@authup/server-core 1.0.0-beta.42 → 1.0.0-beta.44

package/dist/core/provisioning/synchronizer/root/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["BaseProvisioningSynchronizer","GraphProvisioningSynchronizer","policySynchronizer","realmSynchronizer","permissionSynchronizer","roleSynchronizer","scopeSynchronizer","ctx","synchronize","input","output","policies","synchronizeMany","permissions","roles","scopes","realms"],"sources":["../../../../../src/core/provisioning/synchronizer/root/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    PolicyProvisioningEntity,\n    RealmProvisioningEntity,\n    RoleProvisioningEntity,\n    RootProvisioningEntity,\n    ScopeProvisioningEntity,\n} from '../../entities/index.ts';\nimport type { PermissionProvisioningEntity } from '../../entities/permission/index.ts';\nimport type { IProvisioningSynchronizer } from '../../types.ts';\nimport { BaseProvisioningSynchronizer } from '../base.ts';\nimport type { RootProvisioningSynchronizerContext } from './types.ts';\n\nexport class GraphProvisioningSynchronizer extends BaseProvisioningSynchronizer<RootProvisioningEntity> {\n    protected policySynchronizer: IProvisioningSynchronizer<PolicyProvisioningEntity>;\n\n    protected realmSynchronizer: IProvisioningSynchronizer<RealmProvisioningEntity>;\n\n    protected permissionSynchronizer : IProvisioningSynchronizer<PermissionProvisioningEntity>;\n\n    protected roleSynchronizer: IProvisioningSynchronizer<RoleProvisioningEntity>;\n\n    protected scopeSynchronizer: IProvisioningSynchronizer<ScopeProvisioningEntity>;\n\n    constructor(ctx: RootProvisioningSynchronizerContext) {\n        super();\n\n        this.policySynchronizer = ctx.policySynchronizer;\n        this.permissionSynchronizer = ctx.permissionSynchronizer;\n        this.realmSynchronizer = ctx.realmSynchronizer;\n        this.roleSynchronizer = ctx.roleSynchronizer;\n        this.scopeSynchronizer = ctx.scopeSynchronizer;\n    }\n\n    async synchronize(input: RootProvisioningEntity): Promise<RootProvisioningEntity> {\n        const output : RootProvisioningEntity = {};\n\n        if (input.policies) {\n            output.policies = await this.policySynchronizer.synchronizeMany(input.policies);\n        }\n\n        if (input.permissions) {\n            output.permissions = await this.permissionSynchronizer.synchronizeMany(input.permissions);\n        }\n\n        if (input.roles) {\n            output.roles = await this.roleSynchronizer.synchronizeMany(input.roles);\n        }\n\n        if (input.scopes) {\n            output.scopes = await this.scopeSynchronizer.synchronizeMany(input.scopes);\n        }\n\n        if (input.realms) {\n            output.realms = await this.realmSynchronizer.synchronizeMany(input.realms);\n        }\n\n        return output;\n    }\n}\n"],"mappings":";;AAmBA,IAAaC,gCAAb,cAAmDD,6BAAAA;CACrCE;CAEAC;CAEAC;CAEAC;CAEAC;CAEV,YAAYC,KAA0C;EAClD,MAAK;EAEL,KAAKL,qBAAqBK,IAAIL;EAC9B,KAAKE,yBAAyBG,IAAIH;EAClC,KAAKD,oBAAoBI,IAAIJ;EAC7B,KAAKE,mBAAmBE,IAAIF;EAC5B,KAAKC,oBAAoBC,IAAID;CACjC;CAEA,MAAME,YAAYC,OAAgE;EAC9E,MAAMC,SAAkC,CAAC;EAEzC,IAAID,MAAME,UACND,OAAOC,WAAW,MAAM,KAAKT,mBAAmBU,gBAAgBH,MAAME,QAAQ;EAGlF,IAAIF,MAAMI,aACNH,OAAOG,cAAc,MAAM,KAAKT,uBAAuBQ,gBAAgBH,MAAMI,WAAW;EAG5F,IAAIJ,MAAMK,OACNJ,OAAOI,QAAQ,MAAM,KAAKT,iBAAiBO,gBAAgBH,MAAMK,KAAK;EAG1E,IAAIL,MAAMM,QACNL,OAAOK,SAAS,MAAM,KAAKT,kBAAkBM,gBAAgBH,MAAMM,MAAM;EAG7E,IAAIN,MAAMO,QACNN,OAAOM,SAAS,MAAM,KAAKb,kBAAkBS,gBAAgBH,MAAMO,MAAM;EAG7E,OAAON;CACX;AACJ"}
+{"version":3,"file":"module.mjs","names":["BaseProvisioningSynchronizer","GraphProvisioningSynchronizer","policySynchronizer","realmSynchronizer","permissionSynchronizer","roleSynchronizer","scopeSynchronizer","ctx","synchronize","input","output","policies","synchronizeMany","permissions","roles","scopes","realms"],"sources":["../../../../../src/core/provisioning/synchronizer/root/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    PolicyProvisioningEntity,\n    RealmProvisioningEntity,\n    RoleProvisioningEntity,\n    RootProvisioningEntity,\n    ScopeProvisioningEntity,\n} from '../../entities/index.ts';\nimport type { PermissionProvisioningEntity } from '../../entities/permission/index.ts';\nimport type { IProvisioningSynchronizer } from '../../types.ts';\nimport { BaseProvisioningSynchronizer } from '../base.ts';\nimport type { RootProvisioningSynchronizerContext } from './types.ts';\n\nexport class GraphProvisioningSynchronizer extends BaseProvisioningSynchronizer<RootProvisioningEntity> {\n    protected policySynchronizer: IProvisioningSynchronizer<PolicyProvisioningEntity>;\n\n    protected realmSynchronizer: IProvisioningSynchronizer<RealmProvisioningEntity>;\n\n    protected permissionSynchronizer : IProvisioningSynchronizer<PermissionProvisioningEntity>;\n\n    protected roleSynchronizer: IProvisioningSynchronizer<RoleProvisioningEntity>;\n\n    protected scopeSynchronizer: IProvisioningSynchronizer<ScopeProvisioningEntity>;\n\n    constructor(ctx: RootProvisioningSynchronizerContext) {\n        super();\n\n        this.policySynchronizer = ctx.policySynchronizer;\n        this.permissionSynchronizer = ctx.permissionSynchronizer;\n        this.realmSynchronizer = ctx.realmSynchronizer;\n        this.roleSynchronizer = ctx.roleSynchronizer;\n        this.scopeSynchronizer = ctx.scopeSynchronizer;\n    }\n\n    async synchronize(input: RootProvisioningEntity): Promise<RootProvisioningEntity> {\n        const output : RootProvisioningEntity = {};\n\n        if (input.policies) {\n            output.policies = await this.policySynchronizer.synchronizeMany(input.policies);\n        }\n\n        if (input.permissions) {\n            output.permissions = await this.permissionSynchronizer.synchronizeMany(input.permissions);\n        }\n\n        if (input.roles) {\n            output.roles = await this.roleSynchronizer.synchronizeMany(input.roles);\n        }\n\n        if (input.scopes) {\n            output.scopes = await this.scopeSynchronizer.synchronizeMany(input.scopes);\n        }\n\n        if (input.realms) {\n            output.realms = await this.realmSynchronizer.synchronizeMany(input.realms);\n        }\n\n        return output;\n    }\n}\n"],"mappings":";;;;;AAmBA,IAAaC,gCAAb,cAAmDD,6BAAAA;CACrCE;CAEAC;CAEAC;CAEAC;CAEAC;CAEV,YAAYC,KAA0C;EAClD,MAAK;EAEL,KAAKL,qBAAqBK,IAAIL;EAC9B,KAAKE,yBAAyBG,IAAIH;EAClC,KAAKD,oBAAoBI,IAAIJ;EAC7B,KAAKE,mBAAmBE,IAAIF;EAC5B,KAAKC,oBAAoBC,IAAID;CACjC;CAEA,MAAME,YAAYC,OAAgE;EAC9E,MAAMC,SAAkC,CAAC;EAEzC,IAAID,MAAME,UACND,OAAOC,WAAW,MAAM,KAAKT,mBAAmBU,gBAAgBH,MAAME,QAAQ;EAGlF,IAAIF,MAAMI,aACNH,OAAOG,cAAc,MAAM,KAAKT,uBAAuBQ,gBAAgBH,MAAMI,WAAW;EAG5F,IAAIJ,MAAMK,OACNJ,OAAOI,QAAQ,MAAM,KAAKT,iBAAiBO,gBAAgBH,MAAMK,KAAK;EAG1E,IAAIL,MAAMM,QACNL,OAAOK,SAAS,MAAM,KAAKT,kBAAkBM,gBAAgBH,MAAMM,MAAM;EAG7E,IAAIN,MAAMO,QACNN,OAAOM,SAAS,MAAM,KAAKb,kBAAkBS,gBAAgBH,MAAMO,MAAM;EAG7E,OAAON;CACX;AACJ"}

package/dist/core/provisioning/synchronizer/root/types.mjs

@@ -1 +1,4 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 export {};

package/dist/core/provisioning/synchronizer/scope/index.mjs

@@ -1,2 +1,5 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 import { ScopeProvisioningSynchronizer } from "./module.mjs";
 export { ScopeProvisioningSynchronizer };

package/dist/core/provisioning/synchronizer/scope/module.mjs

@@ -1,3 +1,6 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 import { ProvisioningEntityStrategyType } from "../../strategy/constants.mjs";
 import { normalizeEntityProvisioningStrategy } from "../../strategy/normalize.mjs";
 import "../../strategy/index.mjs";

