@authup/server-core 1.0.0-beta.50 → 1.0.0-beta.51

package/dist/adapters/database/domains/client-permission/entity.d.ts

@@ -1,8 +1,9 @@
-import type { Client, ClientPermission, Permission, Policy, Realm } from '@authup/core-kit';
+import type { Client, ClientPermission, Permission, Policy, Realm, RealmScopeValue } from '@authup/core-kit';
 export declare class ClientPermissionEntity implements ClientPermission {
     id: string;
     policy_id: string | null;
     policy: Policy | null;
+    realm_scope: RealmScopeValue;
     client_id: string;
     client: Client;
     client_realm_id: Client['id'] | null;

package/dist/adapters/database/domains/client-permission/entity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/domains/client-permission/entity.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EACR,MAAM,EACN,gBAAgB,EAChB,UAAU,EACV,MAAM,EACN,KAAK,EACR,MAAM,kBAAkB,CAAC;AAM1B,qBAEa,sBAAuB,YAAW,gBAAgB;IAE3D,EAAE,EAAE,MAAM,CAAC;IAKX,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAOzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAGtB,SAAS,EAAE,MAAM,CAAC;IAIlB,MAAM,EAAE,MAAM,CAAC;IAGf,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOrC,YAAY,EAAE,KAAK,GAAG,IAAI,CAAC;IAG3B,aAAa,EAAE,MAAM,CAAC;IAItB,UAAU,EAAE,UAAU,CAAC;IAGvB,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOxC,gBAAgB,EAAE,KAAK,GAAG,IAAI,CAAC;IAK/B,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,EAAE,MAAM,CAAC;CACtB"}
+{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/domains/client-permission/entity.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EACR,MAAM,EACN,gBAAgB,EAChB,UAAU,EACV,MAAM,EACN,KAAK,EACL,eAAe,EAClB,MAAM,kBAAkB,CAAC;AAM1B,qBAEa,sBAAuB,YAAW,gBAAgB;IAE3D,EAAE,EAAE,MAAM,CAAC;IAKX,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAOzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAOtB,WAAW,EAAE,eAAe,CAAC;IAG7B,SAAS,EAAE,MAAM,CAAC;IAIlB,MAAM,EAAE,MAAM,CAAC;IAGf,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOrC,YAAY,EAAE,KAAK,GAAG,IAAI,CAAC;IAG3B,aAAa,EAAE,MAAM,CAAC;IAItB,UAAU,EAAE,UAAU,CAAC;IAGvB,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOxC,gBAAgB,EAAE,KAAK,GAAG,IAAI,CAAC;IAK/B,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,EAAE,MAAM,CAAC;CACtB"}

package/dist/adapters/database/domains/client-permission/entity.mjs

@@ -25,6 +25,7 @@ var ClientPermissionEntity = class {
 	id;
 	policy_id;
 	policy;
+	realm_scope;
 	client_id;
 	client;
 	client_realm_id;
@@ -46,6 +47,11 @@ _ts_decorate([
 	JoinColumn({ name: "policy_id" }),
 	_ts_metadata("design:type", Object)
 ], ClientPermissionEntity.prototype, "policy", void 0);
+_ts_decorate([Column({
+	type: "varchar",
+	length: 50,
+	default: "own"
+}), _ts_metadata("design:type", typeof RealmScopeValue === "undefined" ? Object : RealmScopeValue)], ClientPermissionEntity.prototype, "realm_scope", void 0);
 _ts_decorate([Column(), _ts_metadata("design:type", String)], ClientPermissionEntity.prototype, "client_id", void 0);
 _ts_decorate([
 	ManyToOne(() => ClientEntity, { onDelete: "CASCADE" }),

package/dist/adapters/database/domains/client-permission/entity.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"entity.mjs","names":["Column","CreateDateColumn","Entity","Index","JoinColumn","ManyToOne","PrimaryGeneratedColumn","UpdateDateColumn","dateToISOStringTransformer","PermissionEntity","PolicyEntity","ClientEntity","RealmEntity","ClientPermissionEntity","id","policy_id","policy","client_id","client","client_realm_id","client_realm","permission_id","permission","permission_realm_id","permission_realm","created_at","updated_at","nullable","onDelete","name","type","transformer","unique"],"sources":["../../../../../src/adapters/database/domains/client-permission/entity.ts"],"sourcesContent":["/*\n * Copyright (c) 2021-2021.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    Column,\n    CreateDateColumn,\n    Entity, \n    Index,\n    JoinColumn,\n    ManyToOne,\n    PrimaryGeneratedColumn,\n    UpdateDateColumn,\n} from 'typeorm';\nimport { dateToISOStringTransformer } from '../../helpers/index.ts';\nimport type {\n    Client,\n    ClientPermission,\n    Permission,\n    Policy,\n    Realm,\n} from '@authup/core-kit';\nimport { PermissionEntity } from '../permission/index.ts';\nimport { PolicyEntity } from '../policy/index.ts';\nimport { ClientEntity } from '../client/entity.ts';\nimport { RealmEntity } from '../realm/index.ts';\n\n@Entity({ name: 'auth_client_permissions' })\n@Index(['client_id', 'permission_id'], { unique: true })\nexport class ClientPermissionEntity implements ClientPermission {\n    @PrimaryGeneratedColumn('uuid')\n    id: string;\n\n    // ------------------------------------------------------------------\n\n    @Column({ nullable: true })\n    policy_id: string | null;\n\n    @ManyToOne(() => PolicyEntity, {\n        onDelete: 'SET NULL',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'policy_id' })\n    policy: Policy | null;\n\n    @Column()\n    client_id: string;\n\n    @ManyToOne(() => ClientEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'client_id' })\n    client: Client;\n\n    @Column({ nullable: true })\n    client_realm_id: Client['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'client_realm_id' })\n    client_realm: Realm | null;\n\n    @Column({ type: 'varchar' })\n    permission_id: string;\n\n    @ManyToOne(() => PermissionEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'permission_id' })\n    permission: Permission;\n\n    @Column({ nullable: true })\n    permission_realm_id: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'permission_realm_id' })\n    permission_realm: Realm | null;\n\n    // ------------------------------------------------------------------\n\n    @CreateDateColumn({ transformer: dateToISOStringTransformer })\n    created_at: string;\n\n    @UpdateDateColumn({ transformer: dateToISOStringTransformer })\n    updated_at: string;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAgCA,IAAaa,yBAAb,MAAaA;CAETC;CAKAC;CAOAC;CAGAC;CAIAC;CAGAC;CAOAC;CAGAC;CAIAC;CAGAC;CAOAC;CAKAC;CAGAC;AACJ;;uBAnDcC,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,uBAAA,WAAA,aAAA,KAAA,CAAA;;iBAGHjB,cAAAA;EACbkB,UAAU;EACVD,UAAU;;cAEAE,MAAM,YAAA,CAAA;;;;;iBAMHlB,cAAAA,EAAgBiB,UAAU,UAAA,CAAA;cAC7BC,MAAM,YAAA,CAAA;;;uBAGVF,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,uBAAA,WAAA,mBAAA,KAAA,CAAA;;iBAGHf,aAAAA;EACbgB,UAAU;EACVD,UAAU;;cAEAE,MAAM,kBAAA,CAAA;;;uBAGVC,MAAM,UAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,uBAAA,WAAA,iBAAA,KAAA,CAAA;;iBAGCrB,kBAAAA,EAAoBmB,UAAU,UAAA,CAAA;cACjCC,MAAM,gBAAA,CAAA;;;uBAGVF,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,uBAAA,WAAA,uBAAA,KAAA,CAAA;;iBAGHf,aAAAA;EACbgB,UAAU;EACVD,UAAU;;cAEAE,MAAM,sBAAA,CAAA;;;iCAKAE,aAAavB,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,uBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;iCAGbuB,aAAavB,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,uBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;gDAzD3BqB,MAAM,0BAAA,CAAA,GAAA,MAAA,CACR,aAAa,eAAA,GAAA,EAAoBG,QAAQ,KAAA,CAAA,CAAA,GAAA,sBAAA"}
+{"version":3,"file":"entity.mjs","names":["Column","CreateDateColumn","Entity","Index","JoinColumn","ManyToOne","PrimaryGeneratedColumn","UpdateDateColumn","dateToISOStringTransformer","PermissionEntity","PolicyEntity","ClientEntity","RealmEntity","ClientPermissionEntity","id","policy_id","policy","realm_scope","client_id","client","client_realm_id","client_realm","permission_id","permission","permission_realm_id","permission_realm","created_at","updated_at","nullable","onDelete","name","type","length","default","transformer","unique"],"sources":["../../../../../src/adapters/database/domains/client-permission/entity.ts"],"sourcesContent":["/*\n * Copyright (c) 2021-2021.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    Column,\n    CreateDateColumn,\n    Entity, \n    Index,\n    JoinColumn,\n    ManyToOne,\n    PrimaryGeneratedColumn,\n    UpdateDateColumn,\n} from 'typeorm';\nimport { dateToISOStringTransformer } from '../../helpers/index.ts';\nimport type {\n    Client,\n    ClientPermission,\n    Permission,\n    Policy,\n    Realm,\n    RealmScopeValue,\n} from '@authup/core-kit';\nimport { PermissionEntity } from '../permission/index.ts';\nimport { PolicyEntity } from '../policy/index.ts';\nimport { ClientEntity } from '../client/entity.ts';\nimport { RealmEntity } from '../realm/index.ts';\n\n@Entity({ name: 'auth_client_permissions' })\n@Index(['client_id', 'permission_id'], { unique: true })\nexport class ClientPermissionEntity implements ClientPermission {\n    @PrimaryGeneratedColumn('uuid')\n    id: string;\n\n    // ------------------------------------------------------------------\n\n    @Column({ nullable: true })\n    policy_id: string | null;\n\n    @ManyToOne(() => PolicyEntity, {\n        onDelete: 'SET NULL',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'policy_id' })\n    policy: Policy | null;\n\n    @Column({\n        type: 'varchar',\n        length: 50,\n        default: 'own',\n    })\n    realm_scope: RealmScopeValue;\n\n    @Column()\n    client_id: string;\n\n    @ManyToOne(() => ClientEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'client_id' })\n    client: Client;\n\n    @Column({ nullable: true })\n    client_realm_id: Client['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'client_realm_id' })\n    client_realm: Realm | null;\n\n    @Column({ type: 'varchar' })\n    permission_id: string;\n\n    @ManyToOne(() => PermissionEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'permission_id' })\n    permission: Permission;\n\n    @Column({ nullable: true })\n    permission_realm_id: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'permission_realm_id' })\n    permission_realm: Realm | null;\n\n    // ------------------------------------------------------------------\n\n    @CreateDateColumn({ transformer: dateToISOStringTransformer })\n    created_at: string;\n\n    @UpdateDateColumn({ transformer: dateToISOStringTransformer })\n    updated_at: string;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAiCA,IAAaa,yBAAb,MAAaA;CAETC;CAKAC;CAOAC;CAOAC;CAGAC;CAIAC;CAGAC;CAOAC;CAGAC;CAIAC;CAGAC;CAOAC;CAKAC;CAGAC;AACJ;;uBA1DcC,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,uBAAA,WAAA,aAAA,KAAA,CAAA;;iBAGHlB,cAAAA;EACbmB,UAAU;EACVD,UAAU;;cAEAE,MAAM,YAAA,CAAA;;;;CAIhBC,MAAM;CACNC,QAAQ;CACRC,SAAS;;;;iBAOItB,cAAAA,EAAgBkB,UAAU,UAAA,CAAA;cAC7BC,MAAM,YAAA,CAAA;;;uBAGVF,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,uBAAA,WAAA,mBAAA,KAAA,CAAA;;iBAGHhB,aAAAA;EACbiB,UAAU;EACVD,UAAU;;cAEAE,MAAM,kBAAA,CAAA;;;uBAGVC,MAAM,UAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,uBAAA,WAAA,iBAAA,KAAA,CAAA;;iBAGCtB,kBAAAA,EAAoBoB,UAAU,UAAA,CAAA;cACjCC,MAAM,gBAAA,CAAA;;;uBAGVF,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,uBAAA,WAAA,uBAAA,KAAA,CAAA;;iBAGHhB,aAAAA;EACbiB,UAAU;EACVD,UAAU;;cAEAE,MAAM,sBAAA,CAAA;;;iCAKAI,aAAa1B,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,uBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;iCAGb0B,aAAa1B,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,uBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;gDAhE3BsB,MAAM,0BAAA,CAAA,GAAA,MAAA,CACR,aAAa,eAAA,GAAA,EAAoBK,QAAQ,KAAA,CAAA,CAAA,GAAA,sBAAA"}

