@authup/server-core 1.0.0-beta.40 → 1.0.0-beta.42

package/dist/core/oauth2/token/issuer/access/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["OAuth2TokenKind","OAuth2BaseTokenIssuer","OAuth2AccessTokenIssuer","repository","signer","identityRoleProvider","options","issue","input","iss","buildIss","accessClaims","buildAccessClaims","data","insert","kind","ACCESS","exp","buildExp","token","sign","saveWithSignature","sub","sub_kind","roles","getRolesFor","type","id","clientId","client_id","realmId","realm_id","realmName","realm_name","realmRoles","globalRoles","role","push","name","realm_access","global_access"],"sources":["../../../../../../src/core/oauth2/token/issuer/access/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenPayload } from '@authup/specs';\nimport { OAuth2TokenKind } from '@authup/specs';\nimport type { IOAuth2TokenSigner } from '../../signer/index.ts';\nimport type { IOAuth2TokenRepository } from '../../repository/index.ts';\nimport { OAuth2BaseTokenIssuer } from '../base.ts';\nimport type { IOAuth2TokenIssuer, OAuth2TokenIssuerOptions, OAuth2TokenIssuerResponse } from '../types.ts';\nimport type { IIdentityRoleProvider } from '../../../../identity/index.ts';\n\nexport class OAuth2AccessTokenIssuer extends OAuth2BaseTokenIssuer implements IOAuth2TokenIssuer {\n    protected repository: IOAuth2TokenRepository;\n\n    protected signer : IOAuth2TokenSigner;\n\n    protected identityRoleProvider?: IIdentityRoleProvider;\n\n    constructor(\n        repository: IOAuth2TokenRepository,\n        signer: IOAuth2TokenSigner,\n        options: OAuth2TokenIssuerOptions = {},\n        identityRoleProvider?: IIdentityRoleProvider,\n    ) {\n        super(options);\n\n        this.repository = repository;\n        this.signer = signer;\n        this.identityRoleProvider = identityRoleProvider;\n    }\n\n    async issue(input: OAuth2TokenPayload = {}) : Promise<OAuth2TokenIssuerResponse> {\n        const iss = this.buildIss(input);\n\n        const accessClaims = await this.buildAccessClaims(input);\n\n        const data = await this.repository.insert({\n            ...input,\n            kind: OAuth2TokenKind.ACCESS,\n            exp: this.buildExp(input),\n            ...(iss ? { iss } : {}),\n            ...accessClaims,\n        });\n\n        const token = await this.signer.sign(data);\n\n        await this.repository.saveWithSignature(data, token);\n\n        return [token, data];\n    }\n\n    protected async buildAccessClaims(input: OAuth2TokenPayload) : Promise<Pick<OAuth2TokenPayload, 'realm_access' | 'global_access'>> {\n        if (!this.identityRoleProvider || !input.sub || !input.sub_kind) {\n            return {};\n        }\n\n        const roles = await this.identityRoleProvider.getRolesFor({\n            type: input.sub_kind,\n            id: input.sub,\n            clientId: input.client_id,\n            realmId: input.realm_id,\n            realmName: input.realm_name,\n        });\n\n        const realmRoles: string[] = [];\n        const globalRoles: string[] = [];\n\n        for (const role of roles) {\n            if (!role.realm_id) {\n                globalRoles.push(role.name);\n            } else if (input.realm_id && role.realm_id === input.realm_id) {\n                realmRoles.push(role.name);\n            }\n        }\n\n        return {\n            realm_access: { roles: realmRoles },\n            global_access: { roles: globalRoles },\n        };\n    }\n}\n"],"mappings":";;;AAeA,IAAaE,0BAAb,cAA6CD,sBAAAA;CAC/BE;CAEAC;CAEAC;CAEV,YACIF,YACAC,QACAE,UAAoC,EAAE,EACtCD,sBACF;AACE,QAAMC,QAAAA;AAEN,OAAKH,aAAaA;AAClB,OAAKC,SAASA;AACd,OAAKC,uBAAuBA;;CAGhC,MAAME,MAAMC,QAA4B,EAAE,EAAuC;EAC7E,MAAMC,MAAM,KAAKC,SAASF,MAAAA;EAE1B,MAAMG,eAAe,MAAM,KAAKC,kBAAkBJ,MAAAA;EAElD,MAAMK,OAAO,MAAM,KAAKV,WAAWW,OAAO;GACtC,GAAGN;GACHO,MAAMf,gBAAgBgB;GACtBC,KAAK,KAAKC,SAASV,MAAAA;GACnB,GAAIC,MAAM,EAAEA,KAAI,GAAI,EAAE;GACtB,GAAGE;GACP,CAAA;EAEA,MAAMQ,QAAQ,MAAM,KAAKf,OAAOgB,KAAKP,KAAAA;AAErC,QAAM,KAAKV,WAAWkB,kBAAkBR,MAAMM,MAAAA;AAE9C,SAAO,CAACA,OAAON,KAAK;;CAGxB,MAAgBD,kBAAkBJ,OAAiG;AAC/H,MAAI,CAAC,KAAKH,wBAAwB,CAACG,MAAMc,OAAO,CAACd,MAAMe,SACnD,QAAO,EAAC;EAGZ,MAAMC,QAAQ,MAAM,KAAKnB,qBAAqBoB,YAAY;GACtDC,MAAMlB,MAAMe;GACZI,IAAInB,MAAMc;GACVM,UAAUpB,MAAMqB;GAChBC,SAAStB,MAAMuB;GACfC,WAAWxB,MAAMyB;GACrB,CAAA;EAEA,MAAMC,aAAuB,EAAE;EAC/B,MAAMC,cAAwB,EAAE;AAEhC,OAAK,MAAMC,QAAQZ,MACf,KAAI,CAACY,KAAKL,SACNI,aAAYE,KAAKD,KAAKE,KAAI;WACnB9B,MAAMuB,YAAYK,KAAKL,aAAavB,MAAMuB,SACjDG,YAAWG,KAAKD,KAAKE,KAAI;AAIjC,SAAO;GACHC,cAAc,EAAEf,OAAOU,YAAW;GAClCM,eAAe,EAAEhB,OAAOW,aAAY;GACxC"}
+{"version":3,"file":"module.mjs","names":["OAuth2TokenKind","OAuth2BaseTokenIssuer","OAuth2AccessTokenIssuer","repository","signer","identityRoleProvider","options","issue","input","iss","buildIss","accessClaims","buildAccessClaims","data","insert","kind","ACCESS","exp","buildExp","token","sign","saveWithSignature","sub","sub_kind","roles","getRolesFor","type","id","clientId","client_id","realmId","realm_id","realmName","realm_name","realmRoles","globalRoles","role","push","name","realm_access","global_access"],"sources":["../../../../../../src/core/oauth2/token/issuer/access/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenPayload } from '@authup/specs';\nimport { OAuth2TokenKind } from '@authup/specs';\nimport type { IOAuth2TokenSigner } from '../../signer/index.ts';\nimport type { IOAuth2TokenRepository } from '../../repository/index.ts';\nimport { OAuth2BaseTokenIssuer } from '../base.ts';\nimport type { IOAuth2TokenIssuer, OAuth2TokenIssuerOptions, OAuth2TokenIssuerResponse } from '../types.ts';\nimport type { IIdentityRoleProvider } from '../../../../identity/index.ts';\n\nexport class OAuth2AccessTokenIssuer extends OAuth2BaseTokenIssuer implements IOAuth2TokenIssuer {\n    protected repository: IOAuth2TokenRepository;\n\n    protected signer : IOAuth2TokenSigner;\n\n    protected identityRoleProvider?: IIdentityRoleProvider;\n\n    constructor(\n        repository: IOAuth2TokenRepository,\n        signer: IOAuth2TokenSigner,\n        options: OAuth2TokenIssuerOptions = {},\n        identityRoleProvider?: IIdentityRoleProvider,\n    ) {\n        super(options);\n\n        this.repository = repository;\n        this.signer = signer;\n        this.identityRoleProvider = identityRoleProvider;\n    }\n\n    async issue(input: OAuth2TokenPayload = {}) : Promise<OAuth2TokenIssuerResponse> {\n        const iss = this.buildIss(input);\n\n        const accessClaims = await this.buildAccessClaims(input);\n\n        const data = await this.repository.insert({\n            ...input,\n            kind: OAuth2TokenKind.ACCESS,\n            exp: this.buildExp(input),\n            ...(iss ? { iss } : {}),\n            ...accessClaims,\n        });\n\n        const token = await this.signer.sign(data);\n\n        await this.repository.saveWithSignature(data, token);\n\n        return [token, data];\n    }\n\n    protected async buildAccessClaims(input: OAuth2TokenPayload) : Promise<Pick<OAuth2TokenPayload, 'realm_access' | 'global_access'>> {\n        if (!this.identityRoleProvider || !input.sub || !input.sub_kind) {\n            return {};\n        }\n\n        const roles = await this.identityRoleProvider.getRolesFor({\n            type: input.sub_kind,\n            id: input.sub,\n            clientId: input.client_id,\n            realmId: input.realm_id,\n            realmName: input.realm_name,\n        });\n\n        const realmRoles: string[] = [];\n        const globalRoles: string[] = [];\n\n        for (const role of roles) {\n            if (!role.realm_id) {\n                globalRoles.push(role.name);\n            } else if (input.realm_id && role.realm_id === input.realm_id) {\n                realmRoles.push(role.name);\n            }\n        }\n\n        return {\n            realm_access: { roles: realmRoles },\n            global_access: { roles: globalRoles },\n        };\n    }\n}\n"],"mappings":";;;AAeA,IAAaE,0BAAb,cAA6CD,sBAAAA;CAC/BE;CAEAC;CAEAC;CAEV,YACIF,YACAC,QACAE,UAAoC,CAAC,GACrCD,sBACF;EACE,MAAMC,OAAAA;EAEN,KAAKH,aAAaA;EAClB,KAAKC,SAASA;EACd,KAAKC,uBAAuBA;CAChC;CAEA,MAAME,MAAMC,QAA4B,CAAC,GAAwC;EAC7E,MAAMC,MAAM,KAAKC,SAASF,KAAAA;EAE1B,MAAMG,eAAe,MAAM,KAAKC,kBAAkBJ,KAAAA;EAElD,MAAMK,OAAO,MAAM,KAAKV,WAAWW,OAAO;GACtC,GAAGN;GACHO,MAAMf,gBAAgBgB;GACtBC,KAAK,KAAKC,SAASV,KAAAA;GACnB,GAAIC,MAAM,EAAEA,IAAI,IAAI,CAAC;GACrB,GAAGE;EACP,CAAA;EAEA,MAAMQ,QAAQ,MAAM,KAAKf,OAAOgB,KAAKP,IAAAA;EAErC,MAAM,KAAKV,WAAWkB,kBAAkBR,MAAMM,KAAAA;EAE9C,OAAO,CAACA,OAAON,IAAAA;CACnB;CAEA,MAAgBD,kBAAkBJ,OAAiG;EAC/H,IAAI,CAAC,KAAKH,wBAAwB,CAACG,MAAMc,OAAO,CAACd,MAAMe,UACnD,OAAO,CAAC;EAGZ,MAAMC,QAAQ,MAAM,KAAKnB,qBAAqBoB,YAAY;GACtDC,MAAMlB,MAAMe;GACZI,IAAInB,MAAMc;GACVM,UAAUpB,MAAMqB;GAChBC,SAAStB,MAAMuB;GACfC,WAAWxB,MAAMyB;EACrB,CAAA;EAEA,MAAMC,aAAuB,CAAA;EAC7B,MAAMC,cAAwB,CAAA;EAE9B,KAAK,MAAMC,QAAQZ,OACf,IAAI,CAACY,KAAKL,UACNI,YAAYE,KAAKD,KAAKE,IAAI;OACvB,IAAI9B,MAAMuB,YAAYK,KAAKL,aAAavB,MAAMuB,UACjDG,WAAWG,KAAKD,KAAKE,IAAI;EAIjC,OAAO;GACHC,cAAc,EAAEf,OAAOU,WAAW;GAClCM,eAAe,EAAEhB,OAAOW,YAAY;EACxC;CACJ;AACJ"}

package/dist/core/oauth2/token/issuer/base.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"base.mjs","names":["OAuth2BaseTokenIssuer","options","buildIss","input","issuer","undefined","base","replace","realm_name","buildExp","exp","utc","Math","floor","Date","getTime","maxAge"],"sources":["../../../../../src/core/oauth2/token/issuer/base.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenPayload } from '@authup/specs';\nimport type { IOAuth2TokenIssuer, OAuth2TokenIssuerOptions, OAuth2TokenIssuerResponse } from './types.ts';\n\nexport abstract class OAuth2BaseTokenIssuer implements IOAuth2TokenIssuer {\n    protected options: OAuth2TokenIssuerOptions;\n\n    // ------------------------------------------------------------------\n\n    protected constructor(options?: OAuth2TokenIssuerOptions) {\n        this.options = options || {};\n    }\n\n    // ------------------------------------------------------------------\n\n    abstract issue(input: OAuth2TokenPayload, options?: OAuth2TokenIssuerOptions): Promise<OAuth2TokenIssuerResponse>;\n\n    // ------------------------------------------------------------------\n\n    buildIss(input: OAuth2TokenPayload = {}) : string | undefined {\n        if (!this.options.issuer) {\n            return undefined;\n        }\n\n        // Strip a trailing slash so a configured issuer like\n        // `https://auth.example.com/` doesn't produce a malformed\n        // `https://auth.example.com//realms/master`.\n        const base = this.options.issuer.replace(/\\/+$/, '');\n\n        if (input.realm_name) {\n            return `${base}/realms/${input.realm_name}`;\n        }\n\n        return base;\n    }\n\n    /**\n     * Build utc expire time (in seconds).\n     *\n     * @param input\n     */\n    buildExp(input: OAuth2TokenPayload = {}) : number {\n        if (input.exp) {\n            return input.exp;\n        }\n\n        const utc = Math.floor(new Date().getTime() / 1000);\n        if (this.options.maxAge) {\n            return utc + this.options.maxAge;\n        }\n\n        return utc + 3_600;\n    }\n}\n"],"mappings":";AAUA,IAAsBA,wBAAtB,MAAsBA;CACRC;CAIV,YAAsBA,SAAoC;AACtD,OAAKA,UAAUA,WAAW,EAAC;;CAS/BC,SAASC,QAA4B,EAAE,EAAuB;AAC1D,MAAI,CAAC,KAAKF,QAAQG,OACd;EAMJ,MAAME,OAAO,KAAKL,QAAQG,OAAOG,QAAQ,QAAQ,GAAA;AAEjD,MAAIJ,MAAMK,WACN,QAAO,GAAGF,KAAK,UAAUH,MAAMK;AAGnC,SAAOF;;;;;;IAQXG,SAASN,QAA4B,EAAE,EAAW;AAC9C,MAAIA,MAAMO,IACN,QAAOP,MAAMO;EAGjB,MAAMC,MAAMC,KAAKC,uBAAM,IAAIC,MAAAA,EAAOC,SAAO,GAAK,IAAA;AAC9C,MAAI,KAAKd,QAAQe,OACb,QAAOL,MAAM,KAAKV,QAAQe;AAG9B,SAAOL,MAAM"}
+{"version":3,"file":"base.mjs","names":["OAuth2BaseTokenIssuer","options","buildIss","input","issuer","undefined","base","replace","realm_name","buildExp","exp","utc","Math","floor","Date","getTime","maxAge"],"sources":["../../../../../src/core/oauth2/token/issuer/base.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenPayload } from '@authup/specs';\nimport type { IOAuth2TokenIssuer, OAuth2TokenIssuerOptions, OAuth2TokenIssuerResponse } from './types.ts';\n\nexport abstract class OAuth2BaseTokenIssuer implements IOAuth2TokenIssuer {\n    protected options: OAuth2TokenIssuerOptions;\n\n    // ------------------------------------------------------------------\n\n    protected constructor(options?: OAuth2TokenIssuerOptions) {\n        this.options = options || {};\n    }\n\n    // ------------------------------------------------------------------\n\n    abstract issue(input: OAuth2TokenPayload, options?: OAuth2TokenIssuerOptions): Promise<OAuth2TokenIssuerResponse>;\n\n    // ------------------------------------------------------------------\n\n    buildIss(input: OAuth2TokenPayload = {}) : string | undefined {\n        if (!this.options.issuer) {\n            return undefined;\n        }\n\n        // Strip a trailing slash so a configured issuer like\n        // `https://auth.example.com/` doesn't produce a malformed\n        // `https://auth.example.com//realms/master`.\n        const base = this.options.issuer.replace(/\\/+$/, '');\n\n        if (input.realm_name) {\n            return `${base}/realms/${input.realm_name}`;\n        }\n\n        return base;\n    }\n\n    /**\n     * Build utc expire time (in seconds).\n     *\n     * @param input\n     */\n    buildExp(input: OAuth2TokenPayload = {}) : number {\n        if (input.exp) {\n            return input.exp;\n        }\n\n        const utc = Math.floor(new Date().getTime() / 1000);\n        if (this.options.maxAge) {\n            return utc + this.options.maxAge;\n        }\n\n        return utc + 3_600;\n    }\n}\n"],"mappings":";AAUA,IAAsBA,wBAAtB,MAAsBA;CACRC;CAIV,YAAsBA,SAAoC;EACtD,KAAKA,UAAUA,WAAW,CAAC;CAC/B;CAQAC,SAASC,QAA4B,CAAC,GAAwB;EAC1D,IAAI,CAAC,KAAKF,QAAQG,QACd;EAMJ,MAAME,OAAO,KAAKL,QAAQG,OAAOG,QAAQ,QAAQ,EAAA;EAEjD,IAAIJ,MAAMK,YACN,OAAO,GAAGF,KAAK,UAAUH,MAAMK;EAGnC,OAAOF;CACX;;;;;IAOAG,SAASN,QAA4B,CAAC,GAAY;EAC9C,IAAIA,MAAMO,KACN,OAAOP,MAAMO;EAGjB,MAAMC,MAAMC,KAAKC,uBAAM,IAAIC,KAAAA,GAAOC,QAAO,IAAK,GAAA;EAC9C,IAAI,KAAKd,QAAQe,QACb,OAAOL,MAAM,KAAKV,QAAQe;EAG9B,OAAOL,MAAM;CACjB;AACJ"}

