@authup/server-core 1.0.0-beta.5 → 1.0.0-beta.50

package/dist/core/oauth2/token/verifier/module.d.ts

@@ -0,0 +1,12 @@
+import type { OAuth2TokenPayload } from '@authup/specs';
+import type { IOAuth2KeyRepository } from '../../key/index.ts';
+import type { IOAuth2TokenRepository } from '../repository/types.ts';
+import type { IOAuth2TokenVerifier, OAuth2TokenVerifyOptions } from './types.ts';
+export declare class OAuth2TokenVerifier implements IOAuth2TokenVerifier {
+    protected keyRepository: IOAuth2KeyRepository;
+    protected tokenRepository: IOAuth2TokenRepository;
+    constructor(keyRepository: IOAuth2KeyRepository, tokenRepository: IOAuth2TokenRepository);
+    isInactive(id: string): Promise<boolean>;
+    verify(token: string, options?: OAuth2TokenVerifyOptions): Promise<OAuth2TokenPayload>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/core/oauth2/token/verifier/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../src/core/oauth2/token/verifier/module.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,KAAK,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAEjF,qBAAa,mBAAoB,YAAW,oBAAoB;IAC5D,SAAS,CAAC,aAAa,EAAG,oBAAoB,CAAC;IAE/C,SAAS,CAAC,eAAe,EAAG,sBAAsB,CAAC;gBAG/C,aAAa,EAAG,oBAAoB,EACpC,eAAe,EAAG,sBAAsB;IAMtC,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIxC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,wBAA6B,GAAI,OAAO,CAAC,kBAAkB,CAAC;CAgGpG"}

package/dist/core/oauth2/token/verifier/module.mjs

@@ -0,0 +1,65 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { extractTokenHeader, verifyToken } from "@authup/server-kit";
+import { JWKError, JWKType, JWTError } from "@authup/specs";
+//#region src/core/oauth2/token/verifier/module.ts
+var OAuth2TokenVerifier = class {
+	keyRepository;
+	tokenRepository;
+	constructor(keyRepository, tokenRepository) {
+		this.keyRepository = keyRepository;
+		this.tokenRepository = tokenRepository;
+	}
+	async isInactive(id) {
+		return this.tokenRepository.isInactive(id);
+	}
+	async verify(token, options = {}) {
+		let payload = await this.tokenRepository.findOneBySignature(token);
+		if (payload) {
+			if (!payload.jti) throw JWTError.payloadPropertyInvalid("jti");
+			if (!options.skipActiveCheck) {
+				if (await this.isInactive(payload.jti)) throw JWTError.notActive();
+			}
+			return payload;
+		}
+		const header = extractTokenHeader(token);
+		if (!header.kid) throw JWTError.headerPropertyInvalid("kid");
+		const key = await this.keyRepository.findById(header.kid);
+		if (!key) throw JWKError.notFound(header.kid);
+		switch (key.type) {
+			case JWKType.OCT:
+				if (!key.decryption_key) throw JWKError.decryptionKeyMissing();
+				payload = await verifyToken(token, {
+					type: JWKType.OCT,
+					key: key.decryption_key
+				});
+				break;
+			case JWKType.EC:
+				if (!key.encryption_key) throw JWKError.decryptionKeyMissing();
+				payload = await verifyToken(token, {
+					type: key.type,
+					key: key.encryption_key,
+					...key.signature_algorithm ? { algorithms: [key.signature_algorithm] } : []
+				});
+				break;
+			default:
+				if (!key.encryption_key) throw JWKError.decryptionKeyMissing();
+				payload = await verifyToken(token, {
+					type: key.type,
+					key: key.encryption_key,
+					...key.signature_algorithm ? { algorithms: [key.signature_algorithm] } : []
+				});
+		}
+		if (!payload.jti) throw JWTError.payloadPropertyInvalid("jti");
+		await this.tokenRepository.saveWithSignature(payload, token);
+		if (!options.skipActiveCheck) {
+			if (await this.isInactive(payload.jti)) throw JWTError.notActive();
+		}
+		return payload;
+	}
+};
+//#endregion
+export { OAuth2TokenVerifier };
+
+//# sourceMappingURL=module.mjs.map