package/dist/adapters/database/domains/robot-permission/entity.d.ts

@@ -1,8 +1,9 @@
-import type { Permission, Policy, Realm, Robot, RobotPermission } from '@authup/core-kit';
+import type { Permission, Policy, Realm, RealmScopeValue, Robot, RobotPermission } from '@authup/core-kit';
 export declare class RobotPermissionEntity implements RobotPermission {
     id: string;
     policy_id: string | null;
     policy: Policy | null;
+    realm_scope: RealmScopeValue;
     robot_id: string;
     robot: Robot;
     robot_realm_id: Realm['id'] | null;

package/dist/adapters/database/domains/robot-permission/entity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/domains/robot-permission/entity.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EACR,UAAU,EACV,MAAM,EACN,KAAK,EACL,KAAK,EACL,eAAe,EAClB,MAAM,kBAAkB,CAAC;AAM1B,qBAEa,qBAAsB,YAAW,eAAe;IAEzD,EAAE,EAAE,MAAM,CAAC;IAKX,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAOzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAGtB,QAAQ,EAAE,MAAM,CAAC;IAIjB,KAAK,EAAE,KAAK,CAAC;IAGb,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOnC,WAAW,EAAE,KAAK,GAAG,IAAI,CAAC;IAG1B,aAAa,EAAE,MAAM,CAAC;IAItB,UAAU,EAAE,UAAU,CAAC;IAGvB,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOxC,gBAAgB,EAAE,KAAK,GAAG,IAAI,CAAC;IAK/B,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,EAAE,MAAM,CAAC;CACtB"}
+{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/domains/robot-permission/entity.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EACR,UAAU,EACV,MAAM,EACN,KAAK,EACL,eAAe,EACf,KAAK,EACL,eAAe,EAClB,MAAM,kBAAkB,CAAC;AAM1B,qBAEa,qBAAsB,YAAW,eAAe;IAEzD,EAAE,EAAE,MAAM,CAAC;IAKX,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAOzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAOtB,WAAW,EAAE,eAAe,CAAC;IAG7B,QAAQ,EAAE,MAAM,CAAC;IAIjB,KAAK,EAAE,KAAK,CAAC;IAGb,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOnC,WAAW,EAAE,KAAK,GAAG,IAAI,CAAC;IAG1B,aAAa,EAAE,MAAM,CAAC;IAItB,UAAU,EAAE,UAAU,CAAC;IAGvB,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOxC,gBAAgB,EAAE,KAAK,GAAG,IAAI,CAAC;IAK/B,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,EAAE,MAAM,CAAC;CACtB"}

package/dist/adapters/database/domains/robot-permission/entity.mjs

@@ -25,6 +25,7 @@ var RobotPermissionEntity = class {
 	id;
 	policy_id;
 	policy;
+	realm_scope;
 	robot_id;
 	robot;
 	robot_realm_id;
@@ -46,6 +47,11 @@ _ts_decorate([
 	JoinColumn({ name: "policy_id" }),
 	_ts_metadata("design:type", Object)
 ], RobotPermissionEntity.prototype, "policy", void 0);
+_ts_decorate([Column({
+	type: "varchar",
+	length: 50,
+	default: "own"
+}), _ts_metadata("design:type", typeof RealmScopeValue === "undefined" ? Object : RealmScopeValue)], RobotPermissionEntity.prototype, "realm_scope", void 0);
 _ts_decorate([Column(), _ts_metadata("design:type", String)], RobotPermissionEntity.prototype, "robot_id", void 0);
 _ts_decorate([
 	ManyToOne(() => RobotEntity, { onDelete: "CASCADE" }),

package/dist/adapters/database/domains/robot-permission/entity.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"entity.mjs","names":["Column","CreateDateColumn","Entity","Index","JoinColumn","ManyToOne","PrimaryGeneratedColumn","UpdateDateColumn","dateToISOStringTransformer","PermissionEntity","PolicyEntity","RobotEntity","RealmEntity","RobotPermissionEntity","id","policy_id","policy","robot_id","robot","robot_realm_id","robot_realm","permission_id","permission","permission_realm_id","permission_realm","created_at","updated_at","nullable","onDelete","name","type","transformer","unique"],"sources":["../../../../../src/adapters/database/domains/robot-permission/entity.ts"],"sourcesContent":["/*\n * Copyright (c) 2021-2021.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    Column,\n    CreateDateColumn,\n    Entity, \n    Index,\n    JoinColumn,\n    ManyToOne,\n    PrimaryGeneratedColumn,\n    UpdateDateColumn,\n} from 'typeorm';\nimport { dateToISOStringTransformer } from '../../helpers/index.ts';\nimport type {\n    Permission, \n    Policy, \n    Realm,\n    Robot, \n    RobotPermission,\n} from '@authup/core-kit';\nimport { PermissionEntity } from '../permission/index.ts';\nimport { PolicyEntity } from '../policy/index.ts';\nimport { RobotEntity } from '../robot/entity.ts';\nimport { RealmEntity } from '../realm/index.ts';\n\n@Entity({ name: 'auth_robot_permissions' })\n@Index(['permission_id', 'robot_id'], { unique: true })\nexport class RobotPermissionEntity implements RobotPermission {\n    @PrimaryGeneratedColumn('uuid')\n    id: string;\n\n    // ------------------------------------------------------------------\n\n    @Column({ nullable: true })\n    policy_id: string | null;\n\n    @ManyToOne(() => PolicyEntity, {\n        onDelete: 'SET NULL',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'policy_id' })\n    policy: Policy | null;\n\n    @Column()\n    robot_id: string;\n\n    @ManyToOne(() => RobotEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'robot_id' })\n    robot: Robot;\n\n    @Column({ nullable: true })\n    robot_realm_id: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'robot_realm_id' })\n    robot_realm: Realm | null;\n\n    @Column({ type: 'varchar' })\n    permission_id: string;\n\n    @ManyToOne(() => PermissionEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'permission_id' })\n    permission: Permission;\n\n    @Column({ nullable: true })\n    permission_realm_id: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'permission_realm_id' })\n    permission_realm: Realm | null;\n\n    // ------------------------------------------------------------------\n\n    @CreateDateColumn({ transformer: dateToISOStringTransformer })\n    created_at: string;\n\n    @UpdateDateColumn({ transformer: dateToISOStringTransformer })\n    updated_at: string;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAgCA,IAAaa,wBAAb,MAAaA;CAETC;CAKAC;CAOAC;CAGAC;CAIAC;CAGAC;CAOAC;CAGAC;CAIAC;CAGAC;CAOAC;CAKAC;CAGAC;AACJ;;uBAnDcC,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,sBAAA,WAAA,aAAA,KAAA,CAAA;;iBAGHjB,cAAAA;EACbkB,UAAU;EACVD,UAAU;;cAEAE,MAAM,YAAA,CAAA;;;;;iBAMHlB,aAAAA,EAAeiB,UAAU,UAAA,CAAA;cAC5BC,MAAM,WAAA,CAAA;;;uBAGVF,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,sBAAA,WAAA,kBAAA,KAAA,CAAA;;iBAGHf,aAAAA;EACbgB,UAAU;EACVD,UAAU;;cAEAE,MAAM,iBAAA,CAAA;;;uBAGVC,MAAM,UAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,sBAAA,WAAA,iBAAA,KAAA,CAAA;;iBAGCrB,kBAAAA,EAAoBmB,UAAU,UAAA,CAAA;cACjCC,MAAM,gBAAA,CAAA;;;uBAGVF,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,sBAAA,WAAA,uBAAA,KAAA,CAAA;;iBAGHf,aAAAA;EACbgB,UAAU;EACVD,UAAU;;cAEAE,MAAM,sBAAA,CAAA;;;iCAKAE,aAAavB,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,sBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;iCAGbuB,aAAavB,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,sBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;+CAzD3BqB,MAAM,yBAAA,CAAA,GAAA,MAAA,CACR,iBAAiB,UAAA,GAAA,EAAeG,QAAQ,KAAA,CAAA,CAAA,GAAA,qBAAA"}
+{"version":3,"file":"entity.mjs","names":["Column","CreateDateColumn","Entity","Index","JoinColumn","ManyToOne","PrimaryGeneratedColumn","UpdateDateColumn","dateToISOStringTransformer","PermissionEntity","PolicyEntity","RobotEntity","RealmEntity","RobotPermissionEntity","id","policy_id","policy","realm_scope","robot_id","robot","robot_realm_id","robot_realm","permission_id","permission","permission_realm_id","permission_realm","created_at","updated_at","nullable","onDelete","name","type","length","default","transformer","unique"],"sources":["../../../../../src/adapters/database/domains/robot-permission/entity.ts"],"sourcesContent":["/*\n * Copyright (c) 2021-2021.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    Column,\n    CreateDateColumn,\n    Entity, \n    Index,\n    JoinColumn,\n    ManyToOne,\n    PrimaryGeneratedColumn,\n    UpdateDateColumn,\n} from 'typeorm';\nimport { dateToISOStringTransformer } from '../../helpers/index.ts';\nimport type {\n    Permission,\n    Policy,\n    Realm,\n    RealmScopeValue,\n    Robot,\n    RobotPermission,\n} from '@authup/core-kit';\nimport { PermissionEntity } from '../permission/index.ts';\nimport { PolicyEntity } from '../policy/index.ts';\nimport { RobotEntity } from '../robot/entity.ts';\nimport { RealmEntity } from '../realm/index.ts';\n\n@Entity({ name: 'auth_robot_permissions' })\n@Index(['permission_id', 'robot_id'], { unique: true })\nexport class RobotPermissionEntity implements RobotPermission {\n    @PrimaryGeneratedColumn('uuid')\n    id: string;\n\n    // ------------------------------------------------------------------\n\n    @Column({ nullable: true })\n    policy_id: string | null;\n\n    @ManyToOne(() => PolicyEntity, {\n        onDelete: 'SET NULL',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'policy_id' })\n    policy: Policy | null;\n\n    @Column({\n        type: 'varchar',\n        length: 50,\n        default: 'own',\n    })\n    realm_scope: RealmScopeValue;\n\n    @Column()\n    robot_id: string;\n\n    @ManyToOne(() => RobotEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'robot_id' })\n    robot: Robot;\n\n    @Column({ nullable: true })\n    robot_realm_id: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'robot_realm_id' })\n    robot_realm: Realm | null;\n\n    @Column({ type: 'varchar' })\n    permission_id: string;\n\n    @ManyToOne(() => PermissionEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'permission_id' })\n    permission: Permission;\n\n    @Column({ nullable: true })\n    permission_realm_id: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'permission_realm_id' })\n    permission_realm: Realm | null;\n\n    // ------------------------------------------------------------------\n\n    @CreateDateColumn({ transformer: dateToISOStringTransformer })\n    created_at: string;\n\n    @UpdateDateColumn({ transformer: dateToISOStringTransformer })\n    updated_at: string;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAiCA,IAAaa,wBAAb,MAAaA;CAETC;CAKAC;CAOAC;CAOAC;CAGAC;CAIAC;CAGAC;CAOAC;CAGAC;CAIAC;CAGAC;CAOAC;CAKAC;CAGAC;AACJ;;uBA1DcC,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,sBAAA,WAAA,aAAA,KAAA,CAAA;;iBAGHlB,cAAAA;EACbmB,UAAU;EACVD,UAAU;;cAEAE,MAAM,YAAA,CAAA;;;;CAIhBC,MAAM;CACNC,QAAQ;CACRC,SAAS;;;;iBAOItB,aAAAA,EAAekB,UAAU,UAAA,CAAA;cAC5BC,MAAM,WAAA,CAAA;;;uBAGVF,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,sBAAA,WAAA,kBAAA,KAAA,CAAA;;iBAGHhB,aAAAA;EACbiB,UAAU;EACVD,UAAU;;cAEAE,MAAM,iBAAA,CAAA;;;uBAGVC,MAAM,UAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,sBAAA,WAAA,iBAAA,KAAA,CAAA;;iBAGCtB,kBAAAA,EAAoBoB,UAAU,UAAA,CAAA;cACjCC,MAAM,gBAAA,CAAA;;;uBAGVF,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,sBAAA,WAAA,uBAAA,KAAA,CAAA;;iBAGHhB,aAAAA;EACbiB,UAAU;EACVD,UAAU;;cAEAE,MAAM,sBAAA,CAAA;;;iCAKAI,aAAa1B,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,sBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;iCAGb0B,aAAa1B,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,sBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;+CAhE3BsB,MAAM,yBAAA,CAAA,GAAA,MAAA,CACR,iBAAiB,UAAA,GAAA,EAAeK,QAAQ,KAAA,CAAA,CAAA,GAAA,qBAAA"}

