@authup/server-core 1.0.0-beta.40 → 1.0.0-beta.42

package/dist/adapters/http/controllers/entities/permission/module.mjs

@@ -1,16 +1,11 @@
-import { PolicyEngine as PolicyEngine$1 } from "../../../../../core/security/policy/engine.mjs";
-import "../../../../../core/index.mjs";
-import { useRequestIdentity } from "../../../request/helpers/identity.mjs";
 import { buildActorContext } from "../../../request/helpers/actor.mjs";
+import { applyRouteRealmIDToBody, getRequestRealmID } from "../../../request/helpers/realm-id.mjs";
 import "../../../request/index.mjs";
 import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
 import "../../../middleware/index.mjs";
-import { isUUID } from "@authup/kit";
-import { BuiltInPolicyType, PermissionEvaluator, PolicyData } from "@authup/access";
-import { NotFoundError } from "@ebec/http";
-import { send, sendAccepted, sendCreated, useRequestParam } from "routup";
+import { serializeError } from "@authup/errors";
+import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DPut, DTags } from "@routup/decorators";
 import { useRequestQuery } from "@routup/basic/query";
-import { DBody, DController, DDelete, DGet, DPath, DPost, DPut, DRequest, DResponse, DTags } from "@routup/decorators";
 //#region src/adapters/http/controllers/entities/permission/module.ts
 function _ts_decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -28,142 +23,102 @@ function _ts_param(paramIndex, decorator) {
 }
 var PermissionController = class {
 	service;
-	repository;
-	realmRepository;
-	identityPermissionProvider;
-	permissionProvider;
+	checkerService;
 	constructor(ctx) {
 		this.service = ctx.service;
-		this.repository = ctx.repository;
-		this.realmRepository = ctx.realmRepository;
-		this.identityPermissionProvider = ctx.identityPermissionProvider;
-		this.permissionProvider = ctx.permissionProvider;
+		this.checkerService = ctx.checkerService;
 	}
-	async getMany(req, res) {
-		const actor = buildActorContext(req);
-		const { data, meta } = await this.service.getMany(useRequestQuery(req), actor);
-		return send(res, {
+	async getMany(event) {
+		const actor = buildActorContext(event);
+		const { data, meta } = await this.service.getMany(useRequestQuery(event), actor);
+		return {
 			data,
 			meta
-		});
+		};
 	}
-	async add(data, req, res) {
-		const actor = buildActorContext(req);
-		return sendCreated(res, await this.service.create(data, actor));
+	async add(data, event) {
+		applyRouteRealmIDToBody(event, data);
+		const actor = buildActorContext(event);
+		const entity = await this.service.create(data, actor);
+		event.response.status = 201;
+		return entity;
 	}
-	async check(data, req, res) {
-		const id = useRequestParam(req, "id");
-		let criteria;
-		if (isUUID(id)) criteria = { id };
-		else {
-			const realm = await this.realmRepository.resolve(useRequestParam(req, "realmId"));
-			criteria = {
-				name: id,
-				...realm ? { realm_id: realm.id } : {}
-			};
-		}
-		const entity = await this.repository.findOneBy(criteria);
-		if (!entity) throw new NotFoundError();
-		if (typeof data[BuiltInPolicyType.IDENTITY] === "undefined") data[BuiltInPolicyType.IDENTITY] = useRequestIdentity(req);
-		const ctx = {
-			name: entity.name,
-			input: new PolicyData(data)
+	async check(data, event) {
+		const actor = buildActorContext(event);
+		const result = await this.checkerService.safeCheck(event.params.id, data, actor, getRequestRealmID(event));
+		event.response.status = 202;
+		if (result.success) return { status: "success" };
+		return {
+			status: "error",
+			data: serializeError(result.error)
 		};
-		const permissionEvaluator = new PermissionEvaluator({
-			provider: this.permissionProvider,
-			policyEngine: new PolicyEngine$1(this.identityPermissionProvider)
-		});
-		let output;
-		try {
-			if (ctx.input && ctx.input.has(BuiltInPolicyType.ATTRIBUTES)) await permissionEvaluator.evaluate(ctx);
-			else await permissionEvaluator.preEvaluate(ctx);
-			output = { status: "success" };
-		} catch (e) {
-			output = {
-				status: "error",
-				data: e
-			};
-		}
-		return sendAccepted(res, output);
 	}
-	async get(id, req, res) {
-		const actor = buildActorContext(req);
-		return send(res, await this.service.getOne(id, actor, useRequestParam(req, "realmId")));
+	async get(id, event) {
+		const actor = buildActorContext(event);
+		return await this.service.getOne(id, actor, getRequestRealmID(event));
 	}
-	async edit(id, data, req, res) {
-		const actor = buildActorContext(req);
-		return sendAccepted(res, await this.service.update(id, data, actor));
+	async edit(id, data, event) {
+		applyRouteRealmIDToBody(event, data);
+		const actor = buildActorContext(event);
+		const entity = await this.service.update(id, data, actor);
+		event.response.status = 202;
+		return entity;
 	}
-	async put(id, data, req, res) {
-		const actor = buildActorContext(req);
+	async put(id, data, event) {
+		applyRouteRealmIDToBody(event, data);
+		const actor = buildActorContext(event);
 		const { entity, created } = await this.service.save(id || void 0, data, actor);
-		if (created) return sendCreated(res, entity);
-		return sendAccepted(res, entity);
+		event.response.status = created ? 201 : 202;
+		return entity;
 	}
-	async drop(id, req, res) {
-		const actor = buildActorContext(req);
-		return sendAccepted(res, await this.service.delete(id, actor));
+	async drop(id, event) {
+		const actor = buildActorContext(event);
+		const entity = await this.service.delete(id, actor);
+		event.response.status = 202;
+		return entity;
 	}
 };
 _ts_decorate([
 	DGet("", [ForceLoggedInMiddleware]),
