@authup/server-core 1.0.0-beta.5 → 1.0.0-beta.51

package/dist/core/provisioning/synchronizer/user/types.d.ts

@@ -0,0 +1,10 @@
+import type { IClientRepository, IPermissionRepository, IRoleRepository, IUserPermissionRepository, IUserRepository, IUserRoleRepository } from '../../../entities/index.ts';
+export type UserProvisioningSynchronizerContext = {
+    userRepository: IUserRepository;
+    userRoleRepository: IUserRoleRepository;
+    userPermissionRepository: IUserPermissionRepository;
+    clientRepository: IClientRepository;
+    roleRepository: IRoleRepository;
+    permissionRepository: IPermissionRepository;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/core/provisioning/synchronizer/user/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/synchronizer/user/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,iBAAiB,EACjB,qBAAqB,EACrB,eAAe,EACf,yBAAyB,EACzB,eAAe,EACf,mBAAmB,EACtB,MAAM,4BAA4B,CAAC;AAEpC,MAAM,MAAM,mCAAmC,GAAG;IAC9C,cAAc,EAAE,eAAe,CAAC;IAChC,kBAAkB,EAAE,mBAAmB,CAAC;IACxC,wBAAwB,EAAE,yBAAyB,CAAC;IAEpD,gBAAgB,EAAE,iBAAiB,CAAC;IACpC,cAAc,EAAE,eAAe,CAAC;IAChC,oBAAoB,EAAE,qBAAqB,CAAC;CAC/C,CAAC"}

package/dist/core/provisioning/synchronizer/user/types.mjs

@@ -0,0 +1,4 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+export {};

package/dist/core/provisioning/types.d.ts

@@ -0,0 +1,10 @@
+import type { RootProvisioningEntity } from './entities/index.ts';
+import type { IContainer } from 'eldin';
+export interface IProvisioningSource {
+    load(container: IContainer): Promise<RootProvisioningEntity>;
+}
+export interface IProvisioningSynchronizer<T> {
+    synchronize(input: T): Promise<T>;
+    synchronizeMany(input: T[]): Promise<T[]>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/provisioning/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/provisioning/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAExC,MAAM,WAAW,mBAAmB;IAChC,IAAI,CAAC,SAAS,EAAE,UAAU,GAAI,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACjE;AAED,MAAM,WAAW,yBAAyB,CAAC,CAAC;IACxC,WAAW,CAAC,KAAK,EAAE,CAAC,GAAI,OAAO,CAAC,CAAC,CAAC,CAAC;IACnC,eAAe,CAAC,KAAK,EAAE,CAAC,EAAE,GAAI,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;CAC9C"}

package/dist/core/provisioning/types.mjs

@@ -0,0 +1,4 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+export {};

package/dist/core/security/index.d.ts

@@ -0,0 +1,2 @@
+export * from './policy/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/security/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/security/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC"}

package/dist/core/security/index.mjs

@@ -0,0 +1,7 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { PermissionBindingPolicyEvaluator } from "./policy/evaluator.mjs";
+import { PolicyEngine } from "./policy/engine.mjs";
+import "./policy/index.mjs";
+export { PermissionBindingPolicyEvaluator, PolicyEngine };

package/dist/core/security/policy/engine.d.ts

@@ -0,0 +1,6 @@
+import { PolicyEngine as BasePolicyEngine } from '@authup/access';
+import type { IIdentityPermissionProvider } from '../../identity/permission/types.ts';
+export declare class PolicyEngine extends BasePolicyEngine {
+    constructor(identityPermissionProvider: IIdentityPermissionProvider);
+}
+//# sourceMappingURL=engine.d.ts.map

package/dist/core/security/policy/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../../src/core/security/policy/engine.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,YAAY,IAAI,gBAAgB,EAA8C,MAAM,gBAAgB,CAAC;AAC9G,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AAGtF,qBAAa,YAAa,SAAQ,gBAAgB;gBAClC,0BAA0B,EAAE,2BAA2B;CAKtE"}

package/dist/core/security/policy/engine.mjs

@@ -0,0 +1,16 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { PermissionBindingPolicyEvaluator } from "./evaluator.mjs";
+import { BuiltInPolicyType, PolicyDefaultEvaluators, PolicyEngine as PolicyEngine$1 } from "@authup/access";
+//#region src/core/security/policy/engine.ts
+var PolicyEngine = class extends PolicyEngine$1 {
+	constructor(identityPermissionProvider) {
+		super(PolicyDefaultEvaluators);
+		this.registerEvaluator(BuiltInPolicyType.PERMISSION_BINDING, new PermissionBindingPolicyEvaluator(identityPermissionProvider));
+	}
+};
+//#endregion
+export { PolicyEngine };
+
+//# sourceMappingURL=engine.mjs.map

package/dist/core/security/policy/engine.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.mjs","names":["PolicyEngine","BasePolicyEngine","BuiltInPolicyType","PolicyDefaultEvaluators","PermissionBindingPolicyEvaluator","identityPermissionProvider","registerEvaluator","PERMISSION_BINDING"],"sources":["../../../../src/core/security/policy/engine.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { PolicyEngine as BasePolicyEngine, BuiltInPolicyType, PolicyDefaultEvaluators } from '@authup/access';\nimport type { IIdentityPermissionProvider } from '../../identity/permission/types.ts';\nimport { PermissionBindingPolicyEvaluator } from './evaluator.ts';\n\nexport class PolicyEngine extends BasePolicyEngine {\n    constructor(identityPermissionProvider: IIdentityPermissionProvider) {\n        super(PolicyDefaultEvaluators);\n\n        this.registerEvaluator(BuiltInPolicyType.PERMISSION_BINDING, new PermissionBindingPolicyEvaluator(identityPermissionProvider));\n    }\n}\n"],"mappings":";;;;;;AAWA,IAAaA,eAAb,cAAkCC,eAAAA;CAC9B,YAAYI,4BAAyD;EACjE,MAAMF,uBAAAA;EAEN,KAAKG,kBAAkBJ,kBAAkBK,oBAAoB,IAAIH,iCAAiCC,0BAAAA,CAAAA;CACtG;AACJ"}

package/dist/core/security/policy/evaluator.d.ts

@@ -0,0 +1,13 @@
+import type { IPolicyEvaluator, PermissionPolicyBindingAggregated, PolicyEvaluationContext, PolicyEvaluationResult } from '@authup/access';
+import { IdentityPolicyEvaluator, PermissionBindingPolicyValidator, RealmMatchPolicyEvaluator } from '@authup/access';
+import type { IIdentityPermissionProvider } from '../../identity/permission/types.ts';
+export declare class PermissionBindingPolicyEvaluator implements IPolicyEvaluator {
+    protected validator: PermissionBindingPolicyValidator;
+    protected identityEvaluator: IdentityPolicyEvaluator;
+    protected realmMatchEvaluator: RealmMatchPolicyEvaluator;
+    protected identityPermissionProvider: IIdentityPermissionProvider;
+    constructor(identityPermissionProvider: IIdentityPermissionProvider);
+    accessData(ctx: PolicyEvaluationContext): Promise<PermissionPolicyBindingAggregated | null>;
+    evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult>;
+}
+//# sourceMappingURL=evaluator.d.ts.map