package/dist/adapters/database/domains/robot-role/entity.mjs

@@ -51,7 +51,7 @@ _ts_decorate([
 _ts_decorate([Column(), _ts_metadata("design:type", String)], RobotRoleEntity.prototype, "robot_id", void 0);
 _ts_decorate([
 	ManyToOne(() => RobotEntity, { onDelete: "CASCADE" }),
-	JoinColumn({ name: "client_id" }),
+	JoinColumn({ name: "robot_id" }),
 	_ts_metadata("design:type", typeof Robot === "undefined" ? Object : Robot)
 ], RobotRoleEntity.prototype, "robot", void 0);
 _ts_decorate([Column({ nullable: true }), _ts_metadata("design:type", Object)], RobotRoleEntity.prototype, "robot_realm_id", void 0);

package/dist/adapters/database/domains/robot-role/entity.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"entity.mjs","names":["Column","CreateDateColumn","Entity","Index","JoinColumn","ManyToOne","PrimaryGeneratedColumn","UpdateDateColumn","dateToISOStringTransformer","RoleEntity","RobotEntity","RealmEntity","RobotRoleEntity","id","role_id","role","role_realm_id","role_realm","robot_id","robot","robot_realm_id","robot_realm","created_at","updated_at","onDelete","name","nullable","transformer","unique"],"sources":["../../../../../src/adapters/database/domains/robot-role/entity.ts"],"sourcesContent":["/*\n * Copyright (c) 2021-2021.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    Column,\n    CreateDateColumn,\n    Entity,\n    Index,\n    JoinColumn,\n    ManyToOne,\n    PrimaryGeneratedColumn,\n    UpdateDateColumn,\n} from 'typeorm';\nimport { dateToISOStringTransformer } from '../../helpers/index.ts';\nimport type {\n    Realm, \n    Robot, \n    RobotRole, \n    Role,\n} from '@authup/core-kit';\nimport { RoleEntity } from '../role/index.ts';\nimport { RobotEntity } from '../robot/entity.ts';\nimport { RealmEntity } from '../realm/index.ts';\n\n@Entity({ name: 'auth_robot_roles' })\n@Index(['role_id', 'robot_id'], { unique: true })\nexport class RobotRoleEntity implements RobotRole {\n    @PrimaryGeneratedColumn('uuid')\n    id: string;\n\n    // ------------------------------------------------------------------\n\n    @Column()\n    role_id: string;\n\n    @ManyToOne(() => RoleEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'role_id' })\n    role: Role;\n\n    @Column({ nullable: true })\n    role_realm_id: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'role_realm_id' })\n    role_realm: Realm | null;\n\n    @Column()\n    robot_id: string;\n\n    @ManyToOne(() => RobotEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'client_id' })\n    robot: Robot;\n\n    @Column({ nullable: true })\n    robot_realm_id: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'robot_realm_id' })\n    robot_realm: Realm | null;\n\n    // ------------------------------------------------------------------\n\n    @CreateDateColumn({ transformer: dateToISOStringTransformer })\n    created_at: string;\n\n    @UpdateDateColumn({ transformer: dateToISOStringTransformer })\n    updated_at: string;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA8BA,IAAaY,kBAAb,MAAaA;CAETC;CAKAC;CAIAC;CAGAC;CAOAC;CAGAC;CAIAC;CAGAC;CAOAC;CAKAC;CAGAC;AACJ;;;;iBAtCqBd,YAAAA,EAAce,UAAU,UAAA,CAAA;cAC3BC,MAAM,UAAA,CAAA;;;uBAGVC,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,gBAAA,WAAA,iBAAA,KAAA,CAAA;;iBAGHf,aAAAA;EACba,UAAU;EACVE,UAAU;;cAEAD,MAAM,gBAAA,CAAA;;;;;iBAMHf,aAAAA,EAAec,UAAU,UAAA,CAAA;cAC5BC,MAAM,YAAA,CAAA;;;uBAGVC,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,gBAAA,WAAA,kBAAA,KAAA,CAAA;;iBAGHf,aAAAA;EACba,UAAU;EACVE,UAAU;;cAEAD,MAAM,iBAAA,CAAA;;;iCAKAE,aAAanB,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,gBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;iCAGbmB,aAAanB,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,gBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;yCA/C3BiB,MAAM,mBAAA,CAAA,GAAA,MAAA,CACR,WAAW,UAAA,GAAA,EAAeG,QAAQ,KAAA,CAAA,CAAA,GAAA,eAAA"}
+{"version":3,"file":"entity.mjs","names":["Column","CreateDateColumn","Entity","Index","JoinColumn","ManyToOne","PrimaryGeneratedColumn","UpdateDateColumn","dateToISOStringTransformer","RoleEntity","RobotEntity","RealmEntity","RobotRoleEntity","id","role_id","role","role_realm_id","role_realm","robot_id","robot","robot_realm_id","robot_realm","created_at","updated_at","onDelete","name","nullable","transformer","unique"],"sources":["../../../../../src/adapters/database/domains/robot-role/entity.ts"],"sourcesContent":["/*\n * Copyright (c) 2021-2021.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    Column,\n    CreateDateColumn,\n    Entity,\n    Index,\n    JoinColumn,\n    ManyToOne,\n    PrimaryGeneratedColumn,\n    UpdateDateColumn,\n} from 'typeorm';\nimport { dateToISOStringTransformer } from '../../helpers/index.ts';\nimport type {\n    Realm, \n    Robot, \n    RobotRole, \n    Role,\n} from '@authup/core-kit';\nimport { RoleEntity } from '../role/index.ts';\nimport { RobotEntity } from '../robot/entity.ts';\nimport { RealmEntity } from '../realm/index.ts';\n\n@Entity({ name: 'auth_robot_roles' })\n@Index(['role_id', 'robot_id'], { unique: true })\nexport class RobotRoleEntity implements RobotRole {\n    @PrimaryGeneratedColumn('uuid')\n    id: string;\n\n    // ------------------------------------------------------------------\n\n    @Column()\n    role_id: string;\n\n    @ManyToOne(() => RoleEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'role_id' })\n    role: Role;\n\n    @Column({ nullable: true })\n    role_realm_id: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'role_realm_id' })\n    role_realm: Realm | null;\n\n    @Column()\n    robot_id: string;\n\n    @ManyToOne(() => RobotEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'robot_id' })\n    robot: Robot;\n\n    @Column({ nullable: true })\n    robot_realm_id: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'robot_realm_id' })\n    robot_realm: Realm | null;\n\n    // ------------------------------------------------------------------\n\n    @CreateDateColumn({ transformer: dateToISOStringTransformer })\n    created_at: string;\n\n    @UpdateDateColumn({ transformer: dateToISOStringTransformer })\n    updated_at: string;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA8BA,IAAaY,kBAAb,MAAaA;CAETC;CAKAC;CAIAC;CAGAC;CAOAC;CAGAC;CAIAC;CAGAC;CAOAC;CAKAC;CAGAC;AACJ;;;;iBAtCqBd,YAAAA,EAAce,UAAU,UAAA,CAAA;cAC3BC,MAAM,UAAA,CAAA;;;uBAGVC,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,gBAAA,WAAA,iBAAA,KAAA,CAAA;;iBAGHf,aAAAA;EACba,UAAU;EACVE,UAAU;;cAEAD,MAAM,gBAAA,CAAA;;;;;iBAMHf,aAAAA,EAAec,UAAU,UAAA,CAAA;cAC5BC,MAAM,WAAA,CAAA;;;uBAGVC,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,gBAAA,WAAA,kBAAA,KAAA,CAAA;;iBAGHf,aAAAA;EACba,UAAU;EACVE,UAAU;;cAEAD,MAAM,iBAAA,CAAA;;;iCAKAE,aAAanB,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,gBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;iCAGbmB,aAAanB,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,gBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;yCA/C3BiB,MAAM,mBAAA,CAAA,GAAA,MAAA,CACR,WAAW,UAAA,GAAA,EAAeG,QAAQ,KAAA,CAAA,CAAA,GAAA,eAAA"}

