@authup/server-core 1.0.0-beta.50 → 1.0.0-beta.52

package/dist/core/provisioning/entities/client/relations-validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"relations-validator.mjs","names":["createValidator","Container","z","PermissionProvisioningValidator","RoleProvisioningValidator","ClientProvisioningRelationsValidator","initialize","permissionValidator","roleValidator","mount","optional","array","string"],"sources":["../../../../../src/core/provisioning/entities/client/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport { PermissionProvisioningValidator } from '../permission/index.ts';\nimport { RoleProvisioningValidator } from '../role/index.ts';\nimport type { ClientProvisioningRelations } from './types.ts';\n\nexport class ClientProvisioningRelationsValidator extends Container<ClientProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        const permissionValidator = new PermissionProvisioningValidator();\n        const roleValidator = new RoleProvisioningValidator();\n\n        this.mount('permissions.*', { optional: true }, permissionValidator);\n\n        this.mount('realmPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('roles.*', { optional: true }, roleValidator);\n\n        this.mount('realmRoles', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalRoles', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n    }\n}\n"],"mappings":";;;;;;;;;;;AAcA,IAAaK,uCAAb,cAA0DJ,UAAAA;CAC5CK,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,sBAAsB,IAAIJ,gCAAAA;EAChC,MAAMK,gBAAgB,IAAIJ,0BAAAA;EAE1B,KAAKK,MAAM,iBAAiB,EAAEC,UAAU,KAAK,GAAGH,mBAAAA;EAEhD,KAAKE,MAAM,oBAAoB,EAAEC,UAAU,KAAK,GAAGV,gBAC/CE,EAAES,MAAMT,EAAEU,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,qBAAqB,EAAEC,UAAU,KAAK,GAAGV,gBAChDE,EAAES,MAAMT,EAAEU,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,WAAW,EAAEC,UAAU,KAAK,GAAGF,aAAAA;EAE1C,KAAKC,MAAM,cAAc,EAAEC,UAAU,KAAK,GAAGV,gBACzCE,EAAES,MAAMT,EAAEU,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,eAAe,EAAEC,UAAU,KAAK,GAAGV,gBAC1CE,EAAES,MAAMT,EAAEU,OAAM,CAAA,CAAA,CAAA;CAExB;AACJ"}
+{"version":3,"file":"relations-validator.mjs","names":["createValidator","Container","z","PermissionProvisioningValidator","RoleProvisioningValidator","createProvisioningEntitiesValidator","ClientProvisioningRelationsValidator","initialize","permissionValidator","roleValidator","mount","optional","array","any","check","string"],"sources":["../../../../../src/core/provisioning/entities/client/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport { PermissionProvisioningValidator } from '../permission/index.ts';\nimport { RoleProvisioningValidator } from '../role/index.ts';\nimport { createProvisioningEntitiesValidator } from '../utils.ts';\nimport type { ClientProvisioningRelations } from './types.ts';\n\nexport class ClientProvisioningRelationsValidator extends Container<ClientProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        const permissionValidator = new PermissionProvisioningValidator();\n        const roleValidator = new RoleProvisioningValidator();\n\n        this.mount('permissions', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(permissionValidator)),\n        ));\n\n        this.mount('realmPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('roles', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(roleValidator)),\n        ));\n\n        this.mount('realmRoles', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalRoles', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n    }\n}\n"],"mappings":";;;;;;;;;;;;AAeA,IAAaM,uCAAb,cAA0DL,UAAAA;CAC5CM,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,sBAAsB,IAAIL,gCAAAA;EAChC,MAAMM,gBAAgB,IAAIL,0BAAAA;EAE1B,KAAKM,MAAM,eAAe,EAAEC,UAAU,KAAK,GAAGX,gBAC1CE,EACKU,MAAMV,EAAEW,IAAG,CAAA,CAAA,CACXC,MAAMT,oCAAoCG,mBAAAA,CAAAA,CAAAA,CAAAA;EAGnD,KAAKE,MAAM,oBAAoB,EAAEC,UAAU,KAAK,GAAGX,gBAC/CE,EAAEU,MAAMV,EAAEa,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKL,MAAM,qBAAqB,EAAEC,UAAU,KAAK,GAAGX,gBAChDE,EAAEU,MAAMV,EAAEa,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKL,MAAM,SAAS,EAAEC,UAAU,KAAK,GAAGX,gBACpCE,EACKU,MAAMV,EAAEW,IAAG,CAAA,CAAA,CACXC,MAAMT,oCAAoCI,aAAAA,CAAAA,CAAAA,CAAAA;EAGnD,KAAKC,MAAM,cAAc,EAAEC,UAAU,KAAK,GAAGX,gBACzCE,EAAEU,MAAMV,EAAEa,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKL,MAAM,eAAe,EAAEC,UAAU,KAAK,GAAGX,gBAC1CE,EAAEU,MAAMV,EAAEa,OAAM,CAAA,CAAA,CAAA;CAExB;AACJ"}

package/dist/core/provisioning/entities/index.d.ts

@@ -8,4 +8,5 @@ export * from './root/index.ts';
 export * from './scope/index.ts';
 export * from './user/index.ts';
 export * from './types.ts';
+export * from './utils.ts';
 //# sourceMappingURL=index.d.ts.map

package/dist/core/provisioning/entities/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/provisioning/entities/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/provisioning/entities/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC"}

package/dist/core/provisioning/entities/index.mjs

@@ -1,12 +1,16 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { PermissionProvisioningRelationsValidator } from "./permission/relations-validator.mjs";
 import { PermissionProvisioningValidator } from "./permission/validator.mjs";
 import "./permission/index.mjs";
 import { RoleProvisioningValidator } from "./role/validator.mjs";
 import "./role/index.mjs";
+import { createProvisioningEntitiesValidator } from "./utils.mjs";
 import { ClientProvisioningValidator } from "./client/validator.mjs";
 import "./client/index.mjs";
+import { PolicyProvisioningValidator } from "./policy/validator.mjs";
+import "./policy/index.mjs";
 import { RobotProvisioningValidator } from "./robot/validator.mjs";
 import "./robot/index.mjs";
 import { ScopeProvisioningValidator } from "./scope/validator.mjs";
@@ -17,4 +21,4 @@ import { RealmProvisioningValidator } from "./realm/validator.mjs";
 import "./realm/index.mjs";
 import { RootProvisioningValidator } from "./root/validator.mjs";
 import "./root/index.mjs";
-export { ClientProvisioningValidator, PermissionProvisioningValidator, RealmProvisioningValidator, RobotProvisioningValidator, RoleProvisioningValidator, RootProvisioningValidator, ScopeProvisioningValidator, UserProvisioningValidator };
+export { ClientProvisioningValidator, PermissionProvisioningRelationsValidator, PermissionProvisioningValidator, PolicyProvisioningValidator, RealmProvisioningValidator, RobotProvisioningValidator, RoleProvisioningValidator, RootProvisioningValidator, ScopeProvisioningValidator, UserProvisioningValidator, createProvisioningEntitiesValidator };