package/dist/core/security/policy/evaluator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator.d.ts","sourceRoot":"","sources":["../../../../src/core/security/policy/evaluator.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACR,gBAAgB,EAChB,iCAAiC,EACjC,uBAAuB,EACvB,sBAAsB,EACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAEH,uBAAuB,EACvB,gCAAgC,EAGhC,yBAAyB,EAI5B,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AAEtF,qBAAa,gCAAiC,YAAW,gBAAgB;IACrE,SAAS,CAAC,SAAS,EAAG,gCAAgC,CAAC;IAEvD,SAAS,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;IAErD,SAAS,CAAC,mBAAmB,EAAG,yBAAyB,CAAC;IAE1D,SAAS,CAAC,0BAA0B,EAAE,2BAA2B,CAAC;gBAEtD,0BAA0B,EAAE,2BAA2B;IAO7D,UAAU,CAAC,GAAG,EAAE,uBAAuB,GAAI,OAAO,CAAC,iCAAiC,GAAG,IAAI,CAAC;IAiB5F,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CA2G5G"}

package/dist/core/security/policy/evaluator.mjs

@@ -0,0 +1,73 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { BuiltInPolicyType, IdentityPolicyEvaluator, PermissionBindingPolicyValidator, PolicyEngine, PolicyIssueCode, RealmMatchPolicyEvaluator, aggregatePermissionPolicyBindings, definePolicyIssueItem, maybeInvertPolicyOutcome } from "@authup/access";
+//#region src/core/security/policy/evaluator.ts
+var PermissionBindingPolicyEvaluator = class {
+	validator;
+	identityEvaluator;
+	realmMatchEvaluator;
+	identityPermissionProvider;
+	constructor(identityPermissionProvider) {
+		this.validator = new PermissionBindingPolicyValidator();
+		this.identityEvaluator = new IdentityPolicyEvaluator();
+		this.realmMatchEvaluator = new RealmMatchPolicyEvaluator();
+		this.identityPermissionProvider = identityPermissionProvider;
+	}
+	async accessData(ctx) {
+		if (!ctx.data.has(BuiltInPolicyType.PERMISSION_BINDING)) return null;
+		if (ctx.data.isValidated(BuiltInPolicyType.PERMISSION_BINDING)) return ctx.data.get(BuiltInPolicyType.PERMISSION_BINDING);
+		const data = ctx.data.get(BuiltInPolicyType.PERMISSION_BINDING);
+		ctx.data.set(BuiltInPolicyType.PERMISSION_BINDING, data);
+		ctx.data.setValidated(BuiltInPolicyType.PERMISSION_BINDING);
+		return data;
+	}
+	async evaluate(value, ctx) {
+		const policy = await this.validator.run(value);
+		const identity = await this.identityEvaluator.accessData(ctx);
+		if (!identity) return {
+			success: false,
+			issues: [definePolicyIssueItem({
+				code: PolicyIssueCode.DATA_MISSING,
+				message: "The data property identity is missing",
+				path: ctx.path
+			})]
+		};
+		const binding = await this.accessData(ctx);
+		if (!binding) return {
+			success: false,
+			issues: [definePolicyIssueItem({
+				code: PolicyIssueCode.DATA_MISSING,
+				message: "The data property permission is missing",
+				path: ctx.path
+			})]
+		};
+		const identityBindings = await this.identityPermissionProvider.getFor(identity).then((bindings) => bindings.filter((item) => {
+			if (item.permission.name !== binding.permission.name) return false;
+			return (binding.permission.realm_id ?? null) === (item.permission.realm_id ?? null) && (binding.permission.client_id ?? null) === (item.permission.client_id ?? null);
+		}));
+		if (identityBindings.length === 0) return { success: maybeInvertPolicyOutcome(false, policy.invert) };
+		const [aggr] = aggregatePermissionPolicyBindings(identityBindings);
+		if (!aggr) return { success: maybeInvertPolicyOutcome(false, policy.invert) };
+		const issues = [];
+		for (const grant of aggr.grants) {
+			if (!(await this.realmMatchEvaluator.evaluate({ scope: grant.realm_scope }, ctx)).success) continue;
+			if (!grant.policy) return { success: maybeInvertPolicyOutcome(true, policy.invert) };
+			const outcome = await new PolicyEngine(ctx.evaluators).evaluate(grant.policy, {
+				...ctx,
+				path: [...ctx.path || []]
+			});
+			if (outcome.success) return { success: maybeInvertPolicyOutcome(true, policy.invert) };
+			if (outcome.issues) issues.push(...outcome.issues);
+		}
+		const success = maybeInvertPolicyOutcome(false, policy.invert);
+		return {
+			success,
+			issues: success ? [] : issues
+		};
+	}
+};
+//#endregion
+export { PermissionBindingPolicyEvaluator };
+
+//# sourceMappingURL=evaluator.mjs.map