package/dist/adapters/database/domains/role-permission/entity.d.ts

@@ -1,10 +1,11 @@
-import type { Permission, Policy, Realm, Role, RolePermission } from '@authup/core-kit';
+import type { Permission, Policy, Realm, RealmScopeValue, Role, RolePermission } from '@authup/core-kit';
 export declare class RolePermissionEntity implements RolePermission {
     id: string;
     created_at: string;
     updated_at: string;
     policy_id: string | null;
     policy: Policy | null;
+    realm_scope: RealmScopeValue;
     role_id: string;
     role: Role;
     role_realm_id: Realm['id'] | null;

package/dist/adapters/database/domains/role-permission/entity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/domains/role-permission/entity.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EACR,UAAU,EACV,MAAM,EACN,KAAK,EACL,IAAI,EACJ,cAAc,EACjB,MAAM,kBAAkB,CAAC;AAM1B,qBAEa,oBAAqB,YAAW,cAAc;IAEvD,EAAE,EAAE,MAAM,CAAC;IAKX,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,EAAE,MAAM,CAAC;IAKnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAOzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAGtB,OAAO,EAAE,MAAM,CAAC;IAIhB,IAAI,EAAE,IAAI,CAAC;IAGX,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOlC,UAAU,EAAE,KAAK,GAAG,IAAI,CAAC;IAGzB,aAAa,EAAE,MAAM,CAAC;IAItB,UAAU,EAAE,UAAU,CAAC;IAGvB,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOxC,gBAAgB,EAAE,KAAK,GAAG,IAAI,CAAC;CAClC"}
+{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/domains/role-permission/entity.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EACR,UAAU,EACV,MAAM,EACN,KAAK,EACL,eAAe,EACf,IAAI,EACJ,cAAc,EACjB,MAAM,kBAAkB,CAAC;AAM1B,qBAEa,oBAAqB,YAAW,cAAc;IAEvD,EAAE,EAAE,MAAM,CAAC;IAKX,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,EAAE,MAAM,CAAC;IAKnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAOzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAOtB,WAAW,EAAE,eAAe,CAAC;IAG7B,OAAO,EAAE,MAAM,CAAC;IAIhB,IAAI,EAAE,IAAI,CAAC;IAGX,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOlC,UAAU,EAAE,KAAK,GAAG,IAAI,CAAC;IAGzB,aAAa,EAAE,MAAM,CAAC;IAItB,UAAU,EAAE,UAAU,CAAC;IAGvB,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOxC,gBAAgB,EAAE,KAAK,GAAG,IAAI,CAAC;CAClC"}

package/dist/adapters/database/domains/role-permission/entity.mjs

@@ -27,6 +27,7 @@ var RolePermissionEntity = class {
 	updated_at;
 	policy_id;
 	policy;
+	realm_scope;
 	role_id;
 	role;
 	role_realm_id;
@@ -48,6 +49,11 @@ _ts_decorate([
 	JoinColumn({ name: "policy_id" }),
 	_ts_metadata("design:type", Object)
 ], RolePermissionEntity.prototype, "policy", void 0);
+_ts_decorate([Column({
+	type: "varchar",
+	length: 50,
+	default: "own"
+}), _ts_metadata("design:type", typeof RealmScopeValue === "undefined" ? Object : RealmScopeValue)], RolePermissionEntity.prototype, "realm_scope", void 0);
 _ts_decorate([Column(), _ts_metadata("design:type", String)], RolePermissionEntity.prototype, "role_id", void 0);
 _ts_decorate([
 	ManyToOne(() => RoleEntity, { onDelete: "CASCADE" }),

package/dist/adapters/database/domains/role-permission/entity.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"entity.mjs","names":["Column","CreateDateColumn","Entity","Index","JoinColumn","ManyToOne","PrimaryGeneratedColumn","UpdateDateColumn","dateToISOStringTransformer","PolicyEntity","RoleEntity","PermissionEntity","RealmEntity","RolePermissionEntity","id","created_at","updated_at","policy_id","policy","role_id","role","role_realm_id","role_realm","permission_id","permission","permission_realm_id","permission_realm","transformer","nullable","onDelete","name","unique"],"sources":["../../../../../src/adapters/database/domains/role-permission/entity.ts"],"sourcesContent":["/*\n * Copyright (c) 2021-2021.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    Column,\n    CreateDateColumn,\n    Entity, \n    Index,\n    JoinColumn,\n    ManyToOne,\n    PrimaryGeneratedColumn,\n    UpdateDateColumn,\n} from 'typeorm';\nimport { dateToISOStringTransformer } from '../../helpers/index.ts';\nimport type {\n    Permission,\n    Policy,\n    Realm,\n    Role,\n    RolePermission,\n} from '@authup/core-kit';\nimport { PolicyEntity } from '../policy/index.ts';\nimport { RoleEntity } from '../role/entity.ts';\nimport { PermissionEntity } from '../permission/index.ts';\nimport { RealmEntity } from '../realm/index.ts';\n\n@Entity({ name: 'auth_role_permissions' })\n@Index(['permission_id', 'role_id'], { unique: true })\nexport class RolePermissionEntity implements RolePermission {\n    @PrimaryGeneratedColumn('uuid')\n    id: string;\n\n    // ------------------------------------------------------------------\n\n    @CreateDateColumn({ transformer: dateToISOStringTransformer })\n    created_at: string;\n\n    @UpdateDateColumn({ transformer: dateToISOStringTransformer })\n    updated_at: string;\n\n    // ------------------------------------------------------------------\n\n    @Column({ nullable: true })\n    policy_id: string | null;\n\n    @ManyToOne(() => PolicyEntity, {\n        onDelete: 'SET NULL',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'policy_id' })\n    policy: Policy | null;\n\n    @Column()\n    role_id: string;\n\n    @ManyToOne(() => RoleEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'role_id' })\n    role: Role;\n\n    @Column({ nullable: true })\n    role_realm_id: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'role_realm_id' })\n    role_realm: Realm | null;\n\n    @Column()\n    permission_id: string;\n\n    @ManyToOne(() => PermissionEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'permission_id' })\n    permission: Permission;\n\n    @Column({ nullable: true })\n    permission_realm_id: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'permission_realm_id' })\n    permission_realm: Realm | null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAgCA,IAAaa,uBAAb,MAAaA;CAETC;CAKAC;CAGAC;CAKAC;CAOAC;CAGAC;CAIAC;CAGAC;CAOAC;CAGAC;CAIAC;CAGAC;CAOAC;AACJ;;iCAnDwBC,aAAanB,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,qBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;iCAGbmB,aAAanB,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,qBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;uBAKvBoB,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,qBAAA,WAAA,aAAA,KAAA,CAAA;;iBAGHnB,cAAAA;EACboB,UAAU;EACVD,UAAU;;cAEAE,MAAM,YAAA,CAAA;;;;;iBAMHpB,YAAAA,EAAcmB,UAAU,UAAA,CAAA;cAC3BC,MAAM,UAAA,CAAA;;;uBAGVF,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,qBAAA,WAAA,iBAAA,KAAA,CAAA;;iBAGHhB,aAAAA;EACbiB,UAAU;EACVD,UAAU;;cAEAE,MAAM,gBAAA,CAAA;;;;;iBAMHnB,kBAAAA,EAAoBkB,UAAU,UAAA,CAAA;cACjCC,MAAM,gBAAA,CAAA;;;uBAGVF,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,qBAAA,WAAA,uBAAA,KAAA,CAAA;;iBAGHhB,aAAAA;EACbiB,UAAU;EACVD,UAAU;;cAEAE,MAAM,sBAAA,CAAA;;;8CAzDdA,MAAM,wBAAA,CAAA,GAAA,MAAA,CACR,iBAAiB,SAAA,GAAA,EAAcC,QAAQ,KAAA,CAAA,CAAA,GAAA,oBAAA"}
+{"version":3,"file":"entity.mjs","names":["Column","CreateDateColumn","Entity","Index","JoinColumn","ManyToOne","PrimaryGeneratedColumn","UpdateDateColumn","dateToISOStringTransformer","PolicyEntity","RoleEntity","PermissionEntity","RealmEntity","RolePermissionEntity","id","created_at","updated_at","policy_id","policy","realm_scope","role_id","role","role_realm_id","role_realm","permission_id","permission","permission_realm_id","permission_realm","transformer","nullable","onDelete","name","type","length","default","unique"],"sources":["../../../../../src/adapters/database/domains/role-permission/entity.ts"],"sourcesContent":["/*\n * Copyright (c) 2021-2021.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    Column,\n    CreateDateColumn,\n    Entity, \n    Index,\n    JoinColumn,\n    ManyToOne,\n    PrimaryGeneratedColumn,\n    UpdateDateColumn,\n} from 'typeorm';\nimport { dateToISOStringTransformer } from '../../helpers/index.ts';\nimport type {\n    Permission,\n    Policy,\n    Realm,\n    RealmScopeValue,\n    Role,\n    RolePermission,\n} from '@authup/core-kit';\nimport { PolicyEntity } from '../policy/index.ts';\nimport { RoleEntity } from '../role/entity.ts';\nimport { PermissionEntity } from '../permission/index.ts';\nimport { RealmEntity } from '../realm/index.ts';\n\n@Entity({ name: 'auth_role_permissions' })\n@Index(['permission_id', 'role_id'], { unique: true })\nexport class RolePermissionEntity implements RolePermission {\n    @PrimaryGeneratedColumn('uuid')\n    id: string;\n\n    // ------------------------------------------------------------------\n\n    @CreateDateColumn({ transformer: dateToISOStringTransformer })\n    created_at: string;\n\n    @UpdateDateColumn({ transformer: dateToISOStringTransformer })\n    updated_at: string;\n\n    // ------------------------------------------------------------------\n\n    @Column({ nullable: true })\n    policy_id: string | null;\n\n    @ManyToOne(() => PolicyEntity, {\n        onDelete: 'SET NULL',\n        nullable: true,\n    })\n    @JoinColumn({ name: 'policy_id' })\n    policy: Policy | null;\n\n    @Column({\n        type: 'varchar',\n        length: 50,\n        default: 'own',\n    })\n    realm_scope: RealmScopeValue;\n\n    @Column()\n    role_id: string;\n\n    @ManyToOne(() => RoleEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'role_id' })\n    role: Role;\n\n    @Column({ nullable: true })\n    role_realm_id: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'role_realm_id' })\n    role_realm: Realm | null;\n\n    @Column()\n    permission_id: string;\n\n    @ManyToOne(() => PermissionEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'permission_id' })\n    permission: Permission;\n\n    @Column({ nullable: true })\n    permission_realm_id: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'permission_realm_id' })\n    permission_realm: Realm | null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAiCA,IAAaa,uBAAb,MAAaA;CAETC;CAKAC;CAGAC;CAKAC;CAOAC;CAOAC;CAGAC;CAIAC;CAGAC;CAOAC;CAGAC;CAIAC;CAGAC;CAOAC;AACJ;;iCA1DwBC,aAAapB,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,qBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;iCAGboB,aAAapB,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,qBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;uBAKvBqB,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,qBAAA,WAAA,aAAA,KAAA,CAAA;;iBAGHpB,cAAAA;EACbqB,UAAU;EACVD,UAAU;;cAEAE,MAAM,YAAA,CAAA;;;;CAIhBC,MAAM;CACNC,QAAQ;CACRC,SAAS;;;;iBAOIxB,YAAAA,EAAcoB,UAAU,UAAA,CAAA;cAC3BC,MAAM,UAAA,CAAA;;;uBAGVF,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,qBAAA,WAAA,iBAAA,KAAA,CAAA;;iBAGHjB,aAAAA;EACbkB,UAAU;EACVD,UAAU;;cAEAE,MAAM,gBAAA,CAAA;;;;;iBAMHpB,kBAAAA,EAAoBmB,UAAU,UAAA,CAAA;cACjCC,MAAM,gBAAA,CAAA;;;uBAGVF,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,qBAAA,WAAA,uBAAA,KAAA,CAAA;;iBAGHjB,aAAAA;EACbkB,UAAU;EACVD,UAAU;;cAEAE,MAAM,sBAAA,CAAA;;;8CAhEdA,MAAM,wBAAA,CAAA,GAAA,MAAA,CACR,iBAAiB,SAAA,GAAA,EAAcI,QAAQ,KAAA,CAAA,CAAA,GAAA,oBAAA"}