package/dist/core/oauth2/token/issuer/open-id/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["JWTError","OAuth2TokenKind","OAuth2OpenIDClaimsBuilder","OAuth2BaseTokenIssuer","OAuth2OpenIDTokenIssuer","repository","signer","identityResolver","claimsBuilder","ctx","options","issue","input","sub_kind","payloadPropertyInvalid","sub","identity","resolve","payloadInvalid","issueWithIdentity","claims","fromIdentity","utc","Math","floor","Date","getTime","iss","buildIss","data","insert","kind","ID_TOKEN","auth_time","exp","buildExp","updated_at","client_id","aud","token","sign","saveWithSignature"],"sources":["../../../../../../src/core/oauth2/token/issuer/open-id/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenPayload } from '@authup/specs';\nimport { JWTError, OAuth2TokenKind } from '@authup/specs';\nimport type { Identity } from '@authup/core-kit';\nimport { OAuth2OpenIDClaimsBuilder } from '../../../openid/index.ts';\nimport type { IOAuth2TokenSigner } from '../../signer/index.ts';\nimport type { IOAuth2TokenRepository } from '../../repository/index.ts';\nimport { OAuth2BaseTokenIssuer } from '../base.ts';\nimport type { OAuth2TokenIssuerResponse } from '../types.ts';\nimport type { IOAuth2OpenIDTokenIssuer, OAuth2OpenIDTokenIssuerContext } from './types.ts';\nimport type { IIdentityResolver } from '../../../../identity/index.ts';\n\nexport class OAuth2OpenIDTokenIssuer extends OAuth2BaseTokenIssuer implements IOAuth2OpenIDTokenIssuer {\n    protected repository: IOAuth2TokenRepository;\n\n    protected signer : IOAuth2TokenSigner;\n\n    protected identityResolver : IIdentityResolver;\n\n    protected claimsBuilder: OAuth2OpenIDClaimsBuilder;\n\n    constructor(ctx: OAuth2OpenIDTokenIssuerContext) {\n        super(ctx.options);\n\n        this.repository = ctx.repository;\n        this.signer = ctx.signer;\n\n        this.identityResolver = ctx.identityResolver;\n        this.claimsBuilder = new OAuth2OpenIDClaimsBuilder();\n    }\n\n    async issue(input: OAuth2TokenPayload = {}) : Promise<OAuth2TokenIssuerResponse> {\n        if (!input.sub_kind) {\n            throw JWTError.payloadPropertyInvalid('sub_kind');\n        }\n\n        if (!input.sub) {\n            throw JWTError.payloadPropertyInvalid('sub');\n        }\n\n        const identity = await this.identityResolver.resolve(\n            input.sub_kind,\n            input.sub,\n        );\n\n        if (!identity) {\n            throw JWTError.payloadInvalid();\n        }\n\n        return this.issueWithIdentity(input, identity);\n    }\n\n    async issueWithIdentity(\n        input: OAuth2TokenPayload,\n        identity: Identity,\n    ): Promise<OAuth2TokenIssuerResponse> {\n        const claims = this.claimsBuilder.fromIdentity(identity);\n\n        const utc = Math.floor(new Date().getTime() / 1000);\n\n        const iss = this.buildIss(input);\n\n        const data = await this.repository.insert({\n            ...input,\n            ...claims,\n            kind: OAuth2TokenKind.ID_TOKEN,\n            auth_time: utc,\n            exp: this.buildExp(input),\n            updated_at: utc,\n            ...(iss ? { iss } : {}),\n            ...(input.client_id ? { aud: input.client_id } : {}),\n        });\n\n        const token = await this.signer.sign(data);\n\n        await this.repository.saveWithSignature(data, token);\n\n        return [token, data];\n    }\n}\n"],"mappings":";;;;;AAkBA,IAAaI,0BAAb,cAA6CD,sBAAAA;CAC/BE;CAEAC;CAEAC;CAEAC;CAEV,YAAYC,KAAqC;AAC7C,QAAMA,IAAIC,QAAO;AAEjB,OAAKL,aAAaI,IAAIJ;AACtB,OAAKC,SAASG,IAAIH;AAElB,OAAKC,mBAAmBE,IAAIF;AAC5B,OAAKC,gBAAgB,IAAIN,2BAAAA;;CAG7B,MAAMS,MAAMC,QAA4B,EAAE,EAAuC;AAC7E,MAAI,CAACA,MAAMC,SACP,OAAMb,SAASc,uBAAuB,WAAA;AAG1C,MAAI,CAACF,MAAMG,IACP,OAAMf,SAASc,uBAAuB,MAAA;EAG1C,MAAME,WAAW,MAAM,KAAKT,iBAAiBU,QACzCL,MAAMC,UACND,MAAMG,IAAG;AAGb,MAAI,CAACC,SACD,OAAMhB,SAASkB,gBAAc;AAGjC,SAAO,KAAKC,kBAAkBP,OAAOI,SAAAA;;CAGzC,MAAMG,kBACFP,OACAI,UACkC;EAClC,MAAMI,SAAS,KAAKZ,cAAca,aAAaL,SAAAA;EAE/C,MAAMM,MAAMC,KAAKC,uBAAM,IAAIC,MAAAA,EAAOC,SAAO,GAAK,IAAA;EAE9C,MAAMC,MAAM,KAAKC,SAAShB,MAAAA;EAE1B,MAAMiB,OAAO,MAAM,KAAKxB,WAAWyB,OAAO;GACtC,GAAGlB;GACH,GAAGQ;GACHW,MAAM9B,gBAAgB+B;GACtBC,WAAWX;GACXY,KAAK,KAAKC,SAASvB,MAAAA;GACnBwB,YAAYd;GACZ,GAAIK,MAAM,EAAEA,KAAI,GAAI,EAAE;GACtB,GAAIf,MAAMyB,YAAY,EAAEC,KAAK1B,MAAMyB,WAAU,GAAI,EAAE;GACvD,CAAA;EAEA,MAAME,QAAQ,MAAM,KAAKjC,OAAOkC,KAAKX,KAAAA;AAErC,QAAM,KAAKxB,WAAWoC,kBAAkBZ,MAAMU,MAAAA;AAE9C,SAAO,CAACA,OAAOV,KAAK"}
+{"version":3,"file":"module.mjs","names":["JWTError","OAuth2TokenKind","OAuth2OpenIDClaimsBuilder","OAuth2BaseTokenIssuer","OAuth2OpenIDTokenIssuer","repository","signer","identityResolver","claimsBuilder","ctx","options","issue","input","sub_kind","payloadPropertyInvalid","sub","identity","resolve","payloadInvalid","issueWithIdentity","claims","fromIdentity","utc","Math","floor","Date","getTime","iss","buildIss","data","insert","kind","ID_TOKEN","auth_time","exp","buildExp","updated_at","client_id","aud","token","sign","saveWithSignature"],"sources":["../../../../../../src/core/oauth2/token/issuer/open-id/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenPayload } from '@authup/specs';\nimport { JWTError, OAuth2TokenKind } from '@authup/specs';\nimport type { Identity } from '@authup/core-kit';\nimport { OAuth2OpenIDClaimsBuilder } from '../../../openid/index.ts';\nimport type { IOAuth2TokenSigner } from '../../signer/index.ts';\nimport type { IOAuth2TokenRepository } from '../../repository/index.ts';\nimport { OAuth2BaseTokenIssuer } from '../base.ts';\nimport type { OAuth2TokenIssuerResponse } from '../types.ts';\nimport type { IOAuth2OpenIDTokenIssuer, OAuth2OpenIDTokenIssuerContext } from './types.ts';\nimport type { IIdentityResolver } from '../../../../identity/index.ts';\n\nexport class OAuth2OpenIDTokenIssuer extends OAuth2BaseTokenIssuer implements IOAuth2OpenIDTokenIssuer {\n    protected repository: IOAuth2TokenRepository;\n\n    protected signer : IOAuth2TokenSigner;\n\n    protected identityResolver : IIdentityResolver;\n\n    protected claimsBuilder: OAuth2OpenIDClaimsBuilder;\n\n    constructor(ctx: OAuth2OpenIDTokenIssuerContext) {\n        super(ctx.options);\n\n        this.repository = ctx.repository;\n        this.signer = ctx.signer;\n\n        this.identityResolver = ctx.identityResolver;\n        this.claimsBuilder = new OAuth2OpenIDClaimsBuilder();\n    }\n\n    async issue(input: OAuth2TokenPayload = {}) : Promise<OAuth2TokenIssuerResponse> {\n        if (!input.sub_kind) {\n            throw JWTError.payloadPropertyInvalid('sub_kind');\n        }\n\n        if (!input.sub) {\n            throw JWTError.payloadPropertyInvalid('sub');\n        }\n\n        const identity = await this.identityResolver.resolve(\n            input.sub_kind,\n            input.sub,\n        );\n\n        if (!identity) {\n            throw JWTError.payloadInvalid();\n        }\n\n        return this.issueWithIdentity(input, identity);\n    }\n\n    async issueWithIdentity(\n        input: OAuth2TokenPayload,\n        identity: Identity,\n    ): Promise<OAuth2TokenIssuerResponse> {\n        const claims = this.claimsBuilder.fromIdentity(identity);\n\n        const utc = Math.floor(new Date().getTime() / 1000);\n\n        const iss = this.buildIss(input);\n\n        const data = await this.repository.insert({\n            ...input,\n            ...claims,\n            kind: OAuth2TokenKind.ID_TOKEN,\n            auth_time: utc,\n            exp: this.buildExp(input),\n            updated_at: utc,\n            ...(iss ? { iss } : {}),\n            ...(input.client_id ? { aud: input.client_id } : {}),\n        });\n\n        const token = await this.signer.sign(data);\n\n        await this.repository.saveWithSignature(data, token);\n\n        return [token, data];\n    }\n}\n"],"mappings":";;;;;AAkBA,IAAaI,0BAAb,cAA6CD,sBAAAA;CAC/BE;CAEAC;CAEAC;CAEAC;CAEV,YAAYC,KAAqC;EAC7C,MAAMA,IAAIC,OAAO;EAEjB,KAAKL,aAAaI,IAAIJ;EACtB,KAAKC,SAASG,IAAIH;EAElB,KAAKC,mBAAmBE,IAAIF;EAC5B,KAAKC,gBAAgB,IAAIN,0BAAAA;CAC7B;CAEA,MAAMS,MAAMC,QAA4B,CAAC,GAAwC;EAC7E,IAAI,CAACA,MAAMC,UACP,MAAMb,SAASc,uBAAuB,UAAA;EAG1C,IAAI,CAACF,MAAMG,KACP,MAAMf,SAASc,uBAAuB,KAAA;EAG1C,MAAME,WAAW,MAAM,KAAKT,iBAAiBU,QACzCL,MAAMC,UACND,MAAMG,GAAG;EAGb,IAAI,CAACC,UACD,MAAMhB,SAASkB,eAAc;EAGjC,OAAO,KAAKC,kBAAkBP,OAAOI,QAAAA;CACzC;CAEA,MAAMG,kBACFP,OACAI,UACkC;EAClC,MAAMI,SAAS,KAAKZ,cAAca,aAAaL,QAAAA;EAE/C,MAAMM,MAAMC,KAAKC,uBAAM,IAAIC,KAAAA,GAAOC,QAAO,IAAK,GAAA;EAE9C,MAAMC,MAAM,KAAKC,SAAShB,KAAAA;EAE1B,MAAMiB,OAAO,MAAM,KAAKxB,WAAWyB,OAAO;GACtC,GAAGlB;GACH,GAAGQ;GACHW,MAAM9B,gBAAgB+B;GACtBC,WAAWX;GACXY,KAAK,KAAKC,SAASvB,KAAAA;GACnBwB,YAAYd;GACZ,GAAIK,MAAM,EAAEA,IAAI,IAAI,CAAC;GACrB,GAAIf,MAAMyB,YAAY,EAAEC,KAAK1B,MAAMyB,UAAU,IAAI,CAAC;EACtD,CAAA;EAEA,MAAME,QAAQ,MAAM,KAAKjC,OAAOkC,KAAKX,IAAAA;EAErC,MAAM,KAAKxB,WAAWoC,kBAAkBZ,MAAMU,KAAAA;EAE9C,OAAO,CAACA,OAAOV,IAAAA;CACnB;AACJ"}

package/dist/core/oauth2/token/issuer/refresh/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["OAuth2TokenKind","OAuth2BaseTokenIssuer","OAuth2RefreshTokenIssuer","repository","signer","options","issue","input","iss","buildIss","data","insert","kind","REFRESH","exp","buildExp","token","sign","saveWithSignature"],"sources":["../../../../../../src/core/oauth2/token/issuer/refresh/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenPayload } from '@authup/specs';\nimport { OAuth2TokenKind } from '@authup/specs';\nimport type { IOAuth2TokenSigner } from '../../signer/index.ts';\nimport type { IOAuth2TokenRepository } from '../../repository/index.ts';\nimport { OAuth2BaseTokenIssuer } from '../base.ts';\nimport type { IOAuth2TokenIssuer, OAuth2TokenIssuerOptions, OAuth2TokenIssuerResponse } from '../types.ts';\n\nexport class OAuth2RefreshTokenIssuer extends OAuth2BaseTokenIssuer implements IOAuth2TokenIssuer {\n    protected repository: IOAuth2TokenRepository;\n\n    protected signer : IOAuth2TokenSigner;\n\n    constructor(\n        repository: IOAuth2TokenRepository,\n        signer: IOAuth2TokenSigner,\n        options: OAuth2TokenIssuerOptions = {},\n    ) {\n        super(options);\n\n        this.repository = repository;\n        this.signer = signer;\n    }\n\n    async issue(input: OAuth2TokenPayload = {}) : Promise<OAuth2TokenIssuerResponse> {\n        const iss = this.buildIss(input);\n\n        const data = await this.repository.insert({\n            ...input,\n            kind: OAuth2TokenKind.REFRESH,\n            exp: this.buildExp(input),\n            ...(iss ? { iss } : {}),\n        });\n\n        const token = await this.signer.sign(data);\n\n        await this.repository.saveWithSignature(data, token);\n\n        return [token, data];\n    }\n}\n"],"mappings":";;;AAcA,IAAaE,2BAAb,cAA8CD,sBAAAA;CAChCE;CAEAC;CAEV,YACID,YACAC,QACAC,UAAoC,EAAE,EACxC;AACE,QAAMA,QAAAA;AAEN,OAAKF,aAAaA;AAClB,OAAKC,SAASA;;CAGlB,MAAME,MAAMC,QAA4B,EAAE,EAAuC;EAC7E,MAAMC,MAAM,KAAKC,SAASF,MAAAA;EAE1B,MAAMG,OAAO,MAAM,KAAKP,WAAWQ,OAAO;GACtC,GAAGJ;GACHK,MAAMZ,gBAAgBa;GACtBC,KAAK,KAAKC,SAASR,MAAAA;GACnB,GAAIC,MAAM,EAAEA,KAAI,GAAI,EAAE;GAC1B,CAAA;EAEA,MAAMQ,QAAQ,MAAM,KAAKZ,OAAOa,KAAKP,KAAAA;AAErC,QAAM,KAAKP,WAAWe,kBAAkBR,MAAMM,MAAAA;AAE9C,SAAO,CAACA,OAAON,KAAK"}
+{"version":3,"file":"module.mjs","names":["OAuth2TokenKind","OAuth2BaseTokenIssuer","OAuth2RefreshTokenIssuer","repository","signer","options","issue","input","iss","buildIss","data","insert","kind","REFRESH","exp","buildExp","token","sign","saveWithSignature"],"sources":["../../../../../../src/core/oauth2/token/issuer/refresh/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenPayload } from '@authup/specs';\nimport { OAuth2TokenKind } from '@authup/specs';\nimport type { IOAuth2TokenSigner } from '../../signer/index.ts';\nimport type { IOAuth2TokenRepository } from '../../repository/index.ts';\nimport { OAuth2BaseTokenIssuer } from '../base.ts';\nimport type { IOAuth2TokenIssuer, OAuth2TokenIssuerOptions, OAuth2TokenIssuerResponse } from '../types.ts';\n\nexport class OAuth2RefreshTokenIssuer extends OAuth2BaseTokenIssuer implements IOAuth2TokenIssuer {\n    protected repository: IOAuth2TokenRepository;\n\n    protected signer : IOAuth2TokenSigner;\n\n    constructor(\n        repository: IOAuth2TokenRepository,\n        signer: IOAuth2TokenSigner,\n        options: OAuth2TokenIssuerOptions = {},\n    ) {\n        super(options);\n\n        this.repository = repository;\n        this.signer = signer;\n    }\n\n    async issue(input: OAuth2TokenPayload = {}) : Promise<OAuth2TokenIssuerResponse> {\n        const iss = this.buildIss(input);\n\n        const data = await this.repository.insert({\n            ...input,\n            kind: OAuth2TokenKind.REFRESH,\n            exp: this.buildExp(input),\n            ...(iss ? { iss } : {}),\n        });\n\n        const token = await this.signer.sign(data);\n\n        await this.repository.saveWithSignature(data, token);\n\n        return [token, data];\n    }\n}\n"],"mappings":";;;AAcA,IAAaE,2BAAb,cAA8CD,sBAAAA;CAChCE;CAEAC;CAEV,YACID,YACAC,QACAC,UAAoC,CAAC,GACvC;EACE,MAAMA,OAAAA;EAEN,KAAKF,aAAaA;EAClB,KAAKC,SAASA;CAClB;CAEA,MAAME,MAAMC,QAA4B,CAAC,GAAwC;EAC7E,MAAMC,MAAM,KAAKC,SAASF,KAAAA;EAE1B,MAAMG,OAAO,MAAM,KAAKP,WAAWQ,OAAO;GACtC,GAAGJ;GACHK,MAAMZ,gBAAgBa;GACtBC,KAAK,KAAKC,SAASR,KAAAA;GACnB,GAAIC,MAAM,EAAEA,IAAI,IAAI,CAAC;EACzB,CAAA;EAEA,MAAMQ,QAAQ,MAAM,KAAKZ,OAAOa,KAAKP,IAAAA;EAErC,MAAM,KAAKP,WAAWe,kBAAkBR,MAAMM,KAAAA;EAE9C,OAAO,CAACA,OAAON,IAAAA;CACnB;AACJ"}

package/dist/core/oauth2/token/revoker/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["JWTError","OAuth2TokenRevoker","repository","revoke","input","jti","payloadPropertyInvalid","removeById"],"sources":["../../../../../src/core/oauth2/token/revoker/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenPayload } from '@authup/specs';\nimport { JWTError } from '@authup/specs';\nimport type { IOAuth2TokenRepository } from '../repository/index.ts';\nimport type { IOAuth2TokenRevoker } from './types.ts';\n\nexport class OAuth2TokenRevoker implements IOAuth2TokenRevoker {\n    protected repository : IOAuth2TokenRepository;\n\n    constructor(repository : IOAuth2TokenRepository) {\n        this.repository = repository;\n    }\n\n    async revoke(input: OAuth2TokenPayload) : Promise<void> {\n        if (!input.jti) {\n            throw JWTError.payloadPropertyInvalid('jti');\n        }\n\n        await this.repository.removeById(input.jti);\n    }\n}\n"],"mappings":";;AAYA,IAAaC,qBAAb,MAAaA;CACCC;CAEV,YAAYA,YAAqC;AAC7C,OAAKA,aAAaA;;CAGtB,MAAMC,OAAOC,OAA2C;AACpD,MAAI,CAACA,MAAMC,IACP,OAAML,SAASM,uBAAuB,MAAA;AAG1C,QAAM,KAAKJ,WAAWK,WAAWH,MAAMC,IAAG"}
+{"version":3,"file":"module.mjs","names":["JWTError","OAuth2TokenRevoker","repository","revoke","input","jti","payloadPropertyInvalid","removeById"],"sources":["../../../../../src/core/oauth2/token/revoker/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenPayload } from '@authup/specs';\nimport { JWTError } from '@authup/specs';\nimport type { IOAuth2TokenRepository } from '../repository/index.ts';\nimport type { IOAuth2TokenRevoker } from './types.ts';\n\nexport class OAuth2TokenRevoker implements IOAuth2TokenRevoker {\n    protected repository : IOAuth2TokenRepository;\n\n    constructor(repository : IOAuth2TokenRepository) {\n        this.repository = repository;\n    }\n\n    async revoke(input: OAuth2TokenPayload) : Promise<void> {\n        if (!input.jti) {\n            throw JWTError.payloadPropertyInvalid('jti');\n        }\n\n        await this.repository.removeById(input.jti);\n    }\n}\n"],"mappings":";;AAYA,IAAaC,qBAAb,MAAaA;CACCC;CAEV,YAAYA,YAAqC;EAC7C,KAAKA,aAAaA;CACtB;CAEA,MAAMC,OAAOC,OAA2C;EACpD,IAAI,CAACA,MAAMC,KACP,MAAML,SAASM,uBAAuB,KAAA;EAG1C,MAAM,KAAKJ,WAAWK,WAAWH,MAAMC,GAAG;CAC9C;AACJ"}