package/dist/core/oauth2/token/verifier/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["extractTokenHeader","verifyToken","JWKError","JWKType","JWTError","OAuth2TokenVerifier","keyRepository","tokenRepository","isInactive","id","verify","token","options","payload","findOneBySignature","jti","payloadPropertyInvalid","skipActiveCheck","notActive","header","kid","headerPropertyInvalid","key","findById","notFound","type","OCT","decryption_key","decryptionKeyMissing","EC","encryption_key","signature_algorithm","algorithms","saveWithSignature"],"sources":["../../../../../src/core/oauth2/token/verifier/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    type TokenECAlgorithm, \n    type TokenRSAAlgorithm, \n    extractTokenHeader, \n    verifyToken,\n} from '@authup/server-kit';\nimport type { OAuth2TokenPayload } from '@authup/specs';\nimport { JWKError, JWKType, JWTError } from '@authup/specs';\nimport type { IOAuth2KeyRepository } from '../../key/index.ts';\nimport type { IOAuth2TokenRepository } from '../repository/types.ts';\nimport type { IOAuth2TokenVerifier, OAuth2TokenVerifyOptions } from './types.ts';\n\nexport class OAuth2TokenVerifier implements IOAuth2TokenVerifier {\n    protected keyRepository : IOAuth2KeyRepository;\n\n    protected tokenRepository : IOAuth2TokenRepository;\n\n    constructor(\n        keyRepository : IOAuth2KeyRepository,\n        tokenRepository : IOAuth2TokenRepository,\n    ) {\n        this.keyRepository = keyRepository;\n        this.tokenRepository = tokenRepository;\n    }\n\n    async isInactive(id: string): Promise<boolean> {\n        return this.tokenRepository.isInactive(id);\n    }\n\n    async verify(token: string, options: OAuth2TokenVerifyOptions = {}) : Promise<OAuth2TokenPayload> {\n        let payload = await this.tokenRepository.findOneBySignature(token);\n        if (payload) {\n            if (!payload.jti) {\n                throw JWTError.payloadPropertyInvalid('jti');\n            }\n\n            if (!options.skipActiveCheck) {\n                const isInactive = await this.isInactive(payload.jti);\n                if (isInactive) {\n                    throw JWTError.notActive();\n                }\n            }\n\n            return payload;\n        }\n\n        const header = extractTokenHeader(token);\n        if (!header.kid) {\n            throw JWTError.headerPropertyInvalid('kid');\n        }\n\n        const key = await this.keyRepository.findById(header.kid);\n        if (!key) {\n            throw JWKError.notFound(header.kid);\n        }\n\n        switch (key.type) {\n            case JWKType.OCT: {\n                if (!key.decryption_key) {\n                    throw JWKError.decryptionKeyMissing();\n                }\n\n                payload = await verifyToken(\n                    token,\n                    {\n                        type: JWKType.OCT,\n                        key: key.decryption_key,\n                    },\n                );\n                break;\n            }\n            case JWKType.EC: {\n                if (!key.encryption_key) {\n                    throw JWKError.decryptionKeyMissing();\n                }\n\n                payload = await verifyToken(\n                    token,\n                    {\n                        type: key.type,\n                        key: key.encryption_key,\n                        ...(\n                            key.signature_algorithm ?\n                                { algorithms: [key.signature_algorithm] } :\n                                []\n                        ) as TokenECAlgorithm[],\n                    },\n                );\n                break;\n            }\n            default: {\n                if (!key.encryption_key) {\n                    throw JWKError.decryptionKeyMissing();\n                }\n\n                payload = await verifyToken(\n                    token,\n                    {\n                        type: key.type,\n                        key: key.encryption_key,\n                        ...(\n                            key.signature_algorithm ?\n                                { algorithms: [key.signature_algorithm] } :\n                                []\n                        ) as TokenRSAAlgorithm[],\n                    },\n                );\n            }\n        }\n\n        if (!payload.jti) {\n            throw JWTError.payloadPropertyInvalid('jti');\n        }\n\n        await this.tokenRepository.saveWithSignature(payload, token);\n\n        if (!options.skipActiveCheck) {\n            const isInactive = await this.isInactive(payload.jti);\n            if (isInactive) {\n                throw JWTError.notActive();\n            }\n        }\n\n        return payload;\n    }\n}\n"],"mappings":";;;;;;AAmBA,IAAaK,sBAAb,MAAaA;CACCC;CAEAC;CAEV,YACID,eACAC,iBACF;EACE,KAAKD,gBAAgBA;EACrB,KAAKC,kBAAkBA;CAC3B;CAEA,MAAMC,WAAWC,IAA8B;EAC3C,OAAO,KAAKF,gBAAgBC,WAAWC,EAAAA;CAC3C;CAEA,MAAMC,OAAOC,OAAeC,UAAoC,CAAC,GAAiC;EAC9F,IAAIC,UAAU,MAAM,KAAKN,gBAAgBO,mBAAmBH,KAAAA;EAC5D,IAAIE,SAAS;GACT,IAAI,CAACA,QAAQE,KACT,MAAMX,SAASY,uBAAuB,KAAA;GAG1C,IAAI,CAACJ,QAAQK;QAELT,MADqB,KAAKA,WAAWK,QAAQE,GAAG,GAEhD,MAAMX,SAASc,UAAS;GAAA;GAIhC,OAAOL;EACX;EAEA,MAAMM,SAASnB,mBAAmBW,KAAAA;EAClC,IAAI,CAACQ,OAAOC,KACR,MAAMhB,SAASiB,sBAAsB,KAAA;EAGzC,MAAMC,MAAM,MAAM,KAAKhB,cAAciB,SAASJ,OAAOC,GAAG;EACxD,IAAI,CAACE,KACD,MAAMpB,SAASsB,SAASL,OAAOC,GAAG;EAGtC,QAAQE,IAAIG,MAAZ;GACI,KAAKtB,QAAQuB;IACT,IAAI,CAACJ,IAAIK,gBACL,MAAMzB,SAAS0B,qBAAoB;IAGvCf,UAAU,MAAMZ,YACZU,OACA;KACIc,MAAMtB,QAAQuB;KACdJ,KAAKA,IAAIK;IACb,CAAA;IAEJ;GAEJ,KAAKxB,QAAQ0B;IACT,IAAI,CAACP,IAAIQ,gBACL,MAAM5B,SAAS0B,qBAAoB;IAGvCf,UAAU,MAAMZ,YACZU,OACA;KACIc,MAAMH,IAAIG;KACVH,KAAKA,IAAIQ;KACT,GACIR,IAAIS,sBACA,EAAEC,YAAY,CAACV,IAAIS,mBAAAA,EAAqB,IACxC,CAAA;IAEZ,CAAA;IAEJ;GAEJ;IACI,IAAI,CAACT,IAAIQ,gBACL,MAAM5B,SAAS0B,qBAAoB;IAGvCf,UAAU,MAAMZ,YACZU,OACA;KACIc,MAAMH,IAAIG;KACVH,KAAKA,IAAIQ;KACT,GACIR,IAAIS,sBACA,EAAEC,YAAY,CAACV,IAAIS,mBAAAA,EAAqB,IACxC,CAAA;IAEZ,CAAA;EAGZ;EAEA,IAAI,CAAClB,QAAQE,KACT,MAAMX,SAASY,uBAAuB,KAAA;EAG1C,MAAM,KAAKT,gBAAgB0B,kBAAkBpB,SAASF,KAAAA;EAEtD,IAAI,CAACC,QAAQK;OAELT,MADqB,KAAKA,WAAWK,QAAQE,GAAG,GAEhD,MAAMX,SAASc,UAAS;EAAA;EAIhC,OAAOL;CACX;AACJ"}