package/dist/core/security/policy/evaluator.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator.mjs","names":["BuiltInPolicyType","IdentityPolicyEvaluator","PermissionBindingPolicyValidator","PolicyEngine","PolicyIssueCode","RealmMatchPolicyEvaluator","aggregatePermissionPolicyBindings","definePolicyIssueItem","maybeInvertPolicyOutcome","PermissionBindingPolicyEvaluator","validator","identityEvaluator","realmMatchEvaluator","identityPermissionProvider","accessData","ctx","data","has","PERMISSION_BINDING","isValidated","get","set","setValidated","evaluate","value","policy","run","identity","success","issues","code","DATA_MISSING","message","path","binding","identityBindings","getFor","then","bindings","filter","item","permission","name","realm_id","client_id","length","invert","aggr","grant","grants","realmOutcome","scope","realm_scope","engine","evaluators","outcome","push"],"sources":["../../../../src/core/security/policy/evaluator.ts"],"sourcesContent":["/*\n * Copyright (c) 2024-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Issue } from 'validup';\nimport type {\n    IPolicyEvaluator,\n    PermissionPolicyBindingAggregated,\n    PolicyEvaluationContext,\n    PolicyEvaluationResult,\n} from '@authup/access';\nimport {\n    BuiltInPolicyType,\n    IdentityPolicyEvaluator,\n    PermissionBindingPolicyValidator,\n    PolicyEngine,\n    PolicyIssueCode,\n    RealmMatchPolicyEvaluator,\n    aggregatePermissionPolicyBindings,\n    definePolicyIssueItem,\n    maybeInvertPolicyOutcome,\n} from '@authup/access';\nimport type { IIdentityPermissionProvider } from '../../identity/permission/types.ts';\n\nexport class PermissionBindingPolicyEvaluator implements IPolicyEvaluator {\n    protected validator : PermissionBindingPolicyValidator;\n\n    protected identityEvaluator: IdentityPolicyEvaluator;\n\n    protected realmMatchEvaluator : RealmMatchPolicyEvaluator;\n\n    protected identityPermissionProvider: IIdentityPermissionProvider;\n\n    constructor(identityPermissionProvider: IIdentityPermissionProvider) {\n        this.validator = new PermissionBindingPolicyValidator();\n        this.identityEvaluator = new IdentityPolicyEvaluator();\n        this.realmMatchEvaluator = new RealmMatchPolicyEvaluator();\n        this.identityPermissionProvider = identityPermissionProvider;\n    }\n\n    async accessData(ctx: PolicyEvaluationContext) : Promise<PermissionPolicyBindingAggregated | null> {\n        if (!ctx.data.has(BuiltInPolicyType.PERMISSION_BINDING)) {\n            return null;\n        }\n\n        if (ctx.data.isValidated(BuiltInPolicyType.PERMISSION_BINDING)) {\n            return ctx.data.get(BuiltInPolicyType.PERMISSION_BINDING);\n        }\n\n        const data = ctx.data.get<PermissionPolicyBindingAggregated>(BuiltInPolicyType.PERMISSION_BINDING);\n\n        ctx.data.set(BuiltInPolicyType.PERMISSION_BINDING, data);\n        ctx.data.setValidated(BuiltInPolicyType.PERMISSION_BINDING);\n\n        return data;\n    }\n\n    async evaluate(value: Record<string, any>, ctx: PolicyEvaluationContext): Promise<PolicyEvaluationResult> {\n        const policy = await this.validator.run(value);\n\n        const identity = await this.identityEvaluator.accessData(ctx);\n        if (!identity) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property identity is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n        const binding = await this.accessData(ctx);\n        if (!binding) {\n            return {\n                success: false,\n                issues: [\n                    definePolicyIssueItem({\n                        code: PolicyIssueCode.DATA_MISSING,\n                        message: 'The data property permission is missing',\n                        path: ctx.path,\n                    }),\n                ],\n            };\n        }\n\n        const identityBindings = await this.identityPermissionProvider.getFor(identity)\n            .then((bindings) => bindings.filter((item) => {\n                if (item.permission.name !== binding.permission.name) {\n                    return false;\n                }\n\n                return (binding.permission.realm_id ?? null) === (item.permission.realm_id ?? null) &&\n                    (binding.permission.client_id ?? null) === (item.permission.client_id ?? null);\n            }));\n\n        if (identityBindings.length === 0) {\n            return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n        }\n\n        const [aggr] = aggregatePermissionPolicyBindings(identityBindings);\n        if (!aggr) {\n            return { success: maybeInvertPolicyOutcome(false, policy.invert) };\n        }\n\n        // identityBindings is filtered to a single (name, realm_id, client_id) key, so the\n        // aggregate yields exactly one entry whose `grants` are the actor's per-grant\n        // (realm_scope, policy) disjunction terms; access is the DISJUNCTION over them:\n        //   ∃ grant . realmScopeMatches(grant.realm_scope, resource) ∧ (grant.policy passes)\n        // Pairing each grant's realm reach with its OWN policy is what fixes both the mixed\n        // policy-free + policy-bound UNDER-grant (a policy-free `own` grant must not mask a\n        // policy-bound `any` grant's wider reach) and the symmetric OVER-grant (an `own`\n        // grant's passing policy must not ride an `any` grant's wider reach).\n        const issues : Issue[] = [];\n        for (const grant of aggr.grants) {\n            // Realm reach (coarse, actor-relative) — a SEPARATE factor from the grant's\n            // policy, ANDed with it. The realm-match evaluator runs in SCOPE MODE: it reads the\n            // resource realm from ctx.data[REALM_MATCH] (fallback ATTRIBUTES.realm_id) and\n            // neutral-passes when absent (preEvaluate / gate checks / realm-less resources) —\n            // key-PRESENCE is the discriminator. Invoked DIRECTLY (not via PolicyEngine —\n            // REALM_MATCH is in policiesExcluded, so the engine would skip it).\n            const realmOutcome = await this.realmMatchEvaluator.evaluate(\n                { scope: grant.realm_scope },\n                ctx,\n            );\n            if (!realmOutcome.success) {\n                continue;\n            }\n\n            if (!grant.policy) {\n                // Reach matches and this grant carries no further restriction.\n                return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n            }\n\n            // Missing evaluators is a misconfiguration: let the engine fail CLOSED with a\n            // surfaced POLICY_EVALUATOR_NOT_FOUND issue (new PolicyEngine(undefined) defaults\n            // to an empty registry, so grant.policy resolves to no evaluator) rather than\n            // swallowing the grant with a silent issue-less deny.\n            const engine = new PolicyEngine(ctx.evaluators);\n            const outcome = await engine.evaluate(grant.policy, {\n                ...ctx,\n                path: [\n                    ...(ctx.path || []),\n                ],\n            });\n\n            if (outcome.success) {\n                return { success: maybeInvertPolicyOutcome(true, policy.invert) };\n            }\n\n            if (outcome.issues) {\n                issues.push(...outcome.issues);\n            }\n        }\n\n        // No grant term satisfied (reach ∧ policies). Apply `invert` ONCE to the aggregated\n        // disjunction outcome — never per term, which would corrupt the quantifier.\n        const success = maybeInvertPolicyOutcome(false, policy.invert);\n        return {\n            success,\n            issues: success ? [] : issues,\n        };\n    }\n}\n"],"mappings":";;;;;AA2BA,IAAaS,mCAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEV,YAAYA,4BAAyD;EACjE,KAAKH,YAAY,IAAIR,iCAAAA;EACrB,KAAKS,oBAAoB,IAAIV,wBAAAA;EAC7B,KAAKW,sBAAsB,IAAIP,0BAAAA;EAC/B,KAAKQ,6BAA6BA;CACtC;CAEA,MAAMC,WAAWC,KAAkF;EAC/F,IAAI,CAACA,IAAIC,KAAKC,IAAIjB,kBAAkBkB,kBAAkB,GAClD,OAAO;EAGX,IAAIH,IAAIC,KAAKG,YAAYnB,kBAAkBkB,kBAAkB,GACzD,OAAOH,IAAIC,KAAKI,IAAIpB,kBAAkBkB,kBAAkB;EAG5D,MAAMF,OAAOD,IAAIC,KAAKI,IAAuCpB,kBAAkBkB,kBAAkB;EAEjGH,IAAIC,KAAKK,IAAIrB,kBAAkBkB,oBAAoBF,IAAAA;EACnDD,IAAIC,KAAKM,aAAatB,kBAAkBkB,kBAAkB;EAE1D,OAAOF;CACX;CAEA,MAAMO,SAASC,OAA4BT,KAA+D;EACtG,MAAMU,SAAS,MAAM,KAAKf,UAAUgB,IAAIF,KAAAA;EAExC,MAAMG,WAAW,MAAM,KAAKhB,kBAAkBG,WAAWC,GAAAA;EACzD,IAAI,CAACY,UACD,OAAO;GACHC,SAAS;GACTC,QAAQ,CACJtB,sBAAsB;IAClBuB,MAAM1B,gBAAgB2B;IACtBC,SAAS;IACTC,MAAMlB,IAAIkB;GACd,CAAA,CAAA;EAER;EAEJ,MAAMC,UAAU,MAAM,KAAKpB,WAAWC,GAAAA;EACtC,IAAI,CAACmB,SACD,OAAO;GACHN,SAAS;GACTC,QAAQ,CACJtB,sBAAsB;IAClBuB,MAAM1B,gBAAgB2B;IACtBC,SAAS;IACTC,MAAMlB,IAAIkB;GACd,CAAA,CAAA;EAER;EAGJ,MAAME,mBAAmB,MAAM,KAAKtB,2BAA2BuB,OAAOT,QAAAA,CAAAA,CACjEU,MAAMC,aAAaA,SAASC,QAAQC,SAAAA;GACjC,IAAIA,KAAKC,WAAWC,SAASR,QAAQO,WAAWC,MAC5C,OAAO;GAGX,QAAQR,QAAQO,WAAWE,YAAY,WAAWH,KAAKC,WAAWE,YAAY,UACzET,QAAQO,WAAWG,aAAa,WAAWJ,KAAKC,WAAWG,aAAa;EACjF,CAAA,CAAA;EAEJ,IAAIT,iBAAiBU,WAAW,GAC5B,OAAO,EAAEjB,SAASpB,yBAAyB,OAAOiB,OAAOqB,MAAM,EAAE;EAGrE,MAAM,CAACC,QAAQzC,kCAAkC6B,gBAAAA;EACjD,IAAI,CAACY,MACD,OAAO,EAAEnB,SAASpB,yBAAyB,OAAOiB,OAAOqB,MAAM,EAAE;EAWrE,MAAMjB,SAAmB,CAAA;EACzB,KAAK,MAAMmB,SAASD,KAAKE,QAAQ;GAW7B,IAAI,EAACC,MAJsB,KAAKtC,oBAAoBW,SAChD,EAAE4B,OAAOH,MAAMI,YAAY,GAC3BrC,GAAAA,EAAAA,CAEca,SACd;GAGJ,IAAI,CAACoB,MAAMvB,QAEP,OAAO,EAAEG,SAASpB,yBAAyB,MAAMiB,OAAOqB,MAAM,EAAE;GAQpE,MAAMS,UAAU,MAAMF,IADHlD,aAAaY,IAAIuC,UACdD,CAAAA,CAAO9B,SAASyB,MAAMvB,QAAQ;IAChD,GAAGV;IACHkB,MAAM,CAAA,GACElB,IAAIkB,QAAQ,CAAA,CAAA;GAExB,CAAA;GAEA,IAAIsB,QAAQ3B,SACR,OAAO,EAAEA,SAASpB,yBAAyB,MAAMiB,OAAOqB,MAAM,EAAE;GAGpE,IAAIS,QAAQ1B,QACRA,OAAO2B,KAAI,GAAID,QAAQ1B,MAAM;EAErC;EAIA,MAAMD,UAAUpB,yBAAyB,OAAOiB,OAAOqB,MAAM;EAC7D,OAAO;GACHlB;GACAC,QAAQD,UAAU,CAAA,IAAKC;EAC3B;CACJ;AACJ"}