-	_ts_param(0, DRequest()),
-	_ts_param(1, DResponse()),
+	_ts_param(0, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [Object, Object]),
+	_ts_metadata("design:paramtypes", [typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
 	_ts_metadata("design:returntype", Promise)
 ], PermissionController.prototype, "getMany", null);
 _ts_decorate([
 	DPost("", [ForceLoggedInMiddleware]),
 	_ts_param(0, DBody()),
-	_ts_param(1, DRequest()),
-	_ts_param(2, DResponse()),
+	_ts_param(1, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [
-		Object,
-		Object,
-		Object
-	]),
+	_ts_metadata("design:paramtypes", [typeof PermissionCreatePayload === "undefined" ? Object : PermissionCreatePayload, typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
 	_ts_metadata("design:returntype", Promise)
 ], PermissionController.prototype, "add", null);
 _ts_decorate([
 	DPost("/:id/check", [ForceLoggedInMiddleware]),
 	_ts_param(0, DBody()),
-	_ts_param(1, DRequest()),
-	_ts_param(2, DResponse()),
+	_ts_param(1, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [
-		Object,
-		Object,
-		Object
-	]),
+	_ts_metadata("design:paramtypes", [Object, typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
 	_ts_metadata("design:returntype", Promise)
 ], PermissionController.prototype, "check", null);
 _ts_decorate([
 	DGet("/:id", [ForceLoggedInMiddleware]),
 	_ts_param(0, DPath("id")),
-	_ts_param(1, DRequest()),
-	_ts_param(2, DResponse()),
+	_ts_param(1, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [
-		String,
-		Object,
-		Object
-	]),
+	_ts_metadata("design:paramtypes", [String, typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
 	_ts_metadata("design:returntype", Promise)
 ], PermissionController.prototype, "get", null);
 _ts_decorate([
 	DPost("/:id", [ForceLoggedInMiddleware]),
 	_ts_param(0, DPath("id")),
 	_ts_param(1, DBody()),
-	_ts_param(2, DRequest()),
-	_ts_param(3, DResponse()),
+	_ts_param(2, DContext()),
 	_ts_metadata("design:type", Function),
 	_ts_metadata("design:paramtypes", [
 		String,
-		Object,
-		Object,
-		Object
+		typeof PermissionUpdatePayload === "undefined" ? Object : PermissionUpdatePayload,
+		typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent
 	]),
 	_ts_metadata("design:returntype", Promise)
 ], PermissionController.prototype, "edit", null);
@@ -171,33 +126,26 @@ _ts_decorate([
 	DPut("/:id", [ForceLoggedInMiddleware]),
 	_ts_param(0, DPath("id")),
 	_ts_param(1, DBody()),
-	_ts_param(2, DRequest()),
-	_ts_param(3, DResponse()),
+	_ts_param(2, DContext()),
 	_ts_metadata("design:type", Function),
 	_ts_metadata("design:paramtypes", [
 		String,
-		Object,
-		Object,
-		Object
+		typeof PermissionSavePayload === "undefined" ? Object : PermissionSavePayload,
+		typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent
 	]),
 	_ts_metadata("design:returntype", Promise)
 ], PermissionController.prototype, "put", null);
 _ts_decorate([
 	DDelete("/:id", [ForceLoggedInMiddleware]),
 	_ts_param(0, DPath("id")),
-	_ts_param(1, DRequest()),
-	_ts_param(2, DResponse()),
+	_ts_param(1, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [
-		String,
-		Object,
-		Object
-	]),
+	_ts_metadata("design:paramtypes", [String, typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
 	_ts_metadata("design:returntype", Promise)
 ], PermissionController.prototype, "drop", null);
 PermissionController = _ts_decorate([
 	DTags("permission"),
-	DController("/permissions"),
+	DController(["/permissions", "/realms/:realmId/permissions"]),
 	_ts_metadata("design:type", Function),
 	_ts_metadata("design:paramtypes", [typeof PermissionControllerContext === "undefined" ? Object : PermissionControllerContext])
 ], PermissionController);

package/dist/adapters/http/controllers/entities/permission/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["BuiltInPolicyType","PermissionEvaluator","PolicyData","DBody","DController","DDelete","DGet","DPath","DPost","DPut","DRequest","DResponse","DTags","isUUID","NotFoundError","send","sendAccepted","sendCreated","useRequestParam","useRequestQuery","PolicyEngine","ForceLoggedInMiddleware","buildActorContext","useRequestIdentity","PermissionController","service","repository","realmRepository","identityPermissionProvider","permissionProvider","ctx","getMany","req","res","actor","data","meta","add","entity","create","check","id","criteria","realm","resolve","name","realm_id","findOneBy","IDENTITY","input","permissionEvaluator","provider","policyEngine","output","has","ATTRIBUTES","evaluate","preEvaluate","status","e","get","getOne","edit","update","put","created","save","undefined","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/permission/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PermissionAPICheckResponse } from '@authup/core-http-kit';\nimport type { IPermissionProvider, PermissionEvaluationContext } from '@authup/access';\nimport {\n    BuiltInPolicyType,\n    PermissionEvaluator, \n    PolicyData,\n} from '@authup/access';\nimport {\n    DBody, \n    DController, \n    DDelete, \n    DGet, \n    DPath, \n    DPost, \n    DPut, \n    DRequest, \n    DResponse, \n    DTags,\n} from '@routup/decorators';\nimport { isUUID } from '@authup/kit';\nimport { NotFoundError } from '@ebec/http';\nimport {\n    send, \n    sendAccepted, \n    sendCreated, \n    useRequestParam,\n} from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n \n    IIdentityPermissionProvider, \n    IPermissionRepository, \n    IPermissionService, \n    IRealmRepository, \n} from '../../../../../core/index.ts';\nimport { PolicyEngine } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n    buildActorContext,\n    useRequestIdentity,\n} from '../../../request/index.ts';\n\nexport type PermissionControllerContext = {\n    service: IPermissionService,\n    repository: IPermissionRepository,\n    realmRepository: IRealmRepository,\n    identityPermissionProvider: IIdentityPermissionProvider,\n    permissionProvider: IPermissionProvider,\n};\n\n@DTags('permission')\n@DController('/permissions')\nexport class PermissionController {\n    protected service: IPermissionService;\n\n    protected repository: IPermissionRepository;\n\n    protected realmRepository: IRealmRepository;\n\n    protected identityPermissionProvider: IIdentityPermissionProvider;\n\n    protected permissionProvider: IPermissionProvider;\n\n    constructor(ctx: PermissionControllerContext) {\n        this.service = ctx.service;\n        this.repository = ctx.repository;\n        this.realmRepository = ctx.realmRepository;\n        this.identityPermissionProvider = ctx.identityPermissionProvider;\n        this.permissionProvider = ctx.permissionProvider;\n    }\n\n    @DGet('', [ForceLoggedInMiddleware])\n    async getMany(\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const {\n            data, \n            meta, \n        } = await this.service.getMany(useRequestQuery(req), actor);\n\n        return send(res, {\n            data,\n            meta, \n        });\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async add(\n        @DBody() data: any,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const entity = await this.service.create(data, actor);\n\n        return sendCreated(res, entity);\n    }\n\n    @DPost('/:id/check', [ForceLoggedInMiddleware])\n    async check(\n        @DBody() data: any,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const id = useRequestParam(req, 'id');\n\n        let criteria: Record<string, any>;\n        if (isUUID(id)) {\n            criteria = { id };\n        } else {\n            const realm = await this.realmRepository.resolve(useRequestParam(req, 'realmId'));\n            criteria = {\n                name: id,\n                ...(realm ? { realm_id: realm.id } : {}),\n            };\n        }\n\n        const entity = await this.repository.findOneBy(criteria);\n        if (!entity) {\n            throw new NotFoundError();\n        }\n\n        if (typeof data[BuiltInPolicyType.IDENTITY] === 'undefined') {\n            data[BuiltInPolicyType.IDENTITY] = useRequestIdentity(req);\n        }\n\n        const ctx: PermissionEvaluationContext = {\n            name: entity.name,\n            input: new PolicyData(data),\n        };\n\n        const permissionEvaluator = new PermissionEvaluator({\n            provider: this.permissionProvider,\n            policyEngine: new PolicyEngine(this.identityPermissionProvider),\n        });\n\n        let output: PermissionAPICheckResponse;\n        try {\n            if (\n                ctx.input &&\n                ctx.input.has(BuiltInPolicyType.ATTRIBUTES)\n            ) {\n                await permissionEvaluator.evaluate(ctx);\n            } else {\n                await permissionEvaluator.preEvaluate(ctx);\n            }\n\n            output = { status: 'success' };\n        } catch (e) {\n            output = {\n                status: 'error',\n                data: e as Error,\n            };\n        }\n\n        return sendAccepted(res, output);\n    }\n\n    @DGet('/:id', [ForceLoggedInMiddleware])\n    async get(\n        @DPath('id') id: string,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const entity = await this.service.getOne(\n            id,\n            actor,\n            useRequestParam(req, 'realmId'),\n        );\n\n        return send(res, entity);\n    }\n\n    @DPost('/:id', [ForceLoggedInMiddleware])\n    async edit(\n        @DPath('id') id: string,\n        @DBody() data: any,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const entity = await this.service.update(\n            id,\n            data,\n            actor,\n        );\n\n        return sendAccepted(res, entity);\n    }\n\n    @DPut('/:id', [ForceLoggedInMiddleware])\n    async put(\n        @DPath('id') id: string,\n        @DBody() data: any,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const {\n            entity, \n            created, \n        } = await this.service.save(\n            id || undefined,\n            data,\n            actor,\n        );\n\n        if (created) {\n            return sendCreated(res, entity);\n        }\n\n        return sendAccepted(res, entity);\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const entity = await this.service.delete(id, actor);\n\n        return sendAccepted(res, entity);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AAsDD,IAAawB,uBAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEAC;CAEV,YAAYC,KAAkC;AAC1C,OAAKL,UAAUK,IAAIL;AACnB,OAAKC,aAAaI,IAAIJ;AACtB,OAAKC,kBAAkBG,IAAIH;AAC3B,OAAKC,6BAA6BE,IAAIF;AACtC,OAAKC,qBAAqBC,IAAID;;CAGlC,MACME,QACF,KACA,KACY;EACZ,MAAMG,QAAQZ,kBAAkBU,IAAAA;EAChC,MAAM,EACFG,MACAC,SACA,MAAM,KAAKX,QAAQM,QAAQZ,gBAAgBa,IAAAA,EAAME,MAAAA;AAErD,SAAOnB,KAAKkB,KAAK;GACbE;GACAC;GACJ,CAAA;;CAGJ,MACMC,IACF,MACA,KACA,KACY;EACZ,MAAMH,QAAQZ,kBAAkBU,IAAAA;AAGhC,SAAOf,YAAYgB,KAAKK,MAFH,KAAKb,QAAQc,OAAOJ,MAAMD,MAAAA,CAEvBI;;CAG5B,MACME,MACF,MACA,KACA,KACY;EACZ,MAAMC,KAAKvB,gBAAgBc,KAAK,KAAA;EAEhC,IAAIU;AACJ,MAAI7B,OAAO4B,GAAAA,CACPC,YAAW,EAAED,IAAG;OACb;GACH,MAAME,QAAQ,MAAM,KAAKhB,gBAAgBiB,QAAQ1B,gBAAgBc,KAAK,UAAA,CAAA;AACtEU,cAAW;IACPG,MAAMJ;IACN,GAAIE,QAAQ,EAAEG,UAAUH,MAAMF,IAAG,GAAI,EAAE;IAC3C;;EAGJ,MAAMH,SAAS,MAAM,KAAKZ,WAAWqB,UAAUL,SAAAA;AAC/C,MAAI,CAACJ,OACD,OAAM,IAAIxB,eAAAA;AAGd,MAAI,OAAOqB,KAAKnC,kBAAkBgD,cAAc,YAC5Cb,MAAKnC,kBAAkBgD,YAAYzB,mBAAmBS,IAAAA;EAG1D,MAAMF,MAAmC;GACrCe,MAAMP,OAAOO;GACbI,OAAO,IAAI/C,WAAWiC,KAAAA;GAC1B;EAEA,MAAMe,sBAAsB,IAAIjD,oBAAoB;GAChDkD,UAAU,KAAKtB;GACfuB,cAAc,IAAIhC,eAAa,KAAKQ,2BAA0B;GAClE,CAAA;EAEA,IAAIyB;AACJ,MAAI;AACA,OACIvB,IAAImB,SACJnB,IAAImB,MAAMK,IAAItD,kBAAkBuD,WAAU,CAE1C,OAAML,oBAAoBM,SAAS1B,IAAAA;OAEnC,OAAMoB,oBAAoBO,YAAY3B,IAAAA;AAG1CuB,YAAS,EAAEK,QAAQ,WAAU;WACxBC,GAAG;AACRN,YAAS;IACLK,QAAQ;IACRvB,MAAMwB;IACV;;AAGJ,SAAO3C,aAAaiB,KAAKoB,OAAAA;;CAG7B,MACMO,IACF,IACA,KACA,KACY;EACZ,MAAM1B,QAAQZ,kBAAkBU,IAAAA;AAOhC,SAAOjB,KAAKkB,KAAKK,MANI,KAAKb,QAAQoC,OAC9BpB,IACAP,OACAhB,gBAAgBc,KAAK,UAAA,CAAA,CAGRM;;CAGrB,MACMwB,KACF,IACA,MACA,KACA,KACY;EACZ,MAAM5B,QAAQZ,kBAAkBU,IAAAA;AAOhC,SAAOhB,aAAaiB,KAAKK,MANJ,KAAKb,QAAQsC,OAC9BtB,IACAN,MACAD,MAAAA,CAGqBI;;CAG7B,MACM0B,IACF,IACA,MACA,KACA,KACY;EACZ,MAAM9B,QAAQZ,kBAAkBU,IAAAA;EAChC,MAAM,EACFM,QACA2B,YACA,MAAM,KAAKxC,QAAQyC,KACnBzB,MAAM0B,KAAAA,GACNhC,MACAD,MAAAA;AAGJ,MAAI+B,QACA,QAAOhD,YAAYgB,KAAKK,OAAAA;AAG5B,SAAOtB,aAAaiB,KAAKK,OAAAA;;CAG7B,MACM8B,KACF,IACA,KACA,KACY;EACZ,MAAMlC,QAAQZ,kBAAkBU,IAAAA;AAGhC,SAAOhB,aAAaiB,KAAKK,MAFJ,KAAKb,QAAQ4C,OAAO5B,IAAIP,MAAAA,CAEpBI;;;;WA3JlBjB,wBAAAA,CAAAA;;;;;;;;YAiBCA,wBAAAA,CAAAA;;;;;;;;;;;;;sBAYUA,wBAAAA,CAAAA;;;;;;;;;;;;;eA4DPA,wBAAAA,CAAAA;;;;;;;;;;;;;gBAgBCA,wBAAAA,CAAAA;;;;;;;;;;;;;;;eAiBDA,wBAAAA,CAAAA;;;;;;;;;;;;;;;kBAwBGA,wBAAAA,CAAAA"}
+{"version":3,"file":"module.mjs","names":["serializeError","DBody","DContext","DController","DDelete","DGet","DPath","DPost","DPut","DTags","useRequestQuery","ForceLoggedInMiddleware","applyRouteRealmIDToBody","buildActorContext","getRequestRealmID","PermissionController","service","checkerService","ctx","getMany","event","actor","data","meta","add","entity","create","response","status","check","result","safeCheck","params","id","success","error","get","getOne","edit","update","put","created","save","undefined","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/permission/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    EntityCollectionResponse,\n    PermissionAPICheckResponse,\n    PermissionCreatePayload,\n    PermissionSavePayload,\n    PermissionUpdatePayload,\n} from '@authup/core-http-kit';\nimport type { Permission } from '@authup/core-kit';\nimport { serializeError } from '@authup/errors';\nimport {\n    DBody,\n    DContext,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DPost,\n    DPut,\n    DTags,\n} from '@routup/decorators';\nimport type { IRoutupEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n    IPermissionCheckerService,\n    IPermissionService,\n} from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport {\n    applyRouteRealmIDToBody,\n    buildActorContext,\n    getRequestRealmID,\n} from '../../../request/index.ts';\n\nexport type PermissionControllerContext = {\n    service: IPermissionService,\n    checkerService: IPermissionCheckerService,\n};\n\n@DTags('permission')\n@DController(['/permissions', '/realms/:realmId/permissions'])\nexport class PermissionController {\n    protected service: IPermissionService;\n\n    protected checkerService: IPermissionCheckerService;\n\n    constructor(ctx: PermissionControllerContext) {\n        this.service = ctx.service;\n        this.checkerService = ctx.checkerService;\n    }\n\n    @DGet('', [ForceLoggedInMiddleware])\n    async getMany(\n        @DContext() event: IRoutupEvent,\n    ): Promise<EntityCollectionResponse<Permission>> {\n        const actor = buildActorContext(event);\n        const {\n            data,\n            meta,\n        } = await this.service.getMany(useRequestQuery(event), actor);\n\n        return {\n            data,\n            meta,\n        };\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async add(\n        @DBody() data: PermissionCreatePayload,\n        @DContext() event: IRoutupEvent,\n    ): Promise<Permission> {\n        applyRouteRealmIDToBody(event, data);\n        const actor = buildActorContext(event);\n        const entity = await this.service.create(data, actor);\n\n        event.response.status = 201;\n\n        return entity;\n    }\n\n    @DPost('/:id/check', [ForceLoggedInMiddleware])\n    async check(\n        @DBody() data: any,\n        @DContext() event: IRoutupEvent,\n    ): Promise<PermissionAPICheckResponse> {\n        const actor = buildActorContext(event);\n        const result = await this.checkerService.safeCheck(\n            event.params.id,\n            data,\n            actor,\n            getRequestRealmID(event),\n        );\n\n        event.response.status = 202;\n        if (result.success) {\n            return { status: 'success' };\n        }\n\n        return {\n            status: 'error',\n            data: serializeError(result.error),\n        };\n    }\n\n    @DGet('/:id', [ForceLoggedInMiddleware])\n    async get(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ): Promise<Permission> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.getOne(\n            id,\n            actor,\n            getRequestRealmID(event),\n        );\n\n        return entity;\n    }\n\n    @DPost('/:id', [ForceLoggedInMiddleware])\n    async edit(\n        @DPath('id') id: string,\n        @DBody() data: PermissionUpdatePayload,\n        @DContext() event: IRoutupEvent,\n    ): Promise<Permission> {\n        applyRouteRealmIDToBody(event, data);\n        const actor = buildActorContext(event);\n        const entity = await this.service.update(\n            id,\n            data,\n            actor,\n        );\n\n        event.response.status = 202;\n\n        return entity;\n    }\n\n    @DPut('/:id', [ForceLoggedInMiddleware])\n    async put(\n        @DPath('id') id: string,\n        @DBody() data: PermissionSavePayload,\n        @DContext() event: IRoutupEvent,\n    ): Promise<Permission> {\n        applyRouteRealmIDToBody(event, data);\n        const actor = buildActorContext(event);\n        const {\n            entity,\n            created,\n        } = await this.service.save(\n            id || undefined,\n            data,\n            actor,\n        );\n\n        event.response.status = created ? 