package/dist/core/oauth2/token/verifier/types.d.ts

@@ -0,0 +1,9 @@
+import type { OAuth2TokenPayload } from '@authup/specs';
+export type OAuth2TokenVerifyOptions = {
+    skipActiveCheck?: boolean;
+};
+export interface IOAuth2TokenVerifier {
+    isInactive(token: string): Promise<boolean>;
+    verify(token: string, options?: OAuth2TokenVerifyOptions): Promise<OAuth2TokenPayload>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/oauth2/token/verifier/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/oauth2/token/verifier/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,MAAM,MAAM,wBAAwB,GAAG;IACnC,eAAe,CAAC,EAAE,OAAO,CAAA;CAC5B,CAAC;AAEF,MAAM,WAAW,oBAAoB;IACjC,UAAU,CAAC,KAAK,EAAE,MAAM,GAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAE7C,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,wBAAwB,GAAI,OAAO,CAAC,kBAAkB,CAAC,CAAA;CAC1F"}

package/dist/core/oauth2/token/verifier/types.mjs

@@ -0,0 +1,4 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+export {};

package/dist/core/provisioning/entities/client/index.d.ts

@@ -0,0 +1,3 @@
+export * from './types.ts';
+export * from './validator.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/provisioning/entities/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/client/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC"}

package/dist/core/provisioning/entities/client/index.mjs

@@ -0,0 +1,5 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { ClientProvisioningValidator } from "./validator.mjs";
+export { ClientProvisioningValidator };

package/dist/core/provisioning/entities/client/relations-validator.d.ts

@@ -0,0 +1,6 @@
+import { Container } from 'validup';
+import type { ClientProvisioningRelations } from './types.ts';
+export declare class ClientProvisioningRelationsValidator extends Container<ClientProvisioningRelations> {
+    protected initialize(): void;
+}
+//# sourceMappingURL=relations-validator.d.ts.map

package/dist/core/provisioning/entities/client/relations-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relations-validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/client/relations-validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAIpC,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AAE9D,qBAAa,oCAAqC,SAAQ,SAAS,CAAC,2BAA2B,CAAC;IAC5F,SAAS,CAAC,UAAU;CA0BvB"}

package/dist/core/provisioning/entities/client/relations-validator.mjs

@@ -0,0 +1,28 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { PermissionProvisioningValidator } from "../permission/validator.mjs";
+import "../permission/index.mjs";
+import { RoleProvisioningValidator } from "../role/validator.mjs";
+import "../role/index.mjs";
+import { Container } from "validup";
+import { createValidator } from "@validup/zod";
+import { z } from "zod";
+//#region src/core/provisioning/entities/client/relations-validator.ts
+var ClientProvisioningRelationsValidator = class extends Container {
+	initialize() {
+		super.initialize();
+		const permissionValidator = new PermissionProvisioningValidator();
+		const roleValidator = new RoleProvisioningValidator();
+		this.mount("permissions.*", { optional: true }, permissionValidator);
+		this.mount("realmPermissions", { optional: true }, createValidator(z.array(z.string())));
+		this.mount("globalPermissions", { optional: true }, createValidator(z.array(z.string())));
+		this.mount("roles.*", { optional: true }, roleValidator);
+		this.mount("realmRoles", { optional: true }, createValidator(z.array(z.string())));
+		this.mount("globalRoles", { optional: true }, createValidator(z.array(z.string())));
+	}
+};
+//#endregion
+export { ClientProvisioningRelationsValidator };
+
+//# sourceMappingURL=relations-validator.mjs.map