package/dist/core/security/policy/index.d.ts

@@ -0,0 +1,3 @@
+export * from './engine.ts';
+export * from './evaluator.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/security/policy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/security/policy/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}

package/dist/core/security/policy/index.mjs

@@ -0,0 +1,6 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { PermissionBindingPolicyEvaluator } from "./evaluator.mjs";
+import { PolicyEngine } from "./engine.mjs";
+export { PermissionBindingPolicyEvaluator, PolicyEngine };

package/dist/index.d.ts

@@ -1,7 +1,6 @@
-export * from './cli/commands';
-export * from './config';
-export * from './domains';
-export * from './database';
-export * from './http';
-export * from './commands';
+import 'reflect-metadata';
+export * from './app/index.ts';
+export * from './cli/commands/index.ts';
+export * from './adapters/database/index.ts';
+export * from './adapters/http/index.ts';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,QAAQ,CAAC;AACvB,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,kBAAkB,CAAC;AAE1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,0BAA0B,CAAC"}

package/dist/index.mjs

@@ -0,0 +1,216 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { AuthenticationInjectionKey } from "./app/modules/authentication/constants.mjs";
+import { dateToISOStringTransformer } from "./adapters/database/helpers/date.mjs";
+import { isDatabaseTypeSupported, isDatabaseTypeSupportedForEnvironment } from "./adapters/database/helpers/is-supported.mjs";
+import { RealmEntity } from "./adapters/database/domains/realm/entity.mjs";
+import { RealmRepository } from "./adapters/database/domains/realm/repository.mjs";
+import { EntitySubscriber, buildEntityDestinations } from "./adapters/database/subscriber/module.mjs";
+import { CachePrefix } from "./adapters/database/domains/constants.mjs";
+import { RealmSubscriber } from "./adapters/database/domains/realm/subscriber.mjs";
+import { KeyEntity } from "./adapters/database/domains/key/entity.mjs";
+import { ClientEntity } from "./adapters/database/domains/client/entity.mjs";
+import { ClientSubscriber } from "./adapters/database/domains/client/subscriber.mjs";
+import { RoleEntity } from "./adapters/database/domains/role/entity.mjs";
+import { RoleAttributeEntity } from "./adapters/database/domains/role-attribute/entity.mjs";
+import { RoleRepository } from "./adapters/database/domains/role/repository.mjs";
+import { RoleSubscriber } from "./adapters/database/domains/role/subscriber.mjs";
+import { ClientRoleEntity } from "./adapters/database/domains/client-role/entity.mjs";
+import { ClientRoleSubscriber } from "./adapters/database/domains/client-role/subscriber.mjs";
+import { PermissionEntity } from "./adapters/database/domains/permission/entity.mjs";
+import { PermissionSubscriber } from "./adapters/database/domains/permission/subscriber.mjs";
+import { PolicyEntity } from "./adapters/database/domains/policy/entity.mjs";
+import { PolicyAttributeEntity } from "./adapters/database/domains/policy-attribute/entity.mjs";
+import { PolicyAttributeSubscriber } from "./adapters/database/domains/policy-attribute/subscriber.mjs";
+import { PolicyRepository } from "./adapters/database/domains/policy/repository.mjs";
+import { PolicySubscriber } from "./adapters/database/domains/policy/subscriber.mjs";
+import { ClientPermissionEntity } from "./adapters/database/domains/client-permission/entity.mjs";
+import { ClientPermissionSubscriber } from "./adapters/database/domains/client-permission/subscriber.mjs";
+import { ScopeEntity } from "./adapters/database/domains/scope/entity.mjs";
+import { ScopeSubscriber } from "./adapters/database/domains/scope/subscriber.mjs";
+import { ClientScopeEntity } from "./adapters/database/domains/client-scope/entity.mjs";
+import { ClientScopeSubscriber } from "./adapters/database/domains/client-scope/subscriber.mjs";
+import { IdentityProviderEntity } from "./adapters/database/domains/identity-provider/entity.mjs";
+import { IdentityProviderAttributeEntity } from "./adapters/database/domains/identity-provider-attribute/entity.mjs";
+import { IdentityProviderAttributeSubscriber } from "./adapters/database/domains/identity-provider-attribute/subscriber.mjs";
+import { IdentityProviderRepository } from "./adapters/database/domains/identity-provider/repository.mjs";
+import { IdentityProviderSubscriber } from "./adapters/database/domains/identity-provider/subscriber.mjs";
+import { UserEntity } from "./adapters/database/domains/user/entity.mjs";
+import { UserAttributeEntity } from "./adapters/database/domains/user-attribute/entity.mjs";
+import { UserAttributeSubscriber } from "./adapters/database/domains/user-attribute/subscriber.mjs";
+import { UserRepository } from "./adapters/database/domains/user/repository.mjs";
+import { UserSubscriber } from "./adapters/database/domains/user/subscriber.mjs";
+import { IdentityProviderAccountEntity } from "./adapters/database/domains/identity-provider-account/entity.mjs";
+import { IdentityProviderAccountSubscriber } from "./adapters/database/domains/identity-provider-account/subscriber.mjs";
+import { IdentityProviderAttributeMappingEntity } from "./adapters/database/domains/identity-provider-attribute-mapping/entity.mjs";
+import { IdentityProviderPermissionMappingEntity } from "./adapters/database/domains/identity-provider-permission-mapping/entity.mjs";
+import { IdentityProviderRoleMappingEntity } from "./adapters/database/domains/identity-provider-role-mapping/entity.mjs";
+import { IdentityProviderRoleSubscriber } from "./adapters/database/domains/identity-provider-role-mapping/subscriber.mjs";
+import { RobotEntity } from "./adapters/database/domains/robot/entity.mjs";
+import { RobotSubscriber } from "./adapters/database/domains/robot/subscriber.mjs";
+import { SessionEntity } from "./adapters/database/domains/session/entity.mjs";
+import { PermissionPolicyEntity } from "./adapters/database/domains/permission-policy/entity.mjs";
+import { RobotPermissionEntity } from "./adapters/database/domains/robot-permission/entity.mjs";
+import { RobotPermissionSubscriber } from "./adapters/database/domains/robot-permission/subscriber.mjs";
+import { RobotRoleEntity } from "./adapters/database/domains/robot-role/entity.mjs";
+import { RobotRoleSubscriber } from "./adapters/database/domains/robot-role/subscriber.mjs";
+import { RoleAttributeSubscriber } from "./adapters/database/domains/role-attribute/subscriber.mjs";
+import { RolePermissionEntity } from "./adapters/database/domains/role-permission/entity.mjs";
+import { RolePermissionSubscriber } from "./adapters/database/domains/role-permission/subscriber.mjs";