package/dist/core/provisioning/entities/permission/index.d.ts

@@ -1,3 +1,4 @@
+export * from './relations-validator.ts';
 export * from './types.ts';
 export * from './validator.ts';
 //# sourceMappingURL=index.d.ts.map

package/dist/core/provisioning/entities/permission/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/permission/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/permission/index.ts"],"names":[],"mappings":"AAOA,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC"}

package/dist/core/provisioning/entities/permission/index.mjs

@@ -1,5 +1,6 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { PermissionProvisioningRelationsValidator } from "./relations-validator.mjs";
 import { PermissionProvisioningValidator } from "./validator.mjs";
-export { PermissionProvisioningValidator };
+export { PermissionProvisioningRelationsValidator, PermissionProvisioningValidator };

package/dist/core/provisioning/entities/permission/relations-validator.d.ts

@@ -0,0 +1,6 @@
+import { Container } from 'validup';
+import type { PermissionProvisioningRelations } from './types.ts';
+export declare class PermissionProvisioningRelationsValidator extends Container<PermissionProvisioningRelations> {
+    protected initialize(): void;
+}
+//# sourceMappingURL=relations-validator.d.ts.map

package/dist/core/provisioning/entities/permission/relations-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relations-validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/permission/relations-validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,YAAY,CAAC;AAElE,qBAAa,wCAAyC,SAAQ,SAAS,CAAC,+BAA+B,CAAC;IACpG,SAAS,CAAC,UAAU;CAOvB"}

package/dist/core/provisioning/entities/permission/relations-validator.mjs

@@ -0,0 +1,17 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { Container } from "validup";
+import { createValidator } from "@validup/zod";
+import { z } from "zod";
+//#region src/core/provisioning/entities/permission/relations-validator.ts
+var PermissionProvisioningRelationsValidator = class extends Container {
+	initialize() {
+		super.initialize();
+		this.mount("policies", { optional: true }, createValidator(z.array(z.string())));
+	}
+};
+//#endregion
+export { PermissionProvisioningRelationsValidator };
+
+//# sourceMappingURL=relations-validator.mjs.map

package/dist/core/provisioning/entities/permission/relations-validator.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"relations-validator.mjs","names":["createValidator","Container","z","PermissionProvisioningRelationsValidator","initialize","mount","optional","array","string"],"sources":["../../../../../src/core/provisioning/entities/permission/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { PermissionProvisioningRelations } from './types.ts';\n\nexport class PermissionProvisioningRelationsValidator extends Container<PermissionProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount('policies', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n    }\n}\n"],"mappings":";;;;;;;AAYA,IAAaG,2CAAb,cAA8DF,UAAAA;CAChDG,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGN,gBACvCE,EAAEK,MAAML,EAAEM,OAAM,CAAA,CAAA,CAAA;CAExB;AACJ"}

package/dist/core/provisioning/entities/permission/validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/permission/validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAGpC,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAE/D,qBAAa,+BAAgC,SAAQ,SAAS,CAAC,4BAA4B,CAAC;IACxF,SAAS,CAAC,UAAU;CASvB"}
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/permission/validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAIpC,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAE/D,qBAAa,+BAAgC,SAAQ,SAAS,CAAC,4BAA4B,CAAC;IACxF,SAAS,CAAC,UAAU;CAYvB"}

package/dist/core/provisioning/entities/permission/validator.mjs

@@ -3,6 +3,7 @@ import "node:url";
 import.meta.url;
 import { ProvisioningStrategyValidator } from "../../strategy/validator.mjs";
 import "../../strategy/index.mjs";
+import { PermissionProvisioningRelationsValidator } from "./relations-validator.mjs";
 import { PermissionValidator } from "@authup/core-kit";
 import { Container } from "validup";
 //#region src/core/provisioning/entities/permission/validator.ts
@@ -13,6 +14,8 @@ var PermissionProvisioningValidator = class extends Container {
 		this.mount("strategy", { optional: true }, strategyValidator);
 		const attributesValidator = new PermissionValidator();
 		this.mount("attributes", attributesValidator);
+		const relationsValidator = new PermissionProvisioningRelationsValidator();
+		this.mount("relations", { optional: true }, relationsValidator);
 	}
 };
 //#endregion

package/dist/core/provisioning/entities/permission/validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validator.mjs","names":["PermissionValidator","Container","ProvisioningStrategyValidator","PermissionProvisioningValidator","initialize","strategyValidator","mount","optional","attributesValidator"],"sources":["../../../../../src/core/provisioning/entities/permission/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { PermissionValidator } from '@authup/core-kit';\nimport { Container } from 'validup';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\n\nimport type { PermissionProvisioningEntity } from './types.ts';\n\nexport class PermissionProvisioningValidator extends Container<PermissionProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const attributesValidator = new PermissionValidator();\n        this.mount('attributes', attributesValidator);\n    }\n}\n"],"mappings":";;;;;;;;AAaA,IAAaG,kCAAb,cAAqDF,UAAAA;CACvCG,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,oBAAoB,IAAIH,8BAAAA;EAC9B,KAAKI,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGF,iBAAAA;EAE3C,MAAMG,sBAAsB,IAAIR,oBAAAA;EAChC,KAAKM,MAAM,cAAcE,mBAAAA;CAC7B;AACJ"}
+{"version":3,"file":"validator.mjs","names":["PermissionValidator","Container","ProvisioningStrategyValidator","PermissionProvisioningRelationsValidator","PermissionProvisioningValidator","initialize","strategyValidator","mount","optional","attributesValidator","relationsValidator"],"sources":["../../../../../src/core/provisioning/entities/permission/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { PermissionValidator } from '@authup/core-kit';\nimport { Container } from 'validup';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\nimport { PermissionProvisioningRelationsValidator } from './relations-validator.ts';\n\nimport type { PermissionProvisioningEntity } from './types.ts';\n\nexport class PermissionProvisioningValidator extends Container<PermissionProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const attributesValidator = new PermissionValidator();\n        this.mount('attributes', attributesValidator);\n\n        const relationsValidator = new PermissionProvisioningRelationsValidator();\n        this.mount('relations', { optional: true }, relationsValidator);\n    }\n}\n"],"mappings":";;;;;;;;;AAcA,IAAaI,kCAAb,cAAqDH,UAAAA;CACvCI,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,oBAAoB,IAAIJ,8BAAAA;EAC9B,KAAKK,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGF,iBAAAA;EAE3C,MAAMG,sBAAsB,IAAIT,oBAAAA;EAChC,KAAKO,MAAM,cAAcE,mBAAAA;EAEzB,MAAMC,qBAAqB,IAAIP,yCAAAA;EAC/B,KAAKI,MAAM,aAAa,EAAEC,UAAU,KAAK,GAAGE,kBAAAA;CAChD;AACJ"}