package/dist/core/provisioning/entities/client/relations-validator.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"relations-validator.mjs","names":["createValidator","Container","z","PermissionProvisioningValidator","RoleProvisioningValidator","ClientProvisioningRelationsValidator","initialize","permissionValidator","roleValidator","mount","optional","array","string"],"sources":["../../../../../src/core/provisioning/entities/client/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport { PermissionProvisioningValidator } from '../permission/index.ts';\nimport { RoleProvisioningValidator } from '../role/index.ts';\nimport type { ClientProvisioningRelations } from './types.ts';\n\nexport class ClientProvisioningRelationsValidator extends Container<ClientProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        const permissionValidator = new PermissionProvisioningValidator();\n        const roleValidator = new RoleProvisioningValidator();\n\n        this.mount('permissions.*', { optional: true }, permissionValidator);\n\n        this.mount('realmPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('roles.*', { optional: true }, roleValidator);\n\n        this.mount('realmRoles', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalRoles', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n    }\n}\n"],"mappings":";;;;;;;;;;;AAcA,IAAaK,uCAAb,cAA0DJ,UAAAA;CAC5CK,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,sBAAsB,IAAIJ,gCAAAA;EAChC,MAAMK,gBAAgB,IAAIJ,0BAAAA;EAE1B,KAAKK,MAAM,iBAAiB,EAAEC,UAAU,KAAK,GAAGH,mBAAAA;EAEhD,KAAKE,MAAM,oBAAoB,EAAEC,UAAU,KAAK,GAAGV,gBAC/CE,EAAES,MAAMT,EAAEU,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,qBAAqB,EAAEC,UAAU,KAAK,GAAGV,gBAChDE,EAAES,MAAMT,EAAEU,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,WAAW,EAAEC,UAAU,KAAK,GAAGF,aAAAA;EAE1C,KAAKC,MAAM,cAAc,EAAEC,UAAU,KAAK,GAAGV,gBACzCE,EAAES,MAAMT,EAAEU,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,eAAe,EAAEC,UAAU,KAAK,GAAGV,gBAC1CE,EAAES,MAAMT,EAAEU,OAAM,CAAA,CAAA,CAAA;CAExB;AACJ"}

package/dist/core/provisioning/entities/client/types.d.ts

@@ -0,0 +1,35 @@
+import type { Client } from '@authup/core-kit';
+import type { PermissionProvisioningEntity } from '../permission/index.ts';
+import type { RoleProvisioningEntity } from '../role/index.ts';
+import type { BaseProvisioningEntity } from '../types.ts';
+export type ClientProvisioningRelations = {
+    /**
+     * Create or update permissions for client.
+     */
+    permissions?: PermissionProvisioningEntity[];
+    /**
+     * Assign client to realm permissions.
+     */
+    realmPermissions?: string[];
+    /**
+     * Assign client to global permissions.
+     */
+    globalPermissions?: string[];
+    /**
+     * Create or update roles for client.
+     */
+    roles?: RoleProvisioningEntity[];
+    /**
+     * Assign client to roles of same realm.
+     */
+    realmRoles?: string[];
+    /**
+     * Assign client to global roles.
+     */
+    globalRoles?: string[];
+};
+export type ClientProvisioningEntity = BaseProvisioningEntity<Client> & {
+    attributes: Partial<Client>;
+    relations?: ClientProvisioningRelations;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/core/provisioning/entities/client/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/client/types.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AAC3E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,MAAM,2BAA2B,GAAG;IACtC;;OAEG;IACH,WAAW,CAAC,EAAE,4BAA4B,EAAE,CAAC;IAE7C;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAI7B;;OAEG;IACH,KAAK,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAEjC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAEtB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CAE1B,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG,sBAAsB,CAAC,MAAM,CAAC,GAAG;IACpE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAE5B,SAAS,CAAC,EAAE,2BAA2B,CAAA;CAC1C,CAAC"}

package/dist/core/provisioning/entities/client/types.mjs

@@ -0,0 +1,4 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+export {};

package/dist/core/provisioning/entities/client/validator.d.ts

@@ -0,0 +1,6 @@
+import { Container } from 'validup';
+import type { ClientProvisioningEntity } from './types.ts';
+export declare class ClientProvisioningValidator extends Container<ClientProvisioningEntity> {
+    protected initialize(): void;
+}
+//# sourceMappingURL=validator.d.ts.map

package/dist/core/provisioning/entities/client/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/client/validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAGpC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAE3D,qBAAa,2BAA4B,SAAQ,SAAS,CAAC,wBAAwB,CAAC;IAChF,SAAS,CAAC,UAAU;CAYvB"}