package/dist/adapters/database/domains/user-permission/entity.d.ts

@@ -1,10 +1,11 @@
-import type { Permission, Policy, Realm, User, UserPermission } from '@authup/core-kit';
+import type { Permission, Policy, Realm, RealmScopeValue, User, UserPermission } from '@authup/core-kit';
 export declare class UserPermissionEntity implements UserPermission {
     id: string;
     created_at: string;
     updated_at: string;
     policy_id: string | null;
     policy: Policy | null;
+    realm_scope: RealmScopeValue;
     user_id: User['id'];
     user: User;
     user_realm_id: Realm['id'] | null;

package/dist/adapters/database/domains/user-permission/entity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/domains/user-permission/entity.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EACR,UAAU,EACV,MAAM,EACN,KAAK,EACL,IAAI,EACJ,cAAc,EACjB,MAAM,kBAAkB,CAAC;AAM1B,qBAEa,oBAAqB,YAAW,cAAc;IAEvD,EAAE,EAAE,MAAM,CAAC;IAKX,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,EAAE,MAAM,CAAC;IAKnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAOzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAGtB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAIpB,IAAI,EAAE,IAAI,CAAC;IAGX,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOlC,UAAU,EAAE,KAAK,GAAG,IAAI,CAAC;IAGzB,aAAa,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAIhC,UAAU,EAAE,UAAU,CAAC;IAGvB,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOxC,gBAAgB,EAAE,KAAK,GAAG,IAAI,CAAC;CAClC"}
+{"version":3,"file":"entity.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/domains/user-permission/entity.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EACR,UAAU,EACV,MAAM,EACN,KAAK,EACL,eAAe,EACf,IAAI,EACJ,cAAc,EACjB,MAAM,kBAAkB,CAAC;AAM1B,qBAEa,oBAAqB,YAAW,cAAc;IAEvD,EAAE,EAAE,MAAM,CAAC;IAKX,UAAU,EAAE,MAAM,CAAC;IAGnB,UAAU,EAAE,MAAM,CAAC;IAKnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAOzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAOtB,WAAW,EAAE,eAAe,CAAC;IAG7B,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAIpB,IAAI,EAAE,IAAI,CAAC;IAGX,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOlC,UAAU,EAAE,KAAK,GAAG,IAAI,CAAC;IAGzB,aAAa,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAIhC,UAAU,EAAE,UAAU,CAAC;IAGvB,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAOxC,gBAAgB,EAAE,KAAK,GAAG,IAAI,CAAC;CAClC"}

package/dist/adapters/database/domains/user-permission/entity.mjs

@@ -26,6 +26,7 @@ var UserPermissionEntity = class {
 	updated_at;
 	policy_id;
 	policy;
+	realm_scope;
 	user_id;
 	user;
 	user_realm_id;
@@ -47,6 +48,11 @@ _ts_decorate([
 	JoinColumn({ name: "policy_id" }),
 	_ts_metadata("design:type", Object)
 ], UserPermissionEntity.prototype, "policy", void 0);
+_ts_decorate([Column({
+	type: "varchar",
+	length: 50,
+	default: "own"
+}), _ts_metadata("design:type", typeof RealmScopeValue === "undefined" ? Object : RealmScopeValue)], UserPermissionEntity.prototype, "realm_scope", void 0);
 _ts_decorate([Column(), _ts_metadata("design:type", Object)], UserPermissionEntity.prototype, "user_id", void 0);
 _ts_decorate([
 	ManyToOne(() => UserEntity, { onDelete: "CASCADE" }),

package/dist/adapters/database/domains/user-permission/entity.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"entity.mjs","names":["Column","CreateDateColumn","Entity","Index","JoinColumn","ManyToOne","PrimaryGeneratedColumn","UpdateDateColumn","dateToISOStringTransformer","PolicyEntity","UserEntity","PermissionEntity","RealmEntity","UserPermissionEntity","id","created_at","updated_at","policy_id","policy","user_id","user","user_realm_id","user_realm","permission_id","permission","permission_realm_id","permission_realm","transformer","nullable","onDelete","name","unique"],"sources":["../../../../../src/adapters/database/domains/user-permission/entity.ts"],"sourcesContent":["/*\n * Copyright (c) 2021-2021.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    Column,\n    CreateDateColumn,\n    Entity, \n    Index,\n    JoinColumn,\n    ManyToOne,\n    PrimaryGeneratedColumn,\n    UpdateDateColumn,\n} from 'typeorm';\nimport { dateToISOStringTransformer } from '../../helpers/index.ts';\nimport type {\n    Permission,\n    Policy,\n    Realm,\n    User, \n    UserPermission,\n} from '@authup/core-kit';\nimport { PolicyEntity } from '../policy/index.ts';\nimport { UserEntity } from '../user/entity.ts';\nimport { PermissionEntity } from '../permission/entity.ts';\nimport { RealmEntity } from '../realm/index.ts';\n\n@Entity({ name: 'auth_user_permissions' })\n@Index(['permission_id', 'user_id'], { unique: true })\nexport class UserPermissionEntity implements UserPermission {\n    @PrimaryGeneratedColumn('uuid')\n    id: string;\n\n    // ------------------------------------------------------------------\n\n    @CreateDateColumn({ transformer: dateToISOStringTransformer })\n    created_at: string;\n\n    @UpdateDateColumn({ transformer: dateToISOStringTransformer })\n    updated_at: string;\n\n    // ------------------------------------------------------------------\n\n    @Column({ nullable: true })\n    policy_id: string | null;\n\n    @ManyToOne(() => PolicyEntity, {\n        onDelete: 'SET NULL',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'policy_id' })\n    policy: Policy | null;\n\n    @Column()\n    user_id: User['id'];\n\n    @ManyToOne(() => UserEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'user_id' })\n    user: User;\n\n    @Column({ nullable: true })\n    user_realm_id: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'user_realm_id' })\n    user_realm: Realm | null;\n\n    @Column()\n    permission_id: Permission['id'];\n\n    @ManyToOne(() => PermissionEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'permission_id' })\n    permission: Permission;\n\n    @Column({ nullable: true })\n    permission_realm_id: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'permission_realm_id' })\n    permission_realm: Realm | null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAgCA,IAAaa,uBAAb,MAAaA;CAETC;CAKAC;CAGAC;CAKAC;CAOAC;CAGAC;CAIAC;CAGAC;CAOAC;CAGAC;CAIAC;CAGAC;CAOAC;AACJ;;iCAnDwBC,aAAanB,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,qBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;iCAGbmB,aAAanB,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,qBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;uBAKvBoB,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,qBAAA,WAAA,aAAA,KAAA,CAAA;;iBAGHnB,cAAAA;EACboB,UAAU;EACVD,UAAU;;cAEAE,MAAM,YAAA,CAAA;;;;;iBAMHpB,YAAAA,EAAcmB,UAAU,UAAA,CAAA;cAC3BC,MAAM,UAAA,CAAA;;;uBAGVF,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,qBAAA,WAAA,iBAAA,KAAA,CAAA;;iBAGHhB,aAAAA;EACbiB,UAAU;EACVD,UAAU;;cAEAE,MAAM,gBAAA,CAAA;;;;;iBAMHnB,kBAAAA,EAAoBkB,UAAU,UAAA,CAAA;cACjCC,MAAM,gBAAA,CAAA;;;uBAGVF,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,qBAAA,WAAA,uBAAA,KAAA,CAAA;;iBAGHhB,aAAAA;EACbiB,UAAU;EACVD,UAAU;;cAEAE,MAAM,sBAAA,CAAA;;;8CAzDdA,MAAM,wBAAA,CAAA,GAAA,MAAA,CACR,iBAAiB,SAAA,GAAA,EAAcC,QAAQ,KAAA,CAAA,CAAA,GAAA,oBAAA"}
+{"version":3,"file":"entity.mjs","names":["Column","CreateDateColumn","Entity","Index","JoinColumn","ManyToOne","PrimaryGeneratedColumn","UpdateDateColumn","dateToISOStringTransformer","PolicyEntity","UserEntity","PermissionEntity","RealmEntity","UserPermissionEntity","id","created_at","updated_at","policy_id","policy","realm_scope","user_id","user","user_realm_id","user_realm","permission_id","permission","permission_realm_id","permission_realm","transformer","nullable","onDelete","name","type","length","default","unique"],"sources":["../../../../../src/adapters/database/domains/user-permission/entity.ts"],"sourcesContent":["/*\n * Copyright (c) 2021-2021.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    Column,\n    CreateDateColumn,\n    Entity, \n    Index,\n    JoinColumn,\n    ManyToOne,\n    PrimaryGeneratedColumn,\n    UpdateDateColumn,\n} from 'typeorm';\nimport { dateToISOStringTransformer } from '../../helpers/index.ts';\nimport type {\n    Permission,\n    Policy,\n    Realm,\n    RealmScopeValue,\n    User,\n    UserPermission,\n} from '@authup/core-kit';\nimport { PolicyEntity } from '../policy/index.ts';\nimport { UserEntity } from '../user/entity.ts';\nimport { PermissionEntity } from '../permission/entity.ts';\nimport { RealmEntity } from '../realm/index.ts';\n\n@Entity({ name: 'auth_user_permissions' })\n@Index(['permission_id', 'user_id'], { unique: true })\nexport class UserPermissionEntity implements UserPermission {\n    @PrimaryGeneratedColumn('uuid')\n    id: string;\n\n    // ------------------------------------------------------------------\n\n    @CreateDateColumn({ transformer: dateToISOStringTransformer })\n    created_at: string;\n\n    @UpdateDateColumn({ transformer: dateToISOStringTransformer })\n    updated_at: string;\n\n    // ------------------------------------------------------------------\n\n    @Column({ nullable: true })\n    policy_id: string | null;\n\n    @ManyToOne(() => PolicyEntity, {\n        onDelete: 'SET NULL',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'policy_id' })\n    policy: Policy | null;\n\n    @Column({\n        type: 'varchar',\n        length: 50,\n        default: 'own',\n    })\n    realm_scope: RealmScopeValue;\n\n    @Column()\n    user_id: User['id'];\n\n    @ManyToOne(() => UserEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'user_id' })\n    user: User;\n\n    @Column({ nullable: true })\n    user_realm_id: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'user_realm_id' })\n    user_realm: Realm | null;\n\n    @Column()\n    permission_id: Permission['id'];\n\n    @ManyToOne(() => PermissionEntity, { onDelete: 'CASCADE' })\n    @JoinColumn({ name: 'permission_id' })\n    permission: Permission;\n\n    @Column({ nullable: true })\n    permission_realm_id: Realm['id'] | null;\n\n    @ManyToOne(() => RealmEntity, {\n        onDelete: 'CASCADE',\n        nullable: true, \n    })\n    @JoinColumn({ name: 'permission_realm_id' })\n    permission_realm: Realm | null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAiCA,IAAaa,uBAAb,MAAaA;CAETC;CAKAC;CAGAC;CAKAC;CAOAC;CAOAC;CAGAC;CAIAC;CAGAC;CAOAC;CAGAC;CAIAC;CAGAC;CAOAC;AACJ;;iCA1DwBC,aAAapB,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,qBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;iCAGboB,aAAapB,2BAAAA,CAAAA,GAAAA,aAAAA,eAAAA,MAAAA,CAAAA,GAAAA,qBAAAA,WAAAA,cAAAA,KAAAA,CAAAA;uBAKvBqB,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,qBAAA,WAAA,aAAA,KAAA,CAAA;;iBAGHpB,cAAAA;EACbqB,UAAU;EACVD,UAAU;;cAEAE,MAAM,YAAA,CAAA;;;;CAIhBC,MAAM;CACNC,QAAQ;CACRC,SAAS;;;;iBAOIxB,YAAAA,EAAcoB,UAAU,UAAA,CAAA;cAC3BC,MAAM,UAAA,CAAA;;;uBAGVF,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,qBAAA,WAAA,iBAAA,KAAA,CAAA;;iBAGHjB,aAAAA;EACbkB,UAAU;EACVD,UAAU;;cAEAE,MAAM,gBAAA,CAAA;;;;;iBAMHpB,kBAAAA,EAAoBmB,UAAU,UAAA,CAAA;cACjCC,MAAM,gBAAA,CAAA;;;uBAGVF,UAAU,KAAA,CAAA,GAAA,aAAA,eAAA,MAAA,CAAA,GAAA,qBAAA,WAAA,uBAAA,KAAA,CAAA;;iBAGHjB,aAAAA;EACbkB,UAAU;EACVD,UAAU;;cAEAE,MAAM,sBAAA,CAAA;;;8CAhEdA,MAAM,wBAAA,CAAA,GAAA,MAAA,CACR,iBAAiB,SAAA,GAAA,EAAcI,QAAQ,KAAA,CAAA,CAAA,GAAA,oBAAA"}