package/dist/core/provisioning/synchronizer/scope/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["pickRecord","ProvisioningEntityStrategyType","normalizeEntityProvisioningStrategy","BaseProvisioningSynchronizer","ScopeProvisioningSynchronizer","repository","ctx","synchronize","input","strategy","attributes","findOneBy","name","realm_id","type","ABSENT","remove","MERGE","merge","save","REPLACE","id","create"],"sources":["../../../../../src/core/provisioning/synchronizer/scope/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { pickRecord } from '@authup/kit';\nimport type { IScopeRepository } from '../../../entities/index.ts';\nimport type { ScopeProvisioningEntity } from '../../entities/index.ts';\nimport { ProvisioningEntityStrategyType, normalizeEntityProvisioningStrategy } from '../../strategy/index.ts';\nimport { BaseProvisioningSynchronizer } from '../base.ts';\nimport type { ScopeProvisioningSynchronizerContext } from './types.ts';\n\nexport class ScopeProvisioningSynchronizer extends BaseProvisioningSynchronizer<ScopeProvisioningEntity> {\n    protected repository : IScopeRepository;\n\n    constructor(ctx: ScopeProvisioningSynchronizerContext) {\n        super();\n\n        this.repository = ctx.repository;\n    }\n\n    async synchronize(input: ScopeProvisioningEntity): Promise<ScopeProvisioningEntity> {\n        const strategy = normalizeEntityProvisioningStrategy(input.strategy);\n\n        let attributes = await this.repository.findOneBy({\n            name: input.attributes.name,\n            realm_id: input.attributes.realm_id || null,\n        });\n\n        if (strategy.type === ProvisioningEntityStrategyType.ABSENT) {\n            if (attributes) {\n                await this.repository.remove(attributes);\n            }\n            return {\n                ...input,\n                attributes: attributes || input.attributes, \n            };\n        }\n\n        if (attributes) {\n            switch (strategy.type) {\n                case ProvisioningEntityStrategyType.MERGE:\n                    attributes = this.repository.merge(\n                        attributes,\n                        strategy.attributes ?\n                            pickRecord(input.attributes, strategy.attributes) :\n                            input.attributes,\n                    );\n\n                    attributes = await this.repository.save(attributes);\n                    break;\n                case ProvisioningEntityStrategyType.REPLACE:\n                    input.attributes.id = attributes.id;\n                    attributes = await this.repository.save(this.repository.create(input.attributes));\n                    break;\n            }\n        } else {\n            attributes = await this.repository.save(this.repository.create(input.attributes));\n        }\n\n        return {\n            ...input,\n            attributes,\n        };\n    }\n}\n"],"mappings":";;;;;;AAcA,IAAaI,gCAAb,cAAmDD,6BAAAA;CACrCE;CAEV,YAAYC,KAA2C;EACnD,MAAK;EAEL,KAAKD,aAAaC,IAAID;CAC1B;CAEA,MAAME,YAAYC,OAAkE;EAChF,MAAMC,WAAWP,oCAAoCM,MAAMC,QAAQ;EAEnE,IAAIC,aAAa,MAAM,KAAKL,WAAWM,UAAU;GAC7CC,MAAMJ,MAAME,WAAWE;GACvBC,UAAUL,MAAME,WAAWG,YAAY;EAC3C,CAAA;EAEA,IAAIJ,SAASK,SAASb,+BAA+Bc,QAAQ;GACzD,IAAIL,YACA,MAAM,KAAKL,WAAWW,OAAON,UAAAA;GAEjC,OAAO;IACH,GAAGF;IACHE,YAAYA,cAAcF,MAAME;GACpC;EACJ;EAEA,IAAIA,YACA,QAAQD,SAASK,MAAjB;GACI,KAAKb,+BAA+BgB;IAChCP,aAAa,KAAKL,WAAWa,MACzBR,YACAD,SAASC,aACLV,WAAWQ,MAAME,YAAYD,SAASC,UAAU,IAChDF,MAAME,UAAU;IAGxBA,aAAa,MAAM,KAAKL,WAAWc,KAAKT,UAAAA;IACxC;GACJ,KAAKT,+BAA+BmB;IAChCZ,MAAME,WAAWW,KAAKX,WAAWW;IACjCX,aAAa,MAAM,KAAKL,WAAWc,KAAK,KAAKd,WAAWiB,OAAOd,MAAME,UAAU,CAAA;IAC/E;EACR;OAEAA,aAAa,MAAM,KAAKL,WAAWc,KAAK,KAAKd,WAAWiB,OAAOd,MAAME,UAAU,CAAA;EAGnF,OAAO;GACH,GAAGF;GACHE;EACJ;CACJ;AACJ"}
+{"version":3,"file":"module.mjs","names":["pickRecord","ProvisioningEntityStrategyType","normalizeEntityProvisioningStrategy","BaseProvisioningSynchronizer","ScopeProvisioningSynchronizer","repository","ctx","synchronize","input","strategy","attributes","findOneBy","name","realm_id","type","ABSENT","remove","MERGE","merge","save","REPLACE","id","create"],"sources":["../../../../../src/core/provisioning/synchronizer/scope/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { pickRecord } from '@authup/kit';\nimport type { IScopeRepository } from '../../../entities/index.ts';\nimport type { ScopeProvisioningEntity } from '../../entities/index.ts';\nimport { ProvisioningEntityStrategyType, normalizeEntityProvisioningStrategy } from '../../strategy/index.ts';\nimport { BaseProvisioningSynchronizer } from '../base.ts';\nimport type { ScopeProvisioningSynchronizerContext } from './types.ts';\n\nexport class ScopeProvisioningSynchronizer extends BaseProvisioningSynchronizer<ScopeProvisioningEntity> {\n    protected repository : IScopeRepository;\n\n    constructor(ctx: ScopeProvisioningSynchronizerContext) {\n        super();\n\n        this.repository = ctx.repository;\n    }\n\n    async synchronize(input: ScopeProvisioningEntity): Promise<ScopeProvisioningEntity> {\n        const strategy = normalizeEntityProvisioningStrategy(input.strategy);\n\n        let attributes = await this.repository.findOneBy({\n            name: input.attributes.name,\n            realm_id: input.attributes.realm_id || null,\n        });\n\n        if (strategy.type === ProvisioningEntityStrategyType.ABSENT) {\n            if (attributes) {\n                await this.repository.remove(attributes);\n            }\n            return {\n                ...input,\n                attributes: attributes || input.attributes, \n            };\n        }\n\n        if (attributes) {\n            switch (strategy.type) {\n                case ProvisioningEntityStrategyType.MERGE:\n                    attributes = this.repository.merge(\n                        attributes,\n                        strategy.attributes ?\n                            pickRecord(input.attributes, strategy.attributes) :\n                            input.attributes,\n                    );\n\n                    attributes = await this.repository.save(attributes);\n                    break;\n                case ProvisioningEntityStrategyType.REPLACE:\n                    input.attributes.id = attributes.id;\n                    attributes = await this.repository.save(this.repository.create(input.attributes));\n                    break;\n            }\n        } else {\n            attributes = await this.repository.save(this.repository.create(input.attributes));\n        }\n\n        return {\n            ...input,\n            attributes,\n        };\n    }\n}\n"],"mappings":";;;;;;;;;AAcA,IAAaI,gCAAb,cAAmDD,6BAAAA;CACrCE;CAEV,YAAYC,KAA2C;EACnD,MAAK;EAEL,KAAKD,aAAaC,IAAID;CAC1B;CAEA,MAAME,YAAYC,OAAkE;EAChF,MAAMC,WAAWP,oCAAoCM,MAAMC,QAAQ;EAEnE,IAAIC,aAAa,MAAM,KAAKL,WAAWM,UAAU;GAC7CC,MAAMJ,MAAME,WAAWE;GACvBC,UAAUL,MAAME,WAAWG,YAAY;EAC3C,CAAA;EAEA,IAAIJ,SAASK,SAASb,+BAA+Bc,QAAQ;GACzD,IAAIL,YACA,MAAM,KAAKL,WAAWW,OAAON,UAAAA;GAEjC,OAAO;IACH,GAAGF;IACHE,YAAYA,cAAcF,MAAME;GACpC;EACJ;EAEA,IAAIA,YACA,QAAQD,SAASK,MAAjB;GACI,KAAKb,+BAA+BgB;IAChCP,aAAa,KAAKL,WAAWa,MACzBR,YACAD,SAASC,aACLV,WAAWQ,MAAME,YAAYD,SAASC,UAAU,IAChDF,MAAME,UAAU;IAGxBA,aAAa,MAAM,KAAKL,WAAWc,KAAKT,UAAAA;IACxC;GACJ,KAAKT,+BAA+BmB;IAChCZ,MAAME,WAAWW,KAAKX,WAAWW;IACjCX,aAAa,MAAM,KAAKL,WAAWc,KAAK,KAAKd,WAAWiB,OAAOd,MAAME,UAAU,CAAA;IAC/E;EACR;OAEAA,aAAa,MAAM,KAAKL,WAAWc,KAAK,KAAKd,WAAWiB,OAAOd,MAAME,UAAU,CAAA;EAGnF,OAAO;GACH,GAAGF;GACHE;EACJ;CACJ;AACJ"}

package/dist/core/provisioning/synchronizer/scope/types.mjs

@@ -1 +1,4 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 export {};

package/dist/core/provisioning/synchronizer/user/index.mjs

@@ -1,2 +1,5 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 import { UserProvisioningSynchronizer } from "./module.mjs";
 export { UserProvisioningSynchronizer };

package/dist/core/provisioning/synchronizer/user/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/synchronizer/user/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,UAAU,EACV,IAAI,EACJ,cAAc,EACd,QAAQ,EACX,MAAM,kBAAkB,CAAC;AAG1B,OAAO,KAAK,EACR,iBAAiB,EACjB,eAAe,EAClB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAE3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,gCAAgC,EAAE,MAAM,6BAA6B,CAAC;AAC/E,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAEtE,qBAAa,4BAA6B,SAAQ,4BAA4B,CAAC,sBAAsB,CAAC;IAClG,SAAS,CAAC,cAAc,EAAE,eAAe,CAAC;IAE1C,SAAS,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;IAE9C,SAAS,CAAC,kBAAkB,EAAE,0BAA0B,CAAC,UAAU,CAAC,CAAC;IAErE,SAAS,CAAC,YAAY,EAAE,0BAA0B,CAAC,IAAI,CAAC,CAAC;IAEzD,SAAS,CAAC,kBAAkB,EAAE,gCAAgC,CAAC,cAAc,CAAC,CAAC;IAE/E,SAAS,CAAC,YAAY,EAAE,gCAAgC,CAAC,QAAQ,CAAC,CAAC;gBAEvD,GAAG,EAAE,mCAAmC;IAqB9C,WAAW,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAgJpF"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/synchronizer/user/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,UAAU,EACV,IAAI,EACJ,cAAc,EACd,QAAQ,EACX,MAAM,kBAAkB,CAAC;AAG1B,OAAO,KAAK,EACR,iBAAiB,EACjB,eAAe,EAClB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAE3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,gCAAgC,EAAE,MAAM,6BAA6B,CAAC;AAC/E,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,YAAY,CAAC;AAEtE,qBAAa,4BAA6B,SAAQ,4BAA4B,CAAC,sBAAsB,CAAC;IAClG,SAAS,CAAC,cAAc,EAAE,eAAe,CAAC;IAE1C,SAAS,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;IAE9C,SAAS,CAAC,kBAAkB,EAAE,0BAA0B,CAAC,UAAU,CAAC,CAAC;IAErE,SAAS,CAAC,YAAY,EAAE,0BAA0B,CAAC,IAAI,CAAC,CAAC;IAEzD,SAAS,CAAC,kBAAkB,EAAE,gCAAgC,CAAC,cAAc,CAAC,CAAC;IAE/E,SAAS,CAAC,YAAY,EAAE,gCAAgC,CAAC,QAAQ,CAAC,CAAC;gBAEvD,GAAG,EAAE,mCAAmC;IAqB9C,WAAW,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CA+IpF"}