+import { UserPermissionEntity } from "./adapters/database/domains/user-permission/entity.mjs";
+import { UserPermissionSubscriber } from "./adapters/database/domains/user-permission/subscriber.mjs";
+import { UserRoleEntity } from "./adapters/database/domains/user-role/entity.mjs";
+import { UserRoleSubscriber } from "./adapters/database/domains/user-role/subscriber.mjs";
+import { CacheInjectionKey } from "./app/modules/cache/constants.mjs";
+import { ModuleName } from "./app/modules/constants.mjs";
+import { ConfigEnvironmentVariableName, ConfigInjectionKey } from "./app/modules/config/constants.mjs";
+import { expandToOrigins, getAppOrigins } from "./app/modules/config/origins.mjs";
+import { ConfigModule } from "./app/modules/config/module.mjs";
+import { CacheModule } from "./app/modules/cache/module.mjs";
+import { SessionRepository } from "./app/modules/authentication/repositories/session.mjs";
+import { AuthenticationModule } from "./app/modules/authentication/module.mjs";
+import { DatabaseInjectionKey } from "./app/modules/database/constants.mjs";
+import { DatabaseQueryResultCache } from "./adapters/database/cache/module.mjs";
+import { DataSourceOptionsBuilder } from "./adapters/database/data-source/options/module.mjs";
+import { DatabaseConflictError } from "./adapters/database/errors/conflict.mjs";
+import "./adapters/database/index.mjs";
+import { LoggerInjectionKey } from "./app/modules/logger/constants.mjs";
+import { LoggerModule } from "./app/modules/logger/module.mjs";
+import { DatabaseModule } from "./app/modules/database/module.mjs";
+import { RealmRepositoryAdapter } from "./app/modules/database/repositories/realm/repository.mjs";
+import { ClientRepositoryAdapter } from "./app/modules/database/repositories/client/repository.mjs";
+import { ClientPermissionRepositoryAdapter } from "./app/modules/database/repositories/client-permission/repository.mjs";
+import { ClientRoleRepositoryAdapter } from "./app/modules/database/repositories/client-role/repository.mjs";
+import { ClientScopeRepositoryAdapter } from "./app/modules/database/repositories/client-scope/repository.mjs";
+import { IdentityProviderRepositoryAdapter } from "./app/modules/database/repositories/identity-provider/repository.mjs";
+import { PermissionRepositoryAdapter } from "./app/modules/database/repositories/permission/repository.mjs";
+import { PermissionPolicyRepositoryAdapter } from "./app/modules/database/repositories/permission-policy/repository.mjs";
+import { PermissionDatabaseProvider } from "./app/modules/database/repositories/permission-provider/module.mjs";
+import { PolicyRepositoryAdapter } from "./app/modules/database/repositories/policy/repository.mjs";
+import { RobotRepositoryAdapter } from "./app/modules/database/repositories/robot/repository.mjs";
+import { RobotPermissionRepositoryAdapter } from "./app/modules/database/repositories/robot-permission/repository.mjs";
+import { RobotRoleRepositoryAdapter } from "./app/modules/database/repositories/robot-role/repository.mjs";
+import { RoleRepositoryAdapter } from "./app/modules/database/repositories/role/repository.mjs";
+import { RoleAttributeRepositoryAdapter } from "./app/modules/database/repositories/role-attribute/repository.mjs";
+import { RolePermissionRepositoryAdapter } from "./app/modules/database/repositories/role-permission/repository.mjs";
+import { ScopeRepositoryAdapter } from "./app/modules/database/repositories/scope/repository.mjs";
+import { UserRepositoryAdapter } from "./app/modules/database/repositories/user/repository.mjs";
+import { UserAttributeRepositoryAdapter } from "./app/modules/database/repositories/user-attribute/repository.mjs";
+import { UserPermissionRepositoryAdapter } from "./app/modules/database/repositories/user-permission/repository.mjs";
+import { UserRoleRepositoryAdapter } from "./app/modules/database/repositories/user-role/repository.mjs";
+import { IdentityProviderRoleMappingRepositoryAdapter } from "./app/modules/database/repositories/identity-provider-role-mapping/repository.mjs";
+import { ComponentsModule } from "./app/modules/components/module.mjs";
+import { HTTPInjectionKey } from "./app/modules/http/constants.mjs";
+import { RequestHandlerOperation } from "./adapters/http/request/constants.mjs";
+import { setRequestPermissionEvaluator, useRequestPermissionEvaluator } from "./adapters/http/request/permission/helper.mjs";
+import { RequestIdentity, setRequestIdentity, useRequestIdentity, useRequestIdentityOrFail } from "./adapters/http/request/helpers/identity.mjs";
+import { buildActorContext } from "./adapters/http/request/helpers/actor.mjs";
+import { getBodyRealmID } from "./adapters/http/request/helpers/body-realm-id.mjs";
+import { LOCALE_COOKIE, useRequestLocale } from "./adapters/http/request/helpers/locale.mjs";
+import { readFromLocations } from "./adapters/http/request/helpers/locations.mjs";
+import { getRequestParamID, getRequestStringParam, getRequestStringParamOrFail, useRequestParamID } from "./adapters/http/request/helpers/param-id.mjs";
+import { applyRouteRealmIDToBody, getRequestRealmID, setRequestRealmID } from "./adapters/http/request/helpers/realm-id.mjs";
+import { sanitizeRelativeRedirect } from "./adapters/http/request/helpers/redirect.mjs";
+import { setRequestScopes, useRequestScopes } from "./adapters/http/request/helpers/scopes.mjs";
+import { setRequestToken, useRequestToken } from "./adapters/http/request/helpers/token.mjs";
+import { RequestPermissionEvaluator } from "./adapters/http/request/permission/module.mjs";
+import { HTTPOAuth2Authorizer } from "./adapters/http/adapters/oauth2/authorization/module.mjs";
+import { extractClientCredentialsFromRequest, readStringField } from "./adapters/http/adapters/oauth2/grant-types/utils/credentials.mjs";
+import { guessOauth2GrantTypeByRequest } from "./adapters/http/adapters/oauth2/grant-types/utils/guess.mjs";
+import { HTTPOAuth2AuthorizeGrant } from "./adapters/http/adapters/oauth2/grant-types/authorize.mjs";
+import { HTTPClientCredentialsGrant } from "./adapters/http/adapters/oauth2/grant-types/client-credentials.mjs";
+import { HTTPOAuth2IdentityGrantType } from "./adapters/http/adapters/oauth2/grant-types/identity.mjs";
+import { HTTPPasswordGrant } from "./adapters/http/adapters/oauth2/grant-types/password.mjs";
+import { HTTPOAuth2RefreshTokenGrant } from "./adapters/http/adapters/oauth2/grant-types/refresh_token.mjs";
+import { HTTPRobotCredentialsGrant } from "./adapters/http/adapters/oauth2/grant-types/robot-credentials.mjs";
+import { AuthorizationMiddleware } from "./adapters/http/middleware/built-in/authorization/module.mjs";
+import { createAuthorizationMiddleware } from "./adapters/http/middleware/built-in/authorization/factory.mjs";
+import { ForceLoggedInMiddleware } from "./adapters/http/middleware/built-in/loggedin/module.mjs";