package/dist/adapters/database/migrations/mysql/1779300000000-Default.d.ts

@@ -0,0 +1,7 @@
+import type { MigrationInterface, QueryRunner } from 'typeorm';
+export declare class Default1779300000000 implements MigrationInterface {
+    name: string;
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}
+//# sourceMappingURL=1779300000000-Default.d.ts.map

package/dist/adapters/database/migrations/mysql/1779300000000-Default.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"1779300000000-Default.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/migrations/mysql/1779300000000-Default.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AA4C/D,qBAAa,oBAAqB,YAAW,kBAAkB;IAC3D,IAAI,SAA0B;IAEjB,EAAE,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IA8C3C,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAO7D"}

package/dist/adapters/database/migrations/mysql/1779300000000-Default.mjs

@@ -0,0 +1,85 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+//#region src/adapters/database/migrations/mysql/1779300000000-Default.ts
+/**
+* realm_scope enum on the four permission-junction tables (fail-closed realm scoping).
+*
+* Adds the coarse, actor-relative `realm_scope` column (default 'own') and migrates the
+* realm-scoping that previously lived in policies into the column. The redundant system
+* realm policies (`system.realm-match` child of `system.default`,
+* `system.realm-bound`, `system.realm-or-global`) are deleted here as a deterministic
+* safety net; the provisioner ALSO prunes them on boot (cleanupStaleChildren for the
+* realm-match child + the top-level stale-prune), so a fresh install needs no migration.
+*
+* up() ordering is LOAD-BEARING: schema -> convert-by-policy-name -> lift-admin ->
+* delete policy rows (the policy-name joins must resolve before the rows are deleted).
+*
+* BREAKING (existing data): only admin (-> any, matched by role name) and realm_admin
+* (its realm-or-global / realm-bound junction policies -> ownOrNull / own) are converted.
+* Every OTHER pre-existing grant with no realm policy keeps the 'own' default, so a custom
+* role or a direct identity grant that previously reached global (realm_id = null) building
+* blocks via the old system.realm-match baseline is now fail-closed to its own realm. Those
+* grants must be re-widened to ownOrNull/any by hand: there is deliberately no automatic
+* bump, because a policy-less grant that managed global resources is indistinguishable in
+* the data from one that only ever acted on its own realm (auto-widening would fail open).
+*
+* down() is BEST-EFFORT and NOT a true inverse: it drops the column only. The deleted
+* system policies and the nulled junction policy_id pointers are NOT reconstructed, and
+* boot re-provisioning does NOT repair them either -- the junction synchronizer is
+* create-only (it never rewrites realm_scope/policy_id on an already-existing row). So a
+* revert (or revert + re-run) on a POPULATED database permanently pins realm_admin and any
+* converted grant to the fail-closed 'own' default until fixed by hand; a forward-only
+* upgrade is unaffected.
+*/ const JUNCTION_TABLES = [
+	"auth_role_permissions",
+	"auth_user_permissions",
+	"auth_client_permissions",
+	"auth_robot_permissions"
+];
+const SCOPE_BY_POLICY = [{
+	policy: "system.realm-or-global",
+	scope: "ownOrNull"
+}, {
+	policy: "system.realm-bound",
+	scope: "own"
+}];
+var Default1779300000000 = class {
+	name = "Default1779300000000";
+	async up(queryRunner) {
+		for (const table of JUNCTION_TABLES) await queryRunner.query(`
+                ALTER TABLE \`${table}\`
+                ADD \`realm_scope\` varchar(50) NOT NULL DEFAULT 'own'
+            `);
+		for (const table of JUNCTION_TABLES) for (const { policy, scope } of SCOPE_BY_POLICY) await queryRunner.query(`
+                    UPDATE \`${table}\` rp
+                    JOIN \`auth_policies\` p ON rp.\`policy_id\` = p.\`id\`
+                    SET rp.\`realm_scope\` = '${scope}', rp.\`policy_id\` = NULL
+                    WHERE p.\`name\` = '${policy}'
+                      AND p.\`built_in\` = 1
+                      AND p.\`realm_id\` IS NULL
+                `);
+		await queryRunner.query(`
+            UPDATE \`auth_role_permissions\` rp
+            JOIN \`auth_roles\` r ON rp.\`role_id\` = r.\`id\`
+            SET rp.\`realm_scope\` = 'any'
+            WHERE r.\`name\` = 'admin'
+              AND r.\`built_in\` = 1
+        `);
+		await queryRunner.query(`
+            DELETE FROM \`auth_policies\`
+            WHERE \`name\` IN ('system.realm-match', 'system.realm-bound', 'system.realm-or-global')
+              AND \`built_in\` = 1
+              AND \`realm_id\` IS NULL
+        `);
+	}
+	async down(queryRunner) {
+		for (const table of JUNCTION_TABLES) await queryRunner.query(`
+                ALTER TABLE \`${table}\` DROP COLUMN \`realm_scope\`
+            `);
+	}
+};
+//#endregion
+export { Default1779300000000 };
+
+//# sourceMappingURL=1779300000000-Default.mjs.map