package/dist/core/oauth2/token/signer/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["signToken","JWKError","JWKType","OAuth2TokenSigner","keyRepository","sign","payload","realm_id","invalidRealm","key","findByRealmId","notFoundForRealm","realm_name","decryption_key","decryptionKeyMissing","token","type","OCT","keyId","id","EC","algorithm","signature_algorithm"],"sources":["../../../../../src/core/oauth2/token/signer/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { type TokenECAlgorithm, type TokenRSAAlgorithm, signToken } from '@authup/server-kit';\nimport type { OAuth2TokenPayload } from '@authup/specs';\nimport { JWKError, JWKType } from '@authup/specs';\nimport type { IOAuth2KeyRepository } from '../../key/index.ts';\nimport type { IOAuth2TokenSigner } from './types.ts';\n\nexport class OAuth2TokenSigner implements IOAuth2TokenSigner {\n    protected keyRepository : IOAuth2KeyRepository;\n\n    constructor(keyRepository : IOAuth2KeyRepository) {\n        this.keyRepository = keyRepository;\n    }\n\n    async sign<T extends OAuth2TokenPayload>(payload: T) : Promise<string> {\n        if (!payload.realm_id) {\n            throw JWKError.invalidRealm();\n        }\n\n        const key = await this.keyRepository.findByRealmId(payload.realm_id);\n        if (!key) {\n            throw JWKError.notFoundForRealm(payload.realm_id, payload.realm_name);\n        }\n\n        if (!key.decryption_key) {\n            throw JWKError.decryptionKeyMissing();\n        }\n\n        let token : string;\n        if (key.type === JWKType.OCT) {\n            token = await signToken(\n                payload,\n                {\n                    type: JWKType.OCT,\n                    key: key.decryption_key,\n                    keyId: key.id,\n                },\n            );\n        } else if (key.type === JWKType.EC) {\n            token = await signToken(\n                payload,\n                {\n                    type: key.type,\n                    key: key.decryption_key,\n                    algorithm: key.signature_algorithm as TokenECAlgorithm,\n                    keyId: key.id,\n                },\n            );\n        } else {\n            token = await signToken(\n                payload,\n                {\n                    type: key.type,\n                    key: key.decryption_key,\n                    algorithm: key.signature_algorithm as TokenRSAAlgorithm,\n                    keyId: key.id,\n                },\n            );\n        }\n\n        return token;\n    }\n}\n"],"mappings":";;;AAaA,IAAaG,oBAAb,MAAaA;CACCC;CAEV,YAAYA,eAAsC;AAC9C,OAAKA,gBAAgBA;;CAGzB,MAAMC,KAAmCC,SAA8B;AACnE,MAAI,CAACA,QAAQC,SACT,OAAMN,SAASO,cAAY;EAG/B,MAAMC,MAAM,MAAM,KAAKL,cAAcM,cAAcJ,QAAQC,SAAQ;AACnE,MAAI,CAACE,IACD,OAAMR,SAASU,iBAAiBL,QAAQC,UAAUD,QAAQM,WAAU;AAGxE,MAAI,CAACH,IAAII,eACL,OAAMZ,SAASa,sBAAoB;EAGvC,IAAIC;AACJ,MAAIN,IAAIO,SAASd,QAAQe,IACrBF,SAAQ,MAAMf,UACVM,SACA;GACIU,MAAMd,QAAQe;GACdR,KAAKA,IAAII;GACTK,OAAOT,IAAIU;GACf,CAAA;WAEGV,IAAIO,SAASd,QAAQkB,GAC5BL,SAAQ,MAAMf,UACVM,SACA;GACIU,MAAMP,IAAIO;GACVP,KAAKA,IAAII;GACTQ,WAAWZ,IAAIa;GACfJ,OAAOT,IAAIU;GACf,CAAA;MAGJJ,SAAQ,MAAMf,UACVM,SACA;GACIU,MAAMP,IAAIO;GACVP,KAAKA,IAAII;GACTQ,WAAWZ,IAAIa;GACfJ,OAAOT,IAAIU;GACf,CAAA;AAIR,SAAOJ"}
+{"version":3,"file":"module.mjs","names":["signToken","JWKError","JWKType","OAuth2TokenSigner","keyRepository","sign","payload","realm_id","invalidRealm","key","findByRealmId","notFoundForRealm","realm_name","decryption_key","decryptionKeyMissing","token","type","OCT","keyId","id","EC","algorithm","signature_algorithm"],"sources":["../../../../../src/core/oauth2/token/signer/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { type TokenECAlgorithm, type TokenRSAAlgorithm, signToken } from '@authup/server-kit';\nimport type { OAuth2TokenPayload } from '@authup/specs';\nimport { JWKError, JWKType } from '@authup/specs';\nimport type { IOAuth2KeyRepository } from '../../key/index.ts';\nimport type { IOAuth2TokenSigner } from './types.ts';\n\nexport class OAuth2TokenSigner implements IOAuth2TokenSigner {\n    protected keyRepository : IOAuth2KeyRepository;\n\n    constructor(keyRepository : IOAuth2KeyRepository) {\n        this.keyRepository = keyRepository;\n    }\n\n    async sign<T extends OAuth2TokenPayload>(payload: T) : Promise<string> {\n        if (!payload.realm_id) {\n            throw JWKError.invalidRealm();\n        }\n\n        const key = await this.keyRepository.findByRealmId(payload.realm_id);\n        if (!key) {\n            throw JWKError.notFoundForRealm(payload.realm_id, payload.realm_name);\n        }\n\n        if (!key.decryption_key) {\n            throw JWKError.decryptionKeyMissing();\n        }\n\n        let token : string;\n        if (key.type === JWKType.OCT) {\n            token = await signToken(\n                payload,\n                {\n                    type: JWKType.OCT,\n                    key: key.decryption_key,\n                    keyId: key.id,\n                },\n            );\n        } else if (key.type === JWKType.EC) {\n            token = await signToken(\n                payload,\n                {\n                    type: key.type,\n                    key: key.decryption_key,\n                    algorithm: key.signature_algorithm as TokenECAlgorithm,\n                    keyId: key.id,\n                },\n            );\n        } else {\n            token = await signToken(\n                payload,\n                {\n                    type: key.type,\n                    key: key.decryption_key,\n                    algorithm: key.signature_algorithm as TokenRSAAlgorithm,\n                    keyId: key.id,\n                },\n            );\n        }\n\n        return token;\n    }\n}\n"],"mappings":";;;AAaA,IAAaG,oBAAb,MAAaA;CACCC;CAEV,YAAYA,eAAsC;EAC9C,KAAKA,gBAAgBA;CACzB;CAEA,MAAMC,KAAmCC,SAA8B;EACnE,IAAI,CAACA,QAAQC,UACT,MAAMN,SAASO,aAAY;EAG/B,MAAMC,MAAM,MAAM,KAAKL,cAAcM,cAAcJ,QAAQC,QAAQ;EACnE,IAAI,CAACE,KACD,MAAMR,SAASU,iBAAiBL,QAAQC,UAAUD,QAAQM,UAAU;EAGxE,IAAI,CAACH,IAAII,gBACL,MAAMZ,SAASa,qBAAoB;EAGvC,IAAIC;EACJ,IAAIN,IAAIO,SAASd,QAAQe,KACrBF,QAAQ,MAAMf,UACVM,SACA;GACIU,MAAMd,QAAQe;GACdR,KAAKA,IAAII;GACTK,OAAOT,IAAIU;EACf,CAAA;OAED,IAAIV,IAAIO,SAASd,QAAQkB,IAC5BL,QAAQ,MAAMf,UACVM,SACA;GACIU,MAAMP,IAAIO;GACVP,KAAKA,IAAII;GACTQ,WAAWZ,IAAIa;GACfJ,OAAOT,IAAIU;EACf,CAAA;OAGJJ,QAAQ,MAAMf,UACVM,SACA;GACIU,MAAMP,IAAIO;GACVP,KAAKA,IAAII;GACTQ,WAAWZ,IAAIa;GACfJ,OAAOT,IAAIU;EACf,CAAA;EAIR,OAAOJ;CACX;AACJ"}

package/dist/core/oauth2/token/verifier/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["extractTokenHeader","verifyToken","JWKError","JWKType","JWTError","OAuth2TokenVerifier","keyRepository","tokenRepository","isInactive","id","verify","token","options","payload","findOneBySignature","jti","payloadPropertyInvalid","skipActiveCheck","notActive","header","kid","headerPropertyInvalid","key","findById","notFound","type","OCT","decryption_key","decryptionKeyMissing","EC","encryption_key","signature_algorithm","algorithms","saveWithSignature"],"sources":["../../../../../src/core/oauth2/token/verifier/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    type TokenECAlgorithm, \n    type TokenRSAAlgorithm, \n    extractTokenHeader, \n    verifyToken,\n} from '@authup/server-kit';\nimport type { OAuth2TokenPayload } from '@authup/specs';\nimport { JWKError, JWKType, JWTError } from '@authup/specs';\nimport type { IOAuth2KeyRepository } from '../../key/index.ts';\nimport type { IOAuth2TokenRepository } from '../repository/types.ts';\nimport type { IOAuth2TokenVerifier, OAuth2TokenVerifyOptions } from './types.ts';\n\nexport class OAuth2TokenVerifier implements IOAuth2TokenVerifier {\n    protected keyRepository : IOAuth2KeyRepository;\n\n    protected tokenRepository : IOAuth2TokenRepository;\n\n    constructor(\n        keyRepository : IOAuth2KeyRepository,\n        tokenRepository : IOAuth2TokenRepository,\n    ) {\n        this.keyRepository = keyRepository;\n        this.tokenRepository = tokenRepository;\n    }\n\n    async isInactive(id: string): Promise<boolean> {\n        return this.tokenRepository.isInactive(id);\n    }\n\n    async verify(token: string, options: OAuth2TokenVerifyOptions = {}) : Promise<OAuth2TokenPayload> {\n        let payload = await this.tokenRepository.findOneBySignature(token);\n        if (payload) {\n            if (!payload.jti) {\n                throw JWTError.payloadPropertyInvalid('jti');\n            }\n\n            if (!options.skipActiveCheck) {\n                const isInactive = await this.isInactive(payload.jti);\n                if (isInactive) {\n                    throw JWTError.notActive();\n                }\n            }\n\n            return payload;\n        }\n\n        const header = extractTokenHeader(token);\n        if (!header.kid) {\n            throw JWTError.headerPropertyInvalid('kid');\n        }\n\n        const key = await this.keyRepository.findById(header.kid);\n        if (!key) {\n            throw JWKError.notFound(header.kid);\n        }\n\n        switch (key.type) {\n            case JWKType.OCT: {\n                if (!key.decryption_key) {\n                    throw JWKError.decryptionKeyMissing();\n                }\n\n                payload = await verifyToken(\n                    token,\n                    {\n                        type: JWKType.OCT,\n                        key: key.decryption_key,\n                    },\n                );\n                break;\n            }\n            case JWKType.EC: {\n                if (!key.encryption_key) {\n                    throw JWKError.decryptionKeyMissing();\n                }\n\n                payload = await verifyToken(\n                    token,\n                    {\n                        type: key.type,\n                        key: key.encryption_key,\n                        ...(\n                            key.signature_algorithm ?\n                                { algorithms: [key.signature_algorithm] } :\n                                []\n                        ) as TokenECAlgorithm[],\n                    },\n                );\n                break;\n            }\n            default: {\n                if (!key.encryption_key) {\n                    throw JWKError.decryptionKeyMissing();\n                }\n\n                payload = await verifyToken(\n                    token,\n                    {\n                        type: key.type,\n                        key: key.encryption_key,\n                        ...(\n                            key.signature_algorithm ?\n                                { algorithms: [key.signature_algorithm] } :\n                                []\n                        ) as TokenRSAAlgorithm[],\n                    },\n                );\n            }\n        }\n\n        if (!payload.jti) {\n            throw JWTError.payloadPropertyInvalid('jti');\n        }\n\n        await this.tokenRepository.saveWithSignature(payload, token);\n\n        if (!options.skipActiveCheck) {\n            const isInactive = await this.isInactive(payload.jti);\n            if (isInactive) {\n                throw JWTError.notActive();\n            }\n        }\n\n        return payload;\n    }\n}\n"],"mappings":";;;AAmBA,IAAaK,sBAAb,MAAaA;CACCC;CAEAC;CAEV,YACID,eACAC,iBACF;AACE,OAAKD,gBAAgBA;AACrB,OAAKC,kBAAkBA;;CAG3B,MAAMC,WAAWC,IAA8B;AAC3C,SAAO,KAAKF,gBAAgBC,WAAWC,GAAAA;;CAG3C,MAAMC,OAAOC,OAAeC,UAAoC,EAAE,EAAgC;EAC9F,IAAIC,UAAU,MAAM,KAAKN,gBAAgBO,mBAAmBH,MAAAA;AAC5D,MAAIE,SAAS;AACT,OAAI,CAACA,QAAQE,IACT,OAAMX,SAASY,uBAAuB,MAAA;AAG1C,OAAI,CAACJ,QAAQK;QAELT,MADqB,KAAKA,WAAWK,QAAQE,IAAG,CAEhD,OAAMX,SAASc,WAAS;;AAIhC,UAAOL;;EAGX,MAAMM,SAASnB,mBAAmBW,MAAAA;AAClC,MAAI,CAACQ,OAAOC,IACR,OAAMhB,SAASiB,sBAAsB,MAAA;EAGzC,MAAMC,MAAM,MAAM,KAAKhB,cAAciB,SAASJ,OAAOC,IAAG;AACxD,MAAI,CAACE,IACD,OAAMpB,SAASsB,SAASL,OAAOC,IAAG;AAGtC,UAAQE,IAAIG,MAAZ;GACI,KAAKtB,QAAQuB;AACT,QAAI,CAACJ,IAAIK,eACL,OAAMzB,SAAS0B,sBAAoB;AAGvCf,cAAU,MAAMZ,YACZU,OACA;KACIc,MAAMtB,QAAQuB;KACdJ,KAAKA,IAAIK;KACb,CAAA;AAEJ;GAEJ,KAAKxB,QAAQ0B;AACT,QAAI,CAACP,IAAIQ,eACL,OAAM5B,SAAS0B,sBAAoB;AAGvCf,cAAU,MAAMZ,YACZU,OACA;KACIc,MAAMH,IAAIG;KACVH,KAAKA,IAAIQ;KACT,GACIR,IAAIS,sBACA,EAAEC,YAAY,CAACV,IAAIS,oBAAoB,EAAC,GACxC,EAAE;KAEd,CAAA;AAEJ;GAEJ;AACI,QAAI,CAACT,IAAIQ,eACL,OAAM5B,SAAS0B,sBAAoB;AAGvCf,cAAU,MAAMZ,YACZU,OACA;KACIc,MAAMH,IAAIG;KACVH,KAAKA,IAAIQ;KACT,GACIR,IAAIS,sBACA,EAAEC,YAAY,CAACV,IAAIS,oBAAoB,EAAC,GACxC,EAAE;KAEd,CAAA;;AAKZ,MAAI,CAAClB,QAAQE,IACT,OAAMX,SAASY,uBAAuB,MAAA;AAG1C,QAAM,KAAKT,gBAAgB0B,kBAAkBpB,SAASF,MAAAA;AAEtD,MAAI,CAACC,QAAQK;OAELT,MADqB,KAAKA,WAAWK,QAAQE,IAAG,CAEhD,OAAMX,SAASc,WAAS;;AAIhC,SAAOL"}
+{"version":3,"file":"module.mjs","names":["extractTokenHeader","verifyToken","JWKError","JWKType","JWTError","OAuth2TokenVerifier","keyRepository","tokenRepository","isInactive","id","verify","token","options","payload","findOneBySignature","jti","payloadPropertyInvalid","skipActiveCheck","notActive","header","kid","headerPropertyInvalid","key","findById","notFound","type","OCT","decryption_key","decryptionKeyMissing","EC","encryption_key","signature_algorithm","algorithms","saveWithSignature"],"sources":["../../../../../src/core/oauth2/token/verifier/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    type TokenECAlgorithm, \n    type TokenRSAAlgorithm, \n    extractTokenHeader, \n    verifyToken,\n} from '@authup/server-kit';\nimport type { OAuth2TokenPayload } from '@authup/specs';\nimport { JWKError, JWKType, JWTError } from '@authup/specs';\nimport type { IOAuth2KeyRepository } from '../../key/index.ts';\nimport type { IOAuth2TokenRepository } from '../repository/types.ts';\nimport type { IOAuth2TokenVerifier, OAuth2TokenVerifyOptions } from './types.ts';\n\nexport class OAuth2TokenVerifier implements IOAuth2TokenVerifier {\n    protected keyRepository : IOAuth2KeyRepository;\n\n    protected tokenRepository : IOAuth2TokenRepository;\n\n    constructor(\n        keyRepository : IOAuth2KeyRepository,\n        tokenRepository : IOAuth2TokenRepository,\n    ) {\n        this.keyRepository = keyRepository;\n        this.tokenRepository = tokenRepository;\n    }\n\n    async isInactive(id: string): Promise<boolean> {\n        return this.tokenRepository.isInactive(id);\n    }\n\n    async verify(token: string, options: OAuth2TokenVerifyOptions = {}) : Promise<OAuth2TokenPayload> {\n        let payload = await this.tokenRepository.findOneBySignature(token);\n        if (payload) {\n            if (!payload.jti) {\n                throw JWTError.payloadPropertyInvalid('jti');\n            }\n\n            if (!options.skipActiveCheck) {\n                const isInactive = await this.isInactive(payload.jti);\n                if (isInactive) {\n                    throw JWTError.notActive();\n                }\n            }\n\n            return payload;\n        }\n\n        const header = extractTokenHeader(token);\n        if (!header.kid) {\n            throw JWTError.headerPropertyInvalid('kid');\n        }\n\n        const key = await this.keyRepository.findById(header.kid);\n        if (!key) {\n            throw JWKError.notFound(header.kid);\n        }\n\n        switch (key.type) {\n            case JWKType.OCT: {\n                if (!key.decryption_key) {\n                    throw JWKError.decryptionKeyMissing();\n                }\n\n                payload = await verifyToken(\n                    token,\n                    {\n                        type: JWKType.OCT,\n                        key: key.decryption_key,\n                    },\n                );\n                break;\n            }\n            case JWKType.EC: {\n                if (!key.encryption_key) {\n                    throw JWKError.decryptionKeyMissing();\n                }\n\n                payload = await verifyToken(\n                    token,\n                    {\n                        type: key.type,\n                        key: key.encryption_key,\n                        ...(\n                            key.signature_algorithm ?\n                                { algorithms: [key.signature_algorithm] } :\n                                []\n                        ) as TokenECAlgorithm[],\n                    },\n                );\n                break;\n            }\n            default: {\n                if (!key.encryption_key) {\n                    throw JWKError.decryptionKeyMissing();\n                }\n\n                payload = await verifyToken(\n                    token,\n                    {\n                        type: key.type,\n                        key: key.encryption_key,\n                        ...(\n                            key.signature_algorithm ?\n                                { algorithms: [key.signature_algorithm] } :\n                                []\n                        ) as TokenRSAAlgorithm[],\n                    },\n                );\n            }\n        }\n\n        if (!payload.jti) {\n            throw JWTError.payloadPropertyInvalid('jti');\n        }\n\n        await this.tokenRepository.saveWithSignature(payload, token);\n\n        if (!options.skipActiveCheck) {\n            const isInactive = await this.isInactive(payload.jti);\n            if (isInactive) {\n                throw JWTError.notActive();\n            }\n        }\n\n        return payload;\n    }\n}\n"],"mappings":";;;AAmBA,IAAaK,sBAAb,MAAaA;CACCC;CAEAC;CAEV,YACID,eACAC,iBACF;EACE,KAAKD,gBAAgBA;EACrB,KAAKC,kBAAkBA;CAC3B;CAEA,MAAMC,WAAWC,IAA8B;EAC3C,OAAO,KAAKF,gBAAgBC,WAAWC,EAAAA;CAC3C;CAEA,MAAMC,OAAOC,OAAeC,UAAoC,CAAC,GAAiC;EAC9F,IAAIC,UAAU,MAAM,KAAKN,gBAAgBO,mBAAmBH,KAAAA;EAC5D,IAAIE,SAAS;GACT,IAAI,CAACA,QAAQE,KACT,MAAMX,SAASY,uBAAuB,KAAA;GAG1C,IAAI,CAACJ,QAAQK;QAELT,MADqB,KAAKA,WAAWK,QAAQE,GAAG,GAEhD,MAAMX,SAASc,UAAS;GAAA;GAIhC,OAAOL;EACX;EAEA,MAAMM,SAASnB,mBAAmBW,KAAAA;EAClC,IAAI,CAACQ,OAAOC,KACR,MAAMhB,SAASiB,sBAAsB,KAAA;EAGzC,MAAMC,MAAM,MAAM,KAAKhB,cAAciB,SAASJ,OAAOC,GAAG;EACxD,IAAI,CAACE,KACD,MAAMpB,SAASsB,SAASL,OAAOC,GAAG;EAGtC,QAAQE,IAAIG,MAAZ;GACI,KAAKtB,QAAQuB;IACT,IAAI,CAACJ,IAAIK,gBACL,MAAMzB,SAAS0B,qBAAoB;IAGvCf,UAAU,MAAMZ,YACZU,OACA;KACIc,MAAMtB,QAAQuB;KACdJ,KAAKA,IAAIK;IACb,CAAA;IAEJ;GAEJ,KAAKxB,QAAQ0B;IACT,IAAI,CAACP,IAAIQ,gBACL,MAAM5B,SAAS0B,qBAAoB;IAGvCf,UAAU,MAAMZ,YACZU,OACA;KACIc,MAAMH,IAAIG;KACVH,KAAKA,IAAIQ;KACT,GACIR,IAAIS,sBACA,EAAEC,YAAY,CAACV,IAAIS,mBAAAA,EAAqB,IACxC,CAAA;IAEZ,CAAA;IAEJ;GAEJ;IACI,IAAI,CAACT,IAAIQ,gBACL,MAAM5B,SAAS0B,qBAAoB;IAGvCf,UAAU,MAAMZ,YACZU,OACA;KACIc,MAAMH,IAAIG;KACVH,KAAKA,IAAIQ;KACT,GACIR,IAAIS,sBACA,EAAEC,YAAY,CAACV,IAAIS,mBAAAA,EAAqB,IACxC,CAAA;IAEZ,CAAA;EAGZ;EAEA,IAAI,CAAClB,QAAQE,KACT,MAAMX,SAASY,uBAAuB,KAAA;EAG1C,MAAM,KAAKT,gBAAgB0B,kBAAkBpB,SAASF,KAAAA;EAEtD,IAAI,CAACC,QAAQK;OAELT,MADqB,KAAKA,WAAWK,QAAQE,GAAG,GAEhD,MAAMX,SAASc,UAAS;EAAA;EAIhC,OAAOL;CACX;AACJ"}