+import { ForceUserLoggedInMiddleware } from "./adapters/http/middleware/built-in/loggedin/user.mjs";
+import { RealmResolverMiddleware } from "./adapters/http/middleware/built-in/realm-resolver/module.mjs";
+import { createRealmResolverMiddleware } from "./adapters/http/middleware/built-in/realm-resolver/factory.mjs";
+import { VITE_SERVER_STORE_KEY, registerAssetsMiddleware } from "./adapters/http/middleware/built-in/assets.mjs";
+import { registerBasicMiddleware } from "./adapters/http/middleware/built-in/basic.mjs";
+import { registerCorsMiddleware } from "./adapters/http/middleware/built-in/cors.mjs";
+import { registerErrorMiddleware } from "./adapters/http/middleware/built-in/error.mjs";
+import { createLoggerMiddleware } from "./adapters/http/middleware/built-in/logger.mjs";
+import { registerPrometheusMiddleware } from "./adapters/http/middleware/built-in/prometheus.mjs";
+import { registerRateLimitMiddleware } from "./adapters/http/middleware/built-in/rate-limit.mjs";
+import { createSwaggerMiddleware } from "./adapters/http/middleware/built-in/swagger.mjs";
+import { UI_HTTP_CLIENT_FACTORY_STORE_KEY, registerUIHttpClientMiddleware } from "./adapters/http/middleware/built-in/ui-http-client.mjs";
+import { ClientController } from "./adapters/http/controllers/entities/client/module.mjs";
+import { ClientPermissionController } from "./adapters/http/controllers/entities/client-permission/module.mjs";
+import { ClientPermissionRequestValidator } from "./adapters/http/controllers/entities/client-permission/utils/validation.mjs";
+import { ClientRoleRequestValidator } from "./adapters/http/controllers/entities/client-role/utils/validation.mjs";
+import { ClientRoleController } from "./adapters/http/controllers/entities/client-role/module.mjs";
+import { ClientScopeController } from "./adapters/http/controllers/entities/client-scope/module.mjs";
+import { ClientScopeRequestValidator } from "./adapters/http/controllers/entities/client-scope/utils/validator.mjs";
+import { IdentityProviderController } from "./adapters/http/controllers/entities/identity-provider/module.mjs";
+import { IdentityProviderRoleMappingController } from "./adapters/http/controllers/entities/identity-provide-role/module.mjs";
+import { PermissionController } from "./adapters/http/controllers/entities/permission/module.mjs";
+import { PermissionPolicyController } from "./adapters/http/controllers/entities/permission-policy/module.mjs";
+import { ActivateController } from "./adapters/http/controllers/workflows/activate/module.mjs";
+import { AuthorizeController } from "./adapters/http/controllers/workflows/authorize/module.mjs";
+import { getJwkRouteHandler, getJwksRouteHandler } from "./adapters/http/controllers/workflows/jwks/handlers/read.mjs";
+import { JwkController } from "./adapters/http/controllers/workflows/jwks/module.mjs";
+import { OpenIDController } from "./adapters/http/controllers/workflows/openid/module.mjs";
+import { PasswordForgotController } from "./adapters/http/controllers/workflows/password-forgot/module.mjs";
+import { PasswordResetController } from "./adapters/http/controllers/workflows/password-reset/module.mjs";
+import { RegisterController } from "./adapters/http/controllers/workflows/register/module.mjs";
+import { StatusController } from "./adapters/http/controllers/workflows/status/module.mjs";
+import { TokenController } from "./adapters/http/controllers/workflows/token/module.mjs";
+import { RealmController } from "./adapters/http/controllers/entities/realm/module.mjs";
+import { RobotController } from "./adapters/http/controllers/entities/robot/module.mjs";
+import { RobotPermissionController } from "./adapters/http/controllers/entities/robot-permission/module.mjs";
+import { RobotPermissionRequestValidator } from "./adapters/http/controllers/entities/robot-permission/utils/validation.mjs";
+import { RobotRoleController } from "./adapters/http/controllers/entities/robot-role/module.mjs";
+import { RobotRoleRequestValidator } from "./adapters/http/controllers/entities/robot-role/utils/validation.mjs";
+import { RoleController } from "./adapters/http/controllers/entities/role/module.mjs";
+import { RoleAttributeController } from "./adapters/http/controllers/entities/role-attribute/module.mjs";
+import { RoleAttributeRequestValidator } from "./adapters/http/controllers/entities/role-attribute/utils/validation.mjs";
+import { RolePermissionController } from "./adapters/http/controllers/entities/role-permission/module.mjs";
+import { RolePermissionRequestValidator } from "./adapters/http/controllers/entities/role-permission/utils/validation.mjs";
+import { PolicyController } from "./adapters/http/controllers/entities/policy/module.mjs";
+import { PolicyAttributesValidator } from "./adapters/http/controllers/entities/policy/utils/attributes-validator.mjs";
+import { PolicyValidator } from "./adapters/http/controllers/entities/policy/utils/validation.mjs";
+import { ScopeController } from "./adapters/http/controllers/entities/scope/module.mjs";
+import { UserController } from "./adapters/http/controllers/entities/user/module.mjs";
+import { UserAttributeController } from "./adapters/http/controllers/entities/user-attribute/module.mjs";
+import { UserAttributeRequestValidator } from "./adapters/http/controllers/entities/user-attribute/utils/validation.mjs";
+import { UserPermissionController } from "./adapters/http/controllers/entities/user-permission/module.mjs";
+import { UserPermissionRequestValidator } from "./adapters/http/controllers/entities/user-permission/utils/validation.mjs";
+import { UserRoleController } from "./adapters/http/controllers/entities/user-role/module.mjs";
+import { UserRoleRequestValidator } from "./adapters/http/controllers/entities/user-role/utils/validation.mjs";
+import "./adapters/http/index.mjs";
+import { OAuth2InjectionToken } from "./app/modules/oauth2/constants.mjs";
+import { IdentityInjectionKey } from "./app/modules/identity/constants.mjs";
+import { IdentityProviderAccountRepository } from "./app/modules/identity/repositories/provider/account/module.mjs";
+import { IdentityProviderAttributeMappingRepository } from "./app/modules/identity/repositories/provider/mapper/attribute.mjs";
+import { IdentityProviderPermissionMappingRepository } from "./app/modules/identity/repositories/provider/mapper/permission.mjs";
+import { IdentityProviderRoleMappingRepository } from "./app/modules/identity/repositories/provider/mapper/role.mjs";
+import { ClientIdentityRepository } from "./app/modules/identity/repositories/client.mjs";
+import { RobotIdentityRepository } from "./app/modules/identity/repositories/robot.mjs";
+import { UserIdentityRepository } from "./app/modules/identity/repositories/user.mjs";
+import { LDAPInjectionKey } from "./app/modules/ldap/constants.mjs";