package/dist/core/provisioning/entities/policy/index.d.ts

@@ -1,2 +1,3 @@
 export * from './types.ts';
+export * from './validator.ts';
 //# sourceMappingURL=index.d.ts.map

package/dist/core/provisioning/entities/policy/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/policy/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/policy/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC"}

package/dist/core/provisioning/entities/policy/index.mjs

@@ -1,4 +1,5 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-export {};
+import { PolicyProvisioningValidator } from "./validator.mjs";
+export { PolicyProvisioningValidator };

package/dist/core/provisioning/entities/policy/validator.d.ts

@@ -0,0 +1,6 @@
+import { Container } from 'validup';
+import type { PolicyProvisioningEntity } from './types.ts';
+export declare class PolicyProvisioningValidator extends Container<PolicyProvisioningEntity> {
+    protected initialize(): void;
+}
+//# sourceMappingURL=validator.d.ts.map

package/dist/core/provisioning/entities/policy/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/policy/validator.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAIpC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAE3D,qBAAa,2BAA4B,SAAQ,SAAS,CAAC,wBAAwB,CAAC;IAChF,SAAS,CAAC,UAAU;CAmBvB"}

package/dist/core/provisioning/entities/policy/validator.mjs

@@ -0,0 +1,26 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { ProvisioningStrategyValidator } from "../../strategy/validator.mjs";
+import "../../strategy/index.mjs";
+import { createProvisioningEntitiesValidator } from "../utils.mjs";
+import { PolicyValidator } from "@authup/core-kit";
+import { Container } from "validup";
+import { createValidator } from "@validup/zod";
+import { z } from "zod";
+//#region src/core/provisioning/entities/policy/validator.ts
+var PolicyProvisioningValidator = class extends Container {
+	initialize() {
+		super.initialize();
+		const strategyValidator = new ProvisioningStrategyValidator();
+		this.mount("strategy", { optional: true }, strategyValidator);
+		const attributesValidator = new PolicyValidator();
+		this.mount("attributes", attributesValidator);
+		this.mount("extraAttributes", { optional: true }, createValidator(z.record(z.string(), z.any())));
+		this.mount("children", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(this))));
+	}
+};
+//#endregion
+export { PolicyProvisioningValidator };
+
+//# sourceMappingURL=validator.mjs.map

package/dist/core/provisioning/entities/policy/validator.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.mjs","names":["PolicyValidator","createValidator","Container","z","ProvisioningStrategyValidator","createProvisioningEntitiesValidator","PolicyProvisioningValidator","initialize","strategyValidator","mount","optional","attributesValidator","record","string","any","array","check"],"sources":["../../../../../src/core/provisioning/entities/policy/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { PolicyValidator } from '@authup/core-kit';\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\nimport { createProvisioningEntitiesValidator } from '../utils.ts';\nimport type { PolicyProvisioningEntity } from './types.ts';\n\nexport class PolicyProvisioningValidator extends Container<PolicyProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const attributesValidator = new PolicyValidator();\n        this.mount('attributes', attributesValidator);\n\n        this.mount('extraAttributes', { optional: true }, createValidator(\n            z.record(z.string(), z.any()),\n        ));\n\n        this.mount('children', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(this)),\n        ));\n    }\n}\n"],"mappings":";;;;;;;;;;;AAeA,IAAaM,8BAAb,cAAiDJ,UAAAA;CACnCK,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,oBAAoB,IAAIJ,8BAAAA;EAC9B,KAAKK,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGF,iBAAAA;EAE3C,MAAMG,sBAAsB,IAAIX,gBAAAA;EAChC,KAAKS,MAAM,cAAcE,mBAAAA;EAEzB,KAAKF,MAAM,mBAAmB,EAAEC,UAAU,KAAK,GAAGT,gBAC9CE,EAAES,OAAOT,EAAEU,OAAM,GAAIV,EAAEW,IAAG,CAAA,CAAA,CAAA;EAG9B,KAAKL,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGT,gBACvCE,EACKY,MAAMZ,EAAEW,IAAG,CAAA,CAAA,CACXE,MAAMX,oCAAoC,IAAI,CAAA,CAAA,CAAA;CAE3D;AACJ"}

package/dist/core/provisioning/entities/realm/relations-validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"relations-validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/realm/relations-validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAkB,MAAM,SAAS,CAAC;AAQpD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAE7D,qBAAa,mCAAoC,SAAQ,SAAS,CAAC,0BAA0B,CAAC;IAC1F,SAAS,CAAC,UAAU;CAgHvB"}
+{"version":3,"file":"relations-validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/realm/relations-validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AASpC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAE7D,qBAAa,mCAAoC,SAAQ,SAAS,CAAC,0BAA0B,CAAC;IAC1F,SAAS,CAAC,UAAU;CA8CvB"}

package/dist/core/provisioning/entities/realm/relations-validator.mjs

@@ -5,6 +5,7 @@ import { PermissionProvisioningValidator } from "../permission/validator.mjs";
 import "../permission/index.mjs";
 import { RoleProvisioningValidator } from "../role/validator.mjs";
 import "../role/index.mjs";
+import { createProvisioningEntitiesValidator } from "../utils.mjs";
 import { ClientProvisioningValidator } from "../client/validator.mjs";
 import "../client/index.mjs";
 import { RobotProvisioningValidator } from "../robot/validator.mjs";
@@ -13,8 +14,8 @@ import { ScopeProvisioningValidator } from "../scope/validator.mjs";
 import "../scope/index.mjs";
 import { UserProvisioningValidator } from "../user/validator.mjs";
 import "../user/index.mjs";
-import { Container, isValidupError } from "validup";
-import { buildZodIssuesForError, createValidator } from "@validup/zod";
+import { Container } from "validup";
+import { createValidator } from "@validup/zod";
 import { z } from "zod";
 //#region src/core/provisioning/entities/realm/relations-validator.ts
 var RealmProvisioningRelationsValidator = class extends Container {
@@ -26,56 +27,12 @@ var RealmProvisioningRelationsValidator = class extends Container {
 		const robotValidator = new RobotProvisioningValidator();
 		const scopeValidator = new ScopeProvisioningValidator();
 		const userValidator = new UserProvisioningValidator();
-		this.mount("clients", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
-			try {
-				for (let i = 0; i < ctx.value.length; i++) await clientValidator.run(ctx.value[i]);
-			} catch (e) {
-				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
-			}
-		})));
-		this.mount("roles", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
-			try {
-				for (let i = 0; i < ctx.value.length; i++) await roleValidator.run(ctx.value[i]);
-			} catch (e) {
-				if (isValidupError(e)) {
-					ctx.issues.push({
-						code: "custom",
-						message: "",
-						path: [],
-						input: void 0
-					});
-					ctx.issues.push(...buildZodIssuesForError(e));
-				}
-			}
-		})));
-		this.mount("permissions", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
-			try {
-				for (let i = 0; i < ctx.value.length; i++) await permissionValidator.run(ctx.value[i]);
-			} catch (e) {
-				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
-			}
-		})));
-		this.mount("robots", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
-			try {
-				for (let i = 0; i < ctx.value.length; i++) await robotValidator.run(ctx.value[i]);
-			} catch (e) {
-				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
-			}
-		})));
-		this.mount("scopes", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
-			try {
-				for (let i = 0; i < ctx.value.length; i++) await scopeValidator.run(ctx.value[i]);
-			} catch (e) {
-				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
-			}
-		})));
-		this.mount("users", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
-			try {
-				for (let i = 0; i < ctx.value.length; i++) await userValidator.run(ctx.value[i]);
-			} catch (e) {
-				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
-			}
-		})));
+		this.mount("clients", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(clientValidator))));
+		this.mount("roles", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(roleValidator))));
+		this.mount("permissions", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(permissionValidator))));
+		this.mount("robots", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(robotValidator))));
+		this.mount("scopes", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(scopeValidator))));
+		this.mount("users", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(userValidator))));
 	}
 };
 //#endregion

