@authup/server-core 1.0.0-beta.4 → 1.0.0-beta.41

package/dist/app/modules/database/constants.d.ts

@@ -0,0 +1,6 @@
+import type { DataSource } from 'typeorm';
+import { TypedToken } from 'eldin';
+export declare const DatabaseInjectionKey: {
+    readonly DataSource: TypedToken<DataSource>;
+};
+//# sourceMappingURL=constants.d.ts.map

package/dist/app/modules/database/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/database/constants.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAEnC,eAAO,MAAM,oBAAoB;;CAAoE,CAAC"}

package/dist/app/modules/database/constants.mjs

@@ -0,0 +1,7 @@
+import { TypedToken } from "eldin";
+//#region src/app/modules/database/constants.ts
+const DatabaseInjectionKey = { DataSource: new TypedToken("DataSource") };
+//#endregion
+export { DatabaseInjectionKey };
+
+//# sourceMappingURL=constants.mjs.map

package/dist/app/modules/database/constants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.mjs","names":["TypedToken","DatabaseInjectionKey","DataSource"],"sources":["../../../../src/app/modules/database/constants.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { DataSource } from 'typeorm';\nimport { TypedToken } from 'eldin';\n\nexport const DatabaseInjectionKey = { DataSource: new TypedToken<DataSource>('DataSource') } as const;\n"],"mappings":";;AAUA,MAAaC,uBAAuB,EAAEC,YAAY,IAAIF,WAAuB,aAAA,EAAc"}

package/dist/app/modules/database/index.d.ts

@@ -0,0 +1,4 @@
+export * from './constants.ts';
+export * from './module.ts';
+export * from './repositories/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/app/modules/database/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/database/index.ts"],"names":[],"mappings":"AAOA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,yBAAyB,CAAC"}

package/dist/app/modules/database/index.mjs

@@ -0,0 +1,26 @@
+import { DatabaseInjectionKey } from "./constants.mjs";
+import { DatabaseModule } from "./module.mjs";
+import { RealmRepositoryAdapter } from "./repositories/realm/repository.mjs";
+import { ClientRepositoryAdapter } from "./repositories/client/repository.mjs";
+import { ClientPermissionRepositoryAdapter } from "./repositories/client-permission/repository.mjs";
+import { ClientRoleRepositoryAdapter } from "./repositories/client-role/repository.mjs";
+import { ClientScopeRepositoryAdapter } from "./repositories/client-scope/repository.mjs";
+import { IdentityProviderRepositoryAdapter } from "./repositories/identity-provider/repository.mjs";
+import { PermissionRepositoryAdapter } from "./repositories/permission/repository.mjs";
+import { PermissionPolicyRepositoryAdapter } from "./repositories/permission-policy/repository.mjs";
+import { PermissionDatabaseProvider } from "./repositories/permission-provider/module.mjs";
+import { PolicyRepositoryAdapter } from "./repositories/policy/repository.mjs";
+import { RobotRepositoryAdapter } from "./repositories/robot/repository.mjs";
+import { RobotPermissionRepositoryAdapter } from "./repositories/robot-permission/repository.mjs";
+import { RobotRoleRepositoryAdapter } from "./repositories/robot-role/repository.mjs";
+import { RoleRepositoryAdapter } from "./repositories/role/repository.mjs";
+import { RoleAttributeRepositoryAdapter } from "./repositories/role-attribute/repository.mjs";
+import { RolePermissionRepositoryAdapter } from "./repositories/role-permission/repository.mjs";
+import { ScopeRepositoryAdapter } from "./repositories/scope/repository.mjs";
+import { UserRepositoryAdapter } from "./repositories/user/repository.mjs";
+import { UserAttributeRepositoryAdapter } from "./repositories/user-attribute/repository.mjs";
+import { UserPermissionRepositoryAdapter } from "./repositories/user-permission/repository.mjs";
+import { UserRoleRepositoryAdapter } from "./repositories/user-role/repository.mjs";
+import { IdentityProviderRoleMappingRepositoryAdapter } from "./repositories/identity-provider-role-mapping/repository.mjs";
+import "./repositories/index.mjs";
+export { ClientPermissionRepositoryAdapter, ClientRepositoryAdapter, ClientRoleRepositoryAdapter, ClientScopeRepositoryAdapter, DatabaseInjectionKey, DatabaseModule, IdentityProviderRepositoryAdapter, IdentityProviderRoleMappingRepositoryAdapter, PermissionDatabaseProvider, PermissionPolicyRepositoryAdapter, PermissionRepositoryAdapter, PolicyRepositoryAdapter, RealmRepositoryAdapter, RobotPermissionRepositoryAdapter, RobotRepositoryAdapter, RobotRoleRepositoryAdapter, RoleAttributeRepositoryAdapter, RolePermissionRepositoryAdapter, RoleRepositoryAdapter, ScopeRepositoryAdapter, UserAttributeRepositoryAdapter, UserPermissionRepositoryAdapter, UserRepositoryAdapter, UserRoleRepositoryAdapter };

package/dist/app/modules/database/module.d.ts

@@ -0,0 +1,30 @@
+import type { DataSourceOptions } from 'typeorm';
+import { DataSource } from 'typeorm';
+import { DataSourceOptionsBuilder } from '../../../adapters/database/index.ts';
+import type { IModule } from 'orkos';
+import type { IContainer } from 'eldin';
+export type DatabaseModuleOptions = {
+    prepareBuild?: (container: IContainer) => Promise<void>;
+    setup?: (container: IContainer, options: DataSourceOptions) => Promise<void>;
+    migrate?: (container: IContainer, dataSource: DataSource) => Promise<void>;
+};
+export declare class DatabaseModule implements IModule {
+    readonly name: string;
+    readonly dependencies: string[];
+    protected optionsBuilder: DataSourceOptionsBuilder;
+    protected options: DatabaseModuleOptions;
+    constructor(options?: DatabaseModuleOptions);
+    setup(container: IContainer): Promise<void>;
+    teardown(container: IContainer): Promise<void>;
+    protected setupDatabase(container: IContainer, options: DataSourceOptions): Promise<void>;
+    protected migrate(container: IContainer, dataSource: DataSource): Promise<void>;
+    /**
+     * Load data source options for connection.
+     *
+     * @protected
+     */
+    protected buildDataSourceOptions(container: IContainer): Promise<DataSourceOptions>;
+    protected registerRepositories(container: IContainer, dataSource: DataSource): void;
+    protected registerEventPublisher(container: IContainer): void;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/app/modules/database/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/database/module.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,UAAU,EAAmB,MAAM,SAAS,CAAC;AAQtD,OAAO,EACH,wBAAwB,EAM3B,MAAM,qCAAqC,CAAC;AAG7C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAIrC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAGxC,MAAM,MAAM,qBAAqB,GAAG;IAChC,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7E,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9E,CAAC;AAEF,qBAAa,cAAe,YAAW,OAAO;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAEhC,SAAS,CAAC,cAAc,EAAG,wBAAwB,CAAC;IAEpD,SAAS,CAAC,OAAO,EAAE,qBAAqB,CAAC;gBAE7B,OAAO,GAAE,qBAA0B;IAQzC,KAAK,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAqC3C,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;cAcpC,aAAa,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;cAgB/E,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAUrF;;;;OAIG;cACa,sBAAsB,CAAC,SAAS,EAAE,UAAU,GAAI,OAAO,CAAC,iBAAiB,CAAC;IAgC1F,SAAS,CAAC,oBAAoB,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,GAAI,IAAI;IAkBpF,SAAS,CAAC,sBAAsB,CAAC,SAAS,EAAE,UAAU;CAazD"}