package/dist/core/provisioning/entities/client/relations-validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"relations-validator.mjs","names":["createValidator","Container","z","PermissionProvisioningValidator","RoleProvisioningValidator","ClientProvisioningRelationsValidator","initialize","permissionValidator","roleValidator","mount","optional","array","string"],"sources":["../../../../../src/core/provisioning/entities/client/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport { PermissionProvisioningValidator } from '../permission/index.ts';\nimport { RoleProvisioningValidator } from '../role/index.ts';\nimport type { ClientProvisioningRelations } from './types.ts';\n\nexport class ClientProvisioningRelationsValidator extends Container<ClientProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        const permissionValidator = new PermissionProvisioningValidator();\n        const roleValidator = new RoleProvisioningValidator();\n\n        this.mount('permissions.*', { optional: true }, permissionValidator);\n\n        this.mount('realmPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('roles.*', { optional: true }, roleValidator);\n\n        this.mount('realmRoles', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalRoles', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n    }\n}\n"],"mappings":";;;;;;;;AAcA,IAAaK,uCAAb,cAA0DJ,UAAAA;CAC5CK,aAAa;AACnB,QAAMA,YAAAA;EAEN,MAAMC,sBAAsB,IAAIJ,iCAAAA;EAChC,MAAMK,gBAAgB,IAAIJ,2BAAAA;AAE1B,OAAKK,MAAM,iBAAiB,EAAEC,UAAU,MAAK,EAAGH,oBAAAA;AAEhD,OAAKE,MAAM,oBAAoB,EAAEC,UAAU,MAAK,EAAGV,gBAC/CE,EAAES,MAAMT,EAAEU,QAAM,CAAA,CAAA,CAAA;AAGpB,OAAKH,MAAM,qBAAqB,EAAEC,UAAU,MAAK,EAAGV,gBAChDE,EAAES,MAAMT,EAAEU,QAAM,CAAA,CAAA,CAAA;AAGpB,OAAKH,MAAM,WAAW,EAAEC,UAAU,MAAK,EAAGF,cAAAA;AAE1C,OAAKC,MAAM,cAAc,EAAEC,UAAU,MAAK,EAAGV,gBACzCE,EAAES,MAAMT,EAAEU,QAAM,CAAA,CAAA,CAAA;AAGpB,OAAKH,MAAM,eAAe,EAAEC,UAAU,MAAK,EAAGV,gBAC1CE,EAAES,MAAMT,EAAEU,QAAM,CAAA,CAAA,CAAA"}
+{"version":3,"file":"relations-validator.mjs","names":["createValidator","Container","z","PermissionProvisioningValidator","RoleProvisioningValidator","ClientProvisioningRelationsValidator","initialize","permissionValidator","roleValidator","mount","optional","array","string"],"sources":["../../../../../src/core/provisioning/entities/client/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport { PermissionProvisioningValidator } from '../permission/index.ts';\nimport { RoleProvisioningValidator } from '../role/index.ts';\nimport type { ClientProvisioningRelations } from './types.ts';\n\nexport class ClientProvisioningRelationsValidator extends Container<ClientProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        const permissionValidator = new PermissionProvisioningValidator();\n        const roleValidator = new RoleProvisioningValidator();\n\n        this.mount('permissions.*', { optional: true }, permissionValidator);\n\n        this.mount('realmPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('roles.*', { optional: true }, roleValidator);\n\n        this.mount('realmRoles', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalRoles', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n    }\n}\n"],"mappings":";;;;;;;;AAcA,IAAaK,uCAAb,cAA0DJ,UAAAA;CAC5CK,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,sBAAsB,IAAIJ,gCAAAA;EAChC,MAAMK,gBAAgB,IAAIJ,0BAAAA;EAE1B,KAAKK,MAAM,iBAAiB,EAAEC,UAAU,KAAK,GAAGH,mBAAAA;EAEhD,KAAKE,MAAM,oBAAoB,EAAEC,UAAU,KAAK,GAAGV,gBAC/CE,EAAES,MAAMT,EAAEU,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,qBAAqB,EAAEC,UAAU,KAAK,GAAGV,gBAChDE,EAAES,MAAMT,EAAEU,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,WAAW,EAAEC,UAAU,KAAK,GAAGF,aAAAA;EAE1C,KAAKC,MAAM,cAAc,EAAEC,UAAU,KAAK,GAAGV,gBACzCE,EAAES,MAAMT,EAAEU,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,eAAe,EAAEC,UAAU,KAAK,GAAGV,gBAC1CE,EAAES,MAAMT,EAAEU,OAAM,CAAA,CAAA,CAAA;CAExB;AACJ"}

package/dist/core/provisioning/entities/client/validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validator.mjs","names":["ClientValidator","Container","ProvisioningStrategyValidator","ClientProvisioningRelationsValidator","ClientProvisioningValidator","initialize","strategyValidator","mount","optional","attributesValidator","relationsValidator"],"sources":["../../../../../src/core/provisioning/entities/client/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ClientValidator } from '@authup/core-kit';\nimport { Container } from 'validup';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\nimport { ClientProvisioningRelationsValidator } from './relations-validator.ts';\nimport type { ClientProvisioningEntity } from './types.ts';\n\nexport class ClientProvisioningValidator extends Container<ClientProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const attributesValidator = new ClientValidator();\n        this.mount('attributes', attributesValidator);\n\n        const relationsValidator = new ClientProvisioningRelationsValidator();\n        this.mount('relations', { optional: true }, relationsValidator);\n    }\n}\n"],"mappings":";;;;;;AAaA,IAAaI,8BAAb,cAAiDH,UAAAA;CACnCI,aAAa;AACnB,QAAMA,YAAAA;EAEN,MAAMC,oBAAoB,IAAIJ,+BAAAA;AAC9B,OAAKK,MAAM,YAAY,EAAEC,UAAU,MAAK,EAAGF,kBAAAA;EAE3C,MAAMG,sBAAsB,IAAIT,iBAAAA;AAChC,OAAKO,MAAM,cAAcE,oBAAAA;EAEzB,MAAMC,qBAAqB,IAAIP,sCAAAA;AAC/B,OAAKI,MAAM,aAAa,EAAEC,UAAU,MAAK,EAAGE,mBAAAA"}
+{"version":3,"file":"validator.mjs","names":["ClientValidator","Container","ProvisioningStrategyValidator","ClientProvisioningRelationsValidator","ClientProvisioningValidator","initialize","strategyValidator","mount","optional","attributesValidator","relationsValidator"],"sources":["../../../../../src/core/provisioning/entities/client/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ClientValidator } from '@authup/core-kit';\nimport { Container } from 'validup';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\nimport { ClientProvisioningRelationsValidator } from './relations-validator.ts';\nimport type { ClientProvisioningEntity } from './types.ts';\n\nexport class ClientProvisioningValidator extends Container<ClientProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const attributesValidator = new ClientValidator();\n        this.mount('attributes', attributesValidator);\n\n        const relationsValidator = new ClientProvisioningRelationsValidator();\n        this.mount('relations', { optional: true }, relationsValidator);\n    }\n}\n"],"mappings":";;;;;;AAaA,IAAaI,8BAAb,cAAiDH,UAAAA;CACnCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,oBAAoB,IAAIJ,8BAAAA;EAC9B,KAAKK,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGF,iBAAAA;EAE3C,MAAMG,sBAAsB,IAAIT,gBAAAA;EAChC,KAAKO,MAAM,cAAcE,mBAAAA;EAEzB,MAAMC,qBAAqB,IAAIP,qCAAAA;EAC/B,KAAKI,MAAM,aAAa,EAAEC,UAAU,KAAK,GAAGE,kBAAAA;CAChD;AACJ"}

package/dist/core/provisioning/entities/permission/validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validator.mjs","names":["PermissionValidator","Container","ProvisioningStrategyValidator","PermissionProvisioningValidator","initialize","strategyValidator","mount","optional","attributesValidator"],"sources":["../../../../../src/core/provisioning/entities/permission/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { PermissionValidator } from '@authup/core-kit';\nimport { Container } from 'validup';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\n\nimport type { PermissionProvisioningEntity } from './types.ts';\n\nexport class PermissionProvisioningValidator extends Container<PermissionProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const attributesValidator = new PermissionValidator();\n        this.mount('attributes', attributesValidator);\n    }\n}\n"],"mappings":";;;;;AAaA,IAAaG,kCAAb,cAAqDF,UAAAA;CACvCG,aAAa;AACnB,QAAMA,YAAAA;EAEN,MAAMC,oBAAoB,IAAIH,+BAAAA;AAC9B,OAAKI,MAAM,YAAY,EAAEC,UAAU,MAAK,EAAGF,kBAAAA;EAE3C,MAAMG,sBAAsB,IAAIR,qBAAAA;AAChC,OAAKM,MAAM,cAAcE,oBAAAA"}
+{"version":3,"file":"validator.mjs","names":["PermissionValidator","Container","ProvisioningStrategyValidator","PermissionProvisioningValidator","initialize","strategyValidator","mount","optional","attributesValidator"],"sources":["../../../../../src/core/provisioning/entities/permission/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { PermissionValidator } from '@authup/core-kit';\nimport { Container } from 'validup';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\n\nimport type { PermissionProvisioningEntity } from './types.ts';\n\nexport class PermissionProvisioningValidator extends Container<PermissionProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const attributesValidator = new PermissionValidator();\n        this.mount('attributes', attributesValidator);\n    }\n}\n"],"mappings":";;;;;AAaA,IAAaG,kCAAb,cAAqDF,UAAAA;CACvCG,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,oBAAoB,IAAIH,8BAAAA;EAC9B,KAAKI,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGF,iBAAAA;EAE3C,MAAMG,sBAAsB,IAAIR,oBAAAA;EAChC,KAAKM,MAAM,cAAcE,mBAAAA;CAC7B;AACJ"}

package/dist/core/provisioning/entities/realm/relations-validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"relations-validator.mjs","names":["buildZodIssuesForError","createValidator","Container","isValidupError","z","ClientProvisioningValidator","PermissionProvisioningValidator","RobotProvisioningValidator","RoleProvisioningValidator","ScopeProvisioningValidator","UserProvisioningValidator","RealmProvisioningRelationsValidator","initialize","clientValidator","roleValidator","permissionValidator","robotValidator","scopeValidator","userValidator","mount","optional","array","any","check","ctx","i","value","length","run","e","issues","push","code","message","path","input","undefined"],"sources":["../../../../../src/core/provisioning/entities/realm/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { buildZodIssuesForError, createValidator } from '@validup/adapter-zod';\nimport { Container, isValidupError } from 'validup';\nimport { z } from 'zod';\nimport { ClientProvisioningValidator } from '../client/index.ts';\nimport { PermissionProvisioningValidator } from '../permission/index.ts';\nimport { RobotProvisioningValidator } from '../robot/index.ts';\nimport { RoleProvisioningValidator } from '../role/index.ts';\nimport { ScopeProvisioningValidator } from '../scope/index.ts';\nimport { UserProvisioningValidator } from '../user/index.ts';\nimport type { RealmProvisioningRelations } from './types.ts';\n\nexport class RealmProvisioningRelationsValidator extends Container<RealmProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        const clientValidator = new ClientProvisioningValidator();\n        const roleValidator = new RoleProvisioningValidator();\n        const permissionValidator = new PermissionProvisioningValidator();\n        const robotValidator = new RobotProvisioningValidator();\n        const scopeValidator = new ScopeProvisioningValidator();\n        const userValidator = new UserProvisioningValidator();\n\n        this.mount('clients', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await clientValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('roles', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await roleValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push({\n                                code: 'custom',\n                                message: '',\n                                path: [],\n                                input: undefined,\n                            });\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('permissions', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await permissionValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('robots', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await robotValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('scopes', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await scopeValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('users', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await userValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAkBA,IAAaW,sCAAb,cAAyDT,UAAAA;CAC3CU,aAAa;AACnB,QAAMA,YAAAA;EAEN,MAAMC,kBAAkB,IAAIR,6BAAAA;EAC5B,MAAMS,gBAAgB,IAAIN,2BAAAA;EAC1B,MAAMO,sBAAsB,IAAIT,iCAAAA;EAChC,MAAMU,iBAAiB,IAAIT,4BAAAA;EAC3B,MAAMU,iBAAiB,IAAIR,4BAAAA;EAC3B,MAAMS,gBAAgB,IAAIR,2BAAAA;AAE1B,OAAKS,MAAM,WAAW,EAAEC,UAAU,MAAK,EAAGnB,gBACtCG,EACKiB,MAAMjB,EAAEkB,KAAG,CAAA,CACXC,MAAM,OAAOC,QAAAA;AACV,OAAI;AACA,SAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,IAClC,OAAMZ,gBAAgBe,IAAIJ,IAAIE,MAAMD,GAAE;YAErCI,GAAG;AACR,QAAI1B,eAAe0B,EAAAA,CACfL,KAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,EAAAA,CAAAA;;IAGtD,CAAA,CAAA;AAGR,OAAKV,MAAM,SAAS,EAAEC,UAAU,MAAK,EAAGnB,gBACpCG,EACKiB,MAAMjB,EAAEkB,KAAG,CAAA,CACXC,MAAM,OAAOC,QAAAA;AACV,OAAI;AACA,SAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,IAClC,OAAMX,cAAcc,IAAIJ,IAAIE,MAAMD,GAAE;YAEnCI,GAAG;AACR,QAAI1B,eAAe0B,EAAAA,EAAI;AACnBL,SAAIM,OAAOC,KAAK;MACZC,MAAM;MACNC,SAAS;MACTC,MAAM,EAAE;MACRC,OAAOC,KAAAA;MACX,CAAA;AACAZ,SAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,EAAAA,CAAAA;;;IAGtD,CAAA,CAAA;AAGR,OAAKV,MAAM,eAAe,EAAEC,UAAU,MAAK,EAAGnB,gBAC1CG,EACKiB,MAAMjB,EAAEkB,KAAG,CAAA,CACXC,MAAM,OAAOC,QAAAA;AACV,OAAI;AACA,SAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,IAClC,OAAMV,oBAAoBa,IAAIJ,IAAIE,MAAMD,GAAE;YAEzCI,GAAG;AACR,QAAI1B,eAAe0B,EAAAA,CACfL,KAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,EAAAA,CAAAA;;IAGtD,CAAA,CAAA;AAGR,OAAKV,MAAM,UAAU,EAAEC,UAAU,MAAK,EAAGnB,gBACrCG,EACKiB,MAAMjB,EAAEkB,KAAG,CAAA,CACXC,MAAM,OAAOC,QAAAA;AACV,OAAI;AACA,SAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,IAClC,OAAMT,eAAeY,IAAIJ,IAAIE,MAAMD,GAAE;YAEpCI,GAAG;AACR,QAAI1B,eAAe0B,EAAAA,CACfL,KAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,EAAAA,CAAAA;;IAGtD,CAAA,CAAA;AAGR,OAAKV,MAAM,UAAU,EAAEC,UAAU,MAAK,EAAGnB,gBACrCG,EACKiB,MAAMjB,EAAEkB,KAAG,CAAA,CACXC,MAAM,OAAOC,QAAAA;AACV,OAAI;AACA,SAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,IAClC,OAAMR,eAAeW,IAAIJ,IAAIE,MAAMD,GAAE;YAEpCI,GAAG;AACR,QAAI1B,eAAe0B,EAAAA,CACfL,KAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,EAAAA,CAAAA;;IAGtD,CAAA,CAAA;AAGR,OAAKV,MAAM,SAAS,EAAEC,UAAU,MAAK,EAAGnB,gBACpCG,EACKiB,MAAMjB,EAAEkB,KAAG,CAAA,CACXC,MAAM,OAAOC,QAAAA;AACV,OAAI;AACA,SAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,IAClC,OAAMP,cAAcU,IAAIJ,IAAIE,MAAMD,GAAE;YAEnCI,GAAG;AACR,QAAI1B,eAAe0B,EAAAA,CACfL,KAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,EAAAA,CAAAA;;IAGtD,CAAA,CAAA"}
+{"version":3,"file":"relations-validator.mjs","names":["buildZodIssuesForError","createValidator","Container","isValidupError","z","ClientProvisioningValidator","PermissionProvisioningValidator","RobotProvisioningValidator","RoleProvisioningValidator","ScopeProvisioningValidator","UserProvisioningValidator","RealmProvisioningRelationsValidator","initialize","clientValidator","roleValidator","permissionValidator","robotValidator","scopeValidator","userValidator","mount","optional","array","any","check","ctx","i","value","length","run","e","issues","push","code","message","path","input","undefined"],"sources":["../../../../../src/core/provisioning/entities/realm/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { buildZodIssuesForError, createValidator } from '@validup/adapter-zod';\nimport { Container, isValidupError } from 'validup';\nimport { z } from 'zod';\nimport { ClientProvisioningValidator } from '../client/index.ts';\nimport { PermissionProvisioningValidator } from '../permission/index.ts';\nimport { RobotProvisioningValidator } from '../robot/index.ts';\nimport { RoleProvisioningValidator } from '../role/index.ts';\nimport { ScopeProvisioningValidator } from '../scope/index.ts';\nimport { UserProvisioningValidator } from '../user/index.ts';\nimport type { RealmProvisioningRelations } from './types.ts';\n\nexport class RealmProvisioningRelationsValidator extends Container<RealmProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        const clientValidator = new ClientProvisioningValidator();\n        const roleValidator = new RoleProvisioningValidator();\n        const permissionValidator = new PermissionProvisioningValidator();\n        const robotValidator = new RobotProvisioningValidator();\n        const scopeValidator = new ScopeProvisioningValidator();\n        const userValidator = new UserProvisioningValidator();\n\n        this.mount('clients', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await clientValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('roles', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await roleValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push({\n                                code: 'custom',\n                                message: '',\n                                path: [],\n                                input: undefined,\n                            });\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('permissions', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await permissionValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('robots', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await robotValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('scopes', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await scopeValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('users', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await userValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAkBA,IAAaW,sCAAb,cAAyDT,UAAAA;CAC3CU,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,kBAAkB,IAAIR,4BAAAA;EAC5B,MAAMS,gBAAgB,IAAIN,0BAAAA;EAC1B,MAAMO,sBAAsB,IAAIT,gCAAAA;EAChC,MAAMU,iBAAiB,IAAIT,2BAAAA;EAC3B,MAAMU,iBAAiB,IAAIR,2BAAAA;EAC3B,MAAMS,gBAAgB,IAAIR,0BAAAA;EAE1B,KAAKS,MAAM,WAAW,EAAEC,UAAU,KAAK,GAAGnB,gBACtCG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,EACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMZ,gBAAgBe,IAAIJ,IAAIE,MAAMD,EAAE;GAE9C,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GACfL,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;EAGR,KAAKV,MAAM,SAAS,EAAEC,UAAU,KAAK,GAAGnB,gBACpCG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,EACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMX,cAAcc,IAAIJ,IAAIE,MAAMD,EAAE;GAE5C,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GAAI;KACnBL,IAAIM,OAAOC,KAAK;MACZC,MAAM;MACNC,SAAS;MACTC,MAAM,CAAA;MACNC,OAAOC,KAAAA;KACX,CAAA;KACAZ,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;IAC9C;GACJ;EACJ,CAAA,CAAA,CAAA;EAGR,KAAKV,MAAM,eAAe,EAAEC,UAAU,KAAK,GAAGnB,gBAC1CG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,EACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMV,oBAAoBa,IAAIJ,IAAIE,MAAMD,EAAE;GAElD,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GACfL,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;EAGR,KAAKV,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGnB,gBACrCG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,EACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMT,eAAeY,IAAIJ,IAAIE,MAAMD,EAAE;GAE7C,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GACfL,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;EAGR,KAAKV,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGnB,gBACrCG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,EACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMR,eAAeW,IAAIJ,IAAIE,MAAMD,EAAE;GAE7C,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GACfL,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;EAGR,KAAKV,MAAM,SAAS,EAAEC,UAAU,KAAK,GAAGnB,gBACpCG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,EACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMP,cAAcU,IAAIJ,IAAIE,MAAMD,EAAE;GAE5C,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GACfL,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;CAEZ;AACJ"}