package/dist/core/provisioning/synchronizer/user/module.mjs

@@ -1,3 +1,6 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 import { ProvisioningEntityStrategyType } from "../../strategy/constants.mjs";
 import { normalizeEntityProvisioningStrategy } from "../../strategy/normalize.mjs";
 import "../../strategy/index.mjs";
@@ -35,8 +38,7 @@ var UserProvisioningSynchronizer = class extends BaseProvisioningSynchronizer {
 		const strategy = normalizeEntityProvisioningStrategy(input.strategy);
 		let attributes = await this.userRepository.findOneBy({
 			name: input.attributes.name,
-			realm_id: input.attributes.realm_id || null,
-			client_id: input.attributes.client_id || null
+			realm_id: input.attributes.realm_id || null
 		});
 		if (strategy.type === ProvisioningEntityStrategyType.ABSENT) {
 			if (attributes) await this.userRepository.remove(attributes);

package/dist/core/provisioning/synchronizer/user/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["buildUserFakeEmail","pickRecord","ProvisioningEntityStrategyType","normalizeEntityProvisioningStrategy","BaseProvisioningSynchronizer","ProvisioningEntityResolver","ProvisioningJunctionSynchronizer","UserProvisioningSynchronizer","userRepository","clientRepository","permissionResolver","roleResolver","permissionJunction","roleJunction","ctx","permissionRepository","roleRepository","repository","userPermissionRepository","ownerKey","ownerRealmKey","userRoleRepository","synchronize","input","strategy","attributes","findOneBy","name","realm_id","client_id","type","ABSENT","remove","MERGE","includes","email","merge","save","REPLACE","undefined","id","create","permissions","resolveGlobal","relations","globalPermissions","resolveRealm","realmPermissions","clientPermissions","clientKeys","Object","keys","clientKey","client","entities","resolveClient","push","length","roles","globalRoles","realmRoles","clientRoles"],"sources":["../../../../../src/core/provisioning/synchronizer/user/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    Permission, \n    Role, \n    UserPermission, \n    UserRole,\n} from '@authup/core-kit';\nimport { buildUserFakeEmail } from '@authup/core-kit';\nimport { pickRecord } from '@authup/kit';\nimport type {\n    IClientRepository,\n    IUserRepository,\n} from '../../../entities/index.ts';\nimport type { UserProvisioningEntity } from '../../entities/user/index.ts';\nimport { ProvisioningEntityStrategyType, normalizeEntityProvisioningStrategy } from '../../strategy/index.ts';\nimport { BaseProvisioningSynchronizer } from '../base.ts';\nimport { ProvisioningEntityResolver } from '../entity-resolver.ts';\nimport { ProvisioningJunctionSynchronizer } from '../junction-synchronizer.ts';\nimport type { UserProvisioningSynchronizerContext } from './types.ts';\n\nexport class UserProvisioningSynchronizer extends BaseProvisioningSynchronizer<UserProvisioningEntity> {\n    protected userRepository: IUserRepository;\n\n    protected clientRepository: IClientRepository;\n\n    protected permissionResolver: ProvisioningEntityResolver<Permission>;\n\n    protected roleResolver: ProvisioningEntityResolver<Role>;\n\n    protected permissionJunction: ProvisioningJunctionSynchronizer<UserPermission>;\n\n    protected roleJunction: ProvisioningJunctionSynchronizer<UserRole>;\n\n    constructor(ctx: UserProvisioningSynchronizerContext) {\n        super();\n\n        this.userRepository = ctx.userRepository;\n        this.clientRepository = ctx.clientRepository;\n\n        this.permissionResolver = new ProvisioningEntityResolver(ctx.permissionRepository);\n        this.roleResolver = new ProvisioningEntityResolver(ctx.roleRepository);\n\n        this.permissionJunction = new ProvisioningJunctionSynchronizer({\n            repository: ctx.userPermissionRepository,\n            ownerKey: 'user_id',\n            ownerRealmKey: 'user_realm_id',\n        });\n        this.roleJunction = new ProvisioningJunctionSynchronizer({\n            repository: ctx.userRoleRepository,\n            ownerKey: 'user_id',\n            ownerRealmKey: 'user_realm_id',\n        });\n    }\n\n    async synchronize(input: UserProvisioningEntity): Promise<UserProvisioningEntity> {\n        const strategy = normalizeEntityProvisioningStrategy(input.strategy);\n\n        let attributes = await this.userRepository.findOneBy({\n            name: input.attributes.name,\n            realm_id: input.attributes.realm_id || null,\n            client_id: input.attributes.client_id || null,\n        });\n\n        if (strategy.type === ProvisioningEntityStrategyType.ABSENT) {\n            if (attributes) {\n                await this.userRepository.remove(attributes);\n            }\n            return {\n                ...input,\n                attributes: attributes || input.attributes, \n            };\n        }\n\n        if (attributes) {\n            switch (strategy.type) {\n                case ProvisioningEntityStrategyType.MERGE:\n                    if (\n                        strategy.attributes &&\n                        strategy.attributes.includes('email')\n                    ) {\n                        input.attributes.email = input.attributes.email ||\n                            attributes.email ||\n                            buildUserFakeEmail(input.attributes.name || attributes.name);\n                    }\n\n                    attributes = this.userRepository.merge(\n                        attributes,\n                        strategy.attributes ?\n                            pickRecord(input.attributes, strategy.attributes) :\n                            input.attributes,\n                    );\n\n                    attributes = await this.userRepository.save(attributes);\n                    break;\n                case ProvisioningEntityStrategyType.REPLACE:\n                    input.attributes.email = input.attributes.email ||\n                        attributes.email ||\n                        (input.attributes.name ? buildUserFakeEmail(input.attributes.name) : undefined);\n\n                    input.attributes.id = attributes.id;\n                    attributes = await this.userRepository.save(this.userRepository.create(input.attributes));\n                    break;\n            }\n        } else {\n            if (!input.attributes.email && input.attributes.name) {\n                input.attributes.email = buildUserFakeEmail(input.attributes.name);\n            }\n\n            attributes = await this.userRepository.save(this.userRepository.create(input.attributes));\n        }\n\n        // Permissions (Global, Realm & Client)\n        const permissions : Permission[] = [\n            ...await this.permissionResolver.resolveGlobal(\n                input.relations && input.relations.globalPermissions,\n            ),\n            ...(attributes.realm_id ?\n                await this.permissionResolver.resolveRealm(\n                    input.relations && input.relations.realmPermissions,\n                    attributes.realm_id,\n                ) :\n                []),\n        ];\n\n        if (input.relations && input.relations.clientPermissions) {\n            const clientKeys = Object.keys(input.relations.clientPermissions);\n            for (const clientKey of clientKeys) {\n                const client = await this.clientRepository.findOneBy({\n                    name: clientKey,\n                    realm_id: attributes.realm_id,\n                });\n\n                if (client) {\n                    const entities = await this.permissionResolver.resolveClient(\n                        input.relations.clientPermissions[clientKey],\n                        attributes.realm_id,\n                        client.id,\n                    );\n                    permissions.push(...entities);\n                }\n            }\n        }\n\n        if (permissions.length > 0) {\n            await this.permissionJunction.synchronize(\n                attributes,\n                permissions,\n                'permission_id',\n                'permission_realm_id',\n            );\n        }\n\n        // Roles (Global, Realm & Client)\n        const roles : Role[] = [\n            ...await this.roleResolver.resolveGlobal(\n                input.relations && input.relations.globalRoles,\n            ),\n            ...(attributes.realm_id ?\n                await this.roleResolver.resolveRealm(\n                    input.relations && input.relations.realmRoles,\n                    attributes.realm_id,\n                ) :\n                []),\n        ];\n\n        if (input.relations && input.relations.clientRoles) {\n            const clientKeys = Object.keys(input.relations.clientRoles);\n            for (const clientKey of clientKeys) {\n                const client = await this.clientRepository.findOneBy({\n                    name: clientKey,\n                    realm_id: attributes.realm_id,\n                });\n\n                if (client) {\n                    const entities = await this.roleResolver.resolveClient(\n                        input.relations.clientRoles[clientKey],\n                        attributes.realm_id,\n                        client.id,\n                    );\n                    roles.push(...entities);\n                }\n            }\n        }\n\n        if (roles.length > 0) {\n            await this.roleJunction.synchronize(\n                attributes,\n                roles,\n                'role_id',\n                'role_realm_id',\n            );\n        }\n\n        return {\n            ...input,\n            attributes,\n        };\n    }\n}\n"],"mappings":";;;;;;;;;AA0BA,IAAaO,+BAAb,cAAkDH,6BAAAA;CACpCI;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEV,YAAYC,KAA0C;EAClD,MAAK;EAEL,KAAKN,iBAAiBM,IAAIN;EAC1B,KAAKC,mBAAmBK,IAAIL;EAE5B,KAAKC,qBAAqB,IAAIL,2BAA2BS,IAAIC,oBAAoB;EACjF,KAAKJ,eAAe,IAAIN,2BAA2BS,IAAIE,cAAc;EAErE,KAAKJ,qBAAqB,IAAIN,iCAAiC;GAC3DW,YAAYH,IAAII;GAChBC,UAAU;GACVC,eAAe;EACnB,CAAA;EACA,KAAKP,eAAe,IAAIP,iCAAiC;GACrDW,YAAYH,IAAIO;GAChBF,UAAU;GACVC,eAAe;EACnB,CAAA;CACJ;CAEA,MAAME,YAAYC,OAAgE;EAC9E,MAAMC,WAAWrB,oCAAoCoB,MAAMC,QAAQ;EAEnE,IAAIC,aAAa,MAAM,KAAKjB,eAAekB,UAAU;GACjDC,MAAMJ,MAAME,WAAWE;GACvBC,UAAUL,MAAME,WAAWG,YAAY;GACvCC,WAAWN,MAAME,WAAWI,aAAa;EAC7C,CAAA;EAEA,IAAIL,SAASM,SAAS5B,+BAA+B6B,QAAQ;GACzD,IAAIN,YACA,MAAM,KAAKjB,eAAewB,OAAOP,UAAAA;GAErC,OAAO;IACH,GAAGF;IACHE,YAAYA,cAAcF,MAAME;GACpC;EACJ;EAEA,IAAIA,YACA,QAAQD,SAASM,MAAjB;GACI,KAAK5B,+BAA+B+B;IAChC,IACIT,SAASC,cACTD,SAASC,WAAWS,SAAS,OAAA,GAE7BX,MAAME,WAAWU,QAAQZ,MAAME,WAAWU,SACtCV,WAAWU,SACXnC,mBAAmBuB,MAAME,WAAWE,QAAQF,WAAWE,IAAI;IAGnEF,aAAa,KAAKjB,eAAe4B,MAC7BX,YACAD,SAASC,aACLxB,WAAWsB,MAAME,YAAYD,SAASC,UAAU,IAChDF,MAAME,UAAU;IAGxBA,aAAa,MAAM,KAAKjB,eAAe6B,KAAKZ,UAAAA;IAC5C;GACJ,KAAKvB,+BAA+BoC;IAChCf,MAAME,WAAWU,QAAQZ,MAAME,WAAWU,SACtCV,WAAWU,UACVZ,MAAME,WAAWE,OAAO3B,mBAAmBuB,MAAME,WAAWE,IAAI,IAAIY,KAAAA;IAEzEhB,MAAME,WAAWe,KAAKf,WAAWe;IACjCf,aAAa,MAAM,KAAKjB,eAAe6B,KAAK,KAAK7B,eAAeiC,OAAOlB,MAAME,UAAU,CAAA;IACvF;EACR;OACG;GACH,IAAI,CAACF,MAAME,WAAWU,SAASZ,MAAME,WAAWE,MAC5CJ,MAAME,WAAWU,QAAQnC,mBAAmBuB,MAAME,WAAWE,IAAI;GAGrEF,aAAa,MAAM,KAAKjB,eAAe6B,KAAK,KAAK7B,eAAeiC,OAAOlB,MAAME,UAAU,CAAA;EAC3F;EAGA,MAAMiB,cAA6B,CAAA,GAC5B,MAAM,KAAKhC,mBAAmBiC,cAC7BpB,MAAMqB,aAAarB,MAAMqB,UAAUC,iBAAiB,GAAA,GAEpDpB,WAAWG,WACX,MAAM,KAAKlB,mBAAmBoC,aAC1BvB,MAAMqB,aAAarB,MAAMqB,UAAUG,kBACnCtB,WAAWG,QAAQ,IAEvB,CAAA,CAAA;EAGR,IAAIL,MAAMqB,aAAarB,MAAMqB,UAAUI,mBAAmB;GACtD,MAAMC,aAAaC,OAAOC,KAAK5B,MAAMqB,UAAUI,iBAAiB;GAChE,KAAK,MAAMI,aAAaH,YAAY;IAChC,MAAMI,SAAS,MAAM,KAAK5C,iBAAiBiB,UAAU;KACjDC,MAAMyB;KACNxB,UAAUH,WAAWG;IACzB,CAAA;IAEA,IAAIyB,QAAQ;KACR,MAAMC,WAAW,MAAM,KAAK5C,mBAAmB6C,cAC3ChC,MAAMqB,UAAUI,kBAAkBI,YAClC3B,WAAWG,UACXyB,OAAOb,EAAE;KAEbE,YAAYc,KAAI,GAAIF,QAAAA;IACxB;GACJ;EACJ;EAEA,IAAIZ,YAAYe,SAAS,GACrB,MAAM,KAAK7C,mBAAmBU,YAC1BG,YACAiB,aACA,iBACA,qBAAA;EAKR,MAAMgB,QAAiB,CAAA,GAChB,MAAM,KAAK/C,aAAagC,cACvBpB,MAAMqB,aAAarB,MAAMqB,UAAUe,WAAW,GAAA,GAE9ClC,WAAWG,WACX,MAAM,KAAKjB,aAAamC,aACpBvB,MAAMqB,aAAarB,MAAMqB,UAAUgB,YACnCnC,WAAWG,QAAQ,IAEvB,CAAA,CAAA;EAGR,IAAIL,MAAMqB,aAAarB,MAAMqB,UAAUiB,aAAa;GAChD,MAAMZ,aAAaC,OAAOC,KAAK5B,MAAMqB,UAAUiB,WAAW;GAC1D,KAAK,MAAMT,aAAaH,YAAY;IAChC,MAAMI,SAAS,MAAM,KAAK5C,iBAAiBiB,UAAU;KACjDC,MAAMyB;KACNxB,UAAUH,WAAWG;IACzB,CAAA;IAEA,IAAIyB,QAAQ;KACR,MAAMC,WAAW,MAAM,KAAK3C,aAAa4C,cACrChC,MAAMqB,UAAUiB,YAAYT,YAC5B3B,WAAWG,UACXyB,OAAOb,EAAE;KAEbkB,MAAMF,KAAI,GAAIF,QAAAA;IAClB;GACJ;EACJ;EAEA,IAAII,MAAMD,SAAS,GACf,MAAM,KAAK5C,aAAaS,YACpBG,YACAiC,OACA,WACA,eAAA;EAIR,OAAO;GACH,GAAGnC;GACHE;EACJ;CACJ;AACJ"}