201 : 202;\n        return entity;\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ): Promise<Permission> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.delete(id, actor);\n\n        event.response.status = 202;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;AAKC,SAAA,aAAA,YAAA,QAAA,KAAA,MAAA;;;;;;;;;;;;;;AA0CD,IAAae,uBAAb,MAAaA;CACCC;CAEAC;CAEV,YAAYC,KAAkC;EAC1C,KAAKF,UAAUE,IAAIF;EACnB,KAAKC,iBAAiBC,IAAID;CAC9B;CAEA,MACME,QACF,OAC6C;EAC7C,MAAME,QAAQR,kBAAkBO,KAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKP,QAAQG,QAAQT,gBAAgBU,KAAAA,GAAQC,KAAAA;EAEvD,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,IACF,MACA,OACmB;EACnBZ,wBAAwBQ,OAAOE,IAAAA;EAC/B,MAAMD,QAAQR,kBAAkBO,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKT,QAAQU,OAAOJ,MAAMD,KAAAA;EAE/CD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,MACF,MACA,OACmC;EACnC,MAAMR,QAAQR,kBAAkBO,KAAAA;EAChC,MAAMU,SAAS,MAAM,KAAKb,eAAec,UACrCX,MAAMY,OAAOC,IACbX,MACAD,OACAP,kBAAkBM,KAAAA,CAAAA;EAGtBA,MAAMO,SAASC,SAAS;EACxB,IAAIE,OAAOI,SACP,OAAO,EAAEN,QAAQ,UAAU;EAG/B,OAAO;GACHA,QAAQ;GACRN,MAAMtB,eAAe8B,OAAOK,KAAK;EACrC;CACJ;CAEA,MACMC,IACF,IACA,OACmB;EACnB,MAAMf,QAAQR,kBAAkBO,KAAAA;EAOhC,OAAOK,MANc,KAAKT,QAAQqB,OAC9BJ,IACAZ,OACAP,kBAAkBM,KAAAA,CAAAA;CAI1B;CAEA,MACMkB,KACF,IACA,MACA,OACmB;EACnB1B,wBAAwBQ,OAAOE,IAAAA;EAC/B,MAAMD,QAAQR,kBAAkBO,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKT,QAAQuB,OAC9BN,IACAX,MACAD,KAAAA;EAGJD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMe,IACF,IACA,MACA,OACmB;EACnB5B,wBAAwBQ,OAAOE,IAAAA;EAC/B,MAAMD,QAAQR,kBAAkBO,KAAAA;EAChC,MAAM,EACFK,QACAgB,YACA,MAAM,KAAKzB,QAAQ0B,KACnBT,MAAMU,KAAAA,GACNrB,MACAD,KAAAA;EAGJD,MAAMO,SAASC,SAASa,UAAU,MAAM;EACxC,OAAOhB;CACX;CAEA,MACMmB,KACF,IACA,OACmB;EACnB,MAAMvB,QAAQR,kBAAkBO,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKT,QAAQ6B,OAAOZ,IAAIZ,KAAAA;EAE7CD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;WAzHed,uBAAAA,CAAAA;;;;;;;YAgBCA,uBAAAA,CAAAA;;;;;;;;sBAcUA,uBAAAA,CAAAA;;;;;;;;eAwBPA,uBAAAA,CAAAA;;;;;;;;gBAeCA,uBAAAA,CAAAA;;;;;;;;;;;;;eAmBDA,uBAAAA,CAAAA;;;;;;;;;;;;;kBAqBGA,uBAAAA,CAAAA;;;;;;;;;cAxHR,gBAAgB,8BAAA,CAAA"}

package/dist/adapters/http/controllers/entities/permission-policy/module.d.ts

@@ -1,3 +1,6 @@
+import type { IRoutupEvent } from 'routup';
+import type { EntityCollectionResponse, PermissionPolicyCreatePayload } from '@authup/core-http-kit';
+import type { PermissionPolicy } from '@authup/core-kit';
 import type { IPermissionPolicyService } from '../../../../../core/index.ts';
 export type PermissionPolicyControllerContext = {
     service: IPermissionPolicyService;
@@ -5,9 +8,9 @@ export type PermissionPolicyControllerContext = {
 export declare class PermissionPolicyController {
     protected service: IPermissionPolicyService;
     constructor(ctx: PermissionPolicyControllerContext);
-    getMany(req: any, res: any): Promise<any>;
-    add(data: any, req: any, res: any): Promise<any>;
-    getOne(id: string, req: any, res: any): Promise<any>;
-    drop(id: string, req: any, res: any): Promise<any>;
+    getMany(event: IRoutupEvent): Promise<EntityCollectionResponse<PermissionPolicy>>;
+    add(data: PermissionPolicyCreatePayload, event: IRoutupEvent): Promise<PermissionPolicy>;
+    getOne(id: string, event: IRoutupEvent): Promise<PermissionPolicy>;
+    drop(id: string, event: IRoutupEvent): Promise<PermissionPolicy>;
 }
 //# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/entities/permission-policy/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/permission-policy/module.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAI7E,MAAM,MAAM,iCAAiC,GAAG;IAC5C,OAAO,EAAE,wBAAwB,CAAC;CACrC,CAAC;AAEF,qBAEa,0BAA0B;IACnC,SAAS,CAAC,OAAO,EAAE,wBAAwB,CAAC;gBAEhC,GAAG,EAAE,iCAAiC;IAK5C,OAAO,CACG,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACtB,OAAO,CAAC,GAAG,CAAC;IAcT,GAAG,CACI,IAAI,EAAE,GAAG,EACN,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACtB,OAAO,CAAC,GAAG,CAAC;IAST,MAAM,CACK,EAAE,EAAE,MAAM,EACX,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACtB,OAAO,CAAC,GAAG,CAAC;IAQT,IAAI,CACO,EAAE,EAAE,MAAM,EACX,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACtB,OAAO,CAAC,GAAG,CAAC;CAMlB"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/permission-policy/module.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAE3C,OAAO,KAAK,EACR,wBAAwB,EACxB,6BAA6B,EAChC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAI7E,MAAM,MAAM,iCAAiC,GAAG;IAC5C,OAAO,EAAE,wBAAwB,CAAC;CACrC,CAAC;AAEF,qBAEa,0BAA0B;IACnC,SAAS,CAAC,OAAO,EAAE,wBAAwB,CAAC;gBAEhC,GAAG,EAAE,iCAAiC;IAK5C,OAAO,CACG,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;IAchD,GAAG,CACI,IAAI,EAAE,6BAA6B,EAChC,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,gBAAgB,CAAC;IAWtB,MAAM,CACK,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,gBAAgB,CAAC;IAQtB,IAAI,CACO,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,gBAAgB,CAAC;CAQ/B"}