package/dist/core/provisioning/entities/realm/validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validator.mjs","names":["RealmValidator","Container","ProvisioningStrategyValidator","RealmProvisioningRelationsValidator","RealmProvisioningValidator","initialize","strategyValidator","mount","optional","attributesValidator","relationsValidator"],"sources":["../../../../../src/core/provisioning/entities/realm/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { RealmValidator } from '@authup/core-kit';\nimport { Container } from 'validup';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\nimport { RealmProvisioningRelationsValidator } from './relations-validator.ts';\n\nimport type { RealmProvisioningEntity } from './types.ts';\n\nexport class RealmProvisioningValidator extends Container<RealmProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const attributesValidator = new RealmValidator();\n        this.mount('attributes', attributesValidator);\n\n        const relationsValidator = new RealmProvisioningRelationsValidator();\n        this.mount('relations', { optional: true }, relationsValidator);\n    }\n}\n"],"mappings":";;;;;;AAcA,IAAaI,6BAAb,cAAgDH,UAAAA;CAClCI,aAAa;AACnB,QAAMA,YAAAA;EAEN,MAAMC,oBAAoB,IAAIJ,+BAAAA;AAC9B,OAAKK,MAAM,YAAY,EAAEC,UAAU,MAAK,EAAGF,kBAAAA;EAE3C,MAAMG,sBAAsB,IAAIT,gBAAAA;AAChC,OAAKO,MAAM,cAAcE,oBAAAA;EAEzB,MAAMC,qBAAqB,IAAIP,qCAAAA;AAC/B,OAAKI,MAAM,aAAa,EAAEC,UAAU,MAAK,EAAGE,mBAAAA"}
+{"version":3,"file":"validator.mjs","names":["RealmValidator","Container","ProvisioningStrategyValidator","RealmProvisioningRelationsValidator","RealmProvisioningValidator","initialize","strategyValidator","mount","optional","attributesValidator","relationsValidator"],"sources":["../../../../../src/core/provisioning/entities/realm/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { RealmValidator } from '@authup/core-kit';\nimport { Container } from 'validup';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\nimport { RealmProvisioningRelationsValidator } from './relations-validator.ts';\n\nimport type { RealmProvisioningEntity } from './types.ts';\n\nexport class RealmProvisioningValidator extends Container<RealmProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const attributesValidator = new RealmValidator();\n        this.mount('attributes', attributesValidator);\n\n        const relationsValidator = new RealmProvisioningRelationsValidator();\n        this.mount('relations', { optional: true }, relationsValidator);\n    }\n}\n"],"mappings":";;;;;;AAcA,IAAaI,6BAAb,cAAgDH,UAAAA;CAClCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,oBAAoB,IAAIJ,8BAAAA;EAC9B,KAAKK,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGF,iBAAAA;EAE3C,MAAMG,sBAAsB,IAAIT,eAAAA;EAChC,KAAKO,MAAM,cAAcE,mBAAAA;EAEzB,MAAMC,qBAAqB,IAAIP,oCAAAA;EAC/B,KAAKI,MAAM,aAAa,EAAEC,UAAU,KAAK,GAAGE,kBAAAA;CAChD;AACJ"}

package/dist/core/provisioning/entities/robot/relations-validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"relations-validator.mjs","names":["createValidator","Container","z","RobotProvisioningRelationsValidator","initialize","mount","optional","array","string"],"sources":["../../../../../src/core/provisioning/entities/robot/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { RobotProvisioningRelations } from './types.ts';\n\nexport class RobotProvisioningRelationsValidator extends Container<RobotProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount('realmPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('realmRoles', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalRoles', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n    }\n}\n"],"mappings":";;;;AAYA,IAAaG,sCAAb,cAAyDF,UAAAA;CAC3CG,aAAa;AACnB,QAAMA,YAAAA;AAEN,OAAKC,MAAM,oBAAoB,EAAEC,UAAU,MAAK,EAAGN,gBAC/CE,EAAEK,MAAML,EAAEM,QAAM,CAAA,CAAA,CAAA;AAGpB,OAAKH,MAAM,qBAAqB,EAAEC,UAAU,MAAK,EAAGN,gBAChDE,EAAEK,MAAML,EAAEM,QAAM,CAAA,CAAA,CAAA;AAGpB,OAAKH,MAAM,cAAc,EAAEC,UAAU,MAAK,EAAGN,gBACzCE,EAAEK,MAAML,EAAEM,QAAM,CAAA,CAAA,CAAA;AAGpB,OAAKH,MAAM,eAAe,EAAEC,UAAU,MAAK,EAAGN,gBAC1CE,EAAEK,MAAML,EAAEM,QAAM,CAAA,CAAA,CAAA"}
+{"version":3,"file":"relations-validator.mjs","names":["createValidator","Container","z","RobotProvisioningRelationsValidator","initialize","mount","optional","array","string"],"sources":["../../../../../src/core/provisioning/entities/robot/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { RobotProvisioningRelations } from './types.ts';\n\nexport class RobotProvisioningRelationsValidator extends Container<RobotProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount('realmPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('realmRoles', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalRoles', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n    }\n}\n"],"mappings":";;;;AAYA,IAAaG,sCAAb,cAAyDF,UAAAA;CAC3CG,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MAAM,oBAAoB,EAAEC,UAAU,KAAK,GAAGN,gBAC/CE,EAAEK,MAAML,EAAEM,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,qBAAqB,EAAEC,UAAU,KAAK,GAAGN,gBAChDE,EAAEK,MAAML,EAAEM,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,cAAc,EAAEC,UAAU,KAAK,GAAGN,gBACzCE,EAAEK,MAAML,EAAEM,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,eAAe,EAAEC,UAAU,KAAK,GAAGN,gBAC1CE,EAAEK,MAAML,EAAEM,OAAM,CAAA,CAAA,CAAA;CAExB;AACJ"}

package/dist/core/provisioning/entities/robot/validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validator.mjs","names":["RobotValidator","Container","ProvisioningStrategyValidator","RobotProvisioningRelationsValidator","RobotProvisioningValidator","initialize","strategyValidator","mount","optional","attributesValidator","relationsValidator"],"sources":["../../../../../src/core/provisioning/entities/robot/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { RobotValidator } from '@authup/core-kit';\nimport { Container } from 'validup';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\nimport { RobotProvisioningRelationsValidator } from './relations-validator.ts';\nimport type { RobotProvisioningEntity } from './types.ts';\n\nexport class RobotProvisioningValidator extends Container<RobotProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const attributesValidator = new RobotValidator();\n        this.mount('attributes', attributesValidator);\n\n        const relationsValidator = new RobotProvisioningRelationsValidator();\n        this.mount('relations', { optional: true }, relationsValidator);\n    }\n}\n"],"mappings":";;;;;;AAaA,IAAaI,6BAAb,cAAgDH,UAAAA;CAClCI,aAAa;AACnB,QAAMA,YAAAA;EAEN,MAAMC,oBAAoB,IAAIJ,+BAAAA;AAC9B,OAAKK,MAAM,YAAY,EAAEC,UAAU,MAAK,EAAGF,kBAAAA;EAE3C,MAAMG,sBAAsB,IAAIT,gBAAAA;AAChC,OAAKO,MAAM,cAAcE,oBAAAA;EAEzB,MAAMC,qBAAqB,IAAIP,qCAAAA;AAC/B,OAAKI,MAAM,aAAa,EAAEC,UAAU,MAAK,EAAGE,mBAAAA"}
+{"version":3,"file":"validator.mjs","names":["RobotValidator","Container","ProvisioningStrategyValidator","RobotProvisioningRelationsValidator","RobotProvisioningValidator","initialize","strategyValidator","mount","optional","attributesValidator","relationsValidator"],"sources":["../../../../../src/core/provisioning/entities/robot/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { RobotValidator } from '@authup/core-kit';\nimport { Container } from 'validup';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\nimport { RobotProvisioningRelationsValidator } from './relations-validator.ts';\nimport type { RobotProvisioningEntity } from './types.ts';\n\nexport class RobotProvisioningValidator extends Container<RobotProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const attributesValidator = new RobotValidator();\n        this.mount('attributes', attributesValidator);\n\n        const relationsValidator = new RobotProvisioningRelationsValidator();\n        this.mount('relations', { optional: true }, relationsValidator);\n    }\n}\n"],"mappings":";;;;;;AAaA,IAAaI,6BAAb,cAAgDH,UAAAA;CAClCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,oBAAoB,IAAIJ,8BAAAA;EAC9B,KAAKK,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGF,iBAAAA;EAE3C,MAAMG,sBAAsB,IAAIT,eAAAA;EAChC,KAAKO,MAAM,cAAcE,mBAAAA;EAEzB,MAAMC,qBAAqB,IAAIP,oCAAAA;EAC/B,KAAKI,MAAM,aAAa,EAAEC,UAAU,KAAK,GAAGE,kBAAAA;CAChD;AACJ"}

package/dist/core/provisioning/entities/role/relations-validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"relations-validator.mjs","names":["createValidator","Container","z","RoleProvisioningRelationsValidator","initialize","mount","optional","array","string"],"sources":["../../../../../src/core/provisioning/entities/role/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { RoleProvisioningRelations } from './types.ts';\n\nexport class RoleProvisioningRelationsValidator extends Container<RoleProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount('realmPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n    }\n}\n"],"mappings":";;;;AAYA,IAAaG,qCAAb,cAAwDF,UAAAA;CAC1CG,aAAa;AACnB,QAAMA,YAAAA;AAEN,OAAKC,MAAM,oBAAoB,EAAEC,UAAU,MAAK,EAAGN,gBAC/CE,EAAEK,MAAML,EAAEM,QAAM,CAAA,CAAA,CAAA;AAGpB,OAAKH,MAAM,qBAAqB,EAAEC,UAAU,MAAK,EAAGN,gBAChDE,EAAEK,MAAML,EAAEM,QAAM,CAAA,CAAA,CAAA"}
+{"version":3,"file":"relations-validator.mjs","names":["createValidator","Container","z","RoleProvisioningRelationsValidator","initialize","mount","optional","array","string"],"sources":["../../../../../src/core/provisioning/entities/role/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { RoleProvisioningRelations } from './types.ts';\n\nexport class RoleProvisioningRelationsValidator extends Container<RoleProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount('realmPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n    }\n}\n"],"mappings":";;;;AAYA,IAAaG,qCAAb,cAAwDF,UAAAA;CAC1CG,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MAAM,oBAAoB,EAAEC,UAAU,KAAK,GAAGN,gBAC/CE,EAAEK,MAAML,EAAEM,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,qBAAqB,EAAEC,UAAU,KAAK,GAAGN,gBAChDE,EAAEK,MAAML,EAAEM,OAAM,CAAA,CAAA,CAAA;CAExB;AACJ"}

package/dist/core/provisioning/entities/role/validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validator.mjs","names":["RoleValidator","Container","ProvisioningStrategyValidator","RoleProvisioningRelationsValidator","RoleProvisioningValidator","initialize","strategyValidator","mount","optional","dataValidator","relationsValidator"],"sources":["../../../../../src/core/provisioning/entities/role/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { RoleValidator } from '@authup/core-kit';\nimport { Container } from 'validup';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\nimport { RoleProvisioningRelationsValidator } from './relations-validator.ts';\n\nimport type { RoleProvisioningEntity } from './types.ts';\n\nexport class RoleProvisioningValidator extends Container<RoleProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const dataValidator = new RoleValidator();\n        this.mount('attributes', dataValidator);\n\n        const relationsValidator = new RoleProvisioningRelationsValidator();\n        this.mount('relations', { optional: true }, relationsValidator);\n    }\n}\n"],"mappings":";;;;;;AAcA,IAAaI,4BAAb,cAA+CH,UAAAA;CACjCI,aAAa;AACnB,QAAMA,YAAAA;EAEN,MAAMC,oBAAoB,IAAIJ,+BAAAA;AAC9B,OAAKK,MAAM,YAAY,EAAEC,UAAU,MAAK,EAAGF,kBAAAA;EAE3C,MAAMG,gBAAgB,IAAIT,eAAAA;AAC1B,OAAKO,MAAM,cAAcE,cAAAA;EAEzB,MAAMC,qBAAqB,IAAIP,oCAAAA;AAC/B,OAAKI,MAAM,aAAa,EAAEC,UAAU,MAAK,EAAGE,mBAAAA"}
+{"version":3,"file":"validator.mjs","names":["RoleValidator","Container","ProvisioningStrategyValidator","RoleProvisioningRelationsValidator","RoleProvisioningValidator","initialize","strategyValidator","mount","optional","dataValidator","relationsValidator"],"sources":["../../../../../src/core/provisioning/entities/role/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { RoleValidator } from '@authup/core-kit';\nimport { Container } from 'validup';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\nimport { RoleProvisioningRelationsValidator } from './relations-validator.ts';\n\nimport type { RoleProvisioningEntity } from './types.ts';\n\nexport class RoleProvisioningValidator extends Container<RoleProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const dataValidator = new RoleValidator();\n        this.mount('attributes', dataValidator);\n\n        const relationsValidator = new RoleProvisioningRelationsValidator();\n        this.mount('relations', { optional: true }, relationsValidator);\n    }\n}\n"],"mappings":";;;;;;AAcA,IAAaI,4BAAb,cAA+CH,UAAAA;CACjCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,oBAAoB,IAAIJ,8BAAAA;EAC9B,KAAKK,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGF,iBAAAA;EAE3C,MAAMG,gBAAgB,IAAIT,cAAAA;EAC1B,KAAKO,MAAM,cAAcE,aAAAA;EAEzB,MAAMC,qBAAqB,IAAIP,mCAAAA;EAC/B,KAAKI,MAAM,aAAa,EAAEC,UAAU,KAAK,GAAGE,kBAAAA;CAChD;AACJ"}