+{"version":3,"file":"module.mjs","names":["buildUserFakeEmail","pickRecord","ProvisioningEntityStrategyType","normalizeEntityProvisioningStrategy","BaseProvisioningSynchronizer","ProvisioningEntityResolver","ProvisioningJunctionSynchronizer","UserProvisioningSynchronizer","userRepository","clientRepository","permissionResolver","roleResolver","permissionJunction","roleJunction","ctx","permissionRepository","roleRepository","repository","userPermissionRepository","ownerKey","ownerRealmKey","userRoleRepository","synchronize","input","strategy","attributes","findOneBy","name","realm_id","type","ABSENT","remove","MERGE","includes","email","merge","save","REPLACE","undefined","id","create","permissions","resolveGlobal","relations","globalPermissions","resolveRealm","realmPermissions","clientPermissions","clientKeys","Object","keys","clientKey","client","entities","resolveClient","push","length","roles","globalRoles","realmRoles","clientRoles"],"sources":["../../../../../src/core/provisioning/synchronizer/user/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    Permission, \n    Role, \n    UserPermission, \n    UserRole,\n} from '@authup/core-kit';\nimport { buildUserFakeEmail } from '@authup/core-kit';\nimport { pickRecord } from '@authup/kit';\nimport type {\n    IClientRepository,\n    IUserRepository,\n} from '../../../entities/index.ts';\nimport type { UserProvisioningEntity } from '../../entities/user/index.ts';\nimport { ProvisioningEntityStrategyType, normalizeEntityProvisioningStrategy } from '../../strategy/index.ts';\nimport { BaseProvisioningSynchronizer } from '../base.ts';\nimport { ProvisioningEntityResolver } from '../entity-resolver.ts';\nimport { ProvisioningJunctionSynchronizer } from '../junction-synchronizer.ts';\nimport type { UserProvisioningSynchronizerContext } from './types.ts';\n\nexport class UserProvisioningSynchronizer extends BaseProvisioningSynchronizer<UserProvisioningEntity> {\n    protected userRepository: IUserRepository;\n\n    protected clientRepository: IClientRepository;\n\n    protected permissionResolver: ProvisioningEntityResolver<Permission>;\n\n    protected roleResolver: ProvisioningEntityResolver<Role>;\n\n    protected permissionJunction: ProvisioningJunctionSynchronizer<UserPermission>;\n\n    protected roleJunction: ProvisioningJunctionSynchronizer<UserRole>;\n\n    constructor(ctx: UserProvisioningSynchronizerContext) {\n        super();\n\n        this.userRepository = ctx.userRepository;\n        this.clientRepository = ctx.clientRepository;\n\n        this.permissionResolver = new ProvisioningEntityResolver(ctx.permissionRepository);\n        this.roleResolver = new ProvisioningEntityResolver(ctx.roleRepository);\n\n        this.permissionJunction = new ProvisioningJunctionSynchronizer({\n            repository: ctx.userPermissionRepository,\n            ownerKey: 'user_id',\n            ownerRealmKey: 'user_realm_id',\n        });\n        this.roleJunction = new ProvisioningJunctionSynchronizer({\n            repository: ctx.userRoleRepository,\n            ownerKey: 'user_id',\n            ownerRealmKey: 'user_realm_id',\n        });\n    }\n\n    async synchronize(input: UserProvisioningEntity): Promise<UserProvisioningEntity> {\n        const strategy = normalizeEntityProvisioningStrategy(input.strategy);\n\n        let attributes = await this.userRepository.findOneBy({\n            name: input.attributes.name,\n            realm_id: input.attributes.realm_id || null,\n        });\n\n        if (strategy.type === ProvisioningEntityStrategyType.ABSENT) {\n            if (attributes) {\n                await this.userRepository.remove(attributes);\n            }\n            return {\n                ...input,\n                attributes: attributes || input.attributes, \n            };\n        }\n\n        if (attributes) {\n            switch (strategy.type) {\n                case ProvisioningEntityStrategyType.MERGE:\n                    if (\n                        strategy.attributes &&\n                        strategy.attributes.includes('email')\n                    ) {\n                        input.attributes.email = input.attributes.email ||\n                            attributes.email ||\n                            buildUserFakeEmail(input.attributes.name || attributes.name);\n                    }\n\n                    attributes = this.userRepository.merge(\n                        attributes,\n                        strategy.attributes ?\n                            pickRecord(input.attributes, strategy.attributes) :\n                            input.attributes,\n                    );\n\n                    attributes = await this.userRepository.save(attributes);\n                    break;\n                case ProvisioningEntityStrategyType.REPLACE:\n                    input.attributes.email = input.attributes.email ||\n                        attributes.email ||\n                        (input.attributes.name ? buildUserFakeEmail(input.attributes.name) : undefined);\n\n                    input.attributes.id = attributes.id;\n                    attributes = await this.userRepository.save(this.userRepository.create(input.attributes));\n                    break;\n            }\n        } else {\n            if (!input.attributes.email && input.attributes.name) {\n                input.attributes.email = buildUserFakeEmail(input.attributes.name);\n            }\n\n            attributes = await this.userRepository.save(this.userRepository.create(input.attributes));\n        }\n\n        // Permissions (Global, Realm & Client)\n        const permissions : Permission[] = [\n            ...await this.permissionResolver.resolveGlobal(\n                input.relations && input.relations.globalPermissions,\n            ),\n            ...(attributes.realm_id ?\n                await this.permissionResolver.resolveRealm(\n                    input.relations && input.relations.realmPermissions,\n                    attributes.realm_id,\n                ) :\n                []),\n        ];\n\n        if (input.relations && input.relations.clientPermissions) {\n            const clientKeys = Object.keys(input.relations.clientPermissions);\n            for (const clientKey of clientKeys) {\n                const client = await this.clientRepository.findOneBy({\n                    name: clientKey,\n                    realm_id: attributes.realm_id,\n                });\n\n                if (client) {\n                    const entities = await this.permissionResolver.resolveClient(\n                        input.relations.clientPermissions[clientKey],\n                        attributes.realm_id,\n                        client.id,\n                    );\n                    permissions.push(...entities);\n                }\n            }\n        }\n\n        if (permissions.length > 0) {\n            await this.permissionJunction.synchronize(\n                attributes,\n                permissions,\n                'permission_id',\n                'permission_realm_id',\n            );\n        }\n\n        // Roles (Global, Realm & Client)\n        const roles : Role[] = [\n            ...await this.roleResolver.resolveGlobal(\n                input.relations && input.relations.globalRoles,\n            ),\n            ...(attributes.realm_id ?\n                await this.roleResolver.resolveRealm(\n                    input.relations && input.relations.realmRoles,\n                    attributes.realm_id,\n                ) :\n                []),\n        ];\n\n        if (input.relations && input.relations.clientRoles) {\n            const clientKeys = Object.keys(input.relations.clientRoles);\n            for (const clientKey of clientKeys) {\n                const client = await this.clientRepository.findOneBy({\n                    name: clientKey,\n                    realm_id: attributes.realm_id,\n                });\n\n                if (client) {\n                    const entities = await this.roleResolver.resolveClient(\n                        input.relations.clientRoles[clientKey],\n                        attributes.realm_id,\n                        client.id,\n                    );\n                    roles.push(...entities);\n                }\n            }\n        }\n\n        if (roles.length > 0) {\n            await this.roleJunction.synchronize(\n                attributes,\n                roles,\n                'role_id',\n                'role_realm_id',\n            );\n        }\n\n        return {\n            ...input,\n            attributes,\n        };\n    }\n}\n"],"mappings":";;;;;;;;;;;;AA0BA,IAAaO,+BAAb,cAAkDH,6BAAAA;CACpCI;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEV,YAAYC,KAA0C;EAClD,MAAK;EAEL,KAAKN,iBAAiBM,IAAIN;EAC1B,KAAKC,mBAAmBK,IAAIL;EAE5B,KAAKC,qBAAqB,IAAIL,2BAA2BS,IAAIC,oBAAoB;EACjF,KAAKJ,eAAe,IAAIN,2BAA2BS,IAAIE,cAAc;EAErE,KAAKJ,qBAAqB,IAAIN,iCAAiC;GAC3DW,YAAYH,IAAII;GAChBC,UAAU;GACVC,eAAe;EACnB,CAAA;EACA,KAAKP,eAAe,IAAIP,iCAAiC;GACrDW,YAAYH,IAAIO;GAChBF,UAAU;GACVC,eAAe;EACnB,CAAA;CACJ;CAEA,MAAME,YAAYC,OAAgE;EAC9E,MAAMC,WAAWrB,oCAAoCoB,MAAMC,QAAQ;EAEnE,IAAIC,aAAa,MAAM,KAAKjB,eAAekB,UAAU;GACjDC,MAAMJ,MAAME,WAAWE;GACvBC,UAAUL,MAAME,WAAWG,YAAY;EAC3C,CAAA;EAEA,IAAIJ,SAASK,SAAS3B,+BAA+B4B,QAAQ;GACzD,IAAIL,YACA,MAAM,KAAKjB,eAAeuB,OAAON,UAAAA;GAErC,OAAO;IACH,GAAGF;IACHE,YAAYA,cAAcF,MAAME;GACpC;EACJ;EAEA,IAAIA,YACA,QAAQD,SAASK,MAAjB;GACI,KAAK3B,+BAA+B8B;IAChC,IACIR,SAASC,cACTD,SAASC,WAAWQ,SAAS,OAAA,GAE7BV,MAAME,WAAWS,QAAQX,MAAME,WAAWS,SACtCT,WAAWS,SACXlC,mBAAmBuB,MAAME,WAAWE,QAAQF,WAAWE,IAAI;IAGnEF,aAAa,KAAKjB,eAAe2B,MAC7BV,YACAD,SAASC,aACLxB,WAAWsB,MAAME,YAAYD,SAASC,UAAU,IAChDF,MAAME,UAAU;IAGxBA,aAAa,MAAM,KAAKjB,eAAe4B,KAAKX,UAAAA;IAC5C;GACJ,KAAKvB,+BAA+BmC;IAChCd,MAAME,WAAWS,QAAQX,MAAME,WAAWS,SACtCT,WAAWS,UACVX,MAAME,WAAWE,OAAO3B,mBAAmBuB,MAAME,WAAWE,IAAI,IAAIW,KAAAA;IAEzEf,MAAME,WAAWc,KAAKd,WAAWc;IACjCd,aAAa,MAAM,KAAKjB,eAAe4B,KAAK,KAAK5B,eAAegC,OAAOjB,MAAME,UAAU,CAAA;IACvF;EACR;OACG;GACH,IAAI,CAACF,MAAME,WAAWS,SAASX,MAAME,WAAWE,MAC5CJ,MAAME,WAAWS,QAAQlC,mBAAmBuB,MAAME,WAAWE,IAAI;GAGrEF,aAAa,MAAM,KAAKjB,eAAe4B,KAAK,KAAK5B,eAAegC,OAAOjB,MAAME,UAAU,CAAA;EAC3F;EAGA,MAAMgB,cAA6B,CAAA,GAC5B,MAAM,KAAK/B,mBAAmBgC,cAC7BnB,MAAMoB,aAAapB,MAAMoB,UAAUC,iBAAiB,GAAA,GAEpDnB,WAAWG,WACX,MAAM,KAAKlB,mBAAmBmC,aAC1BtB,MAAMoB,aAAapB,MAAMoB,UAAUG,kBACnCrB,WAAWG,QAAQ,IAEvB,CAAA,CAAA;EAGR,IAAIL,MAAMoB,aAAapB,MAAMoB,UAAUI,mBAAmB;GACtD,MAAMC,aAAaC,OAAOC,KAAK3B,MAAMoB,UAAUI,iBAAiB;GAChE,KAAK,MAAMI,aAAaH,YAAY;IAChC,MAAMI,SAAS,MAAM,KAAK3C,iBAAiBiB,UAAU;KACjDC,MAAMwB;KACNvB,UAAUH,WAAWG;IACzB,CAAA;IAEA,IAAIwB,QAAQ;KACR,MAAMC,WAAW,MAAM,KAAK3C,mBAAmB4C,cAC3C/B,MAAMoB,UAAUI,kBAAkBI,YAClC1B,WAAWG,UACXwB,OAAOb,EAAE;KAEbE,YAAYc,KAAI,GAAIF,QAAAA;IACxB;GACJ;EACJ;EAEA,IAAIZ,YAAYe,SAAS,GACrB,MAAM,KAAK5C,mBAAmBU,YAC1BG,YACAgB,aACA,iBACA,qBAAA;EAKR,MAAMgB,QAAiB,CAAA,GAChB,MAAM,KAAK9C,aAAa+B,cACvBnB,MAAMoB,aAAapB,MAAMoB,UAAUe,WAAW,GAAA,GAE9CjC,WAAWG,WACX,MAAM,KAAKjB,aAAakC,aACpBtB,MAAMoB,aAAapB,MAAMoB,UAAUgB,YACnClC,WAAWG,QAAQ,IAEvB,CAAA,CAAA;EAGR,IAAIL,MAAMoB,aAAapB,MAAMoB,UAAUiB,aAAa;GAChD,MAAMZ,aAAaC,OAAOC,KAAK3B,MAAMoB,UAAUiB,WAAW;GAC1D,KAAK,MAAMT,aAAaH,YAAY;IAChC,MAAMI,SAAS,MAAM,KAAK3C,iBAAiBiB,UAAU;KACjDC,MAAMwB;KACNvB,UAAUH,WAAWG;IACzB,CAAA;IAEA,IAAIwB,QAAQ;KACR,MAAMC,WAAW,MAAM,KAAK1C,aAAa2C,cACrC/B,MAAMoB,UAAUiB,YAAYT,YAC5B1B,WAAWG,UACXwB,OAAOb,EAAE;KAEbkB,MAAMF,KAAI,GAAIF,QAAAA;IAClB;GACJ;EACJ;EAEA,IAAII,MAAMD,SAAS,GACf,MAAM,KAAK3C,aAAaS,YACpBG,YACAgC,OACA,WACA,eAAA;EAIR,OAAO;GACH,GAAGlC;GACHE;EACJ;CACJ;AACJ"}