package/dist/core/provisioning/entities/client/validator.mjs

@@ -0,0 +1,24 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { ProvisioningStrategyValidator } from "../../strategy/validator.mjs";
+import "../../strategy/index.mjs";
+import { ClientProvisioningRelationsValidator } from "./relations-validator.mjs";
+import { ClientValidator } from "@authup/core-kit";
+import { Container } from "validup";
+//#region src/core/provisioning/entities/client/validator.ts
+var ClientProvisioningValidator = class extends Container {
+	initialize() {
+		super.initialize();
+		const strategyValidator = new ProvisioningStrategyValidator();
+		this.mount("strategy", { optional: true }, strategyValidator);
+		const attributesValidator = new ClientValidator();
+		this.mount("attributes", attributesValidator);
+		const relationsValidator = new ClientProvisioningRelationsValidator();
+		this.mount("relations", { optional: true }, relationsValidator);
+	}
+};
+//#endregion
+export { ClientProvisioningValidator };
+
+//# sourceMappingURL=validator.mjs.map

package/dist/core/provisioning/entities/client/validator.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.mjs","names":["ClientValidator","Container","ProvisioningStrategyValidator","ClientProvisioningRelationsValidator","ClientProvisioningValidator","initialize","strategyValidator","mount","optional","attributesValidator","relationsValidator"],"sources":["../../../../../src/core/provisioning/entities/client/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ClientValidator } from '@authup/core-kit';\nimport { Container } from 'validup';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\nimport { ClientProvisioningRelationsValidator } from './relations-validator.ts';\nimport type { ClientProvisioningEntity } from './types.ts';\n\nexport class ClientProvisioningValidator extends Container<ClientProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const attributesValidator = new ClientValidator();\n        this.mount('attributes', attributesValidator);\n\n        const relationsValidator = new ClientProvisioningRelationsValidator();\n        this.mount('relations', { optional: true }, relationsValidator);\n    }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAaI,8BAAb,cAAiDH,UAAAA;CACnCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,oBAAoB,IAAIJ,8BAAAA;EAC9B,KAAKK,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGF,iBAAAA;EAE3C,MAAMG,sBAAsB,IAAIT,gBAAAA;EAChC,KAAKO,MAAM,cAAcE,mBAAAA;EAEzB,MAAMC,qBAAqB,IAAIP,qCAAAA;EAC/B,KAAKI,MAAM,aAAa,EAAEC,UAAU,KAAK,GAAGE,kBAAAA;CAChD;AACJ"}

package/dist/core/provisioning/entities/index.d.ts

@@ -0,0 +1,11 @@
+export * from './client/index.ts';
+export * from './permission/index.ts';
+export * from './policy/index.ts';
+export * from './realm/index.ts';
+export * from './robot/index.ts';
+export * from './role/index.ts';
+export * from './root/index.ts';
+export * from './scope/index.ts';
+export * from './user/index.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/provisioning/entities/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/provisioning/entities/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,YAAY,CAAC"}

package/dist/core/provisioning/entities/index.mjs

@@ -0,0 +1,20 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { PermissionProvisioningValidator } from "./permission/validator.mjs";
+import "./permission/index.mjs";
+import { RoleProvisioningValidator } from "./role/validator.mjs";
+import "./role/index.mjs";
+import { ClientProvisioningValidator } from "./client/validator.mjs";
+import "./client/index.mjs";
+import { RobotProvisioningValidator } from "./robot/validator.mjs";
+import "./robot/index.mjs";
+import { ScopeProvisioningValidator } from "./scope/validator.mjs";
+import "./scope/index.mjs";
+import { UserProvisioningValidator } from "./user/validator.mjs";
+import "./user/index.mjs";
+import { RealmProvisioningValidator } from "./realm/validator.mjs";
+import "./realm/index.mjs";
+import { RootProvisioningValidator } from "./root/validator.mjs";
+import "./root/index.mjs";
+export { ClientProvisioningValidator, PermissionProvisioningValidator, RealmProvisioningValidator, RobotProvisioningValidator, RoleProvisioningValidator, RootProvisioningValidator, ScopeProvisioningValidator, UserProvisioningValidator };

package/dist/core/provisioning/entities/permission/index.d.ts

@@ -0,0 +1,3 @@
+export * from './types.ts';
+export * from './validator.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/provisioning/entities/permission/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/permission/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC"}

package/dist/core/provisioning/entities/permission/index.mjs

@@ -0,0 +1,5 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { PermissionProvisioningValidator } from "./validator.mjs";
+export { PermissionProvisioningValidator };

package/dist/core/provisioning/entities/permission/types.d.ts

@@ -0,0 +1,14 @@
+import type { Permission } from '@authup/core-kit';
+import type { BaseProvisioningEntity } from '../types.ts';
+export type PermissionProvisioningRelations = {
+    /**
+     * Policy names to attach to this permission via auth_permission_policies.
+     * Resolved to IDs and inserted as junction rows during provisioning.
+     */
+    policies?: string[];
+};
+export type PermissionProvisioningEntity = BaseProvisioningEntity<Permission> & {
+    attributes: Partial<Permission>;
+    relations?: PermissionProvisioningRelations;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/core/provisioning/entities/permission/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/permission/types.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,MAAM,+BAA+B,GAAG;IAC1C;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG,sBAAsB,CAAC,UAAU,CAAC,GAAG;IAC5E,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,SAAS,CAAC,EAAE,+BAA+B,CAAC;CAC/C,CAAC"}