package/dist/core/provisioning/entities/root/validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validator.mjs","names":["buildZodIssuesForError","createValidator","Container","isValidupError","z","ProvisioningStrategyValidator","PermissionProvisioningValidator","RealmProvisioningValidator","RoleProvisioningValidator","ScopeProvisioningValidator","RootProvisioningValidator","initialize","strategyValidator","mount","optional","realmValidator","array","any","check","ctx","i","value","length","run","roleValidator","e","issues","push","scopeValidator","permissionValidator"],"sources":["../../../../../src/core/provisioning/entities/root/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { buildZodIssuesForError, createValidator } from '@validup/adapter-zod';\nimport { Container, isValidupError } from 'validup';\nimport { z } from 'zod';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\nimport { PermissionProvisioningValidator } from '../permission/index.ts';\nimport { RealmProvisioningValidator } from '../realm/index.ts';\nimport { RoleProvisioningValidator } from '../role/index.ts';\nimport { ScopeProvisioningValidator } from '../scope/index.ts';\n\nimport type { RootProvisioningEntity } from './types.ts';\n\nexport class RootProvisioningValidator extends Container<RootProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const realmValidator = new RealmProvisioningValidator();\n        this.mount('realms', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    for (let i = 0; i < ctx.value.length; i++) {\n                        await realmValidator.run(ctx.value[i]);\n                    }\n                }),\n        ));\n\n        const roleValidator = new RoleProvisioningValidator();\n        this.mount('roles', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await roleValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        const scopeValidator = new ScopeProvisioningValidator();\n        this.mount('scopes', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await scopeValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        const permissionValidator = new PermissionProvisioningValidator();\n        this.mount('permissions', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await permissionValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;AAkBA,IAAaU,4BAAb,cAA+CR,UAAAA;CACjCS,aAAa;AACnB,QAAMA,YAAAA;EAEN,MAAMC,oBAAoB,IAAIP,+BAAAA;AAC9B,OAAKQ,MAAM,YAAY,EAAEC,UAAU,MAAK,EAAGF,kBAAAA;EAE3C,MAAMG,iBAAiB,IAAIR,4BAAAA;AAC3B,OAAKM,MAAM,UAAU,EAAEC,UAAU,MAAK,EAAGb,gBACrCG,EACKY,MAAMZ,EAAEa,KAAG,CAAA,CACXC,MAAM,OAAOC,QAAAA;AACV,QAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,IAClC,OAAML,eAAeQ,IAAIJ,IAAIE,MAAMD,GAAE;IAE7C,CAAA,CAAA;EAGR,MAAMI,gBAAgB,IAAIhB,2BAAAA;AAC1B,OAAKK,MAAM,SAAS,EAAEC,UAAU,MAAK,EAAGb,gBACpCG,EACKY,MAAMZ,EAAEa,KAAG,CAAA,CACXC,MAAM,OAAOC,QAAAA;AACV,OAAI;AACA,SAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,IAClC,OAAMI,cAAcD,IAAIJ,IAAIE,MAAMD,GAAE;YAEnCK,GAAG;AACR,QAAItB,eAAesB,EAAAA,CACfN,KAAIO,OAAOC,KAAI,GAAI3B,uBAAuByB,EAAAA,CAAAA;;IAGtD,CAAA,CAAA;EAGR,MAAMG,iBAAiB,IAAInB,4BAAAA;AAC3B,OAAKI,MAAM,UAAU,EAAEC,UAAU,MAAK,EAAGb,gBACrCG,EACKY,MAAMZ,EAAEa,KAAG,CAAA,CACXC,MAAM,OAAOC,QAAAA;AACV,OAAI;AACA,SAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,IAClC,OAAMQ,eAAeL,IAAIJ,IAAIE,MAAMD,GAAE;YAEpCK,GAAG;AACR,QAAItB,eAAesB,EAAAA,CACfN,KAAIO,OAAOC,KAAI,GAAI3B,uBAAuByB,EAAAA,CAAAA;;IAGtD,CAAA,CAAA;EAGR,MAAMI,sBAAsB,IAAIvB,iCAAAA;AAChC,OAAKO,MAAM,eAAe,EAAEC,UAAU,MAAK,EAAGb,gBAC1CG,EACKY,MAAMZ,EAAEa,KAAG,CAAA,CACXC,MAAM,OAAOC,QAAAA;AACV,OAAI;AACA,SAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,IAClC,OAAMS,oBAAoBN,IAAIJ,IAAIE,MAAMD,GAAE;YAEzCK,GAAG;AACR,QAAItB,eAAesB,EAAAA,CACfN,KAAIO,OAAOC,KAAI,GAAI3B,uBAAuByB,EAAAA,CAAAA;;IAGtD,CAAA,CAAA"}
+{"version":3,"file":"validator.mjs","names":["buildZodIssuesForError","createValidator","Container","isValidupError","z","ProvisioningStrategyValidator","PermissionProvisioningValidator","RealmProvisioningValidator","RoleProvisioningValidator","ScopeProvisioningValidator","RootProvisioningValidator","initialize","strategyValidator","mount","optional","realmValidator","array","any","check","ctx","i","value","length","run","roleValidator","e","issues","push","scopeValidator","permissionValidator"],"sources":["../../../../../src/core/provisioning/entities/root/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { buildZodIssuesForError, createValidator } from '@validup/adapter-zod';\nimport { Container, isValidupError } from 'validup';\nimport { z } from 'zod';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\nimport { PermissionProvisioningValidator } from '../permission/index.ts';\nimport { RealmProvisioningValidator } from '../realm/index.ts';\nimport { RoleProvisioningValidator } from '../role/index.ts';\nimport { ScopeProvisioningValidator } from '../scope/index.ts';\n\nimport type { RootProvisioningEntity } from './types.ts';\n\nexport class RootProvisioningValidator extends Container<RootProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const realmValidator = new RealmProvisioningValidator();\n        this.mount('realms', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    for (let i = 0; i < ctx.value.length; i++) {\n                        await realmValidator.run(ctx.value[i]);\n                    }\n                }),\n        ));\n\n        const roleValidator = new RoleProvisioningValidator();\n        this.mount('roles', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await roleValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        const scopeValidator = new ScopeProvisioningValidator();\n        this.mount('scopes', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await scopeValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        const permissionValidator = new PermissionProvisioningValidator();\n        this.mount('permissions', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await permissionValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;AAkBA,IAAaU,4BAAb,cAA+CR,UAAAA;CACjCS,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,oBAAoB,IAAIP,8BAAAA;EAC9B,KAAKQ,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGF,iBAAAA;EAE3C,MAAMG,iBAAiB,IAAIR,2BAAAA;EAC3B,KAAKM,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGb,gBACrCG,EACKY,MAAMZ,EAAEa,IAAG,CAAA,EACXC,MAAM,OAAOC,QAAAA;GACV,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAML,eAAeQ,IAAIJ,IAAIE,MAAMD,EAAE;EAE7C,CAAA,CAAA,CAAA;EAGR,MAAMI,gBAAgB,IAAIhB,0BAAAA;EAC1B,KAAKK,MAAM,SAAS,EAAEC,UAAU,KAAK,GAAGb,gBACpCG,EACKY,MAAMZ,EAAEa,IAAG,CAAA,EACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMI,cAAcD,IAAIJ,IAAIE,MAAMD,EAAE;GAE5C,SAASK,GAAG;IACR,IAAItB,eAAesB,CAAAA,GACfN,IAAIO,OAAOC,KAAI,GAAI3B,uBAAuByB,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;EAGR,MAAMG,iBAAiB,IAAInB,2BAAAA;EAC3B,KAAKI,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGb,gBACrCG,EACKY,MAAMZ,EAAEa,IAAG,CAAA,EACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMQ,eAAeL,IAAIJ,IAAIE,MAAMD,EAAE;GAE7C,SAASK,GAAG;IACR,IAAItB,eAAesB,CAAAA,GACfN,IAAIO,OAAOC,KAAI,GAAI3B,uBAAuByB,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;EAGR,MAAMI,sBAAsB,IAAIvB,gCAAAA;EAChC,KAAKO,MAAM,eAAe,EAAEC,UAAU,KAAK,GAAGb,gBAC1CG,EACKY,MAAMZ,EAAEa,IAAG,CAAA,EACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMS,oBAAoBN,IAAIJ,IAAIE,MAAMD,EAAE;GAElD,SAASK,GAAG;IACR,IAAItB,eAAesB,CAAAA,GACfN,IAAIO,OAAOC,KAAI,GAAI3B,uBAAuByB,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;CAEZ;AACJ"}

package/dist/core/provisioning/entities/scope/validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validator.mjs","names":["ScopeValidator","Container","ProvisioningStrategyValidator","ScopeProvisioningValidator","initialize","strategyValidator","mount","optional","attributesValidator"],"sources":["../../../../../src/core/provisioning/entities/scope/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ScopeValidator } from '@authup/core-kit';\nimport { Container } from 'validup';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\n\nimport type { ScopeProvisioningEntity } from './types.ts';\n\nexport class ScopeProvisioningValidator extends Container<ScopeProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const attributesValidator = new ScopeValidator();\n        this.mount('attributes', attributesValidator);\n    }\n}\n"],"mappings":";;;;;AAaA,IAAaG,6BAAb,cAAgDF,UAAAA;CAClCG,aAAa;AACnB,QAAMA,YAAAA;EAEN,MAAMC,oBAAoB,IAAIH,+BAAAA;AAC9B,OAAKI,MAAM,YAAY,EAAEC,UAAU,MAAK,EAAGF,kBAAAA;EAE3C,MAAMG,sBAAsB,IAAIR,gBAAAA;AAChC,OAAKM,MAAM,cAAcE,oBAAAA"}
+{"version":3,"file":"validator.mjs","names":["ScopeValidator","Container","ProvisioningStrategyValidator","ScopeProvisioningValidator","initialize","strategyValidator","mount","optional","attributesValidator"],"sources":["../../../../../src/core/provisioning/entities/scope/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ScopeValidator } from '@authup/core-kit';\nimport { Container } from 'validup';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\n\nimport type { ScopeProvisioningEntity } from './types.ts';\n\nexport class ScopeProvisioningValidator extends Container<ScopeProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const attributesValidator = new ScopeValidator();\n        this.mount('attributes', attributesValidator);\n    }\n}\n"],"mappings":";;;;;AAaA,IAAaG,6BAAb,cAAgDF,UAAAA;CAClCG,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,oBAAoB,IAAIH,8BAAAA;EAC9B,KAAKI,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGF,iBAAAA;EAE3C,MAAMG,sBAAsB,IAAIR,eAAAA;EAChC,KAAKM,MAAM,cAAcE,mBAAAA;CAC7B;AACJ"}

package/dist/core/provisioning/entities/user/relations-validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"relations-validator.mjs","names":["createValidator","Container","z","UserProvisioningRelationsValidator","initialize","mount","optional","record","string","array"],"sources":["../../../../../src/core/provisioning/entities/user/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { UserProvisioningRelations } from './types.ts';\n\nexport class UserProvisioningRelationsValidator extends Container<UserProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount('clientPermissions', { optional: true }, createValidator(\n            z.record(z.string(), z.array(z.string())),\n        ));\n\n        this.mount('realmPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('clientRoles', { optional: true }, createValidator(\n            z.record(z.string(), z.array(z.string())),\n        ));\n\n        this.mount('realmRoles', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalRoles', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n    }\n}\n"],"mappings":";;;;AAYA,IAAaG,qCAAb,cAAwDF,UAAAA;CAC1CG,aAAa;AACnB,QAAMA,YAAAA;AAEN,OAAKC,MAAM,qBAAqB,EAAEC,UAAU,MAAK,EAAGN,gBAChDE,EAAEK,OAAOL,EAAEM,QAAM,EAAIN,EAAEO,MAAMP,EAAEM,QAAM,CAAA,CAAA,CAAA,CAAA;AAGzC,OAAKH,MAAM,oBAAoB,EAAEC,UAAU,MAAK,EAAGN,gBAC/CE,EAAEO,MAAMP,EAAEM,QAAM,CAAA,CAAA,CAAA;AAGpB,OAAKH,MAAM,qBAAqB,EAAEC,UAAU,MAAK,EAAGN,gBAChDE,EAAEO,MAAMP,EAAEM,QAAM,CAAA,CAAA,CAAA;AAGpB,OAAKH,MAAM,eAAe,EAAEC,UAAU,MAAK,EAAGN,gBAC1CE,EAAEK,OAAOL,EAAEM,QAAM,EAAIN,EAAEO,MAAMP,EAAEM,QAAM,CAAA,CAAA,CAAA,CAAA;AAGzC,OAAKH,MAAM,cAAc,EAAEC,UAAU,MAAK,EAAGN,gBACzCE,EAAEO,MAAMP,EAAEM,QAAM,CAAA,CAAA,CAAA;AAGpB,OAAKH,MAAM,eAAe,EAAEC,UAAU,MAAK,EAAGN,gBAC1CE,EAAEO,MAAMP,EAAEM,QAAM,CAAA,CAAA,CAAA"}
+{"version":3,"file":"relations-validator.mjs","names":["createValidator","Container","z","UserProvisioningRelationsValidator","initialize","mount","optional","record","string","array"],"sources":["../../../../../src/core/provisioning/entities/user/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { UserProvisioningRelations } from './types.ts';\n\nexport class UserProvisioningRelationsValidator extends Container<UserProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount('clientPermissions', { optional: true }, createValidator(\n            z.record(z.string(), z.array(z.string())),\n        ));\n\n        this.mount('realmPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('clientRoles', { optional: true }, createValidator(\n            z.record(z.string(), z.array(z.string())),\n        ));\n\n        this.mount('realmRoles', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalRoles', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n    }\n}\n"],"mappings":";;;;AAYA,IAAaG,qCAAb,cAAwDF,UAAAA;CAC1CG,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MAAM,qBAAqB,EAAEC,UAAU,KAAK,GAAGN,gBAChDE,EAAEK,OAAOL,EAAEM,OAAM,GAAIN,EAAEO,MAAMP,EAAEM,OAAM,CAAA,CAAA,CAAA,CAAA;EAGzC,KAAKH,MAAM,oBAAoB,EAAEC,UAAU,KAAK,GAAGN,gBAC/CE,EAAEO,MAAMP,EAAEM,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,qBAAqB,EAAEC,UAAU,KAAK,GAAGN,gBAChDE,EAAEO,MAAMP,EAAEM,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,eAAe,EAAEC,UAAU,KAAK,GAAGN,gBAC1CE,EAAEK,OAAOL,EAAEM,OAAM,GAAIN,EAAEO,MAAMP,EAAEM,OAAM,CAAA,CAAA,CAAA,CAAA;EAGzC,KAAKH,MAAM,cAAc,EAAEC,UAAU,KAAK,GAAGN,gBACzCE,EAAEO,MAAMP,EAAEM,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,eAAe,EAAEC,UAAU,KAAK,GAAGN,gBAC1CE,EAAEO,MAAMP,EAAEM,OAAM,CAAA,CAAA,CAAA;CAExB;AACJ"}

package/dist/core/provisioning/entities/user/validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validator.mjs","names":["UserValidator","Container","ProvisioningStrategyValidator","UserProvisioningRelationsValidator","UserProvisioningValidator","initialize","strategyValidator","mount","optional","attributesValidator","relationsValidator"],"sources":["../../../../../src/core/provisioning/entities/user/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { UserValidator } from '@authup/core-kit';\nimport { Container } from 'validup';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\nimport { UserProvisioningRelationsValidator } from './relations-validator.ts';\nimport type { UserProvisioningEntity } from './types.ts';\n\nexport class UserProvisioningValidator extends Container<UserProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const attributesValidator = new UserValidator();\n        this.mount('attributes', attributesValidator);\n\n        const relationsValidator = new UserProvisioningRelationsValidator();\n        this.mount('relations', { optional: true }, relationsValidator);\n    }\n}\n"],"mappings":";;;;;;AAaA,IAAaI,4BAAb,cAA+CH,UAAAA;CACjCI,aAAa;AACnB,QAAMA,YAAAA;EAEN,MAAMC,oBAAoB,IAAIJ,+BAAAA;AAC9B,OAAKK,MAAM,YAAY,EAAEC,UAAU,MAAK,EAAGF,kBAAAA;EAE3C,MAAMG,sBAAsB,IAAIT,eAAAA;AAChC,OAAKO,MAAM,cAAcE,oBAAAA;EAEzB,MAAMC,qBAAqB,IAAIP,oCAAAA;AAC/B,OAAKI,MAAM,aAAa,EAAEC,UAAU,MAAK,EAAGE,mBAAAA"}
+{"version":3,"file":"validator.mjs","names":["UserValidator","Container","ProvisioningStrategyValidator","UserProvisioningRelationsValidator","UserProvisioningValidator","initialize","strategyValidator","mount","optional","attributesValidator","relationsValidator"],"sources":["../../../../../src/core/provisioning/entities/user/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { UserValidator } from '@authup/core-kit';\nimport { Container } from 'validup';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\nimport { UserProvisioningRelationsValidator } from './relations-validator.ts';\nimport type { UserProvisioningEntity } from './types.ts';\n\nexport class UserProvisioningValidator extends Container<UserProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const attributesValidator = new UserValidator();\n        this.mount('attributes', attributesValidator);\n\n        const relationsValidator = new UserProvisioningRelationsValidator();\n        this.mount('relations', { optional: true }, relationsValidator);\n    }\n}\n"],"mappings":";;;;;;AAaA,IAAaI,4BAAb,cAA+CH,UAAAA;CACjCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,oBAAoB,IAAIJ,8BAAAA;EAC9B,KAAKK,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGF,iBAAAA;EAE3C,MAAMG,sBAAsB,IAAIT,cAAAA;EAChC,KAAKO,MAAM,cAAcE,mBAAAA;EAEzB,MAAMC,qBAAqB,IAAIP,mCAAAA;EAC/B,KAAKI,MAAM,aAAa,EAAEC,UAAU,KAAK,GAAGE,kBAAAA;CAChD;AACJ"}

package/dist/core/provisioning/strategy/normalize.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"normalize.mjs","names":["ProvisioningEntityStrategyType","normalizeEntityProvisioningStrategy","input","type","CREATE_ONLY"],"sources":["../../../../src/core/provisioning/strategy/normalize.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { ObjectLiteral } from '@authup/kit';\nimport { ProvisioningEntityStrategyType } from './constants.ts';\nimport type { ProvisioningEntityStrategy } from './types.ts';\n\nexport function normalizeEntityProvisioningStrategy<A extends ObjectLiteral = ObjectLiteral>(\n    input?: ProvisioningEntityStrategy<A>,\n) : ProvisioningEntityStrategy<A> {\n    if (!input) {\n        return { type: ProvisioningEntityStrategyType.CREATE_ONLY };\n    }\n\n    return input;\n}\n"],"mappings":";;AAWA,SAAgBC,oCACZC,OAAqC;AAErC,KAAI,CAACA,MACD,QAAO,EAAEC,MAAMH,+BAA+BI,aAAY;AAG9D,QAAOF"}
+{"version":3,"file":"normalize.mjs","names":["ProvisioningEntityStrategyType","normalizeEntityProvisioningStrategy","input","type","CREATE_ONLY"],"sources":["../../../../src/core/provisioning/strategy/normalize.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { ObjectLiteral } from '@authup/kit';\nimport { ProvisioningEntityStrategyType } from './constants.ts';\nimport type { ProvisioningEntityStrategy } from './types.ts';\n\nexport function normalizeEntityProvisioningStrategy<A extends ObjectLiteral = ObjectLiteral>(\n    input?: ProvisioningEntityStrategy<A>,\n) : ProvisioningEntityStrategy<A> {\n    if (!input) {\n        return { type: ProvisioningEntityStrategyType.CREATE_ONLY };\n    }\n\n    return input;\n}\n"],"mappings":";;AAWA,SAAgBC,oCACZC,OAAqC;CAErC,IAAI,CAACA,OACD,OAAO,EAAEC,MAAMH,+BAA+BI,YAAY;CAG9D,OAAOF;AACX"}

package/dist/core/provisioning/strategy/validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validator.mjs","names":["createValidator","Container","z","ProvisioningStrategyValidator","options","oneOf","initialize","mergeContainer","mount","enum","array","string","optional","altContainer"],"sources":["../../../../src/core/provisioning/strategy/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport type { ContainerOptions } from 'validup';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { ProvisioningEntityMergeStrategy, ProvisioningEntityReplaceStrategy, ProvisioningEntityStrategy } from './types.ts';\n\nexport class ProvisioningStrategyValidator extends Container<ProvisioningEntityStrategy> {\n    constructor(options: ContainerOptions<ProvisioningEntityStrategy> = {}) {\n        super({\n            ...options,\n            oneOf: true,\n        });\n    }\n\n    protected initialize() {\n        super.initialize();\n\n        const mergeContainer = new Container<ProvisioningEntityMergeStrategy>();\n        mergeContainer.mount('type', createValidator(\n            z\n                .enum(['merge']),\n        ));\n        mergeContainer.mount('attributes', createValidator(\n            z\n                .array(z.string())\n                .optional(),\n        ));\n        this.mount(mergeContainer);\n\n        const altContainer = new Container<ProvisioningEntityReplaceStrategy>();\n        altContainer.mount('type', createValidator(\n            z\n                .enum(['replace', 'createOnly', 'absent']),\n        ));\n        this.mount(altContainer);\n    }\n}\n"],"mappings":";;;;AAaA,IAAaG,gCAAb,cAAmDF,UAAAA;CAC/C,YAAYG,UAAwD,EAAE,EAAE;AACpE,QAAM;GACF,GAAGA;GACHC,OAAO;GACX,CAAA;;CAGMC,aAAa;AACnB,QAAMA,YAAAA;EAEN,MAAMC,iBAAiB,IAAIN,WAAAA;AAC3BM,iBAAeC,MAAM,QAAQR,gBACzBE,EACKO,KAAK,CAAC,QAAQ,CAAA,CAAA,CAAA;AAEvBF,iBAAeC,MAAM,cAAcR,gBAC/BE,EACKQ,MAAMR,EAAES,QAAM,CAAA,CACdC,UAAQ,CAAA,CAAA;AAEjB,OAAKJ,MAAMD,eAAAA;EAEX,MAAMM,eAAe,IAAIZ,WAAAA;AACzBY,eAAaL,MAAM,QAAQR,gBACvBE,EACKO,KAAK;GAAC;GAAW;GAAc;GAAS,CAAA,CAAA,CAAA;AAEjD,OAAKD,MAAMK,aAAAA"}
+{"version":3,"file":"validator.mjs","names":["createValidator","Container","z","ProvisioningStrategyValidator","options","oneOf","initialize","mergeContainer","mount","enum","array","string","optional","altContainer"],"sources":["../../../../src/core/provisioning/strategy/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/adapter-zod';\nimport type { ContainerOptions } from 'validup';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { ProvisioningEntityMergeStrategy, ProvisioningEntityReplaceStrategy, ProvisioningEntityStrategy } from './types.ts';\n\nexport class ProvisioningStrategyValidator extends Container<ProvisioningEntityStrategy> {\n    constructor(options: ContainerOptions<ProvisioningEntityStrategy> = {}) {\n        super({\n            ...options,\n            oneOf: true,\n        });\n    }\n\n    protected initialize() {\n        super.initialize();\n\n        const mergeContainer = new Container<ProvisioningEntityMergeStrategy>();\n        mergeContainer.mount('type', createValidator(\n            z\n                .enum(['merge']),\n        ));\n        mergeContainer.mount('attributes', createValidator(\n            z\n                .array(z.string())\n                .optional(),\n        ));\n        this.mount(mergeContainer);\n\n        const altContainer = new Container<ProvisioningEntityReplaceStrategy>();\n        altContainer.mount('type', createValidator(\n            z\n                .enum(['replace', 'createOnly', 'absent']),\n        ));\n        this.mount(altContainer);\n    }\n}\n"],"mappings":";;;;AAaA,IAAaG,gCAAb,cAAmDF,UAAAA;CAC/C,YAAYG,UAAwD,CAAC,GAAG;EACpE,MAAM;GACF,GAAGA;GACHC,OAAO;EACX,CAAA;CACJ;CAEUC,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,iBAAiB,IAAIN,UAAAA;EAC3BM,eAAeC,MAAM,QAAQR,gBACzBE,EACKO,KAAK,CAAC,OAAA,CAAQ,CAAA,CAAA;EAEvBF,eAAeC,MAAM,cAAcR,gBAC/BE,EACKQ,MAAMR,EAAES,OAAM,CAAA,EACdC,SAAQ,CAAA,CAAA;EAEjB,KAAKJ,MAAMD,cAAAA;EAEX,MAAMM,eAAe,IAAIZ,UAAAA;EACzBY,aAAaL,MAAM,QAAQR,gBACvBE,EACKO,KAAK;GAAC;GAAW;GAAc;GAAS,CAAA,CAAA;EAEjD,KAAKD,MAAMK,YAAAA;CACf;AACJ"}