package/dist/app/modules/database/module.mjs

@@ -0,0 +1,116 @@
+import { setDomainEventPublisher } from "../../../adapters/database/event-publisher/module.mjs";
+import "../../../adapters/database/event-publisher/index.mjs";
+import { CacheInjectionKey } from "../cache/constants.mjs";
+import { ModuleName } from "../constants.mjs";
+import { ConfigInjectionKey } from "../config/constants.mjs";
+import "../config/index.mjs";
+import "../cache/index.mjs";
+import { DatabaseInjectionKey } from "./constants.mjs";
+import { DatabaseQueryResultCache } from "../../../adapters/database/cache/module.mjs";
+import { DataSourceOptionsBuilder } from "../../../adapters/database/data-source/options/module.mjs";
+import { setDataSourceSync, unsetDataSourceSync } from "../../../adapters/database/data-source/singleton.mjs";
+import { isDatabaseTypeSupported, isDatabaseTypeSupportedForEnvironment } from "../../../adapters/database/helpers/is-supported.mjs";
+import "../../../adapters/database/index.mjs";
+import { LoggerInjectionKey } from "../logger/constants.mjs";
+import "../logger/index.mjs";
+import { DataSource, InstanceChecker } from "typeorm";
+import { DomainEventPublisher, DomainEventRedisPublisher, DomainEventSocketPublisher, createRedisClient } from "@authup/server-kit";
+import { AuthupError } from "@authup/errors";
+import { checkDatabase, createDatabase, setDataSource, synchronizeDatabaseSchema, unsetDataSource } from "typeorm-extension";
+//#region src/app/modules/database/module.ts
+var DatabaseModule = class {
+	name;
+	dependencies;
+	optionsBuilder;
+	options;
+	constructor(options = {}) {
+		this.name = ModuleName.DATABASE;
+		this.dependencies = [ModuleName.CONFIG, ModuleName.LOGGER];
+		this.optionsBuilder = new DataSourceOptionsBuilder();
+		this.options = options;
+	}
+	async setup(container) {
+		const logger = container.resolve(LoggerInjectionKey);
+		if (this.options.prepareBuild) await this.options.prepareBuild(container);
+		const dataSourceOptions = await this.buildDataSourceOptions(container);
+		if (this.options.setup) await this.options.setup(container, dataSourceOptions);
+		else await this.setupDatabase(container, dataSourceOptions);
+		const dataSource = new DataSource(dataSourceOptions);
+		logger.debug("Establishing database connection...");
+		await dataSource.initialize();
+		logger.debug("Established database connection.");
+		setDataSource(dataSource);
+		setDataSourceSync(dataSource);
+		if (this.options.migrate) await this.options.migrate(container, dataSource);
+		else await this.migrate(container, dataSource);
+		container.register(DatabaseInjectionKey.DataSource, { useValue: dataSource });
+		this.registerRepositories(container, dataSource);
+		this.registerEventPublisher(container);
+	}
+	async teardown(container) {
+		const dataSource = container.tryResolve(DatabaseInjectionKey.DataSource);
+		if (dataSource.success) {
+			await dataSource.data.destroy();
+			container.unregister(DatabaseInjectionKey.DataSource);
+		}
+		unsetDataSource();
+		unsetDataSourceSync();
+	}
+	async setupDatabase(container, options) {
+		const logger = container.resolve(LoggerInjectionKey);
+		if (!(await checkDatabase({ options })).exists) {
+			logger.debug("Creating database...");
+			await createDatabase({
+				options,
+				synchronize: false,
+				ifNotExist: true
+			});
+			logger.debug("Created database");
+		}
+	}
+	async migrate(container, dataSource) {
+		const logger = container.resolve(LoggerInjectionKey);
+		logger.debug("Migrating database...");
+		await synchronizeDatabaseSchema(dataSource);
+		logger.debug("Migrated database");
+	}
+	/**
+	* Load data source options for connection.
+	*
+	* @protected
+	*/ async buildDataSourceOptions(container) {
+		const config = container.resolve(ConfigInjectionKey);
+		let options;
+		if (config.db) options = this.optionsBuilder.buildWith(config.db);
+		else options = this.optionsBuilder.buildWithEnv();
+		if (!isDatabaseTypeSupported(options.type)) throw new AuthupError(`Database type ${options.type} is not supported (only: mysql, better-sqlite3 and postgres).`);
+		if (!isDatabaseTypeSupportedForEnvironment(options.type, config.env)) throw new AuthupError(`Database type ${options.type} is not supported for ${config.env}.`);
+		const cacheResult = container.tryResolve(CacheInjectionKey);
+		if (cacheResult.success) Object.assign(options, { cache: { provider() {
+			return new DatabaseQueryResultCache(cacheResult.data);
+		} } });
+		return options;
+	}
+	registerRepositories(container, dataSource) {
+		const entities = dataSource.options.entities || [];
+		if (!Array.isArray(entities)) return;
+		for (const entity of entities) {
+			if (InstanceChecker.isEntitySchema(entity)) continue;
+			container.register(entity, { useFactory: () => dataSource.getRepository(entity) });
+		}
+	}
+	registerEventPublisher(container) {
+		const config = container.resolve(ConfigInjectionKey);
+		const publisher = new DomainEventPublisher();
+		if (config.redis) {
+			const client = createRedisClient(config.redis);
+			publisher.mount(new DomainEventRedisPublisher(client));
+			publisher.mount(new DomainEventSocketPublisher(client));
+		}
+		setDomainEventPublisher(publisher);
+	}
+};
+//#endregion
+export { DatabaseModule };
+
+//# sourceMappingURL=module.mjs.map