package/dist/adapters/database/migrations/mysql/1779300000000-Default.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"1779300000000-Default.mjs","names":["JUNCTION_TABLES","SCOPE_BY_POLICY","policy","scope","Default1779300000000","name","up","queryRunner","table","query","down"],"sources":["../../../../../src/adapters/database/migrations/mysql/1779300000000-Default.ts"],"sourcesContent":["import type { MigrationInterface, QueryRunner } from 'typeorm';\n\n/**\n * realm_scope enum on the four permission-junction tables (fail-closed realm scoping).\n *\n * Adds the coarse, actor-relative `realm_scope` column (default 'own') and migrates the\n * realm-scoping that previously lived in policies into the column. The redundant system\n * realm policies (`system.realm-match` child of `system.default`,\n * `system.realm-bound`, `system.realm-or-global`) are deleted here as a deterministic\n * safety net; the provisioner ALSO prunes them on boot (cleanupStaleChildren for the\n * realm-match child + the top-level stale-prune), so a fresh install needs no migration.\n *\n * up() ordering is LOAD-BEARING: schema -> convert-by-policy-name -> lift-admin ->\n * delete policy rows (the policy-name joins must resolve before the rows are deleted).\n *\n * BREAKING (existing data): only admin (-> any, matched by role name) and realm_admin\n * (its realm-or-global / realm-bound junction policies -> ownOrNull / own) are converted.\n * Every OTHER pre-existing grant with no realm policy keeps the 'own' default, so a custom\n * role or a direct identity grant that previously reached global (realm_id = null) building\n * blocks via the old system.realm-match baseline is now fail-closed to its own realm. Those\n * grants must be re-widened to ownOrNull/any by hand: there is deliberately no automatic\n * bump, because a policy-less grant that managed global resources is indistinguishable in\n * the data from one that only ever acted on its own realm (auto-widening would fail open).\n *\n * down() is BEST-EFFORT and NOT a true inverse: it drops the column only. The deleted\n * system policies and the nulled junction policy_id pointers are NOT reconstructed, and\n * boot re-provisioning does NOT repair them either -- the junction synchronizer is\n * create-only (it never rewrites realm_scope/policy_id on an already-existing row). So a\n * revert (or revert + re-run) on a POPULATED database permanently pins realm_admin and any\n * converted grant to the fail-closed 'own' default until fixed by hand; a forward-only\n * upgrade is unaffected.\n */\nconst JUNCTION_TABLES = [\n    'auth_role_permissions',\n    'auth_user_permissions',\n    'auth_client_permissions',\n    'auth_robot_permissions',\n];\n\nconst SCOPE_BY_POLICY: { policy: string, scope: string }[] = [\n    { policy: 'system.realm-or-global', scope: 'ownOrNull' },\n    { policy: 'system.realm-bound', scope: 'own' },\n];\n\nexport class Default1779300000000 implements MigrationInterface {\n    name = 'Default1779300000000';\n\n    public async up(queryRunner: QueryRunner): Promise<void> {\n        // 1. schema\n        for (const table of JUNCTION_TABLES) {\n            await queryRunner.query(`\n                ALTER TABLE \\`${table}\\`\n                ADD \\`realm_scope\\` varchar(50) NOT NULL DEFAULT 'own'\n            `);\n        }\n\n        // 2. convert the realm-scoping policies into the enum (clearing only those\n        //    policy_id pointers; non-realm policies are preserved).\n        for (const table of JUNCTION_TABLES) {\n            for (const { policy, scope } of SCOPE_BY_POLICY) {\n                await queryRunner.query(`\n                    UPDATE \\`${table}\\` rp\n                    JOIN \\`auth_policies\\` p ON rp.\\`policy_id\\` = p.\\`id\\`\n                    SET rp.\\`realm_scope\\` = '${scope}', rp.\\`policy_id\\` = NULL\n                    WHERE p.\\`name\\` = '${policy}'\n                      AND p.\\`built_in\\` = 1\n                      AND p.\\`realm_id\\` IS NULL\n                `);\n            }\n        }\n\n        // 3. lift admin-role grants to unrestricted (admin grants carry no policy, so\n        //    they are unreachable by the policy join above — join by role name instead).\n        await queryRunner.query(`\n            UPDATE \\`auth_role_permissions\\` rp\n            JOIN \\`auth_roles\\` r ON rp.\\`role_id\\` = r.\\`id\\`\n            SET rp.\\`realm_scope\\` = 'any'\n            WHERE r.\\`name\\` = 'admin'\n              AND r.\\`built_in\\` = 1\n        `);\n\n        // 4. delete the three now-redundant system realm policies (by exact name —\n        //    never by type, which would wipe user-defined realm-match policies).\n        //    A cascading closure-tree FK detaches the realm-match child from\n        //    system.default; the provisioner re-prunes idempotently on boot.\n        await queryRunner.query(`\n            DELETE FROM \\`auth_policies\\`\n            WHERE \\`name\\` IN ('system.realm-match', 'system.realm-bound', 'system.realm-or-global')\n              AND \\`built_in\\` = 1\n              AND \\`realm_id\\` IS NULL\n        `);\n    }\n\n    public async down(queryRunner: QueryRunner): Promise<void> {\n        for (const table of JUNCTION_TABLES) {\n            await queryRunner.query(`\n                ALTER TABLE \\`${table}\\` DROP COLUMN \\`realm_scope\\`\n            `);\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCA,MAAMA,kBAAkB;CACpB;CACA;CACA;CACA;;AAGJ,MAAMC,kBAAuD,CACzD;CAAEC,QAAQ;CAA0BC,OAAO;AAAY,GACvD;CAAED,QAAQ;CAAsBC,OAAO;AAAM,CAAA;AAGjD,IAAaC,uBAAb,MAAaA;CACTC,OAAO;CAEP,MAAaC,GAAGC,aAAyC;EAErD,KAAK,MAAMC,SAASR,iBAChB,MAAMO,YAAYE,MAAM;gCACJD,MAAM;;aAEzB;EAKL,KAAK,MAAMA,SAASR,iBAChB,KAAK,MAAM,EAAEE,QAAQC,WAAWF,iBAC5B,MAAMM,YAAYE,MAAM;+BACTD,MAAM;;gDAEWL,MAAM;0CACZD,OAAO;;;iBAGhC;EAMT,MAAMK,YAAYE,MAAM;;;;;;SAMvB;EAMD,MAAMF,YAAYE,MAAM;;;;;SAKvB;CACL;CAEA,MAAaC,KAAKH,aAAyC;EACvD,KAAK,MAAMC,SAASR,iBAChB,MAAMO,YAAYE,MAAM;gCACJD,MAAM;aACzB;CAET;AACJ"}

package/dist/adapters/database/migrations/postgres/1779300000000-Default.d.ts

@@ -0,0 +1,7 @@
+import type { MigrationInterface, QueryRunner } from 'typeorm';
+export declare class Default1779300000000 implements MigrationInterface {
+    name: string;
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}
+//# sourceMappingURL=1779300000000-Default.d.ts.map

package/dist/adapters/database/migrations/postgres/1779300000000-Default.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"1779300000000-Default.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/migrations/postgres/1779300000000-Default.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AA4C/D,qBAAa,oBAAqB,YAAW,kBAAkB;IAC3D,IAAI,SAA0B;IAEjB,EAAE,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAgD3C,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAO7D"}

package/dist/adapters/database/migrations/postgres/1779300000000-Default.mjs

@@ -0,0 +1,87 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+//#region src/adapters/database/migrations/postgres/1779300000000-Default.ts
+/**
+* realm_scope enum on the four permission-junction tables (fail-closed realm scoping).
+*
+* Adds the coarse, actor-relative `realm_scope` column (default 'own') and migrates the
+* realm-scoping that previously lived in policies into the column. The redundant system
+* realm policies (`system.realm-match` child of `system.default`,
+* `system.realm-bound`, `system.realm-or-global`) are deleted here as a deterministic
+* safety net; the provisioner ALSO prunes them on boot (cleanupStaleChildren for the
+* realm-match child + the top-level stale-prune), so a fresh install needs no migration.
+*
+* up() ordering is LOAD-BEARING: schema -> convert-by-policy-name -> lift-admin ->
+* delete policy rows (the policy-name joins must resolve before the rows are deleted).
+*
+* BREAKING (existing data): only admin (-> any, matched by role name) and realm_admin
+* (its realm-or-global / realm-bound junction policies -> ownOrNull / own) are converted.
+* Every OTHER pre-existing grant with no realm policy keeps the 'own' default, so a custom
+* role or a direct identity grant that previously reached global (realm_id = null) building
+* blocks via the old system.realm-match baseline is now fail-closed to its own realm. Those
+* grants must be re-widened to ownOrNull/any by hand: there is deliberately no automatic
+* bump, because a policy-less grant that managed global resources is indistinguishable in
+* the data from one that only ever acted on its own realm (auto-widening would fail open).
+*
+* down() is BEST-EFFORT and NOT a true inverse: it drops the column only. The deleted
+* system policies and the nulled junction policy_id pointers are NOT reconstructed, and
+* boot re-provisioning does NOT repair them either -- the junction synchronizer is
+* create-only (it never rewrites realm_scope/policy_id on an already-existing row). So a
+* revert (or revert + re-run) on a POPULATED database permanently pins realm_admin and any
+* converted grant to the fail-closed 'own' default until fixed by hand; a forward-only
+* upgrade is unaffected.
+*/ const JUNCTION_TABLES = [
+	"auth_role_permissions",
+	"auth_user_permissions",
+	"auth_client_permissions",
+	"auth_robot_permissions"
+];
+const SCOPE_BY_POLICY = [{
+	policy: "system.realm-or-global",
+	scope: "ownOrNull"
+}, {
+	policy: "system.realm-bound",
+	scope: "own"
+}];
+var Default1779300000000 = class {
+	name = "Default1779300000000";
+	async up(queryRunner) {
+		for (const table of JUNCTION_TABLES) await queryRunner.query(`
+                ALTER TABLE "${table}"
+                ADD "realm_scope" character varying(50) NOT NULL DEFAULT 'own'
+            `);
+		for (const table of JUNCTION_TABLES) for (const { policy, scope } of SCOPE_BY_POLICY) await queryRunner.query(`
+                    UPDATE "${table}" rp
+                    SET "realm_scope" = '${scope}', "policy_id" = NULL
+                    FROM "auth_policies" p
+                    WHERE rp."policy_id" = p."id"
+                      AND p."name" = '${policy}'
+                      AND p."built_in" = true
+                      AND p."realm_id" IS NULL
+                `);
+		await queryRunner.query(`
+            UPDATE "auth_role_permissions" rp
+            SET "realm_scope" = 'any'
+            FROM "auth_roles" r
+            WHERE rp."role_id" = r."id"
+              AND r."name" = 'admin'
+              AND r."built_in" = true
+        `);
+		await queryRunner.query(`
+            DELETE FROM "auth_policies"
+            WHERE "name" IN ('system.realm-match', 'system.realm-bound', 'system.realm-or-global')
+              AND "built_in" = true
+              AND "realm_id" IS NULL
+        `);
+	}
+	async down(queryRunner) {
+		for (const table of JUNCTION_TABLES) await queryRunner.query(`
+                ALTER TABLE "${table}" DROP COLUMN "realm_scope"
+            `);
+	}
+};
+//#endregion
+export { Default1779300000000 };
+
+//# sourceMappingURL=1779300000000-Default.mjs.map