package/dist/core/provisioning/synchronizer/base.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"base.mjs","names":["BaseProvisioningSynchronizer","synchronizeMany","input","output","entity","push","synchronize"],"sources":["../../../../src/core/provisioning/synchronizer/base.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IProvisioningSynchronizer } from '../types.ts';\n\nexport abstract class BaseProvisioningSynchronizer<T> implements IProvisioningSynchronizer<T> {\n    // Sequential to avoid race conditions on concurrent upserts.\n    // Can be switched to Promise.all() if callers guarantee unique inputs.\n    async synchronizeMany(input: T[]): Promise<T[]> {\n        const output: T[] = [];\n        for (const entity of input) {\n            output.push(await this.synchronize(entity));\n        }\n        return output;\n    }\n\n    abstract synchronize(input: T): Promise<T>;\n}\n"],"mappings":";AASA,IAAsBA,+BAAtB,MAAsBA;CAGlB,MAAMC,gBAAgBC,OAA0B;EAC5C,MAAMC,SAAc,EAAE;AACtB,OAAK,MAAMC,UAAUF,MACjBC,QAAOE,KAAK,MAAM,KAAKC,YAAYF,OAAAA,CAAAA;AAEvC,SAAOD"}
+{"version":3,"file":"base.mjs","names":["BaseProvisioningSynchronizer","synchronizeMany","input","output","entity","push","synchronize"],"sources":["../../../../src/core/provisioning/synchronizer/base.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IProvisioningSynchronizer } from '../types.ts';\n\nexport abstract class BaseProvisioningSynchronizer<T> implements IProvisioningSynchronizer<T> {\n    // Sequential to avoid race conditions on concurrent upserts.\n    // Can be switched to Promise.all() if callers guarantee unique inputs.\n    async synchronizeMany(input: T[]): Promise<T[]> {\n        const output: T[] = [];\n        for (const entity of input) {\n            output.push(await this.synchronize(entity));\n        }\n        return output;\n    }\n\n    abstract synchronize(input: T): Promise<T>;\n}\n"],"mappings":";AASA,IAAsBA,+BAAtB,MAAsBA;CAGlB,MAAMC,gBAAgBC,OAA0B;EAC5C,MAAMC,SAAc,CAAA;EACpB,KAAK,MAAMC,UAAUF,OACjBC,OAAOE,KAAK,MAAM,KAAKC,YAAYF,MAAAA,CAAAA;EAEvC,OAAOD;CACX;AAGJ"}

package/dist/core/provisioning/synchronizer/client/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["pickRecord","ProvisioningEntityStrategyType","normalizeEntityProvisioningStrategy","BaseProvisioningSynchronizer","ProvisioningEntityResolver","ProvisioningJunctionSynchronizer","ClientProvisioningSynchronizer","clientRepository","permissionResolver","roleResolver","permissionJunction","roleJunction","permissionSynchronizer","roleSynchronizer","ctx","permissionRepository","roleRepository","repository","clientPermissionRepository","ownerKey","ownerRealmKey","clientRoleRepository","synchronize","input","strategy","attributes","findOneBy","name","realm_id","type","ABSENT","remove","MERGE","merge","save","REPLACE","id","create","permissions","resolveGlobal","relations","globalPermissions","resolveRealm","realmPermissions","length","roles","globalRoles","realmRoles","children","map","child","client_id","client","synchronizeMany"],"sources":["../../../../../src/core/provisioning/synchronizer/client/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    ClientPermission, \n    ClientRole, \n    Permission, \n    Role,\n} from '@authup/core-kit';\nimport { pickRecord } from '@authup/kit';\nimport type { IClientRepository } from '../../../entities/index.ts';\nimport type { ClientProvisioningEntity } from '../../entities/client';\nimport type { PermissionProvisioningEntity } from '../../entities/permission';\nimport type { RoleProvisioningEntity } from '../../entities/role';\nimport { ProvisioningEntityStrategyType, normalizeEntityProvisioningStrategy } from '../../strategy/index.ts';\nimport type { IProvisioningSynchronizer } from '../../types.ts';\nimport { BaseProvisioningSynchronizer } from '../base.ts';\nimport { ProvisioningEntityResolver } from '../entity-resolver.ts';\nimport { ProvisioningJunctionSynchronizer } from '../junction-synchronizer.ts';\nimport type { ClientProvisioningSynchronizerContext } from './types.ts';\n\nexport class ClientProvisioningSynchronizer extends BaseProvisioningSynchronizer<ClientProvisioningEntity> {\n    protected clientRepository: IClientRepository;\n\n    protected permissionResolver: ProvisioningEntityResolver<Permission>;\n\n    protected roleResolver: ProvisioningEntityResolver<Role>;\n\n    protected permissionJunction: ProvisioningJunctionSynchronizer<ClientPermission>;\n\n    protected roleJunction: ProvisioningJunctionSynchronizer<ClientRole>;\n\n    protected permissionSynchronizer: IProvisioningSynchronizer<PermissionProvisioningEntity>;\n\n    protected roleSynchronizer: IProvisioningSynchronizer<RoleProvisioningEntity>;\n\n    constructor(ctx: ClientProvisioningSynchronizerContext) {\n        super();\n\n        this.clientRepository = ctx.clientRepository;\n\n        this.permissionResolver = new ProvisioningEntityResolver(ctx.permissionRepository);\n        this.roleResolver = new ProvisioningEntityResolver(ctx.roleRepository);\n\n        this.permissionJunction = new ProvisioningJunctionSynchronizer({\n            repository: ctx.clientPermissionRepository,\n            ownerKey: 'client_id',\n            ownerRealmKey: 'client_realm_id',\n        });\n        this.roleJunction = new ProvisioningJunctionSynchronizer({\n            repository: ctx.clientRoleRepository,\n            ownerKey: 'client_id',\n            ownerRealmKey: 'client_realm_id',\n        });\n\n        this.permissionSynchronizer = ctx.permissionSynchronizer;\n        this.roleSynchronizer = ctx.roleSynchronizer;\n    }\n\n    async synchronize(input: ClientProvisioningEntity): Promise<ClientProvisioningEntity> {\n        const strategy = normalizeEntityProvisioningStrategy(input.strategy);\n\n        let attributes = await this.clientRepository.findOneBy({\n            name: input.attributes.name,\n            realm_id: input.attributes.realm_id || null,\n        });\n\n        if (strategy.type === ProvisioningEntityStrategyType.ABSENT) {\n            if (attributes) {\n                await this.clientRepository.remove(attributes);\n            }\n            return {\n                ...input,\n                attributes: attributes || input.attributes, \n            };\n        }\n\n        if (attributes) {\n            switch (strategy.type) {\n                case ProvisioningEntityStrategyType.MERGE:\n                    attributes = this.clientRepository.merge(\n                        attributes,\n                        strategy.attributes ?\n                            pickRecord(input.attributes, strategy.attributes) :\n                            input.attributes,\n                    );\n                    attributes = await this.clientRepository.save(attributes);\n                    break;\n                case ProvisioningEntityStrategyType.REPLACE:\n                    input.attributes.id = attributes.id;\n                    attributes = await this.clientRepository.save(this.clientRepository.create(input.attributes));\n                    break;\n            }\n        } else {\n            attributes = await this.clientRepository.save(this.clientRepository.create(input.attributes));\n        }\n\n        // Permissions (Global + Realm)\n        const permissions = [\n            ...await this.permissionResolver.resolveGlobal(\n                input.relations && input.relations.globalPermissions,\n            ),\n            ...(attributes.realm_id ?\n                await this.permissionResolver.resolveRealm(\n                    input.relations && input.relations.realmPermissions,\n                    attributes.realm_id,\n                ) :\n                []),\n        ];\n\n        if (permissions.length > 0) {\n            await this.permissionJunction.synchronize(\n                attributes,\n                permissions,\n                'permission_id',\n                'permission_realm_id',\n            );\n        }\n\n        // Roles (Global + Realm)\n        const roles = [\n            ...await this.roleResolver.resolveGlobal(\n                input.relations && input.relations.globalRoles,\n            ),\n            ...(attributes.realm_id ?\n                await this.roleResolver.resolveRealm(\n                    input.relations && input.relations.realmRoles,\n                    attributes.realm_id,\n                ) :\n                []),\n        ];\n\n        if (roles.length > 0) {\n            await this.roleJunction.synchronize(\n                attributes,\n                roles,\n                'role_id',\n                'role_realm_id',\n            );\n        }\n\n        // Containers\n\n        if (input.relations && input.relations.permissions) {\n            const children = input.relations.permissions.map((child) => {\n                child.attributes.client_id = attributes.id;\n                child.attributes.client = attributes;\n                return child;\n            });\n\n            await this.permissionSynchronizer.synchronizeMany(children);\n        }\n\n        if (input.relations && input.relations.roles) {\n            const children = input.relations.roles.map((child) => {\n                child.attributes.client_id = attributes.id;\n                child.attributes.client = attributes;\n                return child;\n            });\n\n            await this.roleSynchronizer.synchronizeMany(children);\n        }\n\n        return {\n            ...input,\n            attributes,\n        };\n    }\n}\n"],"mappings":";;;;;;;;AAyBA,IAAaM,iCAAb,cAAoDH,6BAAAA;CACtCI;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEV,YAAYC,KAA4C;AACpD,SAAK;AAEL,OAAKP,mBAAmBO,IAAIP;AAE5B,OAAKC,qBAAqB,IAAIJ,2BAA2BU,IAAIC,qBAAoB;AACjF,OAAKN,eAAe,IAAIL,2BAA2BU,IAAIE,eAAc;AAErE,OAAKN,qBAAqB,IAAIL,iCAAiC;GAC3DY,YAAYH,IAAII;GAChBC,UAAU;GACVC,eAAe;GACnB,CAAA;AACA,OAAKT,eAAe,IAAIN,iCAAiC;GACrDY,YAAYH,IAAIO;GAChBF,UAAU;GACVC,eAAe;GACnB,CAAA;AAEA,OAAKR,yBAAyBE,IAAIF;AAClC,OAAKC,mBAAmBC,IAAID;;CAGhC,MAAMS,YAAYC,OAAoE;EAClF,MAAMC,WAAWtB,oCAAoCqB,MAAMC,SAAQ;EAEnE,IAAIC,aAAa,MAAM,KAAKlB,iBAAiBmB,UAAU;GACnDC,MAAMJ,MAAME,WAAWE;GACvBC,UAAUL,MAAME,WAAWG,YAAY;GAC3C,CAAA;AAEA,MAAIJ,SAASK,SAAS5B,+BAA+B6B,QAAQ;AACzD,OAAIL,WACA,OAAM,KAAKlB,iBAAiBwB,OAAON,WAAAA;AAEvC,UAAO;IACH,GAAGF;IACHE,YAAYA,cAAcF,MAAME;IACpC;;AAGJ,MAAIA,WACA,SAAQD,SAASK,MAAjB;GACI,KAAK5B,+BAA+B+B;AAChCP,iBAAa,KAAKlB,iBAAiB0B,MAC/BR,YACAD,SAASC,aACLzB,WAAWuB,MAAME,YAAYD,SAASC,WAAU,GAChDF,MAAME,WAAU;AAExBA,iBAAa,MAAM,KAAKlB,iBAAiB2B,KAAKT,WAAAA;AAC9C;GACJ,KAAKxB,+BAA+BkC;AAChCZ,UAAME,WAAWW,KAAKX,WAAWW;AACjCX,iBAAa,MAAM,KAAKlB,iBAAiB2B,KAAK,KAAK3B,iBAAiB8B,OAAOd,MAAME,WAAU,CAAA;AAC3F;;MAGRA,cAAa,MAAM,KAAKlB,iBAAiB2B,KAAK,KAAK3B,iBAAiB8B,OAAOd,MAAME,WAAU,CAAA;EAI/F,MAAMa,cAAc,CAAA,GACb,MAAM,KAAK9B,mBAAmB+B,cAC7BhB,MAAMiB,aAAajB,MAAMiB,UAAUC,kBAAiB,EAAA,GAEpDhB,WAAWG,WACX,MAAM,KAAKpB,mBAAmBkC,aAC1BnB,MAAMiB,aAAajB,MAAMiB,UAAUG,kBACnClB,WAAWG,SAAQ,GAEvB,EAAE,CACT;AAED,MAAIU,YAAYM,SAAS,EACrB,OAAM,KAAKlC,mBAAmBY,YAC1BG,YACAa,aACA,iBACA,sBAAA;EAKR,MAAMO,QAAQ,CAAA,GACP,MAAM,KAAKpC,aAAa8B,cACvBhB,MAAMiB,aAAajB,MAAMiB,UAAUM,YAAW,EAAA,GAE9CrB,WAAWG,WACX,MAAM,KAAKnB,aAAaiC,aACpBnB,MAAMiB,aAAajB,MAAMiB,UAAUO,YACnCtB,WAAWG,SAAQ,GAEvB,EAAE,CACT;AAED,MAAIiB,MAAMD,SAAS,EACf,OAAM,KAAKjC,aAAaW,YACpBG,YACAoB,OACA,WACA,gBAAA;AAMR,MAAItB,MAAMiB,aAAajB,MAAMiB,UAAUF,aAAa;GAChD,MAAMU,WAAWzB,MAAMiB,UAAUF,YAAYW,KAAKC,UAAAA;AAC9CA,UAAMzB,WAAW0B,YAAY1B,WAAWW;AACxCc,UAAMzB,WAAW2B,SAAS3B;AAC1B,WAAOyB;KACX;AAEA,SAAM,KAAKtC,uBAAuByC,gBAAgBL,SAAAA;;AAGtD,MAAIzB,MAAMiB,aAAajB,MAAMiB,UAAUK,OAAO;GAC1C,MAAMG,WAAWzB,MAAMiB,UAAUK,MAAMI,KAAKC,UAAAA;AACxCA,UAAMzB,WAAW0B,YAAY1B,WAAWW;AACxCc,UAAMzB,WAAW2B,SAAS3B;AAC1B,WAAOyB;KACX;AAEA,SAAM,KAAKrC,iBAAiBwC,gBAAgBL,SAAAA;;AAGhD,SAAO;GACH,GAAGzB;GACHE;GACJ"}
+{"version":3,"file":"module.mjs","names":["pickRecord","ProvisioningEntityStrategyType","normalizeEntityProvisioningStrategy","BaseProvisioningSynchronizer","ProvisioningEntityResolver","ProvisioningJunctionSynchronizer","ClientProvisioningSynchronizer","clientRepository","permissionResolver","roleResolver","permissionJunction","roleJunction","permissionSynchronizer","roleSynchronizer","ctx","permissionRepository","roleRepository","repository","clientPermissionRepository","ownerKey","ownerRealmKey","clientRoleRepository","synchronize","input","strategy","attributes","findOneBy","name","realm_id","type","ABSENT","remove","MERGE","merge","save","REPLACE","id","create","permissions","resolveGlobal","relations","globalPermissions","resolveRealm","realmPermissions","length","roles","globalRoles","realmRoles","children","map","child","client_id","client","synchronizeMany"],"sources":["../../../../../src/core/provisioning/synchronizer/client/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    ClientPermission, \n    ClientRole, \n    Permission, \n    Role,\n} from '@authup/core-kit';\nimport { pickRecord } from '@authup/kit';\nimport type { IClientRepository } from '../../../entities/index.ts';\nimport type { ClientProvisioningEntity } from '../../entities/client';\nimport type { PermissionProvisioningEntity } from '../../entities/permission';\nimport type { RoleProvisioningEntity } from '../../entities/role';\nimport { ProvisioningEntityStrategyType, normalizeEntityProvisioningStrategy } from '../../strategy/index.ts';\nimport type { IProvisioningSynchronizer } from '../../types.ts';\nimport { BaseProvisioningSynchronizer } from '../base.ts';\nimport { ProvisioningEntityResolver } from '../entity-resolver.ts';\nimport { ProvisioningJunctionSynchronizer } from '../junction-synchronizer.ts';\nimport type { ClientProvisioningSynchronizerContext } from './types.ts';\n\nexport class ClientProvisioningSynchronizer extends BaseProvisioningSynchronizer<ClientProvisioningEntity> {\n    protected clientRepository: IClientRepository;\n\n    protected permissionResolver: ProvisioningEntityResolver<Permission>;\n\n    protected roleResolver: ProvisioningEntityResolver<Role>;\n\n    protected permissionJunction: ProvisioningJunctionSynchronizer<ClientPermission>;\n\n    protected roleJunction: ProvisioningJunctionSynchronizer<ClientRole>;\n\n    protected permissionSynchronizer: IProvisioningSynchronizer<PermissionProvisioningEntity>;\n\n    protected roleSynchronizer: IProvisioningSynchronizer<RoleProvisioningEntity>;\n\n    constructor(ctx: ClientProvisioningSynchronizerContext) {\n        super();\n\n        this.clientRepository = ctx.clientRepository;\n\n        this.permissionResolver = new ProvisioningEntityResolver(ctx.permissionRepository);\n        this.roleResolver = new ProvisioningEntityResolver(ctx.roleRepository);\n\n        this.permissionJunction = new ProvisioningJunctionSynchronizer({\n            repository: ctx.clientPermissionRepository,\n            ownerKey: 'client_id',\n            ownerRealmKey: 'client_realm_id',\n        });\n        this.roleJunction = new ProvisioningJunctionSynchronizer({\n            repository: ctx.clientRoleRepository,\n            ownerKey: 'client_id',\n            ownerRealmKey: 'client_realm_id',\n        });\n\n        this.permissionSynchronizer = ctx.permissionSynchronizer;\n        this.roleSynchronizer = ctx.roleSynchronizer;\n    }\n\n    async synchronize(input: ClientProvisioningEntity): Promise<ClientProvisioningEntity> {\n        const strategy = normalizeEntityProvisioningStrategy(input.strategy);\n\n        let attributes = await this.clientRepository.findOneBy({\n            name: input.attributes.name,\n            realm_id: input.attributes.realm_id || null,\n        });\n\n        if (strategy.type === ProvisioningEntityStrategyType.ABSENT) {\n            if (attributes) {\n                await this.clientRepository.remove(attributes);\n            }\n            return {\n                ...input,\n                attributes: attributes || input.attributes, \n            };\n        }\n\n        if (attributes) {\n            switch (strategy.type) {\n                case ProvisioningEntityStrategyType.MERGE:\n                    attributes = this.clientRepository.merge(\n                        attributes,\n                        strategy.attributes ?\n                            pickRecord(input.attributes, strategy.attributes) :\n                            input.attributes,\n                    );\n                    attributes = await this.clientRepository.save(attributes);\n                    break;\n                case ProvisioningEntityStrategyType.REPLACE:\n                    input.attributes.id = attributes.id;\n                    attributes = await this.clientRepository.save(this.clientRepository.create(input.attributes));\n                    break;\n            }\n        } else {\n            attributes = await this.clientRepository.save(this.clientRepository.create(input.attributes));\n        }\n\n        // Permissions (Global + Realm)\n        const permissions = [\n            ...await this.permissionResolver.resolveGlobal(\n                input.relations && input.relations.globalPermissions,\n            ),\n            ...(attributes.realm_id ?\n                await this.permissionResolver.resolveRealm(\n                    input.relations && input.relations.realmPermissions,\n                    attributes.realm_id,\n                ) :\n                []),\n        ];\n\n        if (permissions.length > 0) {\n            await this.permissionJunction.synchronize(\n                attributes,\n                permissions,\n                'permission_id',\n                'permission_realm_id',\n            );\n        }\n\n        // Roles (Global + Realm)\n        const roles = [\n            ...await this.roleResolver.resolveGlobal(\n                input.relations && input.relations.globalRoles,\n            ),\n            ...(attributes.realm_id ?\n                await this.roleResolver.resolveRealm(\n                    input.relations && input.relations.realmRoles,\n                    attributes.realm_id,\n                ) :\n                []),\n        ];\n\n        if (roles.length > 0) {\n            await this.roleJunction.synchronize(\n                attributes,\n                roles,\n                'role_id',\n                'role_realm_id',\n            );\n        }\n\n        // Containers\n\n        if (input.relations && input.relations.permissions) {\n            const children = input.relations.permissions.map((child) => {\n                child.attributes.client_id = attributes.id;\n                child.attributes.client = attributes;\n                return child;\n            });\n\n            await this.permissionSynchronizer.synchronizeMany(children);\n        }\n\n        if (input.relations && input.relations.roles) {\n            const children = input.relations.roles.map((child) => {\n                child.attributes.client_id = attributes.id;\n                child.attributes.client = attributes;\n                return child;\n            });\n\n            await this.roleSynchronizer.synchronizeMany(children);\n        }\n\n        return {\n            ...input,\n            attributes,\n        };\n    }\n}\n"],"mappings":";;;;;;;;AAyBA,IAAaM,iCAAb,cAAoDH,6BAAAA;CACtCI;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEV,YAAYC,KAA4C;EACpD,MAAK;EAEL,KAAKP,mBAAmBO,IAAIP;EAE5B,KAAKC,qBAAqB,IAAIJ,2BAA2BU,IAAIC,oBAAoB;EACjF,KAAKN,eAAe,IAAIL,2BAA2BU,IAAIE,cAAc;EAErE,KAAKN,qBAAqB,IAAIL,iCAAiC;GAC3DY,YAAYH,IAAII;GAChBC,UAAU;GACVC,eAAe;EACnB,CAAA;EACA,KAAKT,eAAe,IAAIN,iCAAiC;GACrDY,YAAYH,IAAIO;GAChBF,UAAU;GACVC,eAAe;EACnB,CAAA;EAEA,KAAKR,yBAAyBE,IAAIF;EAClC,KAAKC,mBAAmBC,IAAID;CAChC;CAEA,MAAMS,YAAYC,OAAoE;EAClF,MAAMC,WAAWtB,oCAAoCqB,MAAMC,QAAQ;EAEnE,IAAIC,aAAa,MAAM,KAAKlB,iBAAiBmB,UAAU;GACnDC,MAAMJ,MAAME,WAAWE;GACvBC,UAAUL,MAAME,WAAWG,YAAY;EAC3C,CAAA;EAEA,IAAIJ,SAASK,SAAS5B,+BAA+B6B,QAAQ;GACzD,IAAIL,YACA,MAAM,KAAKlB,iBAAiBwB,OAAON,UAAAA;GAEvC,OAAO;IACH,GAAGF;IACHE,YAAYA,cAAcF,MAAME;GACpC;EACJ;EAEA,IAAIA,YACA,QAAQD,SAASK,MAAjB;GACI,KAAK5B,+BAA+B+B;IAChCP,aAAa,KAAKlB,iBAAiB0B,MAC/BR,YACAD,SAASC,aACLzB,WAAWuB,MAAME,YAAYD,SAASC,UAAU,IAChDF,MAAME,UAAU;IAExBA,aAAa,MAAM,KAAKlB,iBAAiB2B,KAAKT,UAAAA;IAC9C;GACJ,KAAKxB,+BAA+BkC;IAChCZ,MAAME,WAAWW,KAAKX,WAAWW;IACjCX,aAAa,MAAM,KAAKlB,iBAAiB2B,KAAK,KAAK3B,iBAAiB8B,OAAOd,MAAME,UAAU,CAAA;IAC3F;EACR;OAEAA,aAAa,MAAM,KAAKlB,iBAAiB2B,KAAK,KAAK3B,iBAAiB8B,OAAOd,MAAME,UAAU,CAAA;EAI/F,MAAMa,cAAc,CAAA,GACb,MAAM,KAAK9B,mBAAmB+B,cAC7BhB,MAAMiB,aAAajB,MAAMiB,UAAUC,iBAAiB,GAAA,GAEpDhB,WAAWG,WACX,MAAM,KAAKpB,mBAAmBkC,aAC1BnB,MAAMiB,aAAajB,MAAMiB,UAAUG,kBACnClB,WAAWG,QAAQ,IAEvB,CAAA,CAAA;EAGR,IAAIU,YAAYM,SAAS,GACrB,MAAM,KAAKlC,mBAAmBY,YAC1BG,YACAa,aACA,iBACA,qBAAA;EAKR,MAAMO,QAAQ,CAAA,GACP,MAAM,KAAKpC,aAAa8B,cACvBhB,MAAMiB,aAAajB,MAAMiB,UAAUM,WAAW,GAAA,GAE9CrB,WAAWG,WACX,MAAM,KAAKnB,aAAaiC,aACpBnB,MAAMiB,aAAajB,MAAMiB,UAAUO,YACnCtB,WAAWG,QAAQ,IAEvB,CAAA,CAAA;EAGR,IAAIiB,MAAMD,SAAS,GACf,MAAM,KAAKjC,aAAaW,YACpBG,YACAoB,OACA,WACA,eAAA;EAMR,IAAItB,MAAMiB,aAAajB,MAAMiB,UAAUF,aAAa;GAChD,MAAMU,WAAWzB,MAAMiB,UAAUF,YAAYW,KAAKC,UAAAA;IAC9CA,MAAMzB,WAAW0B,YAAY1B,WAAWW;IACxCc,MAAMzB,WAAW2B,SAAS3B;IAC1B,OAAOyB;GACX,CAAA;GAEA,MAAM,KAAKtC,uBAAuByC,gBAAgBL,QAAAA;EACtD;EAEA,IAAIzB,MAAMiB,aAAajB,MAAMiB,UAAUK,OAAO;GAC1C,MAAMG,WAAWzB,MAAMiB,UAAUK,MAAMI,KAAKC,UAAAA;IACxCA,MAAMzB,WAAW0B,YAAY1B,WAAWW;IACxCc,MAAMzB,WAAW2B,SAAS3B;IAC1B,OAAOyB;GACX,CAAA;GAEA,MAAM,KAAKrC,iBAAiBwC,gBAAgBL,QAAAA;EAChD;EAEA,OAAO;GACH,GAAGzB;GACHE;EACJ;CACJ;AACJ"}