package/dist/app/modules/database/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["DomainEventPublisher","DomainEventRedisPublisher","DomainEventSocketPublisher","createRedisClient","AuthupError","DataSource","InstanceChecker","checkDatabase","createDatabase","setDataSource","synchronizeDatabaseSchema","unsetDataSource","DataSourceOptionsBuilder","DatabaseQueryResultCache","isDatabaseTypeSupported","isDatabaseTypeSupportedForEnvironment","setDataSourceSync","unsetDataSourceSync","setDomainEventPublisher","CacheInjectionKey","ModuleName","DatabaseInjectionKey","ConfigInjectionKey","LoggerInjectionKey","DatabaseModule","name","dependencies","optionsBuilder","options","DATABASE","CONFIG","LOGGER","setup","container","logger","resolve","prepareBuild","dataSourceOptions","buildDataSourceOptions","setupDatabase","dataSource","debug","initialize","migrate","register","useValue","registerRepositories","registerEventPublisher","teardown","tryResolve","success","data","destroy","unregister","check","exists","synchronize","ifNotExist","config","db","buildWith","buildWithEnv","type","env","cacheResult","Object","assign","cache","provider","entities","Array","isArray","entity","isEntitySchema","useFactory","getRepository","publisher","redis","client","mount"],"sources":["../../../../src/app/modules/database/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DomainEventPublisher, \n    DomainEventRedisPublisher,\n    DomainEventSocketPublisher, \n    createRedisClient,\n} from '@authup/server-kit';\nimport { AuthupError } from '@authup/errors';\nimport type { DataSourceOptions } from 'typeorm';\nimport { DataSource, InstanceChecker } from 'typeorm';\nimport {\n    checkDatabase,\n    createDatabase,\n    setDataSource,\n    synchronizeDatabaseSchema,\n    unsetDataSource,\n} from 'typeorm-extension';\nimport {\n    DataSourceOptionsBuilder,\n    DatabaseQueryResultCache,\n    isDatabaseTypeSupported,\n    isDatabaseTypeSupportedForEnvironment,\n    setDataSourceSync,\n    unsetDataSourceSync,\n} from '../../../adapters/database/index.ts';\nimport { setDomainEventPublisher } from '../../../adapters/database/event-publisher/index.ts';\nimport { CacheInjectionKey } from '../cache/index.ts';\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\nimport { DatabaseInjectionKey } from './constants.ts';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport type { IContainer } from 'eldin';\nimport { LoggerInjectionKey } from '../logger/index.ts';\n\nexport type DatabaseModuleOptions = {\n    prepareBuild?: (container: IContainer) => Promise<void>;\n    setup?: (container: IContainer, options: DataSourceOptions) => Promise<void>;\n    migrate?: (container: IContainer, dataSource: DataSource) => Promise<void>;\n};\n\nexport class DatabaseModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    protected optionsBuilder : DataSourceOptionsBuilder;\n\n    protected options: DatabaseModuleOptions;\n\n    constructor(options: DatabaseModuleOptions = {}) {\n        this.name = ModuleName.DATABASE;\n        this.dependencies = [ModuleName.CONFIG, ModuleName.LOGGER];\n\n        this.optionsBuilder = new DataSourceOptionsBuilder();\n        this.options = options;\n    }\n\n    async setup(container: IContainer): Promise<void> {\n        const logger = container.resolve(LoggerInjectionKey);\n\n        if (this.options.prepareBuild) {\n            await this.options.prepareBuild(container);\n        }\n\n        const dataSourceOptions = await this.buildDataSourceOptions(container);\n\n        if (this.options.setup) {\n            await this.options.setup(container, dataSourceOptions);\n        } else {\n            await this.setupDatabase(container, dataSourceOptions);\n        }\n\n        const dataSource = new DataSource(dataSourceOptions);\n\n        logger.debug('Establishing database connection...');\n        await dataSource.initialize();\n        logger.debug('Established database connection.');\n\n        // todo: maybe remove this\n        setDataSource(dataSource);\n        setDataSourceSync(dataSource);\n\n        if (this.options.migrate) {\n            await this.options.migrate(container, dataSource);\n        } else {\n            await this.migrate(container, dataSource);\n        }\n\n        container.register(DatabaseInjectionKey.DataSource, { useValue: dataSource });\n\n        this.registerRepositories(container, dataSource);\n        this.registerEventPublisher(container);\n    }\n\n    async teardown(container: IContainer): Promise<void> {\n        const dataSource = container.tryResolve(DatabaseInjectionKey.DataSource);\n        if (dataSource.success) {\n            await dataSource.data.destroy();\n\n            container.unregister(DatabaseInjectionKey.DataSource);\n        }\n\n        unsetDataSource();\n        unsetDataSourceSync();\n    }\n\n    // ----------------------------------------------------\n\n    protected async setupDatabase(container: IContainer, options: DataSourceOptions): Promise<void> {\n        const logger = container.resolve(LoggerInjectionKey);\n\n        const check = await checkDatabase({ options });\n\n        if (!check.exists) {\n            logger.debug('Creating database...');\n            await createDatabase({\n                options,\n                synchronize: false,\n                ifNotExist: true, \n            });\n            logger.debug('Created database');\n        }\n    }\n\n    protected async migrate(container: IContainer, dataSource: DataSource): Promise<void> {\n        const logger = container.resolve(LoggerInjectionKey);\n\n        logger.debug('Migrating database...');\n        await synchronizeDatabaseSchema(dataSource);\n        logger.debug('Migrated database');\n    }\n\n    // ----------------------------------------------------\n\n    /**\n     * Load data source options for connection.\n     *\n     * @protected\n     */\n    protected async buildDataSourceOptions(container: IContainer) : Promise<DataSourceOptions> {\n        const config = container.resolve(ConfigInjectionKey);\n\n        let options : DataSourceOptions | undefined;\n        if (config.db) {\n            options = this.optionsBuilder.buildWith(config.db);\n        } else {\n            options = this.optionsBuilder.buildWithEnv();\n        }\n\n        if (!isDatabaseTypeSupported(options.type)) {\n            throw new AuthupError(`Database type ${options.type} is not supported (only: mysql, better-sqlite3 and postgres).`);\n        }\n\n        if (!isDatabaseTypeSupportedForEnvironment(options.type, config.env)) {\n            throw new AuthupError(`Database type ${options.type} is not supported for ${config.env}.`);\n        }\n\n        const cacheResult = container.tryResolve(CacheInjectionKey);\n        if (cacheResult.success) {\n            Object.assign(options, {\n                cache: {\n                    provider() {\n                        return new DatabaseQueryResultCache(cacheResult.data);\n                    },\n                },\n            } satisfies Partial<DataSourceOptions>);\n        }\n\n        return options;\n    }\n\n    protected registerRepositories(container: IContainer, dataSource: DataSource) : void {\n        const entities = dataSource.options.entities || [];\n        if (!Array.isArray(entities)) {\n            return;\n        }\n\n        for (const entity of entities) {\n            if (InstanceChecker.isEntitySchema(entity)) {\n                continue;\n            }\n\n            // eslint-disable-next-line @typescript-eslint/ban-ts-comment\n            // @ts-expect-error\n            container.register(entity, { useFactory: () => dataSource.getRepository(entity) });\n        }\n    }\n\n    // todo: move, wrong place\n    protected registerEventPublisher(container: IContainer) {\n        const config = container.resolve(ConfigInjectionKey);\n\n        const publisher = new DomainEventPublisher();\n        if (config.redis) {\n            const client = createRedisClient(config.redis);\n\n            publisher.mount(new DomainEventRedisPublisher(client));\n            publisher.mount(new DomainEventSocketPublisher(client));\n        }\n\n        setDomainEventPublisher(publisher);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA8CA,IAAawB,iBAAb,MAAaA;CACAC;CAEAC;CAECC;CAEAC;CAEV,YAAYA,UAAiC,EAAE,EAAE;AAC7C,OAAKH,OAAOL,WAAWS;AACvB,OAAKH,eAAe,CAACN,WAAWU,QAAQV,WAAWW,OAAO;AAE1D,OAAKJ,iBAAiB,IAAIf,0BAAAA;AAC1B,OAAKgB,UAAUA;;CAGnB,MAAMI,MAAMC,WAAsC;EAC9C,MAAMC,SAASD,UAAUE,QAAQZ,mBAAAA;AAEjC,MAAI,KAAKK,QAAQQ,aACb,OAAM,KAAKR,QAAQQ,aAAaH,UAAAA;EAGpC,MAAMI,oBAAoB,MAAM,KAAKC,uBAAuBL,UAAAA;AAE5D,MAAI,KAAKL,QAAQI,MACb,OAAM,KAAKJ,QAAQI,MAAMC,WAAWI,kBAAAA;MAEpC,OAAM,KAAKE,cAAcN,WAAWI,kBAAAA;EAGxC,MAAMG,aAAa,IAAInC,WAAWgC,kBAAAA;AAElCH,SAAOO,MAAM,sCAAA;AACb,QAAMD,WAAWE,YAAU;AAC3BR,SAAOO,MAAM,mCAAA;AAGbhC,gBAAc+B,WAAAA;AACdxB,oBAAkBwB,WAAAA;AAElB,MAAI,KAAKZ,QAAQe,QACb,OAAM,KAAKf,QAAQe,QAAQV,WAAWO,WAAAA;MAEtC,OAAM,KAAKG,QAAQV,WAAWO,WAAAA;AAGlCP,YAAUW,SAASvB,qBAAqBhB,YAAY,EAAEwC,UAAUL,YAAW,CAAA;AAE3E,OAAKM,qBAAqBb,WAAWO,WAAAA;AACrC,OAAKO,uBAAuBd,UAAAA;;CAGhC,MAAMe,SAASf,WAAsC;EACjD,MAAMO,aAAaP,UAAUgB,WAAW5B,qBAAqBhB,WAAU;AACvE,MAAImC,WAAWU,SAAS;AACpB,SAAMV,WAAWW,KAAKC,SAAO;AAE7BnB,aAAUoB,WAAWhC,qBAAqBhB,WAAU;;AAGxDM,mBAAAA;AACAM,uBAAAA;;CAKJ,MAAgBsB,cAAcN,WAAuBL,SAA2C;EAC5F,MAAMM,SAASD,UAAUE,QAAQZ,mBAAAA;AAIjC,MAAI,EAAC+B,MAFe/C,cAAc,EAAEqB,SAAQ,CAAA,EAEjC2B,QAAQ;AACfrB,UAAOO,MAAM,uBAAA;AACb,SAAMjC,eAAe;IACjBoB;IACA4B,aAAa;IACbC,YAAY;IAChB,CAAA;AACAvB,UAAOO,MAAM,mBAAA;;;CAIrB,MAAgBE,QAAQV,WAAuBO,YAAuC;EAClF,MAAMN,SAASD,UAAUE,QAAQZ,mBAAAA;AAEjCW,SAAOO,MAAM,wBAAA;AACb,QAAM/B,0BAA0B8B,WAAAA;AAChCN,SAAOO,MAAM,oBAAA;;;;;;IAUjB,MAAgBH,uBAAuBL,WAAoD;EACvF,MAAMyB,SAASzB,UAAUE,QAAQb,mBAAAA;EAEjC,IAAIM;AACJ,MAAI8B,OAAOC,GACP/B,WAAU,KAAKD,eAAeiC,UAAUF,OAAOC,GAAE;MAEjD/B,WAAU,KAAKD,eAAekC,cAAY;AAG9C,MAAI,CAAC/C,wBAAwBc,QAAQkC,KAAI,CACrC,OAAM,IAAI1D,YAAY,iBAAiBwB,QAAQkC,KAAK,+DAA8D;AAGtH,MAAI,CAAC/C,sCAAsCa,QAAQkC,MAAMJ,OAAOK,IAAG,CAC/D,OAAM,IAAI3D,YAAY,iBAAiBwB,QAAQkC,KAAK,wBAAwBJ,OAAOK,IAAI,GAAE;EAG7F,MAAMC,cAAc/B,UAAUgB,WAAW9B,kBAAAA;AACzC,MAAI6C,YAAYd,QACZe,QAAOC,OAAOtC,SAAS,EACnBuC,OAAO,EACHC,WAAAA;AACI,UAAO,IAAIvD,yBAAyBmD,YAAYb,KAAI;KAE5D,EACJ,CAAA;AAGJ,SAAOvB;;CAGDkB,qBAAqBb,WAAuBO,YAA+B;EACjF,MAAM6B,WAAW7B,WAAWZ,QAAQyC,YAAY,EAAE;AAClD,MAAI,CAACC,MAAMC,QAAQF,SAAAA,CACf;AAGJ,OAAK,MAAMG,UAAUH,UAAU;AAC3B,OAAI/D,gBAAgBmE,eAAeD,OAAAA,CAC/B;AAKJvC,aAAUW,SAAS4B,QAAQ,EAAEE,kBAAkBlC,WAAWmC,cAAcH,OAAAA,EAAQ,CAAA;;;CAK9EzB,uBAAuBd,WAAuB;EACpD,MAAMyB,SAASzB,UAAUE,QAAQb,mBAAAA;EAEjC,MAAMsD,YAAY,IAAI5E,sBAAAA;AACtB,MAAI0D,OAAOmB,OAAO;GACd,MAAMC,SAAS3E,kBAAkBuD,OAAOmB,MAAK;AAE7CD,aAAUG,MAAM,IAAI9E,0BAA0B6E,OAAAA,CAAAA;AAC9CF,aAAUG,MAAM,IAAI7E,2BAA2B4E,OAAAA,CAAAA;;AAGnD5D,0BAAwB0D,UAAAA"}