package/dist/core/provisioning/entities/realm/relations-validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"relations-validator.mjs","names":["buildZodIssuesForError","createValidator","Container","isValidupError","z","ClientProvisioningValidator","PermissionProvisioningValidator","RobotProvisioningValidator","RoleProvisioningValidator","ScopeProvisioningValidator","UserProvisioningValidator","RealmProvisioningRelationsValidator","initialize","clientValidator","roleValidator","permissionValidator","robotValidator","scopeValidator","userValidator","mount","optional","array","any","check","ctx","i","value","length","run","e","issues","push","code","message","path","input","undefined"],"sources":["../../../../../src/core/provisioning/entities/realm/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { buildZodIssuesForError, createValidator } from '@validup/zod';\nimport { Container, isValidupError } from 'validup';\nimport { z } from 'zod';\nimport { ClientProvisioningValidator } from '../client/index.ts';\nimport { PermissionProvisioningValidator } from '../permission/index.ts';\nimport { RobotProvisioningValidator } from '../robot/index.ts';\nimport { RoleProvisioningValidator } from '../role/index.ts';\nimport { ScopeProvisioningValidator } from '../scope/index.ts';\nimport { UserProvisioningValidator } from '../user/index.ts';\nimport type { RealmProvisioningRelations } from './types.ts';\n\nexport class RealmProvisioningRelationsValidator extends Container<RealmProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        const clientValidator = new ClientProvisioningValidator();\n        const roleValidator = new RoleProvisioningValidator();\n        const permissionValidator = new PermissionProvisioningValidator();\n        const robotValidator = new RobotProvisioningValidator();\n        const scopeValidator = new ScopeProvisioningValidator();\n        const userValidator = new UserProvisioningValidator();\n\n        this.mount('clients', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await clientValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('roles', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await roleValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push({\n                                code: 'custom',\n                                message: '',\n                                path: [],\n                                input: undefined,\n                            });\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('permissions', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await permissionValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('robots', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await robotValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('scopes', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await scopeValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('users', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await userValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAkBA,IAAaW,sCAAb,cAAyDT,UAAAA;CAC3CU,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,kBAAkB,IAAIR,4BAAAA;EAC5B,MAAMS,gBAAgB,IAAIN,0BAAAA;EAC1B,MAAMO,sBAAsB,IAAIT,gCAAAA;EAChC,MAAMU,iBAAiB,IAAIT,2BAAAA;EAC3B,MAAMU,iBAAiB,IAAIR,2BAAAA;EAC3B,MAAMS,gBAAgB,IAAIR,0BAAAA;EAE1B,KAAKS,MAAM,WAAW,EAAEC,UAAU,KAAK,GAAGnB,gBACtCG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMZ,gBAAgBe,IAAIJ,IAAIE,MAAMD,EAAE;GAE9C,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GACfL,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;EAGR,KAAKV,MAAM,SAAS,EAAEC,UAAU,KAAK,GAAGnB,gBACpCG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMX,cAAcc,IAAIJ,IAAIE,MAAMD,EAAE;GAE5C,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GAAI;KACnBL,IAAIM,OAAOC,KAAK;MACZC,MAAM;MACNC,SAAS;MACTC,MAAM,CAAA;MACNC,OAAOC,KAAAA;KACX,CAAA;KACAZ,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;IAC9C;GACJ;EACJ,CAAA,CAAA,CAAA;EAGR,KAAKV,MAAM,eAAe,EAAEC,UAAU,KAAK,GAAGnB,gBAC1CG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMV,oBAAoBa,IAAIJ,IAAIE,MAAMD,EAAE;GAElD,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GACfL,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;EAGR,KAAKV,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGnB,gBACrCG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMT,eAAeY,IAAIJ,IAAIE,MAAMD,EAAE;GAE7C,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GACfL,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;EAGR,KAAKV,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGnB,gBACrCG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMR,eAAeW,IAAIJ,IAAIE,MAAMD,EAAE;GAE7C,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GACfL,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;EAGR,KAAKV,MAAM,SAAS,EAAEC,UAAU,KAAK,GAAGnB,gBACpCG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMP,cAAcU,IAAIJ,IAAIE,MAAMD,EAAE;GAE5C,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GACfL,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;CAEZ;AACJ"}
+{"version":3,"file":"relations-validator.mjs","names":["createValidator","Container","z","ClientProvisioningValidator","PermissionProvisioningValidator","RobotProvisioningValidator","RoleProvisioningValidator","ScopeProvisioningValidator","UserProvisioningValidator","createProvisioningEntitiesValidator","RealmProvisioningRelationsValidator","initialize","clientValidator","roleValidator","permissionValidator","robotValidator","scopeValidator","userValidator","mount","optional","array","any","check"],"sources":["../../../../../src/core/provisioning/entities/realm/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport { ClientProvisioningValidator } from '../client/index.ts';\nimport { PermissionProvisioningValidator } from '../permission/index.ts';\nimport { RobotProvisioningValidator } from '../robot/index.ts';\nimport { RoleProvisioningValidator } from '../role/index.ts';\nimport { ScopeProvisioningValidator } from '../scope/index.ts';\nimport { UserProvisioningValidator } from '../user/index.ts';\nimport { createProvisioningEntitiesValidator } from '../utils.ts';\nimport type { RealmProvisioningRelations } from './types.ts';\n\nexport class RealmProvisioningRelationsValidator extends Container<RealmProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        const clientValidator = new ClientProvisioningValidator();\n        const roleValidator = new RoleProvisioningValidator();\n        const permissionValidator = new PermissionProvisioningValidator();\n        const robotValidator = new RobotProvisioningValidator();\n        const scopeValidator = new ScopeProvisioningValidator();\n        const userValidator = new UserProvisioningValidator();\n\n        this.mount('clients', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(clientValidator)),\n        ));\n\n        this.mount('roles', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(roleValidator)),\n        ));\n\n        this.mount('permissions', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(permissionValidator)),\n        ));\n\n        this.mount('robots', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(robotValidator)),\n        ));\n\n        this.mount('scopes', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(scopeValidator)),\n        ));\n\n        this.mount('users', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(userValidator)),\n        ));\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAmBA,IAAaU,sCAAb,cAAyDT,UAAAA;CAC3CU,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,kBAAkB,IAAIT,4BAAAA;EAC5B,MAAMU,gBAAgB,IAAIP,0BAAAA;EAC1B,MAAMQ,sBAAsB,IAAIV,gCAAAA;EAChC,MAAMW,iBAAiB,IAAIV,2BAAAA;EAC3B,MAAMW,iBAAiB,IAAIT,2BAAAA;EAC3B,MAAMU,gBAAgB,IAAIT,0BAAAA;EAE1B,KAAKU,MAAM,WAAW,EAAEC,UAAU,KAAK,GAAGnB,gBACtCE,EACKkB,MAAMlB,EAAEmB,IAAG,CAAA,CAAA,CACXC,MAAMb,oCAAoCG,eAAAA,CAAAA,CAAAA,CAAAA;EAGnD,KAAKM,MAAM,SAAS,EAAEC,UAAU,KAAK,GAAGnB,gBACpCE,EACKkB,MAAMlB,EAAEmB,IAAG,CAAA,CAAA,CACXC,MAAMb,oCAAoCI,aAAAA,CAAAA,CAAAA,CAAAA;EAGnD,KAAKK,MAAM,eAAe,EAAEC,UAAU,KAAK,GAAGnB,gBAC1CE,EACKkB,MAAMlB,EAAEmB,IAAG,CAAA,CAAA,CACXC,MAAMb,oCAAoCK,mBAAAA,CAAAA,CAAAA,CAAAA;EAGnD,KAAKI,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGnB,gBACrCE,EACKkB,MAAMlB,EAAEmB,IAAG,CAAA,CAAA,CACXC,MAAMb,oCAAoCM,cAAAA,CAAAA,CAAAA,CAAAA;EAGnD,KAAKG,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGnB,gBACrCE,EACKkB,MAAMlB,EAAEmB,IAAG,CAAA,CAAA,CACXC,MAAMb,oCAAoCO,cAAAA,CAAAA,CAAAA,CAAAA;EAGnD,KAAKE,MAAM,SAAS,EAAEC,UAAU,KAAK,GAAGnB,gBACpCE,EACKkB,MAAMlB,EAAEmB,IAAG,CAAA,CAAA,CACXC,MAAMb,oCAAoCQ,aAAAA,CAAAA,CAAAA,CAAAA;CAEvD;AACJ"}