package/dist/core/provisioning/entities/permission/types.mjs

@@ -0,0 +1,4 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+export {};

package/dist/core/provisioning/entities/permission/validator.d.ts

@@ -0,0 +1,6 @@
+import { Container } from 'validup';
+import type { PermissionProvisioningEntity } from './types.ts';
+export declare class PermissionProvisioningValidator extends Container<PermissionProvisioningEntity> {
+    protected initialize(): void;
+}
+//# sourceMappingURL=validator.d.ts.map

package/dist/core/provisioning/entities/permission/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/permission/validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAGpC,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAE/D,qBAAa,+BAAgC,SAAQ,SAAS,CAAC,4BAA4B,CAAC;IACxF,SAAS,CAAC,UAAU;CASvB"}

package/dist/core/provisioning/entities/permission/validator.mjs

@@ -0,0 +1,21 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { ProvisioningStrategyValidator } from "../../strategy/validator.mjs";
+import "../../strategy/index.mjs";
+import { PermissionValidator } from "@authup/core-kit";
+import { Container } from "validup";
+//#region src/core/provisioning/entities/permission/validator.ts
+var PermissionProvisioningValidator = class extends Container {
+	initialize() {
+		super.initialize();
+		const strategyValidator = new ProvisioningStrategyValidator();
+		this.mount("strategy", { optional: true }, strategyValidator);
+		const attributesValidator = new PermissionValidator();
+		this.mount("attributes", attributesValidator);
+	}
+};
+//#endregion
+export { PermissionProvisioningValidator };
+
+//# sourceMappingURL=validator.mjs.map

package/dist/core/provisioning/entities/permission/validator.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.mjs","names":["PermissionValidator","Container","ProvisioningStrategyValidator","PermissionProvisioningValidator","initialize","strategyValidator","mount","optional","attributesValidator"],"sources":["../../../../../src/core/provisioning/entities/permission/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { PermissionValidator } from '@authup/core-kit';\nimport { Container } from 'validup';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\n\nimport type { PermissionProvisioningEntity } from './types.ts';\n\nexport class PermissionProvisioningValidator extends Container<PermissionProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const attributesValidator = new PermissionValidator();\n        this.mount('attributes', attributesValidator);\n    }\n}\n"],"mappings":";;;;;;;;AAaA,IAAaG,kCAAb,cAAqDF,UAAAA;CACvCG,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,oBAAoB,IAAIH,8BAAAA;EAC9B,KAAKI,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGF,iBAAAA;EAE3C,MAAMG,sBAAsB,IAAIR,oBAAAA;EAChC,KAAKM,MAAM,cAAcE,mBAAAA;CAC7B;AACJ"}

package/dist/core/provisioning/entities/policy/index.d.ts

@@ -0,0 +1,2 @@
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/provisioning/entities/policy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/policy/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC"}

package/dist/core/provisioning/entities/policy/index.mjs

@@ -0,0 +1,4 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+export {};

package/dist/core/provisioning/entities/policy/types.d.ts

@@ -0,0 +1,8 @@
+import type { Policy } from '@authup/core-kit';
+import type { BaseProvisioningEntity } from '../types.ts';
+export type PolicyProvisioningEntity = BaseProvisioningEntity<Policy> & {
+    attributes: Partial<Policy>;
+    extraAttributes?: Record<string, any>;
+    children?: PolicyProvisioningEntity[];
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/core/provisioning/entities/policy/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/policy/types.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,MAAM,wBAAwB,GAAG,sBAAsB,CAAC,MAAM,CAAC,GAAG;IACpE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACtC,QAAQ,CAAC,EAAE,wBAAwB,EAAE,CAAC;CACzC,CAAC"}

package/dist/core/provisioning/entities/policy/types.mjs

@@ -0,0 +1,4 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+export {};

package/dist/core/provisioning/entities/realm/index.d.ts

@@ -0,0 +1,3 @@
+export * from './types.ts';
+export * from './validator.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/provisioning/entities/realm/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/realm/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC"}

package/dist/core/provisioning/entities/realm/index.mjs

@@ -0,0 +1,5 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { RealmProvisioningValidator } from "./validator.mjs";
+export { RealmProvisioningValidator };

package/dist/core/provisioning/entities/realm/relations-validator.d.ts

@@ -0,0 +1,6 @@
+import { Container } from 'validup';
+import type { RealmProvisioningRelations } from './types.ts';
+export declare class RealmProvisioningRelationsValidator extends Container<RealmProvisioningRelations> {
+    protected initialize(): void;
+}
+//# sourceMappingURL=relations-validator.d.ts.map