package/dist/app/modules/database/repositories/bindings.d.ts

@@ -0,0 +1,17 @@
+import type { EntityManager, EntityTarget, FindOptionsWhere, ObjectLiteral } from 'typeorm';
+import type { PermissionPolicyBinding } from '@authup/access';
+import type { Permission } from '@authup/core-kit';
+export type LoadBoundPermissionsOptions<E extends ObjectLiteral> = {
+    manager: EntityManager;
+    junctionTarget: EntityTarget<E>;
+    where: FindOptionsWhere<E>;
+    cachePrefix: string;
+    cacheKey: string;
+};
+type PermissionJunction = {
+    permission: Permission;
+    policy_id?: string | null;
+};
+export declare function loadBoundPermissions<E extends PermissionJunction & ObjectLiteral>(options: LoadBoundPermissionsOptions<E>): Promise<PermissionPolicyBinding[]>;
+export {};
+//# sourceMappingURL=bindings.d.ts.map

package/dist/app/modules/database/repositories/bindings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bindings.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/database/repositories/bindings.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,aAAa,EACb,YAAY,EAEZ,gBAAgB,EAChB,aAAa,EAChB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAc,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAInD,MAAM,MAAM,2BAA2B,CAAC,CAAC,SAAS,aAAa,IAAI;IAC/D,OAAO,EAAE,aAAa,CAAC;IACvB,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;IAChC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,KAAK,kBAAkB,GAAG;IACtB,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,CAAC;AAEF,wBAAsB,oBAAoB,CAAC,CAAC,SAAS,kBAAkB,GAAG,aAAa,EACnF,OAAO,EAAE,2BAA2B,CAAC,CAAC,CAAC,GACxC,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAiCpC"}

package/dist/app/modules/database/repositories/bindings.mjs

@@ -0,0 +1,40 @@
+import { PolicyRepository } from "../../../../adapters/database/domains/policy/repository.mjs";
+import "../../../../adapters/database/domains/policy/index.mjs";
+import { buildRedisKeyPath } from "@authup/server-kit";
+//#region src/app/modules/database/repositories/bindings.ts
+async function loadBoundPermissions(options) {
+	const entries = await options.manager.getRepository(options.junctionTarget).find({
+		where: options.where,
+		relations: { permission: true },
+		cache: {
+			id: buildRedisKeyPath({
+				prefix: options.cachePrefix,
+				key: options.cacheKey
+			}),
+			milliseconds: 6e4
+		}
+	});
+	const policyIds = /* @__PURE__ */ new Set();
+	for (const entry of entries) if (entry.policy_id) policyIds.add(entry.policy_id);
+	const policyTrees = await loadPolicyTrees(options.manager, [...policyIds]);
+	return entries.map((entry) => {
+		const policies = [];
+		if (entry.policy_id && policyTrees[entry.policy_id]) policies.push(policyTrees[entry.policy_id]);
+		return {
+			permission: entry.permission,
+			policies: policies.length > 0 ? policies : void 0
+		};
+	});
+}
+async function loadPolicyTrees(manager, policyIds) {
+	if (policyIds.length === 0) return {};
+	const policyRepository = new PolicyRepository(manager);
+	const trees = await Promise.all(policyIds.map((id) => policyRepository.findDescendantsTreeById(id).then((tree) => [id, tree])));
+	const result = {};
+	for (const [id, tree] of trees) if (tree) result[id] = tree;
+	return result;
+}
+//#endregion
+export { loadBoundPermissions };
+
+//# sourceMappingURL=bindings.mjs.map