package/dist/core/provisioning/entities/role/relations-validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"relations-validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/role/relations-validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAE5D,qBAAa,kCAAmC,SAAQ,SAAS,CAAC,yBAAyB,CAAC;IACxF,SAAS,CAAC,UAAU;CAWvB"}
+{"version":3,"file":"relations-validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/role/relations-validator.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAE5D,qBAAa,kCAAmC,SAAQ,SAAS,CAAC,yBAAyB,CAAC;IACxF,SAAS,CAAC,UAAU;CAuBvB"}

package/dist/core/provisioning/entities/role/relations-validator.mjs

@@ -1,6 +1,7 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { RealmScope } from "@authup/access";
 import { Container } from "validup";
 import { createValidator } from "@validup/zod";
 import { z } from "zod";
@@ -10,6 +11,9 @@ var RoleProvisioningRelationsValidator = class extends Container {
 		super.initialize();
 		this.mount("realmPermissions", { optional: true }, createValidator(z.array(z.string())));
 		this.mount("globalPermissions", { optional: true }, createValidator(z.array(z.string())));
+		this.mount("globalPermissionsExclude", { optional: true }, createValidator(z.array(z.string())));
+		this.mount("globalPermissionsRealmScope", { optional: true }, createValidator(z.enum(RealmScope)));
+		this.mount("globalPermissionsRealmScopeOverrides", { optional: true }, createValidator(z.partialRecord(z.enum(RealmScope), z.array(z.string()))));
 	}
 };
 //#endregion

package/dist/core/provisioning/entities/role/relations-validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"relations-validator.mjs","names":["createValidator","Container","z","RoleProvisioningRelationsValidator","initialize","mount","optional","array","string"],"sources":["../../../../../src/core/provisioning/entities/role/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { RoleProvisioningRelations } from './types.ts';\n\nexport class RoleProvisioningRelationsValidator extends Container<RoleProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount('realmPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n    }\n}\n"],"mappings":";;;;;;;AAYA,IAAaG,qCAAb,cAAwDF,UAAAA;CAC1CG,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MAAM,oBAAoB,EAAEC,UAAU,KAAK,GAAGN,gBAC/CE,EAAEK,MAAML,EAAEM,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,qBAAqB,EAAEC,UAAU,KAAK,GAAGN,gBAChDE,EAAEK,MAAML,EAAEM,OAAM,CAAA,CAAA,CAAA;CAExB;AACJ"}
+{"version":3,"file":"relations-validator.mjs","names":["RealmScope","createValidator","Container","z","RoleProvisioningRelationsValidator","initialize","mount","optional","array","string","enum","partialRecord"],"sources":["../../../../../src/core/provisioning/entities/role/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { RealmScope } from '@authup/access';\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { RoleProvisioningRelations } from './types.ts';\n\nexport class RoleProvisioningRelationsValidator extends Container<RoleProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount('realmPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalPermissionsExclude', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalPermissionsRealmScope', { optional: true }, createValidator(\n            z.enum(RealmScope),\n        ));\n\n        this.mount('globalPermissionsRealmScopeOverrides', { optional: true }, createValidator(\n            z.partialRecord(z.enum(RealmScope), z.array(z.string())),\n        ));\n    }\n}\n"],"mappings":";;;;;;;;AAaA,IAAaI,qCAAb,cAAwDF,UAAAA;CAC1CG,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MAAM,oBAAoB,EAAEC,UAAU,KAAK,GAAGN,gBAC/CE,EAAEK,MAAML,EAAEM,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,qBAAqB,EAAEC,UAAU,KAAK,GAAGN,gBAChDE,EAAEK,MAAML,EAAEM,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,4BAA4B,EAAEC,UAAU,KAAK,GAAGN,gBACvDE,EAAEK,MAAML,EAAEM,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,+BAA+B,EAAEC,UAAU,KAAK,GAAGN,gBAC1DE,EAAEO,KAAKV,UAAAA,CAAAA,CAAAA;EAGX,KAAKM,MAAM,wCAAwC,EAAEC,UAAU,KAAK,GAAGN,gBACnEE,EAAEQ,cAAcR,EAAEO,KAAKV,UAAAA,GAAaG,EAAEK,MAAML,EAAEM,OAAM,CAAA,CAAA,CAAA,CAAA;CAE5D;AACJ"}