package/dist/core/provisioning/synchronizer/user/types.mjs

@@ -1 +1,4 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 export {};

package/dist/core/provisioning/types.mjs

@@ -1 +1,4 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 export {};

package/dist/core/security/index.mjs

@@ -1,3 +1,6 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 import { PermissionBindingPolicyEvaluator } from "./policy/evaluator.mjs";
 import { PolicyEngine } from "./policy/engine.mjs";
 import "./policy/index.mjs";

package/dist/core/security/policy/engine.mjs

@@ -1,3 +1,6 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 import { PermissionBindingPolicyEvaluator } from "./evaluator.mjs";
 import { BuiltInPolicyType, PolicyDefaultEvaluators, PolicyEngine as PolicyEngine$1 } from "@authup/access";
 //#region src/core/security/policy/engine.ts

package/dist/core/security/policy/engine.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"engine.mjs","names":["PolicyEngine","BasePolicyEngine","BuiltInPolicyType","PolicyDefaultEvaluators","PermissionBindingPolicyEvaluator","identityPermissionProvider","registerEvaluator","PERMISSION_BINDING"],"sources":["../../../../src/core/security/policy/engine.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { PolicyEngine as BasePolicyEngine, BuiltInPolicyType, PolicyDefaultEvaluators } from '@authup/access';\nimport type { IIdentityPermissionProvider } from '../../identity/permission/types.ts';\nimport { PermissionBindingPolicyEvaluator } from './evaluator.ts';\n\nexport class PolicyEngine extends BasePolicyEngine {\n    constructor(identityPermissionProvider: IIdentityPermissionProvider) {\n        super(PolicyDefaultEvaluators);\n\n        this.registerEvaluator(BuiltInPolicyType.PERMISSION_BINDING, new PermissionBindingPolicyEvaluator(identityPermissionProvider));\n    }\n}\n"],"mappings":";;;AAWA,IAAaA,eAAb,cAAkCC,eAAAA;CAC9B,YAAYI,4BAAyD;EACjE,MAAMF,uBAAAA;EAEN,KAAKG,kBAAkBJ,kBAAkBK,oBAAoB,IAAIH,iCAAiCC,0BAAAA,CAAAA;CACtG;AACJ"}
+{"version":3,"file":"engine.mjs","names":["PolicyEngine","BasePolicyEngine","BuiltInPolicyType","PolicyDefaultEvaluators","PermissionBindingPolicyEvaluator","identityPermissionProvider","registerEvaluator","PERMISSION_BINDING"],"sources":["../../../../src/core/security/policy/engine.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { PolicyEngine as BasePolicyEngine, BuiltInPolicyType, PolicyDefaultEvaluators } from '@authup/access';\nimport type { IIdentityPermissionProvider } from '../../identity/permission/types.ts';\nimport { PermissionBindingPolicyEvaluator } from './evaluator.ts';\n\nexport class PolicyEngine extends BasePolicyEngine {\n    constructor(identityPermissionProvider: IIdentityPermissionProvider) {\n        super(PolicyDefaultEvaluators);\n\n        this.registerEvaluator(BuiltInPolicyType.PERMISSION_BINDING, new PermissionBindingPolicyEvaluator(identityPermissionProvider));\n    }\n}\n"],"mappings":";;;;;;AAWA,IAAaA,eAAb,cAAkCC,eAAAA;CAC9B,YAAYI,4BAAyD;EACjE,MAAMF,uBAAAA;EAEN,KAAKG,kBAAkBJ,kBAAkBK,oBAAoB,IAAIH,iCAAiCC,0BAAAA,CAAAA;CACtG;AACJ"}