package/dist/app/modules/database/repositories/bindings.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"bindings.mjs","names":["buildRedisKeyPath","PolicyRepository","loadBoundPermissions","options","repository","manager","getRepository","junctionTarget","relations","permission","entries","find","where","cache","id","prefix","cachePrefix","key","cacheKey","milliseconds","policyIds","Set","entry","policy_id","add","policyTrees","loadPolicyTrees","map","policies","push","length","undefined","policyRepository","trees","Promise","all","findDescendantsTreeById","then","tree","result"],"sources":["../../../../../src/app/modules/database/repositories/bindings.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    EntityManager,\n    EntityTarget,\n    FindOptionsRelations,\n    FindOptionsWhere,\n    ObjectLiteral,\n} from 'typeorm';\nimport type { BasePolicy, PermissionPolicyBinding } from '@authup/access';\nimport type { Permission } from '@authup/core-kit';\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport { PolicyRepository } from '../../../../adapters/database/domains/policy/index.ts';\n\nexport type LoadBoundPermissionsOptions<E extends ObjectLiteral> = {\n    manager: EntityManager;\n    junctionTarget: EntityTarget<E>;\n    where: FindOptionsWhere<E>;\n    cachePrefix: string;\n    cacheKey: string;\n};\n\ntype PermissionJunction = {\n    permission: Permission;\n    policy_id?: string | null;\n};\n\nexport async function loadBoundPermissions<E extends PermissionJunction & ObjectLiteral>(\n    options: LoadBoundPermissionsOptions<E>,\n): Promise<PermissionPolicyBinding[]> {\n    const repository = options.manager.getRepository(options.junctionTarget);\n    const relations = { permission: true } as FindOptionsRelations<E>;\n\n    const entries = await repository.find({\n        where: options.where,\n        relations,\n        cache: {\n            id: buildRedisKeyPath({ prefix: options.cachePrefix, key: options.cacheKey }),\n            milliseconds: 60_000,\n        },\n    });\n\n    const policyIds = new Set<string>();\n    for (const entry of entries) {\n        if (entry.policy_id) {\n            policyIds.add(entry.policy_id);\n        }\n    }\n\n    const policyTrees = await loadPolicyTrees(options.manager, [...policyIds]);\n\n    return entries.map((entry) => {\n        const policies: BasePolicy[] = [];\n        if (entry.policy_id && policyTrees[entry.policy_id]) {\n            policies.push(policyTrees[entry.policy_id]);\n        }\n\n        return {\n            permission: entry.permission,\n            policies: policies.length > 0 ? policies : undefined,\n        };\n    });\n}\n\nasync function loadPolicyTrees(\n    manager: EntityManager,\n    policyIds: string[],\n): Promise<Record<string, BasePolicy>> {\n    if (policyIds.length === 0) {\n        return {};\n    }\n\n    const policyRepository = new PolicyRepository(manager);\n    const trees = await Promise.all(\n        policyIds.map((id) => policyRepository.findDescendantsTreeById(id)\n            .then((tree) => [id, tree] as const)),\n    );\n\n    const result: Record<string, BasePolicy> = {};\n    for (const [id, tree] of trees) {\n        if (tree) {\n            result[id] = tree;\n        }\n    }\n    return result;\n}\n"],"mappings":";;;;AAgCA,eAAsBE,qBAClBC,SAAuC;CAKvC,MAAMO,UAAU,MAHGP,QAAQE,QAAQC,cAAcH,QAAQI,eAGnCH,CAAWO,KAAK;EAClCC,OAAOT,QAAQS;EACfJ,WAAAA,EAJgBC,YAAY,MAI5BD;EACAK,OAAO;GACHC,IAAId,kBAAkB;IAAEe,QAAQZ,QAAQa;IAAaC,KAAKd,QAAQe;IAAS,CAAA;GAC3EC,cAAc;GAClB;EACJ,CAAA;CAEA,MAAMC,4BAAY,IAAIC,KAAAA;AACtB,MAAK,MAAMC,SAASZ,QAChB,KAAIY,MAAMC,UACNH,WAAUI,IAAIF,MAAMC,UAAS;CAIrC,MAAME,cAAc,MAAMC,gBAAgBvB,QAAQE,SAAS,CAAA,GAAIe,UAAU,CAAA;AAEzE,QAAOV,QAAQiB,KAAKL,UAAAA;EAChB,MAAMM,WAAyB,EAAE;AACjC,MAAIN,MAAMC,aAAaE,YAAYH,MAAMC,WACrCK,UAASC,KAAKJ,YAAYH,MAAMC,WAAU;AAG9C,SAAO;GACHd,YAAYa,MAAMb;GAClBmB,UAAUA,SAASE,SAAS,IAAIF,WAAWG,KAAAA;GAC/C;GACJ;;AAGJ,eAAeL,gBACXrB,SACAe,WAAmB;AAEnB,KAAIA,UAAUU,WAAW,EACrB,QAAO,EAAC;CAGZ,MAAME,mBAAmB,IAAI/B,iBAAiBI,QAAAA;CAC9C,MAAM4B,QAAQ,MAAMC,QAAQC,IACxBf,UAAUO,KAAKb,OAAOkB,iBAAiBI,wBAAwBtB,GAAAA,CAC1DuB,MAAMC,SAAS,CAACxB,IAAIwB,KAAK,CAAA,CAAA,CAAA;CAGlC,MAAMC,SAAqC,EAAC;AAC5C,MAAK,MAAM,CAACzB,IAAIwB,SAASL,MACrB,KAAIK,KACAC,QAAOzB,MAAMwB;AAGrB,QAAOC"}

package/dist/app/modules/database/repositories/client/index.d.ts

@@ -0,0 +1,2 @@
+export * from './repository.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/app/modules/database/repositories/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/client/index.ts"],"names":[],"mappings":"AAOA,cAAc,iBAAiB,CAAC"}

package/dist/app/modules/database/repositories/client/index.mjs

@@ -0,0 +1,2 @@
+import { ClientRepositoryAdapter } from "./repository.mjs";
+export { ClientRepositoryAdapter };

package/dist/app/modules/database/repositories/client/repository.d.ts

@@ -0,0 +1,30 @@
+import type { Client, Realm, Role } from '@authup/core-kit';
+import type { PermissionPolicyBinding } from '@authup/access';
+import type { Repository } from 'typeorm';
+import type { EntityRepositoryFindManyResult, IClientRepository } from '../../../../../core/index.ts';
+export type ClientRepositoryAdapterContext = {
+    repository: Repository<Client>;
+    realmRepository: Repository<Realm>;
+};
+export declare class ClientRepositoryAdapter implements IClientRepository {
+    private readonly repository;
+    private readonly realmRepository;
+    constructor(ctx: ClientRepositoryAdapterContext);
+    findMany(query: Record<string, any>): Promise<EntityRepositoryFindManyResult<Client>>;
+    findOneById(id: string): Promise<Client | null>;
+    findOneByName(name: string, realmKey?: string): Promise<Client | null>;
+    findOne(id: string, query?: Record<string, any>, realmKey?: string): Promise<Client | null>;
+    findOneByIdOrName(idOrName: string, realm?: string): Promise<Client | null>;
+    findManyBy(where: Record<string, any>): Promise<Client[]>;
+    findOneBy(where: Record<string, any>): Promise<Client | null>;
+    findOneWithSecret(where: Record<string, any>): Promise<Client | null>;
+    create(data: Partial<Client>): Client;
+    merge(entity: Client, data: Partial<Client>): Client;
+    save(entity: Client): Promise<Client>;
+    remove(entity: Client): Promise<void>;
+    validateJoinColumns(data: Partial<Client>): Promise<void>;
+    checkUniqueness(data: Partial<Client>, existing?: Client): Promise<void>;
+    getBoundRoles(entity: string | Client): Promise<Role[]>;
+    getBoundPermissions(entity: string | Client): Promise<PermissionPolicyBinding[]>;
+}
+//# sourceMappingURL=repository.d.ts.map