package/dist/adapters/http/controllers/entities/permission-policy/module.mjs

@@ -2,9 +2,8 @@ import { buildActorContext } from "../../../request/helpers/actor.mjs";
 import "../../../request/index.mjs";
 import { ForceLoggedInMiddleware } from "../../../middleware/built-in/loggedin/module.mjs";
 import "../../../middleware/index.mjs";
-import { send, sendAccepted, sendCreated } from "routup";
+import { DBody, DContext, DController, DDelete, DGet, DPath, DPost, DTags } from "@routup/decorators";
 import { useRequestQuery } from "@routup/basic/query";
-import { DBody, DController, DDelete, DGet, DPath, DPost, DRequest, DResponse, DTags } from "@routup/decorators";
 //#region src/adapters/http/controllers/entities/permission-policy/module.ts
 function _ts_decorate(decorators, target, key, desc) {
 	var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -25,72 +24,60 @@ var PermissionPolicyController = class {
 	constructor(ctx) {
 		this.service = ctx.service;
 	}
-	async getMany(req, res) {
-		const actor = buildActorContext(req);
-		const { data, meta } = await this.service.getMany(useRequestQuery(req), actor);
-		return send(res, {
+	async getMany(event) {
+		const actor = buildActorContext(event);
+		const { data, meta } = await this.service.getMany(useRequestQuery(event), actor);
+		return {
 			data,
 			meta
-		});
+		};
 	}
-	async add(data, req, res) {
-		const actor = buildActorContext(req);
-		return sendCreated(res, await this.service.create(data, actor));
+	async add(data, event) {
+		const actor = buildActorContext(event);
+		const entity = await this.service.create(data, actor);
+		event.response.status = 201;
+		return entity;
 	}
-	async getOne(id, req, res) {
-		const actor = buildActorContext(req);
-		return send(res, await this.service.getOne(id, actor));
+	async getOne(id, event) {
+		const actor = buildActorContext(event);
+		return await this.service.getOne(id, actor);
 	}
-	async drop(id, req, res) {
-		const actor = buildActorContext(req);
-		return sendAccepted(res, await this.service.delete(id, actor));
+	async drop(id, event) {
+		const actor = buildActorContext(event);
+		const entity = await this.service.delete(id, actor);
+		event.response.status = 202;
+		return entity;
 	}
 };
 _ts_decorate([
 	DGet("", [ForceLoggedInMiddleware]),
-	_ts_param(0, DRequest()),
-	_ts_param(1, DResponse()),
+	_ts_param(0, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [Object, Object]),
+	_ts_metadata("design:paramtypes", [typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
 	_ts_metadata("design:returntype", Promise)
 ], PermissionPolicyController.prototype, "getMany", null);
 _ts_decorate([
 	DPost("", [ForceLoggedInMiddleware]),
 	_ts_param(0, DBody()),
-	_ts_param(1, DRequest()),
-	_ts_param(2, DResponse()),
+	_ts_param(1, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [
-		Object,
-		Object,
-		Object
-	]),
+	_ts_metadata("design:paramtypes", [typeof PermissionPolicyCreatePayload === "undefined" ? Object : PermissionPolicyCreatePayload, typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
 	_ts_metadata("design:returntype", Promise)
 ], PermissionPolicyController.prototype, "add", null);
 _ts_decorate([
 	DGet("/:id", [ForceLoggedInMiddleware]),
 	_ts_param(0, DPath("id")),
-	_ts_param(1, DRequest()),
-	_ts_param(2, DResponse()),
+	_ts_param(1, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [
-		String,
-		Object,
-		Object
-	]),
+	_ts_metadata("design:paramtypes", [String, typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
 	_ts_metadata("design:returntype", Promise)
 ], PermissionPolicyController.prototype, "getOne", null);
 _ts_decorate([
 	DDelete("/:id", [ForceLoggedInMiddleware]),
 	_ts_param(0, DPath("id")),
-	_ts_param(1, DRequest()),
-	_ts_param(2, DResponse()),
+	_ts_param(1, DContext()),
 	_ts_metadata("design:type", Function),
-	_ts_metadata("design:paramtypes", [
-		String,
-		Object,
-		Object
-	]),
+	_ts_metadata("design:paramtypes", [String, typeof IRoutupEvent === "undefined" ? Object : IRoutupEvent]),
 	_ts_metadata("design:returntype", Promise)
 ], PermissionPolicyController.prototype, "drop", null);
 PermissionPolicyController = _ts_decorate([

package/dist/adapters/http/controllers/entities/permission-policy/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["DBody","DController","DDelete","DGet","DPath","DPost","DRequest","DResponse","DTags","send","sendAccepted","sendCreated","useRequestQuery","ForceLoggedInMiddleware","buildActorContext","PermissionPolicyController","service","ctx","getMany","req","res","actor","data","meta","add","entity","create","getOne","id","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/permission-policy/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DBody, \n    DController, \n    DDelete, \n    DGet, \n    DPath, \n    DPost, \n    DRequest, \n    DResponse, \n    DTags,\n} from '@routup/decorators';\nimport { send, sendAccepted, sendCreated } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type { IPermissionPolicyService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { buildActorContext } from '../../../request/index.ts';\n\nexport type PermissionPolicyControllerContext = {\n    service: IPermissionPolicyService,\n};\n\n@DTags('permission')\n@DController('/permission-policies')\nexport class PermissionPolicyController {\n    protected service: IPermissionPolicyService;\n\n    constructor(ctx: PermissionPolicyControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DGet('', [ForceLoggedInMiddleware])\n    async getMany(\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const {\n            data, \n            meta, \n        } = await this.service.getMany(useRequestQuery(req), actor);\n\n        return send(res, {\n            data,\n            meta, \n        });\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async add(\n        @DBody() data: any,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n\n        const entity = await this.service.create(data, actor);\n\n        return sendCreated(res, entity);\n    }\n\n    @DGet('/:id', [ForceLoggedInMiddleware])\n    async getOne(\n        @DPath('id') id: string,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const entity = await this.service.getOne(id, actor);\n\n        return send(res, entity);\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DRequest() req: any,\n        @DResponse() res: any,\n    ): Promise<any> {\n        const actor = buildActorContext(req);\n        const entity = await this.service.delete(id, actor);\n\n        return sendAccepted(res, entity);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AA8BA,IAAae,6BAAb,MAAaA;CACCC;CAEV,YAAYC,KAAwC;AAChD,OAAKD,UAAUC,IAAID;;CAGvB,MACME,QACF,KACA,KACY;EACZ,MAAMG,QAAQP,kBAAkBK,IAAAA;EAChC,MAAM,EACFG,MACAC,SACA,MAAM,KAAKP,QAAQE,QAAQN,gBAAgBO,IAAAA,EAAME,MAAAA;AAErD,SAAOZ,KAAKW,KAAK;GACbE;GACAC;GACJ,CAAA;;CAGJ,MACMC,IACF,MACA,KACA,KACY;EACZ,MAAMH,QAAQP,kBAAkBK,IAAAA;AAIhC,SAAOR,YAAYS,KAAKK,MAFH,KAAKT,QAAQU,OAAOJ,MAAMD,MAAAA,CAEvBI;;CAG5B,MACME,OACF,IACA,KACA,KACY;EACZ,MAAMN,QAAQP,kBAAkBK,IAAAA;AAGhC,SAAOV,KAAKW,KAAKK,MAFI,KAAKT,QAAQW,OAAOC,IAAIP,MAAAA,CAE5BI;;CAGrB,MACMI,KACF,IACA,KACA,KACY;EACZ,MAAMR,QAAQP,kBAAkBK,IAAAA;AAGhC,SAAOT,aAAaU,KAAKK,MAFJ,KAAKT,QAAQc,OAAOF,IAAIP,MAAAA,CAEpBI;;;;WAnDlBZ,wBAAAA,CAAAA;;;;;;;;YAiBCA,wBAAAA,CAAAA;;;;;;;;;;;;;eAaGA,wBAAAA,CAAAA;;;;;;;;;;;;;kBAYGA,wBAAAA,CAAAA"}
+{"version":3,"file":"module.mjs","names":["DBody","DContext","DController","DDelete","DGet","DPath","DPost","DTags","useRequestQuery","ForceLoggedInMiddleware","buildActorContext","PermissionPolicyController","service","ctx","getMany","event","actor","data","meta","add","entity","create","response","status","getOne","id","drop","delete"],"sources":["../../../../../../src/adapters/http/controllers/entities/permission-policy/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    DBody,\n    DContext,\n    DController,\n    DDelete,\n    DGet,\n    DPath,\n    DPost,\n    DTags,\n} from '@routup/decorators';\nimport type { IRoutupEvent } from 'routup';\nimport { useRequestQuery } from '@routup/basic/query';\nimport type {\n    EntityCollectionResponse,\n    PermissionPolicyCreatePayload,\n} from '@authup/core-http-kit';\nimport type { PermissionPolicy } from '@authup/core-kit';\nimport type { IPermissionPolicyService } from '../../../../../core/index.ts';\nimport { ForceLoggedInMiddleware } from '../../../middleware/index.ts';\nimport { buildActorContext } from '../../../request/index.ts';\n\nexport type PermissionPolicyControllerContext = {\n    service: IPermissionPolicyService,\n};\n\n@DTags('permission')\n@DController('/permission-policies')\nexport class PermissionPolicyController {\n    protected service: IPermissionPolicyService;\n\n    constructor(ctx: PermissionPolicyControllerContext) {\n        this.service = ctx.service;\n    }\n\n    @DGet('', [ForceLoggedInMiddleware])\n    async getMany(\n        @DContext() event: IRoutupEvent,\n    ): Promise<EntityCollectionResponse<PermissionPolicy>> {\n        const actor = buildActorContext(event);\n        const {\n            data,\n            meta,\n        } = await this.service.getMany(useRequestQuery(event), actor);\n\n        return {\n            data,\n            meta,\n        };\n    }\n\n    @DPost('', [ForceLoggedInMiddleware])\n    async add(\n        @DBody() data: PermissionPolicyCreatePayload,\n        @DContext() event: IRoutupEvent,\n    ): Promise<PermissionPolicy> {\n        const actor = buildActorContext(event);\n\n        const entity = await this.service.create(data, actor);\n\n        event.response.status = 201;\n\n        return entity;\n    }\n\n    @DGet('/:id', [ForceLoggedInMiddleware])\n    async getOne(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ): Promise<PermissionPolicy> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.getOne(id, actor);\n\n        return entity;\n    }\n\n    @DDelete('/:id', [ForceLoggedInMiddleware])\n    async drop(\n        @DPath('id') id: string,\n        @DContext() event: IRoutupEvent,\n    ): Promise<PermissionPolicy> {\n        const actor = buildActorContext(event);\n        const entity = await this.service.delete(id, actor);\n\n        event.response.status = 202;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAkCA,IAAaW,6BAAb,MAAaA;CACCC;CAEV,YAAYC,KAAwC;EAChD,KAAKD,UAAUC,IAAID;CACvB;CAEA,MACME,QACF,OACmD;EACnD,MAAME,QAAQN,kBAAkBK,KAAAA;EAChC,MAAM,EACFE,MACAC,SACA,MAAM,KAAKN,QAAQE,QAAQN,gBAAgBO,KAAAA,GAAQC,KAAAA;EAEvD,OAAO;GACHC;GACAC;EACJ;CACJ;CAEA,MACMC,IACF,MACA,OACyB;EACzB,MAAMH,QAAQN,kBAAkBK,KAAAA;EAEhC,MAAMK,SAAS,MAAM,KAAKR,QAAQS,OAAOJ,MAAMD,KAAAA;EAE/CD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;CAEA,MACMI,OACF,IACA,OACyB;EACzB,MAAMR,QAAQN,kBAAkBK,KAAAA;EAGhC,OAAOK,MAFc,KAAKR,QAAQY,OAAOC,IAAIT,KAAAA;CAGjD;CAEA,MACMU,KACF,IACA,OACyB;EACzB,MAAMV,QAAQN,kBAAkBK,KAAAA;EAChC,MAAMK,SAAS,MAAM,KAAKR,QAAQe,OAAOF,IAAIT,KAAAA;EAE7CD,MAAMO,SAASC,SAAS;EAExB,OAAOH;CACX;AACJ;;WArDeX,uBAAAA,CAAAA;;;;;;;YAgBCA,uBAAAA,CAAAA;;;;;;;;eAcGA,uBAAAA,CAAAA;;;;;;;;kBAWGA,uBAAAA,CAAAA"}

package/dist/adapters/http/controllers/entities/policy/module.d.ts

@@ -1,25 +1,23 @@
