BuiltInPolicyType","IdentityPolicyEvaluator","PermissionBindingPolicyValidator","PolicyEngine","PolicyIssueCode","definePolicyIssueItem","maybeInvertPolicyOutcome","mergePermissionPolicyBindings","PermissionBindingPolicyEvaluator","validator","identityEvaluator","attributesEvaluator","identityPermissionProvider","accessData","ctx","data","has","PERMISSION_BINDING","isValidated","get","set","setValidated","evaluate","value","policy","run","identity","success","issues","code","DATA_MISSING","message","path","binding","identityBindings","getFor","then","bindings","filter","item","permission","name","realm_id","client_id","length","invert","bindingsMerged","policies","flatMap","b","evaluators","compositePolicy","children","type","COMPOSITE","engine","outcome"],"sources":["../../../../src/core/security/policy/evaluator.ts"],"sourcesContent":["/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    BasePolicy,\n    CompositePolicy,\n    IPolicyEvaluator,\n    PermissionPolicyBinding,\n    PolicyEvaluationContext,\n    PolicyEvaluationResult,\n} from '@authup/access';\nimport {\n    AttributesPolicyEvaluator,\n    BuiltInPolicyType,\n    IdentityPolicyEvaluator,\n    PermissionBindingPolicyValidator,\n    PolicyEngine,\n    PolicyIssueCode,\n    definePolicyIssueItem,\n    maybeInvertPolicyOutcome,\n    mergePermissionPolicyBindings,\n} from '@authup/access';\nimport type { IIdentityPermissionProvider } from '../../identity/permission/types.ts';\n\nexport class PermissionBindingPolicyEvaluator implements IPolicyEvaluator {\n    protected validator : PermissionBindingPolicyValidator;\n\n    protected identityEvaluator: IdentityPolicyEvaluator;\n\n    protected attributesEvaluator : AttributesPolicyEvaluator;\n\n    protected identityPermissionProvider: IIdentityPermissionProvider;\n\n    constructor(identityPermissionProvider: IIdentityPermissionProvider) {\n        this.validator = new PermissionBindingPolicyValidator();\n        this.identityEvaluator = new IdentityPolicyEvaluator();\n        this.attributesEvaluator = new AttributesPolicyEvaluator();\n        this.identityPermissionProvider = identityPermissionProvider;\n    }\n\n    async accessData(ctx: PolicyEvaluationContext) : Promise<PermissionPolicyBinding | null> {\n        if (!ctx.data.has(BuiltInPolicyType.PERMISSION_BINDING)) {\n            return null;\n        }\n\n        if (ctx.data.isValidated(BuiltInPolicyType.PERMISSION_BINDING)) {\n            return ctx.data.get(BuiltInPolicyType.PERMISSION_BINDING);\n        }\n\n        const data = ctx.data.get<PermissionPolicyBinding>(BuiltInPolicyType.PERMISSION_BINDING);\n\n        ctx.data.set(BuiltInPolicyType.PERMISSION_BINDING, data);\n        ctx.data.setValidated(BuiltInPolicyType.PERMISSION_BINDING);\n\n        return data;\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        const policy = await this.validator.run(value);\n\n        const identity = await this.identityEvaluator.accessData(ctx);\n        if (!identity) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property identity is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n        const binding = await this.accessData(ctx);\n        if (!binding) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property permission is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        const identityBindings = await this.identityPermissionProvider.getFor(identity)\n            .then((bindings) => bindings.filter((item) => {\n                if (item.permission.name !== binding.permission.name) {\n                    return false;\n                }\n\n                return (binding.permission.realm_id ?? null) === (item.permission.realm_id ?? null) &&\n                    (binding.permission.client_id ?? null) === (item.permission.client_id ?? null);\n            }));\n\n        if (identityBindings.length === 0) {\n            return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n        }\n\n        const bindingsMerged = mergePermissionPolicyBindings(identityBindings);\n        if (bindingsMerged.length === 0) {\n            return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n        }\n\n        const policies : BasePolicy[] = bindingsMerged\n            .flatMap((b) => b.policies || []);\n\n        if (policies.length === 0) {\n            return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n        }\n\n        if (!ctx.evaluators) {\n            return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n        }\n\n        const compositePolicy : CompositePolicy = {\n            children: policies,\n            type: BuiltInPolicyType.COMPOSITE,\n        };\n\n        const engine = new PolicyEngine(ctx.evaluators);\n        const outcome = await engine.evaluate(compositePolicy, {\n            ...ctx,\n            path: [\n                ...(ctx.path || []),\n                ...(compositePolicy.type ? [compositePolicy.type] : []),\n            ],\n        });\n\n        return {\n            ...outcome,\n            success: maybeInvertPolicyOutcome(outcome.success, policy.invert),\n        };\n    }\n}\n"],"mappings":";;AA4BA,IAAaS,mCAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEV,YAAYA,4BAAyD;AACjE,OAAKH,YAAY,IAAIP,kCAAAA;AACrB,OAAKQ,oBAAoB,IAAIT,yBAAAA;AAC7B,OAAKU,sBAAsB,IAAIZ,2BAAAA;AAC/B,OAAKa,6BAA6BA;;CAGtC,MAAMC,WAAWC,KAAwE;AACrF,MAAI,CAACA,IAAIC,KAAKC,IAAIhB,kBAAkBiB,mBAAkB,CAClD,QAAO;AAGX,MAAIH,IAAIC,KAAKG,YAAYlB,kBAAkBiB,mBAAkB,CACzD,QAAOH,IAAIC,KAAKI,IAAInB,kBAAkBiB,mBAAkB;EAG5D,MAAMF,OAAOD,IAAIC,KAAKI,IAA6BnB,kBAAkBiB,mBAAkB;AAEvFH,MAAIC,KAAKK,IAAIpB,kBAAkBiB,oBAAoBF,KAAAA;AACnDD,MAAIC,KAAKM,aAAarB,kBAAkBiB,mBAAkB;AAE1D,SAAOF;;CAGX,MAAMO,SAASC,OAA4BT,KAA+D;EACtG,MAAMU,SAAS,MAAM,KAAKf,UAAUgB,IAAIF,MAAAA;EAExC,MAAMG,WAAW,MAAM,KAAKhB,kBAAkBG,WAAWC,IAAAA;AACzD,MAAI,CAACY,SACD,QAAO;GACHC,SAAS;GACTC,QAAQ,CACJvB,sBAAsB;IAClBwB,MAAMzB,gBAAgB0B;IACtBC,SAAS;IACTC,MAAMlB,IAAIkB;IACd,CAAA,CACH;GACL;EAEJ,MAAMC,UAAU,MAAM,KAAKpB,WAAWC,IAAAA;AACtC,MAAI,CAACmB,QACD,QAAO;GACHN,SAAS;GACTC,QAAQ,CACJvB,sBAAsB;IAClBwB,MAAMzB,gBAAgB0B;IACtBC,SAAS;IACTC,MAAMlB,IAAIkB;IACd,CAAA,CACH;GACL;EAGJ,MAAME,mBAAmB,MAAM,KAAKtB,2BAA2BuB,OAAOT,SAAAA,CACjEU,MAAMC,aAAaA,SAASC,QAAQC,SAAAA;AACjC,OAAIA,KAAKC,WAAWC,SAASR,QAAQO,WAAWC,KAC5C,QAAO;AAGX,WAAQR,QAAQO,WAAWE,YAAY,WAAWH,KAAKC,WAAWE,YAAY,UACzET,QAAQO,WAAWG,aAAa,WAAWJ,KAAKC,WAAWG,aAAa;IACjF,CAAA;AAEJ,MAAIT,iBAAiBU,WAAW,EAC5B,QAAO,EAAEjB,SAASrB,yBAAyB,OAAOkB,OAAOqB,OAAM,EAAE;EAGrE,MAAMC,iBAAiBvC,8BAA8B2B,iBAAAA;AACrD,MAAIY,eAAeF,WAAW,EAC1B,QAAO,EAAEjB,SAASrB,yBAAyB,OAAOkB,OAAOqB,OAAM,EAAE;EAGrE,MAAME,WAA0BD,eAC3BE,SAASC,MAAMA,EAAEF,YAAY,EAAE,CAAA;AAEpC,MAAIA,SAASH,WAAW,EACpB,QAAO,EAAEjB,SAASrB,yBAAyB,MAAMkB,OAAOqB,OAAM,EAAE;AAGpE,MAAI,CAAC/B,IAAIoC,WACL,QAAO,EAAEvB,SAASrB,yBAAyB,OAAOkB,OAAOqB,OAAM,EAAE;EAGrE,MAAMM,kBAAoC;GACtCC,UAAUL;GACVM,MAAMrD,kBAAkBsD;GAC5B;EAGA,MAAME,UAAU,MAAMD,IADHpD,aAAaW,IAAIoC,WACdK,CAAOjC,SAAS6B,iBAAiB;GACnD,GAAGrC;GACHkB,MAAM,CAAA,GACElB,IAAIkB,QAAQ,EAAE,EAAA,GACdmB,gBAAgBE,OAAO,CAACF,gBAAgBE,KAAK,GAAG,EAAE,CACzD;GACL,CAAA;AAEA,SAAO;GACH,GAAGG;GACH7B,SAASrB,yBAAyBkD,QAAQ7B,SAASH,OAAOqB,OAAM;GACpE"}

package/dist/core/security/policy/index.d.ts

@@ -0,0 +1,3 @@
+export * from './engine.ts';
+export * from './evaluator.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/security/policy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/security/policy/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}

package/dist/core/security/policy/index.mjs

@@ -0,0 +1,3 @@
+import { PermissionBindingPolicyEvaluator } from "./evaluator.mjs";
+import { PolicyEngine } from "./engine.mjs";
+export { PermissionBindingPolicyEvaluator, PolicyEngine };

package/dist/index.d.ts

@@ -1,7 +1,6 @@
-export * from './cli/commands';
-export * from './config';
-export * from './domains';
-export * from './database';
-export * from './http';
-export * from './commands';
+import 'reflect-metadata';
+export * from './app/index.ts';
+export * from './cli/commands/index.ts';
+export * from './adapters/database/index.ts';
+export * from './adapters/http/index.ts';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,QAAQ,CAAC;AACvB,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,kBAAkB,CAAC;AAE1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,0BAA0B,CAAC"}