package/dist/app/modules/database/repositories/client/repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/client/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAG9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,8BAA8B,EAAE,iBAAiB,EAAoB,MAAM,8BAA8B,CAAC;AAYxH,MAAM,MAAM,8BAA8B,GAAG;IACzC,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/B,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;CACtC,CAAC;AAEF,qBAAa,uBAAwB,YAAW,iBAAiB;IAC7D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IAEhD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;gBAEvC,GAAG,EAAE,8BAA8B;IAKzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAkD3F,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAIzC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IActE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA+C3F,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAM3E,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAIzD,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAI7D,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAY3E,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM;IAIrC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM;IAI9C,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIrC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAOzD,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAaxE,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAmBvD,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC;CAUzF"}

package/dist/app/modules/database/repositories/client/repository.mjs

@@ -0,0 +1,199 @@
+import { CachePrefix } from "../../../../../adapters/database/domains/constants.mjs";
+import { ClientEntity } from "../../../../../adapters/database/domains/client/entity.mjs";
+import { ClientRoleEntity } from "../../../../../adapters/database/domains/client-role/entity.mjs";
+import { ClientPermissionEntity } from "../../../../../adapters/database/domains/client-permission/entity.mjs";
+import "../../../../../adapters/database/domains/index.mjs";
+import { DatabaseConflictError } from "../../../../../adapters/database/errors/conflict.mjs";
+import "../../../../../adapters/database/index.mjs";
+import { translateWhereConditions } from "../helpers.mjs";
+import { loadBoundPermissions } from "../bindings.mjs";
+import { RealmRepositoryAdapter } from "../realm/repository.mjs";
+import { buildRedisKeyPath } from "@authup/server-kit";
+import { isUUID } from "@authup/kit";
+import { applyQuery, isEntityUnique, validateEntityJoinColumns } from "typeorm-extension";
+//#region src/app/modules/database/repositories/client/repository.ts
+var ClientRepositoryAdapter = class {
+	repository;
+	realmRepository;
+	constructor(ctx) {
+		this.repository = ctx.repository;
+		this.realmRepository = new RealmRepositoryAdapter(ctx.realmRepository);
+	}
+	async findMany(query) {
+		const qb = this.repository.createQueryBuilder("client");
+		qb.groupBy("client.id");
+		const { pagination } = applyQuery(qb, query, {
+			defaultAlias: "client",
+			fields: {
+				default: [
+					"id",
+					"active",
+					"built_in",
+					"name",
+					"display_name",
+					"description",
+					"secret_hashed",
+					"secret_encrypted",
+					"base_url",
+					"root_url",
+					"redirect_uri",
+					"grant_types",
+					"scope",
+					"is_confidential",
+					"realm_id",
+					"updated_at",
+					"created_at"
+				],
+				allowed: ["secret"]
+			},
+			filters: { allowed: [
+				"id",
+				"name",
+				"realm_id",
+				"realm.name"
+			] },
+			pagination: { maxLimit: 50 },
+			relations: {
+				allowed: ["realm"],
+				onJoin: (_property, key, q) => {
+					q.addGroupBy(`${key}.id`);
+				}
+			},
+			sort: { allowed: [
+				"id",
+				"created_at",
+				"updated_at"
+			] }
+		});
+		const [entities, total] = await qb.getManyAndCount();
+		return {
+			data: entities,
+			meta: {
+				total,
+				...pagination
+			}
+		};
+	}
+	findOneById(id) {
+		return this.findOneBy({ id });
+	}
+	async findOneByName(name, realmKey) {
+		const qb = this.repository.createQueryBuilder("client");
+		qb.where("client.name = :name", { name });
+		if (realmKey) {
+			const realm = await this.realmRepository.resolve(realmKey);
+			if (realm) qb.andWhere("client.realm_id = :realmId", { realmId: realm.id });
+		}
+		return qb.getOne();
+	}
+	async findOne(id, query, realmKey) {
+		const qb = this.repository.createQueryBuilder("client");
+		if (isUUID(id)) qb.where("client.id = :id", { id });
+		else {
+			qb.where("client.name = :name", { name: id });
+			if (realmKey) {
+				const realm = await this.realmRepository.resolve(realmKey);
+				if (!realm) return null;
+				qb.andWhere("client.realm_id = :realmId", { realmId: realm.id });
+			}
+		}
+		applyQuery(qb, query || {}, {
+			defaultAlias: "client",
+			fields: {
+				default: [
+					"id",
+					"active",
+					"built_in",
+					"name",
+					"display_name",
+					"description",
+					"secret_hashed",
+					"secret_encrypted",
+					"base_url",
+					"root_url",
+					"redirect_uri",
+					"grant_types",
+					"scope",
+					"is_confidential",
+					"realm_id",
+					"updated_at",
+					"created_at"
+				],
+				allowed: ["secret"]
+			},
+			relations: { allowed: ["realm"] }
+		});
+		return qb.getOne();
+	}
+	async findOneByIdOrName(idOrName, realm) {
+		return isUUID(idOrName) ? this.findOneById(idOrName) : this.findOneByName(idOrName, realm);
+	}
+	async findManyBy(where) {
+		return this.repository.findBy(translateWhereConditions(where));
+	}
+	async findOneBy(where) {
+		return this.repository.findOneBy(translateWhereConditions(where));
+	}
+	async findOneWithSecret(where) {
+		const qb = this.repository.createQueryBuilder("client");
+		Object.entries(where).forEach(([key, value]) => {
+			qb.andWhere(`client.${key} = :${key}`, { [key]: value });
+		});
+		qb.addSelect("client.secret");
+		return qb.getOne();
+	}
+	create(data) {
+		return this.repository.create(data);
+	}
+	merge(entity, data) {
+		return this.repository.merge(entity, data);
+	}
+	async save(entity) {
+		return this.repository.save(entity);
+	}
+	async remove(entity) {
+		await this.repository.remove(entity);
+	}
+	async validateJoinColumns(data) {
+		await validateEntityJoinColumns(data, {
+			dataSource: this.repository.manager.connection,
+			entityTarget: ClientEntity
+		});
+	}
+	async checkUniqueness(data, existing) {
+		if (!await isEntityUnique({
+			dataSource: this.repository.manager.connection,
+			entityTarget: ClientEntity,
+			entity: data,
+			entityExisting: existing
+		})) throw new DatabaseConflictError();
+	}
+	async getBoundRoles(entity) {
+		const id = typeof entity === "string" ? entity : entity.id;
+		return (await this.repository.manager.getRepository(ClientRoleEntity).find({
+			where: { client_id: id },
+			relations: { role: true },
+			cache: {
+				id: buildRedisKeyPath({
+					prefix: CachePrefix.CLIENT_OWNED_ROLES,
+					key: id
+				}),
+				milliseconds: 6e4
+			}
+		})).map((entry) => entry.role);
+	}
+	async getBoundPermissions(entity) {
+		const id = typeof entity === "string" ? entity : entity.id;
+		return loadBoundPermissions({
+			manager: this.repository.manager,
+			junctionTarget: ClientPermissionEntity,
+			where: { client_id: id },
+			cachePrefix: CachePrefix.CLIENT_OWNED_PERMISSIONS,
+			cacheKey: id
+		});
+	}
+};
+//#endregion
+export { ClientRepositoryAdapter };
+
+//# sourceMappingURL=repository.mjs.map