package/dist/core/provisioning/entities/role/types.d.ts

@@ -1,3 +1,4 @@
+import type { RealmScope } from '@authup/access';
 import type { Role } from '@authup/core-kit';
 import type { BaseProvisioningEntity } from '../types.ts';
 export type RoleProvisioningRelations = {
@@ -10,14 +11,16 @@ export type RoleProvisioningRelations = {
      */
     globalPermissionsExclude?: string[];
     /**
-     * Default policy name to set on each role-permission junction entry.
+     * Default realm_scope (own | ownOrNull | any) to stamp on each
+     * role-permission junction entry. Realm reach is a coarse, actor-relative
+     * enum on the junction (not a policy).
      */
-    globalPermissionsPolicyName?: string;
+    globalPermissionsRealmScope?: RealmScope;
     /**
-     * Per-permission policy overrides. Maps policy name to permission names
-     * that should use that policy instead of the default.
+     * Per-permission realm_scope overrides. Maps a realm_scope value to the
+     * permission names that should use that scope instead of the default.
      */
-    globalPermissionsPolicyOverrides?: Record<string, string[]>;
+    globalPermissionsRealmScopeOverrides?: Partial<Record<RealmScope, string[]>>;
     /**
      * Assign role to realm permissions.
      */

package/dist/core/provisioning/entities/role/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/role/types.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,MAAM,yBAAyB,GAAG;IACpC;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE7B;;OAEG;IACH,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEpC;;OAEG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAC;IAErC;;;OAGG;IACH,gCAAgC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAE5D;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG;IAChE,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,SAAS,CAAC,EAAE,yBAAyB,CAAA;CACxC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/role/types.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,MAAM,yBAAyB,GAAG;IACpC;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE7B;;OAEG;IACH,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;IAEpC;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,UAAU,CAAC;IAEzC;;;OAGG;IACH,oCAAoC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAE7E;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG;IAChE,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,SAAS,CAAC,EAAE,yBAAyB,CAAA;CACxC,CAAC"}

package/dist/core/provisioning/entities/root/validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/root/validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAkB,MAAM,SAAS,CAAC;AAQpD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEzD,qBAAa,yBAA0B,SAAQ,SAAS,CAAC,sBAAsB,CAAC;IAC5E,SAAS,CAAC,UAAU;CAoEvB"}
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/root/validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAUpC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEzD,qBAAa,yBAA0B,SAAQ,SAAS,CAAC,sBAAsB,CAAC;IAC5E,SAAS,CAAC,UAAU;CAyCvB"}

package/dist/core/provisioning/entities/root/validator.mjs

@@ -7,12 +7,15 @@ import { PermissionProvisioningValidator } from "../permission/validator.mjs";
 import "../permission/index.mjs";
 import { RoleProvisioningValidator } from "../role/validator.mjs";
 import "../role/index.mjs";
+import { createProvisioningEntitiesValidator } from "../utils.mjs";
+import { PolicyProvisioningValidator } from "../policy/validator.mjs";
+import "../policy/index.mjs";
 import { ScopeProvisioningValidator } from "../scope/validator.mjs";
 import "../scope/index.mjs";
 import { RealmProvisioningValidator } from "../realm/validator.mjs";
 import "../realm/index.mjs";
-import { Container, isValidupError } from "validup";
-import { buildZodIssuesForError, createValidator } from "@validup/zod";
+import { Container } from "validup";
+import { createValidator } from "@validup/zod";
 import { z } from "zod";
 //#region src/core/provisioning/entities/root/validator.ts
 var RootProvisioningValidator = class extends Container {
@@ -20,34 +23,16 @@ var RootProvisioningValidator = class extends Container {
 		super.initialize();
 		const strategyValidator = new ProvisioningStrategyValidator();
 		this.mount("strategy", { optional: true }, strategyValidator);
+		const policyValidator = new PolicyProvisioningValidator();
+		this.mount("policies", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(policyValidator))));
 		const realmValidator = new RealmProvisioningValidator();
-		this.mount("realms", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
-			for (let i = 0; i < ctx.value.length; i++) await realmValidator.run(ctx.value[i]);
-		})));
+		this.mount("realms", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(realmValidator))));
 		const roleValidator = new RoleProvisioningValidator();
-		this.mount("roles", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
-			try {
-				for (let i = 0; i < ctx.value.length; i++) await roleValidator.run(ctx.value[i]);
-			} catch (e) {
-				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
-			}
-		})));
+		this.mount("roles", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(roleValidator))));
 		const scopeValidator = new ScopeProvisioningValidator();
-		this.mount("scopes", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
-			try {
-				for (let i = 0; i < ctx.value.length; i++) await scopeValidator.run(ctx.value[i]);
-			} catch (e) {
-				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
-			}
-		})));
+		this.mount("scopes", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(scopeValidator))));
 		const permissionValidator = new PermissionProvisioningValidator();
-		this.mount("permissions", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
-			try {
-				for (let i = 0; i < ctx.value.length; i++) await permissionValidator.run(ctx.value[i]);
-			} catch (e) {
-				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
-			}
-		})));
+		this.mount("permissions", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(permissionValidator))));
 	}
 };
 //#endregion