+import { LdapModule } from "./app/modules/ldap/module.mjs";
+import { IdentityModule } from "./app/modules/identity/module.mjs";
+import { OAuth2Module } from "./app/modules/oauth2/module.mjs";
+import { MailInjectionKey, MailTemplateRendererInjectionKey } from "./app/modules/mail/constants.mjs";
+import { MailModule } from "./app/modules/mail/module.mjs";
+import { HTTPModule } from "./app/modules/http/module.mjs";
+import { DefaultProvisioningSource } from "./app/modules/provisioning/sources/default/module.mjs";
+import { CompositeProvisioningSource } from "./app/modules/provisioning/sources/composite/module.mjs";
+import { FileProvisioningSource } from "./app/modules/provisioning/sources/file/module.mjs";
+import { ProvisionerModule } from "./app/modules/provisioning/module.mjs";
+import { RuntimeModule } from "./app/modules/runtime/module.mjs";
+import { ApplicationBuilder } from "./app/builder.mjs";
+import { createApplication } from "./app/factory.mjs";
+import "./app/index.mjs";
+import { defineCLIHealthCheckCommand } from "./cli/commands/healthcheck.mjs";
+import { defineCLIMigrationCommand } from "./cli/commands/migration.mjs";
+import { defineCLIResetCommand } from "./cli/commands/reset.mjs";
+import { defineCLIStartCommand } from "./cli/commands/start.mjs";
+import "./cli/commands/index.mjs";
+import "reflect-metadata";
+export { ActivateController, ApplicationBuilder, AuthenticationInjectionKey, AuthenticationModule, AuthorizationMiddleware, AuthorizeController, CacheInjectionKey, CacheModule, CachePrefix, ClientController, ClientEntity, ClientIdentityRepository, ClientPermissionController, ClientPermissionEntity, ClientPermissionRepositoryAdapter, ClientPermissionRequestValidator, ClientPermissionSubscriber, ClientRepositoryAdapter, ClientRoleController, ClientRoleEntity, ClientRoleRepositoryAdapter, ClientRoleRequestValidator, ClientRoleSubscriber, ClientScopeController, ClientScopeEntity, ClientScopeRepositoryAdapter, ClientScopeRequestValidator, ClientScopeSubscriber, ClientSubscriber, ComponentsModule, CompositeProvisioningSource, ConfigEnvironmentVariableName, ConfigInjectionKey, ConfigModule, DataSourceOptionsBuilder, DatabaseConflictError, DatabaseInjectionKey, DatabaseModule, DatabaseQueryResultCache, DefaultProvisioningSource, EntitySubscriber, FileProvisioningSource, ForceLoggedInMiddleware, ForceUserLoggedInMiddleware, HTTPClientCredentialsGrant, HTTPInjectionKey, HTTPModule, HTTPOAuth2AuthorizeGrant, HTTPOAuth2Authorizer, HTTPOAuth2IdentityGrantType, HTTPOAuth2RefreshTokenGrant, HTTPPasswordGrant, HTTPRobotCredentialsGrant, IdentityInjectionKey, IdentityModule, IdentityProviderAccountEntity, IdentityProviderAccountRepository, IdentityProviderAccountSubscriber, IdentityProviderAttributeEntity, IdentityProviderAttributeMappingEntity, IdentityProviderAttributeMappingRepository, IdentityProviderAttributeSubscriber, IdentityProviderController, IdentityProviderEntity, IdentityProviderPermissionMappingEntity, IdentityProviderPermissionMappingRepository, IdentityProviderRepository, IdentityProviderRepositoryAdapter, IdentityProviderRoleMappingController, IdentityProviderRoleMappingEntity, IdentityProviderRoleMappingRepository, IdentityProviderRoleMappingRepositoryAdapter, IdentityProviderRoleSubscriber, IdentityProviderSubscriber, JwkController, KeyEntity, LDAPInjectionKey, LOCALE_COOKIE, LdapModule, LoggerInjectionKey, LoggerModule, MailInjectionKey, MailModule, MailTemplateRendererInjectionKey, ModuleName, OAuth2InjectionToken, OAuth2Module, OpenIDController, PasswordForgotController, PasswordResetController, PermissionController, PermissionDatabaseProvider, PermissionEntity, PermissionPolicyController, PermissionPolicyEntity, PermissionPolicyRepositoryAdapter, PermissionRepositoryAdapter, PermissionSubscriber, PolicyAttributeEntity, PolicyAttributeSubscriber, PolicyAttributesValidator, PolicyController, PolicyEntity, PolicyRepository, PolicyRepositoryAdapter, PolicySubscriber, PolicyValidator, ProvisionerModule, RealmController, RealmEntity, RealmRepository, RealmRepositoryAdapter, RealmResolverMiddleware, RealmSubscriber, RegisterController, RequestHandlerOperation, RequestIdentity, RequestPermissionEvaluator, RobotController, RobotEntity, RobotIdentityRepository, RobotPermissionController, RobotPermissionEntity, RobotPermissionRepositoryAdapter, RobotPermissionRequestValidator, RobotPermissionSubscriber, RobotRepositoryAdapter, RobotRoleController, RobotRoleEntity, RobotRoleRepositoryAdapter, RobotRoleRequestValidator, RobotRoleSubscriber, RobotSubscriber, RoleAttributeController, RoleAttributeEntity, RoleAttributeRepositoryAdapter, RoleAttributeRequestValidator, RoleAttributeSubscriber, RoleController, RoleEntity, RolePermissionController, RolePermissionEntity, RolePermissionRepositoryAdapter, RolePermissionRequestValidator, RolePermissionSubscriber, RoleRepository, RoleRepositoryAdapter, RoleSubscriber, RuntimeModule, ScopeController, ScopeEntity, ScopeRepositoryAdapter, ScopeSubscriber, SessionEntity, SessionRepository, StatusController, TokenController, UI_HTTP_CLIENT_FACTORY_STORE_KEY, UserAttributeController, UserAttributeEntity, UserAttributeRepositoryAdapter, UserAttributeRequestValidator, UserAttributeSubscriber, UserController, UserEntity, UserIdentityRepository, UserPermissionController, UserPermissionEntity, UserPermissionRepositoryAdapter, UserPermissionRequestValidator, UserPermissionSubscriber, UserRepository, UserRepositoryAdapter, UserRoleController, UserRoleEntity, UserRoleRepositoryAdapter, UserRoleRequestValidator, UserRoleSubscriber, UserSubscriber, VITE_SERVER_STORE_KEY, applyRouteRealmIDToBody, buildActorContext, buildEntityDestinations, createApplication, createAuthorizationMiddleware, createLoggerMiddleware, createRealmResolverMiddleware, createSwaggerMiddleware, dateToISOStringTransformer, defineCLIHealthCheckCommand, defineCLIMigrationCommand, defineCLIResetCommand, defineCLIStartCommand, expandToOrigins, extractClientCredentialsFromRequest, getAppOrigins, getBodyRealmID, getJwkRouteHandler, getJwksRouteHandler, getRequestParamID, getRequestRealmID, getRequestStringParam, getRequestStringParamOrFail, guessOauth2GrantTypeByRequest, isDatabaseTypeSupported, isDatabaseTypeSupportedForEnvironment, readFromLocations, readStringField, registerAssetsMiddleware, registerBasicMiddleware, registerCorsMiddleware, registerErrorMiddleware, registerPrometheusMiddleware, registerRateLimitMiddleware, registerUIHttpClientMiddleware, sanitizeRelativeRedirect, setRequestIdentity, setRequestPermissionEvaluator, setRequestRealmID, setRequestScopes, setRequestToken, useRequestIdentity, useRequestIdentityOrFail, useRequestLocale, useRequestParamID, useRequestPermissionEvaluator, useRequestScopes, useRequestToken };