package/dist/app/modules/database/repositories/client/repository.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.mjs","names":["buildRedisKeyPath","isUUID","applyQuery","isEntityUnique","validateEntityJoinColumns","DatabaseConflictError","translateWhereConditions","loadBoundPermissions","CachePrefix","ClientEntity","ClientPermissionEntity","ClientRoleEntity","RealmRepositoryAdapter","ClientRepositoryAdapter","repository","realmRepository","ctx","findMany","query","qb","createQueryBuilder","groupBy","pagination","defaultAlias","fields","default","allowed","filters","maxLimit","relations","onJoin","_property","key","q","addGroupBy","sort","entities","total","getManyAndCount","data","meta","findOneById","id","findOneBy","findOneByName","name","realmKey","where","realm","resolve","andWhere","realmId","getOne","findOne","findOneByIdOrName","idOrName","findManyBy","findBy","findOneWithSecret","Object","entries","forEach","value","addSelect","create","merge","entity","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget","checkUniqueness","existing","isUnique","entityExisting","getBoundRoles","getRepository","find","client_id","role","cache","prefix","CLIENT_OWNED_ROLES","milliseconds","map","entry","getBoundPermissions","junctionTarget","cachePrefix","CLIENT_OWNED_PERMISSIONS","cacheKey"],"sources":["../../../../../../src/app/modules/database/repositories/client/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Client, Realm, Role } from '@authup/core-kit';\nimport type { PermissionPolicyBinding } from '@authup/access';\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport { applyQuery, isEntityUnique, validateEntityJoinColumns } from 'typeorm-extension';\nimport type { EntityRepositoryFindManyResult, IClientRepository, IRealmRepository } from '../../../../../core/index.ts';\nimport { DatabaseConflictError } from '../../../../../adapters/database/index.ts';\nimport { translateWhereConditions } from '../helpers.ts';\nimport { loadBoundPermissions } from '../bindings.ts';\nimport {\n    CachePrefix,\n    ClientEntity,\n    ClientPermissionEntity,\n    ClientRoleEntity,\n} from '../../../../../adapters/database/domains/index.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type ClientRepositoryAdapterContext = {\n    repository: Repository<Client>,\n    realmRepository: Repository<Realm>,\n};\n\nexport class ClientRepositoryAdapter implements IClientRepository {\n    private readonly repository: Repository<Client>;\n\n    private readonly realmRepository: IRealmRepository;\n\n    constructor(ctx: ClientRepositoryAdapterContext) {\n        this.repository = ctx.repository;\n        this.realmRepository = new RealmRepositoryAdapter(ctx.realmRepository);\n    }\n\n    async findMany(query: Record<string, any>): Promise<EntityRepositoryFindManyResult<Client>> {\n        const qb = this.repository.createQueryBuilder('client');\n        qb.groupBy('client.id');\n\n        const { pagination } = applyQuery(qb, query, {\n            defaultAlias: 'client',\n            fields: {\n                default: [\n                    'id',\n                    'active',\n                    'built_in',\n                    'name',\n                    'display_name',\n                    'description',\n                    'secret_hashed',\n                    'secret_encrypted',\n                    'base_url',\n                    'root_url',\n                    'redirect_uri',\n                    'grant_types',\n                    'scope',\n                    'is_confidential',\n                    'realm_id',\n                    'updated_at',\n                    'created_at',\n                ],\n                allowed: ['secret'],\n            },\n            filters: { allowed: ['id', 'name', 'realm_id', 'realm.name'] },\n            pagination: { maxLimit: 50 },\n            relations: {\n                allowed: ['realm'],\n                onJoin: (_property: string, key: string, q: any) => {\n                    q.addGroupBy(`${key}.id`);\n                },\n            },\n            sort: { allowed: ['id', 'created_at', 'updated_at'] },\n        });\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    findOneById(id: string): Promise<Client | null> {\n        return this.findOneBy({ id });\n    }\n\n    async findOneByName(name: string, realmKey?: string): Promise<Client | null> {\n        const qb = this.repository.createQueryBuilder('client');\n        qb.where('client.name = :name', { name });\n\n        if (realmKey) {\n            const realm = await this.realmRepository.resolve(realmKey);\n            if (realm) {\n                qb.andWhere('client.realm_id = :realmId', { realmId: realm.id });\n            }\n        }\n\n        return qb.getOne();\n    }\n\n    async findOne(id: string, query?: Record<string, any>, realmKey?: string): Promise<Client | null> {\n        const qb = this.repository.createQueryBuilder('client');\n\n        if (isUUID(id)) {\n            qb.where('client.id = :id', { id });\n        } else {\n            qb.where('client.name = :name', { name: id });\n\n            if (realmKey) {\n                const realm = await this.realmRepository.resolve(realmKey);\n                if (!realm) {\n                    return null;\n                }\n                qb.andWhere('client.realm_id = :realmId', { realmId: realm.id });\n            }\n        }\n\n        applyQuery(qb, query || {}, {\n            defaultAlias: 'client',\n            fields: {\n                default: [\n                    'id',\n                    'active',\n                    'built_in',\n                    'name',\n                    'display_name',\n                    'description',\n                    'secret_hashed',\n                    'secret_encrypted',\n                    'base_url',\n                    'root_url',\n                    'redirect_uri',\n                    'grant_types',\n                    'scope',\n                    'is_confidential',\n                    'realm_id',\n                    'updated_at',\n                    'created_at',\n                ],\n                allowed: ['secret'],\n            },\n            relations: { allowed: ['realm'] },\n        });\n\n        return qb.getOne();\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Client | null> {\n        return isUUID(idOrName) ?