package/dist/core/provisioning/entities/realm/relations-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relations-validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/realm/relations-validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAkB,MAAM,SAAS,CAAC;AAQpD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAE7D,qBAAa,mCAAoC,SAAQ,SAAS,CAAC,0BAA0B,CAAC;IAC1F,SAAS,CAAC,UAAU;CAgHvB"}

package/dist/core/provisioning/entities/realm/relations-validator.mjs

@@ -0,0 +1,84 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { PermissionProvisioningValidator } from "../permission/validator.mjs";
+import "../permission/index.mjs";
+import { RoleProvisioningValidator } from "../role/validator.mjs";
+import "../role/index.mjs";
+import { ClientProvisioningValidator } from "../client/validator.mjs";
+import "../client/index.mjs";
+import { RobotProvisioningValidator } from "../robot/validator.mjs";
+import "../robot/index.mjs";
+import { ScopeProvisioningValidator } from "../scope/validator.mjs";
+import "../scope/index.mjs";
+import { UserProvisioningValidator } from "../user/validator.mjs";
+import "../user/index.mjs";
+import { Container, isValidupError } from "validup";
+import { buildZodIssuesForError, createValidator } from "@validup/zod";
+import { z } from "zod";
+//#region src/core/provisioning/entities/realm/relations-validator.ts
+var RealmProvisioningRelationsValidator = class extends Container {
+	initialize() {
+		super.initialize();
+		const clientValidator = new ClientProvisioningValidator();
+		const roleValidator = new RoleProvisioningValidator();
+		const permissionValidator = new PermissionProvisioningValidator();
+		const robotValidator = new RobotProvisioningValidator();
+		const scopeValidator = new ScopeProvisioningValidator();
+		const userValidator = new UserProvisioningValidator();
+		this.mount("clients", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
+			try {
+				for (let i = 0; i < ctx.value.length; i++) await clientValidator.run(ctx.value[i]);
+			} catch (e) {
+				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
+			}
+		})));
+		this.mount("roles", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
+			try {
+				for (let i = 0; i < ctx.value.length; i++) await roleValidator.run(ctx.value[i]);
+			} catch (e) {
+				if (isValidupError(e)) {
+					ctx.issues.push({
+						code: "custom",
+						message: "",
+						path: [],
+						input: void 0
+					});
+					ctx.issues.push(...buildZodIssuesForError(e));
+				}
+			}
+		})));
+		this.mount("permissions", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
+			try {
+				for (let i = 0; i < ctx.value.length; i++) await permissionValidator.run(ctx.value[i]);
+			} catch (e) {
+				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
+			}
+		})));
+		this.mount("robots", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
+			try {
+				for (let i = 0; i < ctx.value.length; i++) await robotValidator.run(ctx.value[i]);
+			} catch (e) {
+				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
+			}
+		})));
+		this.mount("scopes", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
+			try {
+				for (let i = 0; i < ctx.value.length; i++) await scopeValidator.run(ctx.value[i]);
+			} catch (e) {
+				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
+			}
+		})));
+		this.mount("users", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
+			try {
+				for (let i = 0; i < ctx.value.length; i++) await userValidator.run(ctx.value[i]);
+			} catch (e) {
+				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
+			}
+		})));
+	}
+};
+//#endregion
+export { RealmProvisioningRelationsValidator };
+
+//# sourceMappingURL=relations-validator.mjs.map