package/dist/core/provisioning/synchronizer/entity-resolver.d.ts

@@ -1,5 +1,5 @@
 import type { ObjectLiteral } from '@authup/kit';
-import type { IEntityRepository } from '../../entities/index.ts';
+import type { IEntityRepository } from '@authup/server-kit';
 export declare class ProvisioningEntityResolver<T extends ObjectLiteral = ObjectLiteral> {
     protected repository: IEntityRepository<T>;
     constructor(repository: IEntityRepository<T>);

package/dist/core/provisioning/synchronizer/entity-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity-resolver.d.ts","sourceRoot":"","sources":["../../../../src/core/provisioning/synchronizer/entity-resolver.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,qBAAa,0BAA0B,CAAC,CAAC,SAAS,aAAa,GAAG,aAAa;IAC3E,SAAS,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;gBAE/B,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAItC,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IAoB7C,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IAoBxE,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;CAmBpG"}
+{"version":3,"file":"entity-resolver.d.ts","sourceRoot":"","sources":["../../../../src/core/provisioning/synchronizer/entity-resolver.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,qBAAa,0BAA0B,CAAC,CAAC,SAAS,aAAa,GAAG,aAAa;IAC3E,SAAS,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;gBAE/B,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAItC,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IAoB7C,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IAoBxE,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;CAmBpG"}

package/dist/core/provisioning/synchronizer/entity-resolver.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"entity-resolver.mjs","names":["ProvisioningEntityResolver","repository","resolveGlobal","names","length","hasWildcard","includes","findManyBy","realm_id","client_id","name","resolveRealm","realmId","resolveClient","clientId"],"sources":["../../../../src/core/provisioning/synchronizer/entity-resolver.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { ObjectLiteral } from '@authup/kit';\nimport type { IEntityRepository } from '../../entities/index.ts';\n\nexport class ProvisioningEntityResolver<T extends ObjectLiteral = ObjectLiteral> {\n    protected repository: IEntityRepository<T>;\n\n    constructor(repository: IEntityRepository<T>) {\n        this.repository = repository;\n    }\n\n    async resolveGlobal(names?: string[]): Promise<T[]> {\n        if (!names || names.length === 0) {\n            return [];\n        }\n\n        const hasWildcard = names.includes('*');\n        if (hasWildcard) {\n            return this.repository.findManyBy({\n                realm_id: null,\n                client_id: null,\n            });\n        }\n\n        return this.repository.findManyBy({\n            name: names,\n            realm_id: null,\n            client_id: null,\n        });\n    }\n\n    async resolveRealm(names: string[] | undefined, realmId: string): Promise<T[]> {\n        if (!names || names.length === 0) {\n            return [];\n        }\n\n        const hasWildcard = names.includes('*');\n        if (hasWildcard) {\n            return this.repository.findManyBy({\n                realm_id: realmId,\n                client_id: null,\n            });\n        }\n\n        return this.repository.findManyBy({\n            name: names,\n            realm_id: realmId,\n            client_id: null,\n        });\n    }\n\n    async resolveClient(names: string[] | undefined, realmId: string, clientId: string): Promise<T[]> {\n        if (!names || names.length === 0) {\n            return [];\n        }\n\n        const hasWildcard = names.includes('*');\n        if (hasWildcard) {\n            return this.repository.findManyBy({\n                realm_id: realmId,\n                client_id: clientId,\n            });\n        }\n\n        return this.repository.findManyBy({\n            name: names,\n            realm_id: realmId,\n            client_id: clientId,\n        });\n    }\n}\n"],"mappings":";AAUA,IAAaA,6BAAb,MAAaA;CACCC;CAEV,YAAYA,YAAkC;AAC1C,OAAKA,aAAaA;;CAGtB,MAAMC,cAAcC,OAAgC;AAChD,MAAI,CAACA,SAASA,MAAMC,WAAW,EAC3B,QAAO,EAAE;AAIb,MADoBD,MAAMG,SAAS,IAC/BD,CACA,QAAO,KAAKJ,WAAWM,WAAW;GAC9BC,UAAU;GACVC,WAAW;GACf,CAAA;AAGJ,SAAO,KAAKR,WAAWM,WAAW;GAC9BG,MAAMP;GACNK,UAAU;GACVC,WAAW;GACf,CAAA;;CAGJ,MAAME,aAAaR,OAA6BS,SAA+B;AAC3E,MAAI,CAACT,SAASA,MAAMC,WAAW,EAC3B,QAAO,EAAE;AAIb,MADoBD,MAAMG,SAAS,IAC/BD,CACA,QAAO,KAAKJ,WAAWM,WAAW;GAC9BC,UAAUI;GACVH,WAAW;GACf,CAAA;AAGJ,SAAO,KAAKR,WAAWM,WAAW;GAC9BG,MAAMP;GACNK,UAAUI;GACVH,WAAW;GACf,CAAA;;CAGJ,MAAMI,cAAcV,OAA6BS,SAAiBE,UAAgC;AAC9F,MAAI,CAACX,SAASA,MAAMC,WAAW,EAC3B,QAAO,EAAE;AAIb,MADoBD,MAAMG,SAAS,IAC/BD,CACA,QAAO,KAAKJ,WAAWM,WAAW;GAC9BC,UAAUI;GACVH,WAAWK;GACf,CAAA;AAGJ,SAAO,KAAKb,WAAWM,WAAW;GAC9BG,MAAMP;GACNK,UAAUI;GACVH,WAAWK;GACf,CAAA"}
+{"version":3,"file":"entity-resolver.mjs","names":["ProvisioningEntityResolver","repository","resolveGlobal","names","length","hasWildcard","includes","findManyBy","realm_id","client_id","name","resolveRealm","realmId","resolveClient","clientId"],"sources":["../../../../src/core/provisioning/synchronizer/entity-resolver.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { ObjectLiteral } from '@authup/kit';\nimport type { IEntityRepository } from '@authup/server-kit';\n\nexport class ProvisioningEntityResolver<T extends ObjectLiteral = ObjectLiteral> {\n    protected repository: IEntityRepository<T>;\n\n    constructor(repository: IEntityRepository<T>) {\n        this.repository = repository;\n    }\n\n    async resolveGlobal(names?: string[]): Promise<T[]> {\n        if (!names || names.length === 0) {\n            return [];\n        }\n\n        const hasWildcard = names.includes('*');\n        if (hasWildcard) {\n            return this.repository.findManyBy({\n                realm_id: null,\n                client_id: null,\n            });\n        }\n\n        return this.repository.findManyBy({\n            name: names,\n            realm_id: null,\n            client_id: null,\n        });\n    }\n\n    async resolveRealm(names: string[] | undefined, realmId: string): Promise<T[]> {\n        if (!names || names.length === 0) {\n            return [];\n        }\n\n        const hasWildcard = names.includes('*');\n        if (hasWildcard) {\n            return this.repository.findManyBy({\n                realm_id: realmId,\n                client_id: null,\n            });\n        }\n\n        return this.repository.findManyBy({\n            name: names,\n            realm_id: realmId,\n            client_id: null,\n        });\n    }\n\n    async resolveClient(names: string[] | undefined, realmId: string, clientId: string): Promise<T[]> {\n        if (!names || names.length === 0) {\n            return [];\n        }\n\n        const hasWildcard = names.includes('*');\n        if (hasWildcard) {\n            return this.repository.findManyBy({\n                realm_id: realmId,\n                client_id: clientId,\n            });\n        }\n\n        return this.repository.findManyBy({\n            name: names,\n            realm_id: realmId,\n            client_id: clientId,\n        });\n    }\n}\n"],"mappings":";AAUA,IAAaA,6BAAb,MAAaA;CACCC;CAEV,YAAYA,YAAkC;EAC1C,KAAKA,aAAaA;CACtB;CAEA,MAAMC,cAAcC,OAAgC;EAChD,IAAI,CAACA,SAASA,MAAMC,WAAW,GAC3B,OAAO,CAAA;EAIX,IADoBD,MAAMG,SAAS,GAC/BD,GACA,OAAO,KAAKJ,WAAWM,WAAW;GAC9BC,UAAU;GACVC,WAAW;EACf,CAAA;EAGJ,OAAO,KAAKR,WAAWM,WAAW;GAC9BG,MAAMP;GACNK,UAAU;GACVC,WAAW;EACf,CAAA;CACJ;CAEA,MAAME,aAAaR,OAA6BS,SAA+B;EAC3E,IAAI,CAACT,SAASA,MAAMC,WAAW,GAC3B,OAAO,CAAA;EAIX,IADoBD,MAAMG,SAAS,GAC/BD,GACA,OAAO,KAAKJ,WAAWM,WAAW;GAC9BC,UAAUI;GACVH,WAAW;EACf,CAAA;EAGJ,OAAO,KAAKR,WAAWM,WAAW;GAC9BG,MAAMP;GACNK,UAAUI;GACVH,WAAW;EACf,CAAA;CACJ;CAEA,MAAMI,cAAcV,OAA6BS,SAAiBE,UAAgC;EAC9F,IAAI,CAACX,SAASA,MAAMC,WAAW,GAC3B,OAAO,CAAA;EAIX,IADoBD,MAAMG,SAAS,GAC/BD,GACA,OAAO,KAAKJ,WAAWM,WAAW;GAC9BC,UAAUI;GACVH,WAAWK;EACf,CAAA;EAGJ,OAAO,KAAKb,WAAWM,WAAW;GAC9BG,MAAMP;GACNK,UAAUI;GACVH,WAAWK;EACf,CAAA;CACJ;AACJ"}

package/dist/core/provisioning/synchronizer/junction-synchronizer.d.ts

@@ -1,5 +1,5 @@
 import type { ObjectLiteral } from '@authup/kit';
-import type { IEntityRepository } from '../../entities/index.ts';
+import type { IEntityRepository } from '@authup/server-kit';
 export type ProvisioningJunctionSynchronizerContext<T extends ObjectLiteral = ObjectLiteral> = {
     repository: IEntityRepository<T>;
     ownerKey: string;

package/dist/core/provisioning/synchronizer/junction-synchronizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"junction-synchronizer.d.ts","sourceRoot":"","sources":["../../../../src/core/provisioning/synchronizer/junction-synchronizer.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,MAAM,MAAM,uCAAuC,CAAC,CAAC,SAAS,aAAa,GAAG,aAAa,IAAI;IAC3F,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,qBAAa,gCAAgC,CAAC,CAAC,SAAS,aAAa,GAAG,aAAa;IACjF,SAAS,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC,CAAC,CAAC;gBAE9C,GAAG,EAAE,uCAAuC,CAAC,CAAC,CAAC;IAIrD,WAAW,CACb,KAAK,EAAE;QACH,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAC3B,EACD,OAAO,EAAE,KAAK,CAAC;QACX,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAC3B,CAAC,EACF,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC1C,OAAO,CAAC,IAAI,CAAC;CAoBnB"}
+{"version":3,"file":"junction-synchronizer.d.ts","sourceRoot":"","sources":["../../../../src/core/provisioning/synchronizer/junction-synchronizer.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,MAAM,MAAM,uCAAuC,CAAC,CAAC,SAAS,aAAa,GAAG,aAAa,IAAI;IAC3F,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,qBAAa,gCAAgC,CAAC,CAAC,SAAS,aAAa,GAAG,aAAa;IACjF,SAAS,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC,CAAC,CAAC;gBAE9C,GAAG,EAAE,uCAAuC,CAAC,CAAC,CAAC;IAIrD,WAAW,CACb,KAAK,EAAE;QACH,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAC3B,EACD,OAAO,EAAE,KAAK,CAAC;QACX,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAC3B,CAAC,EACF,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC1C,OAAO,CAAC,IAAI,CAAC;CAoBnB"}