package/dist/core/security/policy/evaluator.mjs

@@ -1,3 +1,6 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 import { AttributesPolicyEvaluator, BuiltInPolicyType, IdentityPolicyEvaluator, PermissionBindingPolicyValidator, PolicyEngine, PolicyIssueCode, definePolicyIssueItem, maybeInvertPolicyOutcome, mergePermissionPolicyBindings } from "@authup/access";
 //#region src/core/security/policy/evaluator.ts
 var PermissionBindingPolicyEvaluator = class {

package/dist/core/security/policy/evaluator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"evaluator.mjs","names":["AttributesPolicyEvaluator","BuiltInPolicyType","IdentityPolicyEvaluator","PermissionBindingPolicyValidator","PolicyEngine","PolicyIssueCode","definePolicyIssueItem","maybeInvertPolicyOutcome","mergePermissionPolicyBindings","PermissionBindingPolicyEvaluator","validator","identityEvaluator","attributesEvaluator","identityPermissionProvider","accessData","ctx","data","has","PERMISSION_BINDING","isValidated","get","set","setValidated","evaluate","value","policy","run","identity","success","issues","code","DATA_MISSING","message","path","binding","identityBindings","getFor","then","bindings","filter","item","permission","name","realm_id","client_id","length","invert","bindingsMerged","policies","flatMap","b","evaluators","compositePolicy","children","type","COMPOSITE","engine","outcome"],"sources":["../../../../src/core/security/policy/evaluator.ts"],"sourcesContent":["/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    BasePolicy,\n    CompositePolicy,\n    IPolicyEvaluator,\n    PermissionPolicyBinding,\n    PolicyEvaluationContext,\n    PolicyEvaluationResult,\n} from '@authup/access';\nimport {\n    AttributesPolicyEvaluator,\n    BuiltInPolicyType,\n    IdentityPolicyEvaluator,\n    PermissionBindingPolicyValidator,\n    PolicyEngine,\n    PolicyIssueCode,\n    definePolicyIssueItem,\n    maybeInvertPolicyOutcome,\n    mergePermissionPolicyBindings,\n} from '@authup/access';\nimport type { IIdentityPermissionProvider } from '../../identity/permission/types.ts';\n\nexport class PermissionBindingPolicyEvaluator implements IPolicyEvaluator {\n    protected validator : PermissionBindingPolicyValidator;\n\n    protected identityEvaluator: IdentityPolicyEvaluator;\n\n    protected attributesEvaluator : AttributesPolicyEvaluator;\n\n    protected identityPermissionProvider: IIdentityPermissionProvider;\n\n    constructor(identityPermissionProvider: IIdentityPermissionProvider) {\n        this.validator = new PermissionBindingPolicyValidator();\n        this.identityEvaluator = new IdentityPolicyEvaluator();\n        this.attributesEvaluator = new AttributesPolicyEvaluator();\n        this.identityPermissionProvider = identityPermissionProvider;\n    }\n\n    async accessData(ctx: PolicyEvaluationContext) : Promise<PermissionPolicyBinding | null> {\n        if (!ctx.data.has(BuiltInPolicyType.PERMISSION_BINDING)) {\n            return null;\n        }\n\n        if (ctx.data.isValidated(BuiltInPolicyType.PERMISSION_BINDING)) {\n            return ctx.data.get(BuiltInPolicyType.PERMISSION_BINDING);\n        }\n\n        const data = ctx.data.get<PermissionPolicyBinding>(BuiltInPolicyType.PERMISSION_BINDING);\n\n        ctx.data.set(BuiltInPolicyType.PERMISSION_BINDING, data);\n        ctx.data.setValidated(BuiltInPolicyType.PERMISSION_BINDING);\n\n        return data;\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        const policy = await this.validator.run(value);\n\n        const identity = await this.identityEvaluator.accessData(ctx);\n        if (!identity) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property identity is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n        const binding = await this.accessData(ctx);\n        if (!binding) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property permission is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        const identityBindings = await this.identityPermissionProvider.getFor(identity)\n            .then((bindings) => bindings.filter((item) => {\n                if (item.permission.name !== binding.permission.name) {\n                    return false;\n                }\n\n                return (binding.permission.realm_id ?? null) === (item.permission.realm_id ?? null) &&\n                    (binding.permission.client_id ?? null) === (item.permission.client_id ?? null);\n            }));\n\n        if (identityBindings.length === 0) {\n            return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n        }\n\n        const bindingsMerged = mergePermissionPolicyBindings(identityBindings);\n        if (bindingsMerged.length === 0) {\n            return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n        }\n\n        const policies : BasePolicy[] = bindingsMerged\n            .flatMap((b) => b.policies || []);\n\n        if (policies.length === 0) {\n            return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n        }\n\n        if (!ctx.evaluators) {\n            return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n        }\n\n        const compositePolicy : CompositePolicy = {\n            children: policies,\n            type: BuiltInPolicyType.COMPOSITE,\n        };\n\n        const engine = new PolicyEngine(ctx.evaluators);\n        const outcome = await engine.evaluate(compositePolicy, {\n            ...ctx,\n            path: [\n                ...(ctx.path || []),\n                ...(compositePolicy.type ? [compositePolicy.type] : []),\n            ],\n        });\n\n        return {\n            ...outcome,\n            success: maybeInvertPolicyOutcome(outcome.success, policy.invert),\n        };\n    }\n}\n"],"mappings":";;AA4BA,IAAaS,mCAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEV,YAAYA,4BAAyD;EACjE,KAAKH,YAAY,IAAIP,iCAAAA;EACrB,KAAKQ,oBAAoB,IAAIT,wBAAAA;EAC7B,KAAKU,sBAAsB,IAAIZ,0BAAAA;EAC/B,KAAKa,6BAA6BA;CACtC;CAEA,MAAMC,WAAWC,KAAwE;EACrF,IAAI,CAACA,IAAIC,KAAKC,IAAIhB,kBAAkBiB,kBAAkB,GAClD,OAAO;EAGX,IAAIH,IAAIC,KAAKG,YAAYlB,kBAAkBiB,kBAAkB,GACzD,OAAOH,IAAIC,KAAKI,IAAInB,kBAAkBiB,kBAAkB;EAG5D,MAAMF,OAAOD,IAAIC,KAAKI,IAA6BnB,kBAAkBiB,kBAAkB;EAEvFH,IAAIC,KAAKK,IAAIpB,kBAAkBiB,oBAAoBF,IAAAA;EACnDD,IAAIC,KAAKM,aAAarB,kBAAkBiB,kBAAkB;EAE1D,OAAOF;CACX;CAEA,MAAMO,SAASC,OAA4BT,KAA+D;EACtG,MAAMU,SAAS,MAAM,KAAKf,UAAUgB,IAAIF,KAAAA;EAExC,MAAMG,WAAW,MAAM,KAAKhB,kBAAkBG,WAAWC,GAAAA;EACzD,IAAI,CAACY,UACD,OAAO;GACHC,SAAS;GACTC,QAAQ,CACJvB,sBAAsB;IAClBwB,MAAMzB,gBAAgB0B;IACtBC,SAAS;IACTC,MAAMlB,IAAIkB;GACd,CAAA,CAAA;EAER;EAEJ,MAAMC,UAAU,MAAM,KAAKpB,WAAWC,GAAAA;EACtC,IAAI,CAACmB,SACD,OAAO;GACHN,SAAS;GACTC,QAAQ,CACJvB,sBAAsB;IAClBwB,MAAMzB,gBAAgB0B;IACtBC,SAAS;IACTC,MAAMlB,IAAIkB;GACd,CAAA,CAAA;EAER;EAGJ,MAAME,mBAAmB,MAAM,KAAKtB,2BAA2BuB,OAAOT,QAAAA,EACjEU,MAAMC,aAAaA,SAASC,QAAQC,SAAAA;GACjC,IAAIA,KAAKC,WAAWC,SAASR,QAAQO,WAAWC,MAC5C,OAAO;GAGX,QAAQR,QAAQO,WAAWE,YAAY,WAAWH,KAAKC,WAAWE,YAAY,UACzET,QAAQO,WAAWG,aAAa,WAAWJ,KAAKC,WAAWG,aAAa;EACjF,CAAA,CAAA;EAEJ,IAAIT,iBAAiBU,WAAW,GAC5B,OAAO,EAAEjB,SAASrB,yBAAyB,OAAOkB,OAAOqB,MAAM,EAAE;EAGrE,MAAMC,iBAAiBvC,8BAA8B2B,gBAAAA;EACrD,IAAIY,eAAeF,WAAW,GAC1B,OAAO,EAAEjB,SAASrB,yBAAyB,OAAOkB,OAAOqB,MAAM,EAAE;EAGrE,MAAME,WAA0BD,eAC3BE,SAASC,MAAMA,EAAEF,YAAY,CAAA,CAAE;EAEpC,IAAIA,SAASH,WAAW,GACpB,OAAO,EAAEjB,SAASrB,yBAAyB,MAAMkB,OAAOqB,MAAM,EAAE;EAGpE,IAAI,CAAC/B,IAAIoC,YACL,OAAO,EAAEvB,SAASrB,yBAAyB,OAAOkB,OAAOqB,MAAM,EAAE;EAGrE,MAAMM,kBAAoC;GACtCC,UAAUL;GACVM,MAAMrD,kBAAkBsD;EAC5B;EAGA,MAAME,UAAU,MAAMD,IADHpD,aAAaW,IAAIoC,UACdK,EAAOjC,SAAS6B,iBAAiB;GACnD,GAAGrC;GACHkB,MAAM,CAAA,GACElB,IAAIkB,QAAQ,CAAA,GAAA,GACZmB,gBAAgBE,OAAO,CAACF,gBAAgBE,IAAAA,IAAQ,CAAA,CAAA;EAE5D,CAAA;EAEA,OAAO;GACH,GAAGG;GACH7B,SAASrB,yBAAyBkD,QAAQ7B,SAASH,OAAOqB,MAAM;EACpE;CACJ;AACJ"}