package/dist/core/provisioning/entities/realm/relations-validator.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"relations-validator.mjs","names":["buildZodIssuesForError","createValidator","Container","isValidupError","z","ClientProvisioningValidator","PermissionProvisioningValidator","RobotProvisioningValidator","RoleProvisioningValidator","ScopeProvisioningValidator","UserProvisioningValidator","RealmProvisioningRelationsValidator","initialize","clientValidator","roleValidator","permissionValidator","robotValidator","scopeValidator","userValidator","mount","optional","array","any","check","ctx","i","value","length","run","e","issues","push","code","message","path","input","undefined"],"sources":["../../../../../src/core/provisioning/entities/realm/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { buildZodIssuesForError, createValidator } from '@validup/zod';\nimport { Container, isValidupError } from 'validup';\nimport { z } from 'zod';\nimport { ClientProvisioningValidator } from '../client/index.ts';\nimport { PermissionProvisioningValidator } from '../permission/index.ts';\nimport { RobotProvisioningValidator } from '../robot/index.ts';\nimport { RoleProvisioningValidator } from '../role/index.ts';\nimport { ScopeProvisioningValidator } from '../scope/index.ts';\nimport { UserProvisioningValidator } from '../user/index.ts';\nimport type { RealmProvisioningRelations } from './types.ts';\n\nexport class RealmProvisioningRelationsValidator extends Container<RealmProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        const clientValidator = new ClientProvisioningValidator();\n        const roleValidator = new RoleProvisioningValidator();\n        const permissionValidator = new PermissionProvisioningValidator();\n        const robotValidator = new RobotProvisioningValidator();\n        const scopeValidator = new ScopeProvisioningValidator();\n        const userValidator = new UserProvisioningValidator();\n\n        this.mount('clients', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await clientValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('roles', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await roleValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push({\n                                code: 'custom',\n                                message: '',\n                                path: [],\n                                input: undefined,\n                            });\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('permissions', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await permissionValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('robots', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await robotValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('scopes', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await scopeValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('users', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await userValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAkBA,IAAaW,sCAAb,cAAyDT,UAAAA;CAC3CU,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,kBAAkB,IAAIR,4BAAAA;EAC5B,MAAMS,gBAAgB,IAAIN,0BAAAA;EAC1B,MAAMO,sBAAsB,IAAIT,gCAAAA;EAChC,MAAMU,iBAAiB,IAAIT,2BAAAA;EAC3B,MAAMU,iBAAiB,IAAIR,2BAAAA;EAC3B,MAAMS,gBAAgB,IAAIR,0BAAAA;EAE1B,KAAKS,MAAM,WAAW,EAAEC,UAAU,KAAK,GAAGnB,gBACtCG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMZ,gBAAgBe,IAAIJ,IAAIE,MAAMD,EAAE;GAE9C,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GACfL,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;EAGR,KAAKV,MAAM,SAAS,EAAEC,UAAU,KAAK,GAAGnB,gBACpCG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMX,cAAcc,IAAIJ,IAAIE,MAAMD,EAAE;GAE5C,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GAAI;KACnBL,IAAIM,OAAOC,KAAK;MACZC,MAAM;MACNC,SAAS;MACTC,MAAM,CAAA;MACNC,OAAOC,KAAAA;KACX,CAAA;KACAZ,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;IAC9C;GACJ;EACJ,CAAA,CAAA,CAAA;EAGR,KAAKV,MAAM,eAAe,EAAEC,UAAU,KAAK,GAAGnB,gBAC1CG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMV,oBAAoBa,IAAIJ,IAAIE,MAAMD,EAAE;GAElD,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GACfL,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;EAGR,KAAKV,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGnB,gBACrCG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMT,eAAeY,IAAIJ,IAAIE,MAAMD,EAAE;GAE7C,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GACfL,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;EAGR,KAAKV,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGnB,gBACrCG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMR,eAAeW,IAAIJ,IAAIE,MAAMD,EAAE;GAE7C,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GACfL,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;EAGR,KAAKV,MAAM,SAAS,EAAEC,UAAU,KAAK,GAAGnB,gBACpCG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMP,cAAcU,IAAIJ,IAAIE,MAAMD,EAAE;GAE5C,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GACfL,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;CAEZ;AACJ"}

package/dist/core/provisioning/entities/realm/types.d.ts

@@ -0,0 +1,21 @@
+import type { Realm } from '@authup/core-kit';
+import type { ClientProvisioningEntity } from '../client/index.ts';
+import type { PermissionProvisioningEntity } from '../permission';
+import type { RobotProvisioningEntity } from '../robot';
+import type { RoleProvisioningEntity } from '../role';
+import type { ScopeProvisioningEntity } from '../scope';
+import type { BaseProvisioningEntity } from '../types.ts';
+import type { UserProvisioningEntity } from '../user';
+export type RealmProvisioningRelations = {
+    users?: UserProvisioningEntity[];
+    robots?: RobotProvisioningEntity[];
+    clients?: ClientProvisioningEntity[];
+    roles?: RoleProvisioningEntity[];
+    scopes?: ScopeProvisioningEntity[];
+    permissions?: PermissionProvisioningEntity[];
+};
+export type RealmProvisioningEntity = BaseProvisioningEntity<Realm> & {
+    attributes: Partial<Realm>;
+    relations?: RealmProvisioningRelations;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/core/provisioning/entities/realm/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/realm/types.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAEtD,MAAM,MAAM,0BAA0B,GAAG;IACrC,KAAK,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAEjC,MAAM,CAAC,EAAE,uBAAuB,EAAE,CAAA;IAElC,OAAO,CAAC,EAAE,wBAAwB,EAAE,CAAA;IAGpC,KAAK,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAEjC,MAAM,CAAC,EAAE,uBAAuB,EAAE,CAAC;IAGnC,WAAW,CAAC,EAAE,4BAA4B,EAAE,CAAC;CAChD,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,sBAAsB,CAAC,KAAK,CAAC,GAAG;IAClE,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IAE1B,SAAS,CAAC,EAAE,0BAA0B,CAAA;CACzC,CAAC"}

package/dist/core/provisioning/entities/realm/types.mjs

@@ -0,0 +1,4 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+export {};

package/dist/core/provisioning/entities/realm/validator.d.ts

@@ -0,0 +1,6 @@
+import { Container } from 'validup';
+import type { RealmProvisioningEntity } from './types.ts';
+export declare class RealmProvisioningValidator extends Container<RealmProvisioningEntity> {
+    protected initialize(): void;
+}
+//# sourceMappingURL=validator.d.ts.map

package/dist/core/provisioning/entities/realm/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/realm/validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAIpC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAE1D,qBAAa,0BAA2B,SAAQ,SAAS,CAAC,uBAAuB,CAAC;IAC9E,SAAS,CAAC,UAAU;CAYvB"}