package/dist/adapters/database/migrations/postgres/1779300000000-Default.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"1779300000000-Default.mjs","names":["JUNCTION_TABLES","SCOPE_BY_POLICY","policy","scope","Default1779300000000","name","up","queryRunner","table","query","down"],"sources":["../../../../../src/adapters/database/migrations/postgres/1779300000000-Default.ts"],"sourcesContent":["import type { MigrationInterface, QueryRunner } from 'typeorm';\n\n/**\n * realm_scope enum on the four permission-junction tables (fail-closed realm scoping).\n *\n * Adds the coarse, actor-relative `realm_scope` column (default 'own') and migrates the\n * realm-scoping that previously lived in policies into the column. The redundant system\n * realm policies (`system.realm-match` child of `system.default`,\n * `system.realm-bound`, `system.realm-or-global`) are deleted here as a deterministic\n * safety net; the provisioner ALSO prunes them on boot (cleanupStaleChildren for the\n * realm-match child + the top-level stale-prune), so a fresh install needs no migration.\n *\n * up() ordering is LOAD-BEARING: schema -> convert-by-policy-name -> lift-admin ->\n * delete policy rows (the policy-name joins must resolve before the rows are deleted).\n *\n * BREAKING (existing data): only admin (-> any, matched by role name) and realm_admin\n * (its realm-or-global / realm-bound junction policies -> ownOrNull / own) are converted.\n * Every OTHER pre-existing grant with no realm policy keeps the 'own' default, so a custom\n * role or a direct identity grant that previously reached global (realm_id = null) building\n * blocks via the old system.realm-match baseline is now fail-closed to its own realm. Those\n * grants must be re-widened to ownOrNull/any by hand: there is deliberately no automatic\n * bump, because a policy-less grant that managed global resources is indistinguishable in\n * the data from one that only ever acted on its own realm (auto-widening would fail open).\n *\n * down() is BEST-EFFORT and NOT a true inverse: it drops the column only. The deleted\n * system policies and the nulled junction policy_id pointers are NOT reconstructed, and\n * boot re-provisioning does NOT repair them either -- the junction synchronizer is\n * create-only (it never rewrites realm_scope/policy_id on an already-existing row). So a\n * revert (or revert + re-run) on a POPULATED database permanently pins realm_admin and any\n * converted grant to the fail-closed 'own' default until fixed by hand; a forward-only\n * upgrade is unaffected.\n */\nconst JUNCTION_TABLES = [\n    'auth_role_permissions',\n    'auth_user_permissions',\n    'auth_client_permissions',\n    'auth_robot_permissions',\n];\n\nconst SCOPE_BY_POLICY: { policy: string, scope: string }[] = [\n    { policy: 'system.realm-or-global', scope: 'ownOrNull' },\n    { policy: 'system.realm-bound', scope: 'own' },\n];\n\nexport class Default1779300000000 implements MigrationInterface {\n    name = 'Default1779300000000';\n\n    public async up(queryRunner: QueryRunner): Promise<void> {\n        // 1. schema\n        for (const table of JUNCTION_TABLES) {\n            await queryRunner.query(`\n                ALTER TABLE \"${table}\"\n                ADD \"realm_scope\" character varying(50) NOT NULL DEFAULT 'own'\n            `);\n        }\n\n        // 2. convert the realm-scoping policies into the enum (clearing only those\n        //    policy_id pointers; non-realm policies are preserved).\n        for (const table of JUNCTION_TABLES) {\n            for (const { policy, scope } of SCOPE_BY_POLICY) {\n                await queryRunner.query(`\n                    UPDATE \"${table}\" rp\n                    SET \"realm_scope\" = '${scope}', \"policy_id\" = NULL\n                    FROM \"auth_policies\" p\n                    WHERE rp.\"policy_id\" = p.\"id\"\n                      AND p.\"name\" = '${policy}'\n                      AND p.\"built_in\" = true\n                      AND p.\"realm_id\" IS NULL\n                `);\n            }\n        }\n\n        // 3. lift admin-role grants to unrestricted (admin grants carry no policy, so\n        //    they are unreachable by the policy join above — join by role name instead).\n        await queryRunner.query(`\n            UPDATE \"auth_role_permissions\" rp\n            SET \"realm_scope\" = 'any'\n            FROM \"auth_roles\" r\n            WHERE rp.\"role_id\" = r.\"id\"\n              AND r.\"name\" = 'admin'\n              AND r.\"built_in\" = true\n        `);\n\n        // 4. delete the three now-redundant system realm policies (by exact name —\n        //    never by type, which would wipe user-defined realm-match policies).\n        //    A cascading closure-tree FK detaches the realm-match child from\n        //    system.default; the provisioner re-prunes idempotently on boot.\n        await queryRunner.query(`\n            DELETE FROM \"auth_policies\"\n            WHERE \"name\" IN ('system.realm-match', 'system.realm-bound', 'system.realm-or-global')\n              AND \"built_in\" = true\n              AND \"realm_id\" IS NULL\n        `);\n    }\n\n    public async down(queryRunner: QueryRunner): Promise<void> {\n        for (const table of JUNCTION_TABLES) {\n            await queryRunner.query(`\n                ALTER TABLE \"${table}\" DROP COLUMN \"realm_scope\"\n            `);\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCA,MAAMA,kBAAkB;CACpB;CACA;CACA;CACA;;AAGJ,MAAMC,kBAAuD,CACzD;CAAEC,QAAQ;CAA0BC,OAAO;AAAY,GACvD;CAAED,QAAQ;CAAsBC,OAAO;AAAM,CAAA;AAGjD,IAAaC,uBAAb,MAAaA;CACTC,OAAO;CAEP,MAAaC,GAAGC,aAAyC;EAErD,KAAK,MAAMC,SAASR,iBAChB,MAAMO,YAAYE,MAAM;+BACLD,MAAM;;aAExB;EAKL,KAAK,MAAMA,SAASR,iBAChB,KAAK,MAAM,EAAEE,QAAQC,WAAWF,iBAC5B,MAAMM,YAAYE,MAAM;8BACVD,MAAM;2CACOL,MAAM;;;wCAGTD,OAAO;;;iBAG9B;EAMT,MAAMK,YAAYE,MAAM;;;;;;;SAOvB;EAMD,MAAMF,YAAYE,MAAM;;;;;SAKvB;CACL;CAEA,MAAaC,KAAKH,aAAyC;EACvD,KAAK,MAAMC,SAASR,iBAChB,MAAMO,YAAYE,MAAM;+BACLD,MAAM;aACxB;CAET;AACJ"}

package/dist/adapters/http/adapters/index.mjs

@@ -2,7 +2,7 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { HTTPOAuth2Authorizer } from "./oauth2/authorization/module.mjs";
-import { extractClientCredentialsFromRequest } from "./oauth2/grant-types/utils/credentials.mjs";
+import { extractClientCredentialsFromRequest, readStringField } from "./oauth2/grant-types/utils/credentials.mjs";
 import { guessOauth2GrantTypeByRequest } from "./oauth2/grant-types/utils/guess.mjs";
 import { HTTPOAuth2AuthorizeGrant } from "./oauth2/grant-types/authorize.mjs";
 import { HTTPClientCredentialsGrant } from "./oauth2/grant-types/client-credentials.mjs";
@@ -11,4 +11,4 @@ import { HTTPPasswordGrant } from "./oauth2/grant-types/password.mjs";
 import { HTTPOAuth2RefreshTokenGrant } from "./oauth2/grant-types/refresh_token.mjs";
 import { HTTPRobotCredentialsGrant } from "./oauth2/grant-types/robot-credentials.mjs";
 import "./oauth2/index.mjs";
-export { HTTPClientCredentialsGrant, HTTPOAuth2AuthorizeGrant, HTTPOAuth2Authorizer, HTTPOAuth2IdentityGrantType, HTTPOAuth2RefreshTokenGrant, HTTPPasswordGrant, HTTPRobotCredentialsGrant, extractClientCredentialsFromRequest, guessOauth2GrantTypeByRequest };
+export { HTTPClientCredentialsGrant, HTTPOAuth2AuthorizeGrant, HTTPOAuth2Authorizer, HTTPOAuth2IdentityGrantType, HTTPOAuth2RefreshTokenGrant, HTTPPasswordGrant, HTTPRobotCredentialsGrant, extractClientCredentialsFromRequest, guessOauth2GrantTypeByRequest, readStringField };

package/dist/adapters/http/adapters/oauth2/grant-types/index.mjs

@@ -1,7 +1,7 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-import { extractClientCredentialsFromRequest } from "./utils/credentials.mjs";
+import { extractClientCredentialsFromRequest, readStringField } from "./utils/credentials.mjs";
 import { guessOauth2GrantTypeByRequest } from "./utils/guess.mjs";
 import "./utils/index.mjs";
 import { HTTPOAuth2AuthorizeGrant } from "./authorize.mjs";
@@ -10,4 +10,4 @@ import { HTTPOAuth2IdentityGrantType } from "./identity.mjs";
 import { HTTPPasswordGrant } from "./password.mjs";
 import { HTTPOAuth2RefreshTokenGrant } from "./refresh_token.mjs";
 import { HTTPRobotCredentialsGrant } from "./robot-credentials.mjs";
-export { HTTPClientCredentialsGrant, HTTPOAuth2AuthorizeGrant, HTTPOAuth2IdentityGrantType, HTTPOAuth2RefreshTokenGrant, HTTPPasswordGrant, HTTPRobotCredentialsGrant, extractClientCredentialsFromRequest, guessOauth2GrantTypeByRequest };
+export { HTTPClientCredentialsGrant, HTTPOAuth2AuthorizeGrant, HTTPOAuth2IdentityGrantType, HTTPOAuth2RefreshTokenGrant, HTTPPasswordGrant, HTTPRobotCredentialsGrant, extractClientCredentialsFromRequest, guessOauth2GrantTypeByRequest, readStringField };

package/dist/adapters/http/adapters/oauth2/grant-types/password.d.ts

@@ -1,12 +1,13 @@
 import type { User } from '@authup/core-kit';
 import type { OAuth2TokenGrantResponse } from '@authup/specs';
 import type { IAppEvent } from 'routup';
-import type { ICredentialsAuthenticator, OAuth2ClientAuthenticator } from '../../../../../core/index.ts';
+import type { ICredentialsAuthenticator, IRealmRepository, OAuth2ClientAuthenticator } from '../../../../../core/index.ts';
 import { PasswordGrantType } from '../../../../../core/index.ts';
 import type { HTTPOAuth2PasswordGrantContext, IHTTPOAuth2Grant } from './types.ts';
 export declare class HTTPPasswordGrant extends PasswordGrantType implements IHTTPOAuth2Grant {
     protected authenticator: ICredentialsAuthenticator<User>;
     protected clientAuthenticator: OAuth2ClientAuthenticator;
+    protected realmRepository: IRealmRepository;
     constructor(ctx: HTTPOAuth2PasswordGrantContext);
     runWithRequest(event: IAppEvent): Promise<OAuth2TokenGrantResponse>;
 }

package/dist/adapters/http/adapters/oauth2/grant-types/password.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/password.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAExC,OAAO,KAAK,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzG,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,8BAA8B,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGnF,qBAAa,iBAAkB,SAAQ,iBAAkB,YAAW,gBAAgB;IAChF,SAAS,CAAC,aAAa,EAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAE1D,SAAS,CAAC,mBAAmB,EAAG,yBAAyB,CAAC;gBAE9C,GAAG,EAAE,8BAA8B;IAOzC,cAAc,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,wBAAwB,CAAC;CA4B5E"}
+{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../../../../../src/adapters/http/adapters/oauth2/grant-types/password.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAG9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAExC,OAAO,KAAK,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAC3H,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,KAAK,EAAE,8BAA8B,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGnF,qBAAa,iBAAkB,SAAQ,iBAAkB,YAAW,gBAAgB;IAChF,SAAS,CAAC,aAAa,EAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAE1D,SAAS,CAAC,mBAAmB,EAAG,yBAAyB,CAAC;IAE1D,SAAS,CAAC,eAAe,EAAG,gBAAgB,CAAC;gBAEjC,GAAG,EAAE,8BAA8B;IAQzC,cAAc,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAuC5E"}