\n            this.findOneById(idOrName) :\n            this.findOneByName(idOrName, realm);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<Client[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Client | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    async findOneWithSecret(where: Record<string, any>): Promise<Client | null> {\n        const qb = this.repository.createQueryBuilder('client');\n\n        Object.entries(where).forEach(([key, value]) => {\n            qb.andWhere(`client.${key} = :${key}`, { [key]: value });\n        });\n\n        qb.addSelect('client.secret');\n\n        return qb.getOne();\n    }\n\n    create(data: Partial<Client>): Client {\n        return this.repository.create(data);\n    }\n\n    merge(entity: Client, data: Partial<Client>): Client {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: Client): Promise<Client> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: Client): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<Client>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: ClientEntity,\n        });\n    }\n\n    async checkUniqueness(data: Partial<Client>, existing?: Client): Promise<void> {\n        const isUnique = await isEntityUnique({\n            dataSource: this.repository.manager.connection,\n            entityTarget: ClientEntity,\n            entity: data,\n            entityExisting: existing,\n        });\n\n        if (!isUnique) {\n            throw new DatabaseConflictError();\n        }\n    }\n\n    async getBoundRoles(entity: string | Client): Promise<Role[]> {\n        const id = typeof entity === 'string' ? entity : entity.id;\n        const entries = await this.repository.manager\n            .getRepository(ClientRoleEntity)\n            .find({\n                where: { client_id: id },\n                relations: { role: true },\n                cache: {\n                    id: buildRedisKeyPath({\n                        prefix: CachePrefix.CLIENT_OWNED_ROLES,\n                        key: id,\n                    }),\n                    milliseconds: 60_000,\n                },\n            });\n\n        return entries.map((entry) => entry.role);\n    }\n\n    async getBoundPermissions(entity: string | Client): Promise<PermissionPolicyBinding[]> {\n        const id = typeof entity === 'string' ? entity : entity.id;\n        return loadBoundPermissions({\n            manager: this.repository.manager,\n            junctionTarget: ClientPermissionEntity,\n            where: { client_id: id },\n            cachePrefix: CachePrefix.CLIENT_OWNED_PERMISSIONS,\n            cacheKey: id,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;AA8BA,IAAaa,0BAAb,MAAaA;CACQC;CAEAC;CAEjB,YAAYC,KAAqC;AAC7C,OAAKF,aAAaE,IAAIF;AACtB,OAAKC,kBAAkB,IAAIH,uBAAuBI,IAAID,gBAAe;;CAGzE,MAAME,SAASC,OAA6E;EACxF,MAAMC,KAAK,KAAKL,WAAWM,mBAAmB,SAAA;AAC9CD,KAAGE,QAAQ,YAAA;EAEX,MAAM,EAAEC,eAAepB,WAAWiB,IAAID,OAAO;GACzCK,cAAc;GACdC,QAAQ;IACJC,SAAS;KACL;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACH;IACDC,SAAS,CAAC,SAAS;IACvB;GACAC,SAAS,EAAED,SAAS;IAAC;IAAM;IAAQ;IAAY;IAAa,EAAC;GAC7DJ,YAAY,EAAEM,UAAU,IAAG;GAC3BC,WAAW;IACPH,SAAS,CAAC,QAAQ;IAClBI,SAASC,WAAmBC,KAAaC,MAAAA;AACrCA,OAAEC,WAAW,GAAGF,IAAI,KAAI;;IAEhC;GACAG,MAAM,EAAET,SAAS;IAAC;IAAM;IAAc;IAAa,EAAC;GACxD,CAAA;EAEA,MAAM,CAACU,UAAUC,SAAS,MAAMlB,GAAGmB,iBAAe;AAElD,SAAO;GACHC,MAAMH;GACNI,MAAM;IACFH;IACA,GAAGf;IACP;GACJ;;CAGJmB,YAAYC,IAAoC;AAC5C,SAAO,KAAKC,UAAU,EAAED,IAAG,CAAA;;CAG/B,MAAME,cAAcC,MAAcC,UAA2C;EACzE,MAAM3B,KAAK,KAAKL,WAAWM,mBAAmB,SAAA;AAC9CD,KAAG4B,MAAM,uBAAuB,EAAEF,MAAK,CAAA;AAEvC,MAAIC,UAAU;GACV,MAAME,QAAQ,MAAM,KAAKjC,gBAAgBkC,QAAQH,SAAAA;AACjD,OAAIE,MACA7B,IAAG+B,SAAS,8BAA8B,EAAEC,SAASH,MAAMN,IAAG,CAAA;;AAItE,SAAOvB,GAAGiC,QAAM;;CAGpB,MAAMC,QAAQX,IAAYxB,OAA6B4B,UAA2C;EAC9F,MAAM3B,KAAK,KAAKL,WAAWM,mBAAmB,SAAA;AAE9C,MAAInB,OAAOyC,GAAAA,CACPvB,IAAG4B,MAAM,mBAAmB,EAAEL,IAAG,CAAA;OAC9B;AACHvB,MAAG4B,MAAM,uBAAuB,EAAEF,MAAMH,IAAG,CAAA;AAE3C,OAAII,UAAU;IACV,MAAME,QAAQ,MAAM,KAAKjC,gBAAgBkC,QAAQH,SAAAA;AACjD,QAAI,CAACE,MACD,QAAO;AAEX7B,OAAG+B,SAAS,8BAA8B,EAAEC,SAASH,MAAMN,IAAG,CAAA;;;AAItExC,aAAWiB,IAAID,SAAS,EAAC,EAAG;GACxBK,cAAc;GACdC,QAAQ;IACJC,SAAS;KACL;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACH;IACDC,SAAS,CAAC,SAAS;IACvB;GACAG,WAAW,EAAEH,SAAS,CAAC,QAAQ,EAAC;GACpC,CAAA;AAEA,SAAOP,GAAGiC,QAAM;;CAGpB,MAAME,kBAAkBC,UAAkBP,OAAwC;AAC9E,SAAO/C,OAAOsD,SAAAA,GACV,KAAKd,YAAYc,SAAAA,GACjB,KAAKX,cAAcW,UAAUP,MAAAA;;CAGrC,MAAMQ,WAAWT,OAA+C;AAC5D,SAAO,KAAKjC,WAAW2C,OAAOnD,yBAAyByC,MAAAA,CAAAA;;CAG3D,MAAMJ,UAAUI,OAAoD;AAChE,SAAO,KAAKjC,WAAW6B,UAAUrC,yBAAyByC,MAAAA,CAAAA;;CAG9D,MAAMW,kBAAkBX,OAAoD;EACxE,MAAM5B,KAAK,KAAKL,WAAWM,mBAAmB,SAAA;AAE9CuC,SAAOC,QAAQb,MAAAA,CAAOc,SAAS,CAAC7B,KAAK8B,WAAM;AACvC3C,MAAG+B,SAAS,UAAUlB,IAAI,MAAMA,OAAO,GAAGA,MAAM8B,OAAM,CAAA;IAC1D;AAEA3C,KAAG4C,UAAU,gBAAA;AAEb,SAAO5C,GAAGiC,QAAM;;CAGpBY,OAAOzB,MAA+B;AAClC,SAAO,KAAKzB,WAAWkD,OAAOzB,KAAAA;;CAGlC0B,MAAMC,QAAgB3B,MAA+B;AACjD,SAAO,KAAKzB,WAAWmD,MAAMC,QAAQ3B,KAAAA;;CAGzC,MAAM4B,KAAKD,QAAiC;AACxC,SAAO,KAAKpD,WAAWqD,KAAKD,OAAAA;;CAGhC,MAAME,OAAOF,QAA+B;AACxC,QAAM,KAAKpD,WAAWsD,OAAOF,OAAAA;;CAGjC,MAAMG,oBAAoB9B,MAAsC;AAC5D,QAAMnC,0BAA0BmC,MAAM;GAClC+B,YAAY,KAAKxD,WAAWyD,QAAQC;GACpCC,cAAchE;GAClB,CAAA;;CAGJ,MAAMiE,gBAAgBnC,MAAuBoC,UAAkC;AAQ3E,MAAI,CAACC,MAPkBzE,eAAe;GAClCmE,YAAY,KAAKxD,WAAWyD,QAAQC;GACpCC,cAAchE;GACdyD,QAAQ3B;GACRsC,gBAAgBF;GACpB,CAAA,CAGI,OAAM,IAAItE,uBAAAA;;CAIlB,MAAMyE,cAAcZ,QAA0C;EAC1D,MAAMxB,KAAK,OAAOwB,WAAW,WAAWA,SAASA,OAAOxB;AAexD,UAAOkB,MAde,KAAK9C,WAAWyD,QACjCQ,cAAcpE,iBAAAA,CACdqE,KAAK;GACFjC,OAAO,EAAEkC,WAAWvC,IAAG;GACvBb,WAAW,EAAEqD,MAAM,MAAK;GACxBC,OAAO;IACHzC,IAAI1C,kBAAkB;KAClBoF,QAAQ5E,YAAY6E;KACpBrD,KAAKU;KACT,CAAA;IACA4C,cAAc;IAClB;GACJ,CAAA,EAEWC,KAAKC,UAAUA,MAAMN,KAAI;;CAG5C,MAAMO,oBAAoBvB,QAA6D;EACnF,MAAMxB,KAAK,OAAOwB,WAAW,WAAWA,SAASA,OAAOxB;AACxD,SAAOnC,qBAAqB;GACxBgE,SAAS,KAAKzD,WAAWyD;GACzBmB,gBAAgBhF;GAChBqC,OAAO,EAAEkC,WAAWvC,IAAG;GACvBiD,aAAanF,YAAYoF;GACzBC,UAAUnD;GACd,CAAA"}

package/dist/app/modules/database/repositories/client-permission/index.d.ts

@@ -0,0 +1,2 @@
+export * from './repository.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/app/modules/database/repositories/client-permission/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/client-permission/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC"}

package/dist/app/modules/database/repositories/client-permission/index.mjs

@@ -0,0 +1,2 @@
+import { ClientPermissionRepositoryAdapter } from "./repository.mjs";
+export { ClientPermissionRepositoryAdapter };