package/dist/core/provisioning/entities/root/validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validator.mjs","names":["buildZodIssuesForError","createValidator","Container","isValidupError","z","ProvisioningStrategyValidator","PermissionProvisioningValidator","RealmProvisioningValidator","RoleProvisioningValidator","ScopeProvisioningValidator","RootProvisioningValidator","initialize","strategyValidator","mount","optional","realmValidator","array","any","check","ctx","i","value","length","run","roleValidator","e","issues","push","scopeValidator","permissionValidator"],"sources":["../../../../../src/core/provisioning/entities/root/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { buildZodIssuesForError, createValidator } from '@validup/zod';\nimport { Container, isValidupError } from 'validup';\nimport { z } from 'zod';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\nimport { PermissionProvisioningValidator } from '../permission/index.ts';\nimport { RealmProvisioningValidator } from '../realm/index.ts';\nimport { RoleProvisioningValidator } from '../role/index.ts';\nimport { ScopeProvisioningValidator } from '../scope/index.ts';\n\nimport type { RootProvisioningEntity } from './types.ts';\n\nexport class RootProvisioningValidator extends Container<RootProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const realmValidator = new RealmProvisioningValidator();\n        this.mount('realms', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    for (let i = 0; i < ctx.value.length; i++) {\n                        await realmValidator.run(ctx.value[i]);\n                    }\n                }),\n        ));\n\n        const roleValidator = new RoleProvisioningValidator();\n        this.mount('roles', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await roleValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        const scopeValidator = new ScopeProvisioningValidator();\n        this.mount('scopes', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await scopeValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        const permissionValidator = new PermissionProvisioningValidator();\n        this.mount('permissions', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await permissionValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAkBA,IAAaU,4BAAb,cAA+CR,UAAAA;CACjCS,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,oBAAoB,IAAIP,8BAAAA;EAC9B,KAAKQ,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGF,iBAAAA;EAE3C,MAAMG,iBAAiB,IAAIR,2BAAAA;EAC3B,KAAKM,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGb,gBACrCG,EACKY,MAAMZ,EAAEa,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAML,eAAeQ,IAAIJ,IAAIE,MAAMD,EAAE;EAE7C,CAAA,CAAA,CAAA;EAGR,MAAMI,gBAAgB,IAAIhB,0BAAAA;EAC1B,KAAKK,MAAM,SAAS,EAAEC,UAAU,KAAK,GAAGb,gBACpCG,EACKY,MAAMZ,EAAEa,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMI,cAAcD,IAAIJ,IAAIE,MAAMD,EAAE;GAE5C,SAASK,GAAG;IACR,IAAItB,eAAesB,CAAAA,GACfN,IAAIO,OAAOC,KAAI,GAAI3B,uBAAuByB,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;EAGR,MAAMG,iBAAiB,IAAInB,2BAAAA;EAC3B,KAAKI,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGb,gBACrCG,EACKY,MAAMZ,EAAEa,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMQ,eAAeL,IAAIJ,IAAIE,MAAMD,EAAE;GAE7C,SAASK,GAAG;IACR,IAAItB,eAAesB,CAAAA,GACfN,IAAIO,OAAOC,KAAI,GAAI3B,uBAAuByB,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;EAGR,MAAMI,sBAAsB,IAAIvB,gCAAAA;EAChC,KAAKO,MAAM,eAAe,EAAEC,UAAU,KAAK,GAAGb,gBAC1CG,EACKY,MAAMZ,EAAEa,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMS,oBAAoBN,IAAIJ,IAAIE,MAAMD,EAAE;GAElD,SAASK,GAAG;IACR,IAAItB,eAAesB,CAAAA,GACfN,IAAIO,OAAOC,KAAI,GAAI3B,uBAAuByB,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;CAEZ;AACJ"}
+{"version":3,"file":"validator.mjs","names":["createValidator","Container","z","ProvisioningStrategyValidator","PermissionProvisioningValidator","PolicyProvisioningValidator","RealmProvisioningValidator","RoleProvisioningValidator","ScopeProvisioningValidator","createProvisioningEntitiesValidator","RootProvisioningValidator","initialize","strategyValidator","mount","optional","policyValidator","array","any","check","realmValidator","roleValidator","scopeValidator","permissionValidator"],"sources":["../../../../../src/core/provisioning/entities/root/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\nimport { PermissionProvisioningValidator } from '../permission/index.ts';\nimport { PolicyProvisioningValidator } from '../policy/index.ts';\nimport { RealmProvisioningValidator } from '../realm/index.ts';\nimport { RoleProvisioningValidator } from '../role/index.ts';\nimport { ScopeProvisioningValidator } from '../scope/index.ts';\nimport { createProvisioningEntitiesValidator } from '../utils.ts';\n\nimport type { RootProvisioningEntity } from './types.ts';\n\nexport class RootProvisioningValidator extends Container<RootProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const policyValidator = new PolicyProvisioningValidator();\n        this.mount('policies', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(policyValidator)),\n        ));\n\n        const realmValidator = new RealmProvisioningValidator();\n        this.mount('realms', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(realmValidator)),\n        ));\n\n        const roleValidator = new RoleProvisioningValidator();\n        this.mount('roles', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(roleValidator)),\n        ));\n\n        const scopeValidator = new ScopeProvisioningValidator();\n        this.mount('scopes', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(scopeValidator)),\n        ));\n\n        const permissionValidator = new PermissionProvisioningValidator();\n        this.mount('permissions', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(permissionValidator)),\n        ));\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAoBA,IAAaU,4BAAb,cAA+CT,UAAAA;CACjCU,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,oBAAoB,IAAIT,8BAAAA;EAC9B,KAAKU,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGF,iBAAAA;EAE3C,MAAMG,kBAAkB,IAAIV,4BAAAA;EAC5B,KAAKQ,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGd,gBACvCE,EACKc,MAAMd,EAAEe,IAAG,CAAA,CAAA,CACXC,MAAMT,oCAAoCM,eAAAA,CAAAA,CAAAA,CAAAA;EAGnD,MAAMI,iBAAiB,IAAIb,2BAAAA;EAC3B,KAAKO,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGd,gBACrCE,EACKc,MAAMd,EAAEe,IAAG,CAAA,CAAA,CACXC,MAAMT,oCAAoCU,cAAAA,CAAAA,CAAAA,CAAAA;EAGnD,MAAMC,gBAAgB,IAAIb,0BAAAA;EAC1B,KAAKM,MAAM,SAAS,EAAEC,UAAU,KAAK,GAAGd,gBACpCE,EACKc,MAAMd,EAAEe,IAAG,CAAA,CAAA,CACXC,MAAMT,oCAAoCW,aAAAA,CAAAA,CAAAA,CAAAA;EAGnD,MAAMC,iBAAiB,IAAIb,2BAAAA;EAC3B,KAAKK,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGd,gBACrCE,EACKc,MAAMd,EAAEe,IAAG,CAAA,CAAA,CACXC,MAAMT,oCAAoCY,cAAAA,CAAAA,CAAAA,CAAAA;EAGnD,MAAMC,sBAAsB,IAAIlB,gCAAAA;EAChC,KAAKS,MAAM,eAAe,EAAEC,UAAU,KAAK,GAAGd,gBAC1CE,EACKc,MAAMd,EAAEe,IAAG,CAAA,CAAA,CACXC,MAAMT,oCAAoCa,mBAAAA,CAAAA,CAAAA,CAAAA;CAEvD;AACJ"}

package/dist/core/provisioning/entities/utils.d.ts

@@ -0,0 +1,10 @@
+import type { ParsePayload } from 'zod/v4/core';
+import type { Container } from 'validup';
+/**
+ * Run a provisioning entity validator over every array element with the
+ * PROVISIONING group (zod check closures do not inherit the validup run
+ * group) and write the validated output back, so validator transforms
+ * (canonicalization, stripping) reach the synchronizers.
+ */
+export declare function createProvisioningEntitiesValidator(validator: Container<any>): (ctx: ParsePayload<any[]>) => Promise<void>;
+//# sourceMappingURL=utils.d.ts.map

package/dist/core/provisioning/entities/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../src/core/provisioning/entities/utils.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAGzC;;;;;GAKG;AACH,wBAAgB,mCAAmC,CAC/C,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,GAC1B,CAAC,GAAG,EAAE,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAiB7C"}