-import type { IIdentityPermissionProvider, IPolicyRepository, IPolicyService, IRealmRepository } from '../../../../../core/index.ts';
+import type { EntityCollectionResponse, PolicyAPICheckResponse, PolicyCreatePayload, PolicyResponse, PolicySavePayload, PolicyUpdatePayload } from '@authup/core-http-kit';
+import type { IRoutupEvent } from 'routup';
+import type { IPolicyCheckerService, IPolicyService } from '../../../../../core/index.ts';
 export type PolicyControllerContext = {
     service: IPolicyService;
-    repository: IPolicyRepository;
-    realmRepository: IRealmRepository;
-    identityPermissionProvider: IIdentityPermissionProvider;
+    checkerService: IPolicyCheckerService;
 };
 export declare class PolicyController {
     protected service: IPolicyService;
-    protected repository: IPolicyRepository;
-    protected realmRepository: IRealmRepository;
-    protected identityPermissionProvider: IIdentityPermissionProvider;
+    protected checkerService: IPolicyCheckerService;
     constructor(ctx: PolicyControllerContext);
-    getMany(req: any, res: any): Promise<any>;
-    getOneExpanded(id: string, req: any, res: any): Promise<any>;
-    getOne(id: string, req: any, res: any, options?: {
+    getMany(event: IRoutupEvent): Promise<EntityCollectionResponse<PolicyResponse>>;
+    getOneExpanded(id: string, event: IRoutupEvent): Promise<PolicyResponse>;
+    getOne(id: string, event: IRoutupEvent, options?: {
         expanded?: boolean;
-    }): Promise<any>;
-    check(id: string, data: any, req: any, res: any): Promise<any>;
-    update(id: string, data: any, req: any, res: any): Promise<any>;
-    replace(id: string, data: any, req: any, res: any): Promise<any>;
-    drop(id: string, req: any, res: any): Promise<any>;
-    create(data: any, req: any, res: any): Promise<any>;
+    }): Promise<PolicyResponse>;
+    check(id: string, data: any, event: IRoutupEvent): Promise<PolicyAPICheckResponse>;
+    update(id: string, data: PolicyUpdatePayload, event: IRoutupEvent): Promise<PolicyResponse>;
+    replace(id: string, data: PolicySavePayload, event: IRoutupEvent): Promise<PolicyResponse>;
+    drop(id: string, event: IRoutupEvent): Promise<PolicyResponse>;
+    create(data: PolicyCreatePayload, event: IRoutupEvent): Promise<PolicyResponse>;
 }
 //# sourceMappingURL=module.d.ts.map

package/dist/adapters/http/controllers/entities/policy/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/policy/module.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAER,2BAA2B,EAC3B,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EACnB,MAAM,8BAA8B,CAAC;AAQtC,MAAM,MAAM,uBAAuB,GAAG;IAClC,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,eAAe,EAAE,gBAAgB,CAAC;IAClC,0BAA0B,EAAE,2BAA2B,CAAC;CAC3D,CAAC;AAEF,qBAEa,gBAAgB;IACzB,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC;IAElC,SAAS,CAAC,UAAU,EAAE,iBAAiB,CAAC;IAExC,SAAS,CAAC,eAAe,EAAE,gBAAgB,CAAC;IAE5C,SAAS,CAAC,0BAA0B,EAAE,2BAA2B,CAAC;gBAEtD,GAAG,EAAE,uBAAuB;IAQlC,OAAO,CACG,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACtB,OAAO,CAAC,GAAG,CAAC;IAcT,cAAc,CACH,EAAE,EAAE,MAAM,EACX,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACtB,OAAO,CAAC,GAAG,CAAC;IAKT,MAAM,CACK,EAAE,EAAE,MAAM,EACX,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,EAErB,OAAO,GAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAO,GACrC,OAAO,CAAC,GAAG,CAAC;IAYT,KAAK,CACM,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,GAAG,EACN,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACtB,OAAO,CAAC,GAAG,CAAC;IA4CT,MAAM,CACK,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,GAAG,EACN,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACtB,OAAO,CAAC,GAAG,CAAC;IAYT,OAAO,CACI,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,GAAG,EACN,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACtB,OAAO,CAAC,GAAG,CAAC;IAoBT,IAAI,CACO,EAAE,EAAE,MAAM,EACX,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACtB,OAAO,CAAC,GAAG,CAAC;IAQT,MAAM,CACC,IAAI,EAAE,GAAG,EACN,GAAG,EAAE,GAAG,EACP,GAAG,EAAE,GAAG,GACtB,OAAO,CAAC,GAAG,CAAC;CAMlB"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/controllers/entities/policy/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,wBAAwB,EACxB,sBAAsB,EACtB,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACtB,MAAM,uBAAuB,CAAC;AAc/B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,KAAK,EACR,qBAAqB,EACrB,cAAc,EACjB,MAAM,8BAA8B,CAAC;AAQtC,MAAM,MAAM,uBAAuB,GAAG;IAClC,OAAO,EAAE,cAAc,CAAC;IACxB,cAAc,EAAE,qBAAqB,CAAC;CACzC,CAAC;AAEF,qBAEa,gBAAgB;IACzB,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC;IAElC,SAAS,CAAC,cAAc,EAAE,qBAAqB,CAAC;gBAEpC,GAAG,EAAE,uBAAuB;IAMlC,OAAO,CACG,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,wBAAwB,CAAC,cAAc,CAAC,CAAC;IAc9C,cAAc,CACH,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,cAAc,CAAC;IAKpB,MAAM,CACK,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,YAAY,EAE/B,OAAO,GAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAO,GACrC,OAAO,CAAC,cAAc,CAAC;IAYpB,KAAK,CACM,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,GAAG,EACN,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,sBAAsB,CAAC;IAqB5B,MAAM,CACK,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,mBAAmB,EACtB,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,cAAc,CAAC;IAepB,OAAO,CACI,EAAE,EAAE,MAAM,EACd,IAAI,EAAE,iBAAiB,EACpB,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,cAAc,CAAC;IAkBpB,IAAI,CACO,EAAE,EAAE,MAAM,EACX,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,cAAc,CAAC;IAUpB,MAAM,CACC,IAAI,EAAE,mBAAmB,EACtB,KAAK,EAAE,YAAY,GAChC,OAAO,CAAC,cAAc,CAAC;CAS7B"}