+{"version":3,"file":"evaluator.mjs","names":["AttributesPolicyEvaluator","BuiltInPolicyType","IdentityPolicyEvaluator","PermissionBindingPolicyValidator","PolicyEngine","PolicyIssueCode","definePolicyIssueItem","maybeInvertPolicyOutcome","mergePermissionPolicyBindings","PermissionBindingPolicyEvaluator","validator","identityEvaluator","attributesEvaluator","identityPermissionProvider","accessData","ctx","data","has","PERMISSION_BINDING","isValidated","get","set","setValidated","evaluate","value","policy","run","identity","success","issues","code","DATA_MISSING","message","path","binding","identityBindings","getFor","then","bindings","filter","item","permission","name","realm_id","client_id","length","invert","bindingsMerged","policies","flatMap","b","evaluators","compositePolicy","children","type","COMPOSITE","engine","outcome"],"sources":["../../../../src/core/security/policy/evaluator.ts"],"sourcesContent":["/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    BasePolicy,\n    CompositePolicy,\n    IPolicyEvaluator,\n    PermissionPolicyBinding,\n    PolicyEvaluationContext,\n    PolicyEvaluationResult,\n} from '@authup/access';\nimport {\n    AttributesPolicyEvaluator,\n    BuiltInPolicyType,\n    IdentityPolicyEvaluator,\n    PermissionBindingPolicyValidator,\n    PolicyEngine,\n    PolicyIssueCode,\n    definePolicyIssueItem,\n    maybeInvertPolicyOutcome,\n    mergePermissionPolicyBindings,\n} from '@authup/access';\nimport type { IIdentityPermissionProvider } from '../../identity/permission/types.ts';\n\nexport class PermissionBindingPolicyEvaluator implements IPolicyEvaluator {\n    protected validator : PermissionBindingPolicyValidator;\n\n    protected identityEvaluator: IdentityPolicyEvaluator;\n\n    protected attributesEvaluator : AttributesPolicyEvaluator;\n\n    protected identityPermissionProvider: IIdentityPermissionProvider;\n\n    constructor(identityPermissionProvider: IIdentityPermissionProvider) {\n        this.validator = new PermissionBindingPolicyValidator();\n        this.identityEvaluator = new IdentityPolicyEvaluator();\n        this.attributesEvaluator = new AttributesPolicyEvaluator();\n        this.identityPermissionProvider = identityPermissionProvider;\n    }\n\n    async accessData(ctx: PolicyEvaluationContext) : Promise<PermissionPolicyBinding | null> {\n        if (!ctx.data.has(BuiltInPolicyType.PERMISSION_BINDING)) {\n            return null;\n        }\n\n        if (ctx.data.isValidated(BuiltInPolicyType.PERMISSION_BINDING)) {\n            return ctx.data.get(BuiltInPolicyType.PERMISSION_BINDING);\n        }\n\n        const data = ctx.data.get<PermissionPolicyBinding>(BuiltInPolicyType.PERMISSION_BINDING);\n\n        ctx.data.set(BuiltInPolicyType.PERMISSION_BINDING, data);\n        ctx.data.setValidated(BuiltInPolicyType.PERMISSION_BINDING);\n\n        return data;\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        const policy = await this.validator.run(value);\n\n        const identity = await this.identityEvaluator.accessData(ctx);\n        if (!identity) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property identity is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n        const binding = await this.accessData(ctx);\n        if (!binding) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property permission is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        const identityBindings = await this.identityPermissionProvider.getFor(identity)\n            .then((bindings) => bindings.filter((item) => {\n                if (item.permission.name !== binding.permission.name) {\n                    return false;\n                }\n\n                return (binding.permission.realm_id ?? null) === (item.permission.realm_id ?? null) &&\n                    (binding.permission.client_id ?? null) === (item.permission.client_id ?? null);\n            }));\n\n        if (identityBindings.length === 0) {\n            return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n        }\n\n        const bindingsMerged = mergePermissionPolicyBindings(identityBindings);\n        if (bindingsMerged.length === 0) {\n            return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n        }\n\n        const policies : BasePolicy[] = bindingsMerged\n            .flatMap((b) => b.policies || []);\n\n        if (policies.length === 0) {\n            return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n        }\n\n        if (!ctx.evaluators) {\n            return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n        }\n\n        const compositePolicy : CompositePolicy = {\n            children: policies,\n            type: BuiltInPolicyType.COMPOSITE,\n        };\n\n        const engine = new PolicyEngine(ctx.evaluators);\n        const outcome = await engine.evaluate(compositePolicy, {\n            ...ctx,\n            path: [\n                ...(ctx.path || []),\n                ...(compositePolicy.type ? [compositePolicy.type] : []),\n            ],\n        });\n\n        return {\n            ...outcome,\n            success: maybeInvertPolicyOutcome(outcome.success, policy.invert),\n        };\n    }\n}\n"],"mappings":";;;;;AA4BA,IAAaS,mCAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEV,YAAYA,4BAAyD;EACjE,KAAKH,YAAY,IAAIP,iCAAAA;EACrB,KAAKQ,oBAAoB,IAAIT,wBAAAA;EAC7B,KAAKU,sBAAsB,IAAIZ,0BAAAA;EAC/B,KAAKa,6BAA6BA;CACtC;CAEA,MAAMC,WAAWC,KAAwE;EACrF,IAAI,CAACA,IAAIC,KAAKC,IAAIhB,kBAAkBiB,kBAAkB,GAClD,OAAO;EAGX,IAAIH,IAAIC,KAAKG,YAAYlB,kBAAkBiB,kBAAkB,GACzD,OAAOH,IAAIC,KAAKI,IAAInB,kBAAkBiB,kBAAkB;EAG5D,MAAMF,OAAOD,IAAIC,KAAKI,IAA6BnB,kBAAkBiB,kBAAkB;EAEvFH,IAAIC,KAAKK,IAAIpB,kBAAkBiB,oBAAoBF,IAAAA;EACnDD,IAAIC,KAAKM,aAAarB,kBAAkBiB,kBAAkB;EAE1D,OAAOF;CACX;CAEA,MAAMO,SAASC,OAA4BT,KAA+D;EACtG,MAAMU,SAAS,MAAM,KAAKf,UAAUgB,IAAIF,KAAAA;EAExC,MAAMG,WAAW,MAAM,KAAKhB,kBAAkBG,WAAWC,GAAAA;EACzD,IAAI,CAACY,UACD,OAAO;GACHC,SAAS;GACTC,QAAQ,CACJvB,sBAAsB;IAClBwB,MAAMzB,gBAAgB0B;IACtBC,SAAS;IACTC,MAAMlB,IAAIkB;GACd,CAAA,CAAA;EAER;EAEJ,MAAMC,UAAU,MAAM,KAAKpB,WAAWC,GAAAA;EACtC,IAAI,CAACmB,SACD,OAAO;GACHN,SAAS;GACTC,QAAQ,CACJvB,sBAAsB;IAClBwB,MAAMzB,gBAAgB0B;IACtBC,SAAS;IACTC,MAAMlB,IAAIkB;GACd,CAAA,CAAA;EAER;EAGJ,MAAME,mBAAmB,MAAM,KAAKtB,2BAA2BuB,OAAOT,QAAAA,CAAAA,CACjEU,MAAMC,aAAaA,SAASC,QAAQC,SAAAA;GACjC,IAAIA,KAAKC,WAAWC,SAASR,QAAQO,WAAWC,MAC5C,OAAO;GAGX,QAAQR,QAAQO,WAAWE,YAAY,WAAWH,KAAKC,WAAWE,YAAY,UACzET,QAAQO,WAAWG,aAAa,WAAWJ,KAAKC,WAAWG,aAAa;EACjF,CAAA,CAAA;EAEJ,IAAIT,iBAAiBU,WAAW,GAC5B,OAAO,EAAEjB,SAASrB,yBAAyB,OAAOkB,OAAOqB,MAAM,EAAE;EAGrE,MAAMC,iBAAiBvC,8BAA8B2B,gBAAAA;EACrD,IAAIY,eAAeF,WAAW,GAC1B,OAAO,EAAEjB,SAASrB,yBAAyB,OAAOkB,OAAOqB,MAAM,EAAE;EAGrE,MAAME,WAA0BD,eAC3BE,SAASC,MAAMA,EAAEF,YAAY,CAAA,CAAE;EAEpC,IAAIA,SAASH,WAAW,GACpB,OAAO,EAAEjB,SAASrB,yBAAyB,MAAMkB,OAAOqB,MAAM,EAAE;EAGpE,IAAI,CAAC/B,IAAIoC,YACL,OAAO,EAAEvB,SAASrB,yBAAyB,OAAOkB,OAAOqB,MAAM,EAAE;EAGrE,MAAMM,kBAAoC;GACtCC,UAAUL;GACVM,MAAMrD,kBAAkBsD;EAC5B;EAGA,MAAME,UAAU,MAAMD,IADHpD,aAAaW,IAAIoC,UACdK,CAAAA,CAAOjC,SAAS6B,iBAAiB;GACnD,GAAGrC;GACHkB,MAAM,CAAA,GACElB,IAAIkB,QAAQ,CAAA,GAAA,GACZmB,gBAAgBE,OAAO,CAACF,gBAAgBE,IAAAA,IAAQ,CAAA,CAAA;EAE5D,CAAA;EAEA,OAAO;GACH,GAAGG;GACH7B,SAASrB,yBAAyBkD,QAAQ7B,SAASH,OAAOqB,MAAM;EACpE;CACJ;AACJ"}