package/dist/path.d.ts

@@ -0,0 +1,7 @@
+export declare const CODE_PATH: string;
+export declare const PACKAGE_PATH: string;
+export declare const SRC_PATH: string;
+export declare const DIST_PATH: string;
+export declare const UI_DIST_PATH: string;
+export declare const UI_SOURCE_PATH: string;
+//# sourceMappingURL=path.d.ts.map

package/dist/path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.d.ts","sourceRoot":"","sources":["../src/path.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,SAAS,QAA+C,CAAC;AACtE,eAAO,MAAM,YAAY,QAA6B,CAAC;AACvD,eAAO,MAAM,QAAQ,QAAiC,CAAC;AACvD,eAAO,MAAM,SAAS,QAAkC,CAAC;AAEzD,eAAO,MAAM,YAAY,QAA6B,CAAC;AACvD,eAAO,MAAM,cAAc,QAAgC,CAAC"}

package/dist/path.mjs

@@ -0,0 +1,16 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+//#region src/path.ts
+const CODE_PATH = path.dirname(fileURLToPath(import.meta.url));
+const PACKAGE_PATH = path.join(CODE_PATH, "..");
+const SRC_PATH = path.join(PACKAGE_PATH, "src");
+const DIST_PATH = path.join(PACKAGE_PATH, "dist");
+const UI_DIST_PATH = path.join(DIST_PATH, "ui");
+const UI_SOURCE_PATH = path.join(PACKAGE_PATH, "ui");
+//#endregion
+export { CODE_PATH, DIST_PATH, PACKAGE_PATH, SRC_PATH, UI_DIST_PATH, UI_SOURCE_PATH };
+
+//# sourceMappingURL=path.mjs.map

package/dist/path.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.mjs","names":["path","fileURLToPath","CODE_PATH","dirname","url","PACKAGE_PATH","join","SRC_PATH","DIST_PATH","UI_DIST_PATH","UI_SOURCE_PATH"],"sources":["../src/path.ts"],"sourcesContent":["/*\n * Copyright (c) 2023-2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport path from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nexport const CODE_PATH = path.dirname(fileURLToPath(import.meta.url));\nexport const PACKAGE_PATH = path.join(CODE_PATH, '..');\nexport const SRC_PATH = path.join(PACKAGE_PATH, 'src');\nexport const DIST_PATH = path.join(PACKAGE_PATH, 'dist');\n\nexport const UI_DIST_PATH = path.join(DIST_PATH, 'ui');\nexport const UI_SOURCE_PATH = path.join(PACKAGE_PATH, 'ui');\n"],"mappings":";;;;;;AAUA,MAAaE,YAAYF,KAAKG,QAAQF,cAAc,OAAA,KAAYG,GAAG,CAAA;AACnE,MAAaC,eAAeL,KAAKM,KAAKJ,WAAW,IAAA;AACjD,MAAaK,WAAWP,KAAKM,KAAKD,cAAc,KAAA;AAChD,MAAaG,YAAYR,KAAKM,KAAKD,cAAc,MAAA;AAEjD,MAAaI,eAAeT,KAAKM,KAAKE,WAAW,IAAA;AACjD,MAAaE,iBAAiBV,KAAKM,KAAKD,cAAc,IAAA"}