package/dist/core/provisioning/entities/utils.mjs

@@ -0,0 +1,29 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { ValidatorGroup } from "@authup/kit";
+import { isValidupError } from "validup";
+import { buildZodIssuesForError } from "@validup/zod";
+//#region src/core/provisioning/entities/utils.ts
+/**
+* Run a provisioning entity validator over every array element with the
+* PROVISIONING group (zod check closures do not inherit the validup run
+* group) and write the validated output back, so validator transforms
+* (canonicalization, stripping) reach the synchronizers.
+*/ function createProvisioningEntitiesValidator(validator) {
+	return async (ctx) => {
+		for (let i = 0; i < ctx.value.length; i++) try {
+			ctx.value[i] = await validator.run(ctx.value[i], { group: ValidatorGroup.PROVISIONING });
+		} catch (e) {
+			if (!isValidupError(e)) throw e;
+			ctx.issues.push(...buildZodIssuesForError(e).map((issue) => ({
+				...issue,
+				path: [i, ...issue.path ?? []]
+			})));
+		}
+	};
+}
+//#endregion
+export { createProvisioningEntitiesValidator };
+
+//# sourceMappingURL=utils.mjs.map

package/dist/core/provisioning/entities/utils.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.mjs","names":["ValidatorGroup","buildZodIssuesForError","isValidupError","createProvisioningEntitiesValidator","validator","ctx","i","value","length","run","group","PROVISIONING","e","issues","push","map","issue","path"],"sources":["../../../../src/core/provisioning/entities/utils.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ValidatorGroup } from '@authup/kit';\nimport { buildZodIssuesForError } from '@validup/zod';\nimport type { ParsePayload } from 'zod/v4/core';\nimport type { Container } from 'validup';\nimport { isValidupError } from 'validup';\n\n/**\n * Run a provisioning entity validator over every array element with the\n * PROVISIONING group (zod check closures do not inherit the validup run\n * group) and write the validated output back, so validator transforms\n * (canonicalization, stripping) reach the synchronizers.\n */\nexport function createProvisioningEntitiesValidator(\n    validator: Container<any>,\n): (ctx: ParsePayload<any[]>) => Promise<void> {\n    return async (ctx) => {\n        for (let i = 0; i < ctx.value.length; i++) {\n            try {\n                ctx.value[i] = await validator.run(ctx.value[i], { group: ValidatorGroup.PROVISIONING });\n            } catch (e) {\n                if (!isValidupError(e)) {\n                    throw e;\n                }\n\n                ctx.issues.push(...buildZodIssuesForError(e).map((issue) => ({\n                    ...issue,\n                    path: [i, ...(issue.path ?? [])],\n                })));\n            }\n        }\n    };\n}\n"],"mappings":";;;;;;;;;;;;GAmBA,SAAgBG,oCACZC,WAAyB;CAEzB,OAAO,OAAOC,QAAAA;EACV,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,IAAI;GACAD,IAAIE,MAAMD,KAAK,MAAMF,UAAUK,IAAIJ,IAAIE,MAAMD,IAAI,EAAEI,OAAOV,eAAeW,aAAa,CAAA;EAC1F,SAASC,GAAG;GACR,IAAI,CAACV,eAAeU,CAAAA,GAChB,MAAMA;GAGVP,IAAIQ,OAAOC,KAAI,GAAIb,uBAAuBW,CAAAA,CAAAA,CAAGG,KAAKC,WAAW;IACzD,GAAGA;IACHC,MAAM,CAACX,GAAAA,GAAOU,MAAMC,QAAQ,CAAA,CAAA;GAChC,EAAA,CAAA;EACJ;CAER;AACJ"}

package/dist/core/provisioning/index.mjs

@@ -5,9 +5,12 @@ import { ProvisioningEntityStrategyType } from "./strategy/constants.mjs";
 import { normalizeEntityProvisioningStrategy } from "./strategy/normalize.mjs";
 import { ProvisioningStrategyValidator } from "./strategy/validator.mjs";
 import "./strategy/index.mjs";
+import { PermissionProvisioningRelationsValidator } from "./entities/permission/relations-validator.mjs";
 import { PermissionProvisioningValidator } from "./entities/permission/validator.mjs";
 import { RoleProvisioningValidator } from "./entities/role/validator.mjs";
+import { createProvisioningEntitiesValidator } from "./entities/utils.mjs";
 import { ClientProvisioningValidator } from "./entities/client/validator.mjs";
+import { PolicyProvisioningValidator } from "./entities/policy/validator.mjs";
 import { RobotProvisioningValidator } from "./entities/robot/validator.mjs";
 import { ScopeProvisioningValidator } from "./entities/scope/validator.mjs";
 import { UserProvisioningValidator } from "./entities/user/validator.mjs";
@@ -26,4 +29,4 @@ import { RobotProvisioningSynchronizer } from "./synchronizer/robot/module.mjs";
 import { ScopeProvisioningSynchronizer } from "./synchronizer/scope/module.mjs";
 import { UserProvisioningSynchronizer } from "./synchronizer/user/module.mjs";
 import "./synchronizer/index.mjs";
-export { ClientProvisioningSynchronizer, ClientProvisioningValidator, GraphProvisioningSynchronizer, PermissionProvisioningSynchronizer, PermissionProvisioningValidator, PolicyProvisioningSynchronizer, ProvisioningEntityResolver, ProvisioningEntityStrategyType, ProvisioningJunctionSynchronizer, ProvisioningStrategyValidator, RealmProvisioningSynchronizer, RealmProvisioningValidator, RobotProvisioningSynchronizer, RobotProvisioningValidator, RoleProvisioningSynchronizer, RoleProvisioningValidator, RootProvisioningValidator, ScopeProvisioningSynchronizer, ScopeProvisioningValidator, UserProvisioningSynchronizer, UserProvisioningValidator, normalizeEntityProvisioningStrategy };
+export { ClientProvisioningSynchronizer, ClientProvisioningValidator, GraphProvisioningSynchronizer, PermissionProvisioningRelationsValidator, PermissionProvisioningSynchronizer, PermissionProvisioningValidator, PolicyProvisioningSynchronizer, PolicyProvisioningValidator, ProvisioningEntityResolver, ProvisioningEntityStrategyType, ProvisioningJunctionSynchronizer, ProvisioningStrategyValidator, RealmProvisioningSynchronizer, RealmProvisioningValidator, RobotProvisioningSynchronizer, RobotProvisioningValidator, RoleProvisioningSynchronizer, RoleProvisioningValidator, RootProvisioningValidator, ScopeProvisioningSynchronizer, ScopeProvisioningValidator, UserProvisioningSynchronizer, UserProvisioningValidator, createProvisioningEntitiesValidator, normalizeEntityProvisioningStrategy };