package/dist/core/security/policy/index.mjs

@@ -1,3 +1,6 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 import { PermissionBindingPolicyEvaluator } from "./evaluator.mjs";
 import { PolicyEngine } from "./engine.mjs";
 export { PermissionBindingPolicyEvaluator, PolicyEngine };

package/dist/index.mjs

@@ -1,3 +1,6 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 import { AuthenticationInjectionKey } from "./app/modules/authentication/constants.mjs";
 import { RealmEntity } from "./adapters/database/domains/realm/entity.mjs";
 import { RealmRepository } from "./adapters/database/domains/realm/repository.mjs";

package/dist/path.mjs

@@ -1,3 +1,6 @@
+import "node:path";
+import "node:url";
+import.meta.url;
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 //#region src/path.ts

package/dist/path.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"path.mjs","names":["path","fileURLToPath","CODE_PATH","dirname","url","PACKAGE_PATH","join","SRC_PATH","DIST_PATH","UI_DIST_PATH","UI_SOURCE_PATH"],"sources":["../src/path.ts"],"sourcesContent":["/*\n * Copyright (c) 2023-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport path from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nexport const CODE_PATH = path.dirname(fileURLToPath(import.meta.url));\nexport const PACKAGE_PATH = path.join(CODE_PATH, '..');\nexport const SRC_PATH = path.join(PACKAGE_PATH, 'src');\nexport const DIST_PATH = path.join(PACKAGE_PATH, 'dist');\n\nexport const UI_DIST_PATH = path.join(DIST_PATH, 'ui');\nexport const UI_SOURCE_PATH = path.join(PACKAGE_PATH, 'ui');\n"],"mappings":";;;AAUA,MAAaE,YAAYF,KAAKG,QAAQF,cAAc,OAAA,KAAYG,GAAG,CAAA;AACnE,MAAaC,eAAeL,KAAKM,KAAKJ,WAAW,IAAA;AACjD,MAAaK,WAAWP,KAAKM,KAAKD,cAAc,KAAA;AAChD,MAAaG,YAAYR,KAAKM,KAAKD,cAAc,MAAA;AAEjD,MAAaI,eAAeT,KAAKM,KAAKE,WAAW,IAAA;AACjD,MAAaE,iBAAiBV,KAAKM,KAAKD,cAAc,IAAA"}
+{"version":3,"file":"path.mjs","names":["path","fileURLToPath","CODE_PATH","dirname","url","PACKAGE_PATH","join","SRC_PATH","DIST_PATH","UI_DIST_PATH","UI_SOURCE_PATH"],"sources":["../src/path.ts"],"sourcesContent":["/*\n * Copyright (c) 2023-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport path from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nexport const CODE_PATH = path.dirname(fileURLToPath(import.meta.url));\nexport const PACKAGE_PATH = path.join(CODE_PATH, '..');\nexport const SRC_PATH = path.join(PACKAGE_PATH, 'src');\nexport const DIST_PATH = path.join(PACKAGE_PATH, 'dist');\n\nexport const UI_DIST_PATH = path.join(DIST_PATH, 'ui');\nexport const UI_SOURCE_PATH = path.join(PACKAGE_PATH, 'ui');\n"],"mappings":";;;;;;AAUA,MAAaE,YAAYF,KAAKG,QAAQF,cAAc,OAAA,KAAYG,GAAG,CAAA;AACnE,MAAaC,eAAeL,KAAKM,KAAKJ,WAAW,IAAA;AACjD,MAAaK,WAAWP,KAAKM,KAAKD,cAAc,KAAA;AAChD,MAAaG,YAAYR,KAAKM,KAAKD,cAAc,MAAA;AAEjD,MAAaI,eAAeT,KAAKM,KAAKE,WAAW,IAAA;AACjD,MAAaE,iBAAiBV,KAAKM,KAAKD,cAAc,IAAA"}

package/dist/swagger.json

@@ -571,15 +571,43 @@
                 },
                 "type": "object"
             },
-            "RoutupRequest": {
+            "AppRequest": {
                 "$ref": "#/components/schemas/ServerRequest"
             },
+            "MethodNameLike": {
+                "anyOf": [
+                    {
+                        "type": "string",
+                        "enum": [
+                            "GET",
+                            "POST",
+                            "PUT",
+                            "PATCH",
+                            "DELETE",
+                            "OPTIONS",
+                            "HEAD"
+                        ]
+                    },
+                    {
+                        "allOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "properties": {},
+                                "type": "object"
+                            }
+                        ]
+                    }
+                ],
+                "description": "`MethodName` plus the open-enum escape hatch for non-standard\nmethods (`PROPFIND`, `MKCOL`, custom verbs). The `(string & {})`\nintersection is structurally identical to `string` but TypeScript\ndoesn't collapse the union — so callers still get autocomplete\nfor the canonical methods while remaining free to pass anything."
+            },
             "Headers": {
                 "description": "The **`Headers`** interface of the Fetch API allows you to perform various actions on HTTP request and response headers. These actions include retrieving, setting, adding to, and removing headers from the list of the request's headers.\n\n[MDN Reference](https://developer.mozilla.org/docs/Web/API/Headers)",
                 "properties": {},
                 "type": "object"
             },
-            "RoutupResponse": {
+            "AppResponse": {
                 "properties": {
                     "headers": {
                         "$ref": "#/components/schemas/Headers"
@@ -595,9 +623,6 @@
                 ],
                 "type": "object"
             },
-            "Path": {
-                "type": "string"
-            },
             "EtagFn": {
                 "type": "object",
                 "additionalProperties": true
@@ -606,51 +631,6 @@
                 "type": "object",
                 "additionalProperties": true
             },
-            "RouterOptions": {
-                "properties": {
-                    "trustProxy": {
-                        "$ref": "#/components/schemas/TrustProxyFn"
-                    },
-                    "etag": {
-                        "$ref": "#/components/schemas/EtagFn"
-                    },
-                    "proxyIpMax": {
-                        "type": "number",
-                        "format": "double"
-                    },
-                    "subdomainOffset": {
-                        "type": "number",
-                        "format": "double"
-                    },
-                    "handlerTimeoutOverridable": {
-                        "type": "boolean",
-                        "description": "Whether handlers can extend the `handlerTimeout` default.\n\nWhen `false` (default), a handler's `timeout` is clamped to\n`Math.min(handlerTimeout, handler.timeout)`. When `true`, the\nhandler's `timeout` fully replaces the router default."
-                    },
-                    "handlerTimeout": {
-                        "type": "number",
-                        "format": "double",
-                        "description": "Default per-handler timeout in milliseconds.\n\nApplies individually to each handler's `fn()` execution. Handlers can\noverride this value via their own `timeout` option — see\n`handlerTimeoutOverridable` to control whether overrides can extend\nor only narrow this default."
-                    },
-                    "timeout": {
-                        "type": "number",
-                        "format": "double",
-                        "description": "Global request timeout in milliseconds.\n\nApplies to the entire dispatch pipeline in `fetch()`. When exceeded,\nthe request is aborted and a 408 response is returned. The AbortSignal\non the event is also aborted for cooperative cancellation."
-                    },
-                    "name": {
-                        "type": "string"
-                    },
-                    "path": {
-                        "$ref": "#/components/schemas/Path"
-                    }
-                },
-                "required": [
-                    "trustProxy",
-                    "etag",
-                    "proxyIpMax",
-                    "subdomainOffset"
-                ],
-                "type": "object"
-            },
             "AbortSignal": {
                 "description": "The **`AbortSignal`** interface represents a signal object that allows you to communicate with an asynchronous operation (such as a fetch request) and abort it if required via an AbortController object.\n\n[MDN Reference](https://developer.mozilla.org/docs/Web/API/AbortSignal)",
                 "properties": {},
@@ -661,31 +641,31 @@
                 "properties": {},
                 "type": "object"
             },
-            "IRoutupEvent": {
+            "IAppEvent": {
                 "properties": {
                     "request": {
-                        "$ref": "#/components/schemas/RoutupRequest",
+                        "$ref": "#/components/schemas/AppRequest",
                         "description": "The srvx ServerRequest (extends Web Standard Request)."
                     },
                     "params": {
                         "properties": {},
                         "additionalProperties": {
-                            "additionalProperties": true
+                            "type": "string"
                         },
                         "type": "object",
-                        "description": "Route parameters extracted from the URL path pattern."
+                        "description": "Route parameters extracted from the URL path pattern. Values\nare `string` (or `undefined` for an optional param that\ndidn't match) — both the trie router (`extractTrieParams`)\nand the linear router (path-to-regexp output) only ever\nproduce string values."
                     },
                     "path": {
                         "type": "string",
                         "description": "Current request path, adjusted relative to the mount point during router nesting."
                     },
                     "method": {
-                        "type": "string",
-                        "description": "HTTP method (GET, POST, PUT, etc.)."
+                        "$ref": "#/components/schemas/MethodNameLike",
+                        "description": "HTTP method (GET, POST, PUT, etc.). Typed as the canonical\n`MethodName` set with an open-enum escape hatch — non-\nstandard methods (`PROPFIND`, custom verbs) still type-check\nwhile standard ones autocomplete."
                     },
                     "mountPath": {
                         "type": "string",
-                        "description": "Accumulated mount path from nested routers."
+                        "description": "Prefix the active route was matched on (the substring of the\nrequest path the matcher consumed). Set per dispatched handler\nand restored when the handler returns; useful for static-asset\n/ mount-aware helpers that need to strip this off `path` to\nrecover a mount-relative path."
                     },
                     "headers": {
                         "$ref": "#/components/schemas/Headers",
@@ -696,7 +676,7 @@
                         "description": "Lazily-parsed URL search parameters.\n\nFor advanced query parsing (arrays, nesting), use `@routup/query`."
                     },
                     "response": {
-                        "$ref": "#/components/schemas/RoutupResponse",
+                        "$ref": "#/components/schemas/AppResponse",
                         "description": "Response accumulator — set status/headers before returning a plain value.\n\nIf the handler returns a `Response` object directly, these values are\nignored. They only apply when returning plain values (string, object, etc.)\nthat go through `toResponse()`."
                     },
                     "store": {
@@ -707,8 +687,42 @@
                         "type": "object",
                         "description": "Per-request store for caching and plugin state.\n\nUse symbol keys (e.g., `Symbol.for('routup:body')`) to avoid collisions.\nData is garbage collected with the event when the request completes."
                     },
-                    "routerOptions": {
-                        "$ref": "#/components/schemas/RouterOptions",
+                    "appOptions": {
+                        "properties": {
+                            "trustProxy": {
+                                "$ref": "#/components/schemas/TrustProxyFn"
+                            },
+                            "etag": {
+                                "anyOf": [
+                                    {
+                                        "$ref": "#/components/schemas/EtagFn"
+                                    },
+                                    {
+                                        "type": "null"
+                                    }
+                                ]
+                            },
+                            "proxyIpMax": {
+                                "type": "number",
+                                "format": "double"
+                            },
+                            "subdomainOffset": {
+                                "type": "number",
+                                "format": "double"
+                            },
+                            "handlerTimeoutOverridable": {
+                                "type": "boolean"
+                            },
+                            "handlerTimeout": {
+                                "type": "number",
+                                "format": "double"
+                            },
+                            "timeout": {
+                                "type": "number",
+                                "format": "double"
+                            }
+                        },
+                        "type": "object",
                         "description": "Pre-resolved router options for the current dispatch context.\n\nContains merged options from the router path stack with defaults applied."
                     },
                     "signal": {
@@ -734,7 +748,7 @@
                     "searchParams",
                     "response",
                     "store",
-                    "routerOptions",
+                    "appOptions",
                     "signal",
                     "nextCalled"
                 ],
@@ -3430,26 +3444,6 @@
                         "type": "string",
                         "format": "date-time"
                     },
-                    "client_id": {
-                        "anyOf": [
-                            {
-                                "type": "string"
-                            },
-                            {
-                                "type": "null"
-                            }
-                        ]
-                    },
-                    "client": {
-                        "oneOf": [
-                            {
-                                "$ref": "#/components/schemas/Client"
-                            },
-                            {
-                                "type": "null"
-                            }
-                        ]
-                    },
                     "realm_id": {
                         "type": "string"
                     },
@@ -3477,8 +3471,6 @@
                     "activate_hash",
                     "created_at",
                     "updated_at",
-                    "client_id",
-                    "client",
                     "realm_id",
                     "realm"
                 ],
@@ -7167,7 +7159,20 @@
                 },
                 "description": "",
                 "tags": [],
-                "parameters": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ],
                 "requestBody": {
                     "description": "",
                     "required": true,
@@ -7198,7 +7203,20 @@
                 },
                 "description": "",
                 "tags": [],
-                "parameters": [],
+                "parameters": [
+                    {
+                        "allowEmptyValue": false,
+                        "deprecated": false,
+                        "description": "",
+                        "in": "path",
+                        "name": "id",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        },
+                        "examples": {}
+                    }
+                ],
                 "requestBody": {
                     "description": "",
                     "required": true,