@authup/server-core 1.0.0-beta.50 → 1.0.0-beta.52

package/dist/app/modules/database/repositories/client/repository.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"repository.mjs","names":["buildRedisKeyPath","isUUID","applyQuery","isEntityUnique","validateEntityJoinColumns","DatabaseConflictError","translateWhereConditions","loadBoundPermissions","CachePrefix","ClientEntity","ClientPermissionEntity","ClientRoleEntity","RealmRepositoryAdapter","ClientRepositoryAdapter","repository","realmRepository","ctx","findMany","query","qb","createQueryBuilder","groupBy","pagination","defaultAlias","fields","default","allowed","filters","maxLimit","relations","onJoin","_property","key","q","addGroupBy","sort","entities","total","getManyAndCount","data","meta","findOneById","id","findOneBy","findOneByName","name","realmKey","where","realm","resolve","andWhere","realmId","getOne","findOne","findOneByIdOrName","idOrName","findManyBy","findBy","findOneWithSecret","Object","entries","forEach","value","addSelect","create","merge","entity","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget","checkUniqueness","existing","isUnique","entityExisting","getBoundRoles","getRepository","find","client_id","role","cache","prefix","CLIENT_OWNED_ROLES","milliseconds","map","entry","getBoundPermissions","junctionTarget","cachePrefix","CLIENT_OWNED_PERMISSIONS","cacheKey"],"sources":["../../../../../../src/app/modules/database/repositories/client/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Client, Realm, Role } from '@authup/core-kit';\nimport type { PermissionPolicyBinding } from '@authup/access';\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport { applyQuery, isEntityUnique, validateEntityJoinColumns } from 'typeorm-extension';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IClientRepository, IRealmRepository } from '../../../../../core/index.ts';\nimport { DatabaseConflictError } from '../../../../../adapters/database/index.ts';\nimport { translateWhereConditions } from '../helpers.ts';\nimport { loadBoundPermissions } from '../bindings.ts';\nimport {\n    CachePrefix,\n    ClientEntity,\n    ClientPermissionEntity,\n    ClientRoleEntity,\n} from '../../../../../adapters/database/domains/index.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type ClientRepositoryAdapterContext = {\n    repository: Repository<Client>,\n    realmRepository: Repository<Realm>,\n};\n\nexport class ClientRepositoryAdapter implements IClientRepository {\n    private readonly repository: Repository<Client>;\n\n    private readonly realmRepository: IRealmRepository;\n\n    constructor(ctx: ClientRepositoryAdapterContext) {\n        this.repository = ctx.repository;\n        this.realmRepository = new RealmRepositoryAdapter(ctx.realmRepository);\n    }\n\n    async findMany(query: Record<string, any>): Promise<EntityRepositoryFindManyResult<Client>> {\n        const qb = this.repository.createQueryBuilder('client');\n        qb.groupBy('client.id');\n\n        const { pagination } = applyQuery(qb, query, {\n            defaultAlias: 'client',\n            fields: {\n                default: [\n                    'id',\n                    'active',\n                    'built_in',\n                    'name',\n                    'display_name',\n                    'description',\n                    'secret_hashed',\n                    'secret_encrypted',\n                    'base_url',\n                    'root_url',\n                    'redirect_uri',\n                    'grant_types',\n                    'scope',\n                    'is_confidential',\n                    'realm_id',\n                    'updated_at',\n                    'created_at',\n                ],\n                allowed: ['secret'],\n            },\n            filters: { allowed: ['id', 'name', 'realm_id', 'realm.name'] },\n            pagination: { maxLimit: 50 },\n            relations: {\n                allowed: ['realm'],\n                onJoin: (_property: string, key: string, q: any) => {\n                    q.addGroupBy(`${key}.id`);\n                },\n            },\n            sort: { allowed: ['id', 'created_at', 'updated_at'] },\n        });\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    findOneById(id: string): Promise<Client | null> {\n        return this.findOneBy({ id });\n    }\n\n    async findOneByName(name: string, realmKey?: string): Promise<Client | null> {\n        const qb = this.repository.createQueryBuilder('client');\n        qb.where('client.name = :name', { name });\n\n        if (realmKey) {\n            const realm = await this.realmRepository.resolve(realmKey);\n            if (realm) {\n                qb.andWhere('client.realm_id = :realmId', { realmId: realm.id });\n            }\n        }\n\n        return qb.getOne();\n    }\n\n    async findOne(id: string, query?: Record<string, any>, realmKey?: string): Promise<Client | null> {\n        const qb = this.repository.createQueryBuilder('client');\n\n        if (isUUID(id)) {\n            qb.where('client.id = :id', { id });\n        } else {\n            qb.where('client.name = :name', { name: id });\n\n            if (realmKey) {\n                const realm = await this.realmRepository.resolve(realmKey);\n                if (!realm) {\n                    return null;\n                }\n                qb.andWhere('client.realm_id = :realmId', { realmId: realm.id });\n            }\n        }\n\n        applyQuery(qb, query || {}, {\n            defaultAlias: 'client',\n            fields: {\n                default: [\n                    'id',\n                    'active',\n                    'built_in',\n                    'name',\n                    'display_name',\n                    'description',\n                    'secret_hashed',\n                    'secret_encrypted',\n                    'base_url',\n                    'root_url',\n                    'redirect_uri',\n                    'grant_types',\n                    'scope',\n                    'is_confidential',\n                    'realm_id',\n                    'updated_at',\n                    'created_at',\n                ],\n                allowed: ['secret'],\n            },\n            relations: { allowed: ['realm'] },\n        });\n\n        return qb.getOne();\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Client | null> {\n        return isUUID(idOrName) ?\n            this.findOneById(idOrName) :\n            this.findOneByName(idOrName, realm);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<Client[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Client | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    async findOneWithSecret(where: Record<string, any>): Promise<Client | null> {\n        const qb = this.repository.createQueryBuilder('client');\n\n        Object.entries(where).forEach(([key, value]) => {\n            qb.andWhere(`client.${key} = :${key}`, { [key]: value });\n        });\n\n        qb.addSelect('client.secret');\n\n        return qb.getOne();\n    }\n\n    create(data: Partial<Client>): Client {\n        return this.repository.create(data);\n    }\n\n    merge(entity: Client, data: Partial<Client>): Client {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: Client): Promise<Client> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: Client): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<Client>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: ClientEntity,\n        });\n    }\n\n    async checkUniqueness(data: Partial<Client>, existing?: Client): Promise<void> {\n        const isUnique = await isEntityUnique({\n            dataSource: this.repository.manager.connection,\n            entityTarget: ClientEntity,\n            entity: data,\n            entityExisting: existing,\n        });\n\n        if (!isUnique) {\n            throw new DatabaseConflictError();\n        }\n    }\n\n    async getBoundRoles(entity: string | Client): Promise<Role[]> {\n        const id = typeof entity === 'string' ? entity : entity.id;\n        const entries = await this.repository.manager\n            .getRepository(ClientRoleEntity)\n            .find({\n                where: { client_id: id },\n                relations: { role: true },\n                cache: {\n                    id: buildRedisKeyPath({\n                        prefix: CachePrefix.CLIENT_OWNED_ROLES,\n                        key: id,\n                    }),\n                    milliseconds: 60_000,\n                },\n            });\n\n        return entries.map((entry) => entry.role);\n    }\n\n    async getBoundPermissions(entity: string | Client): Promise<PermissionPolicyBinding[]> {\n        const id = typeof entity === 'string' ? entity : entity.id;\n        return loadBoundPermissions({\n            manager: this.repository.manager,\n            junctionTarget: ClientPermissionEntity,\n            where: { client_id: id },\n            cachePrefix: CachePrefix.CLIENT_OWNED_PERMISSIONS,\n            cacheKey: id,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA+BA,IAAaa,0BAAb,MAAaA;CACQC;CAEAC;CAEjB,YAAYC,KAAqC;EAC7C,KAAKF,aAAaE,IAAIF;EACtB,KAAKC,kBAAkB,IAAIH,uBAAuBI,IAAID,eAAe;CACzE;CAEA,MAAME,SAASC,OAA6E;EACxF,MAAMC,KAAK,KAAKL,WAAWM,mBAAmB,QAAA;EAC9CD,GAAGE,QAAQ,WAAA;EAEX,MAAM,EAAEC,eAAepB,WAAWiB,IAAID,OAAO;GACzCK,cAAc;GACdC,QAAQ;IACJC,SAAS;KACL;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;;IAEJC,SAAS,CAAC,QAAA;GACd;GACAC,SAAS,EAAED,SAAS;IAAC;IAAM;IAAQ;IAAY;KAAc;GAC7DJ,YAAY,EAAEM,UAAU,GAAG;GAC3BC,WAAW;IACPH,SAAS,CAAC,OAAA;IACVI,SAASC,WAAmBC,KAAaC,MAAAA;KACrCA,EAAEC,WAAW,GAAGF,IAAI,IAAI;IAC5B;GACJ;GACAG,MAAM,EAAET,SAAS;IAAC;IAAM;IAAc;KAAc;EACxD,CAAA;EAEA,MAAM,CAACU,UAAUC,SAAS,MAAMlB,GAAGmB,gBAAe;EAElD,OAAO;GACHC,MAAMH;GACNI,MAAM;IACFH;IACA,GAAGf;GACP;EACJ;CACJ;CAEAmB,YAAYC,IAAoC;EAC5C,OAAO,KAAKC,UAAU,EAAED,GAAG,CAAA;CAC/B;CAEA,MAAME,cAAcC,MAAcC,UAA2C;EACzE,MAAM3B,KAAK,KAAKL,WAAWM,mBAAmB,QAAA;EAC9CD,GAAG4B,MAAM,uBAAuB,EAAEF,KAAK,CAAA;EAEvC,IAAIC,UAAU;GACV,MAAME,QAAQ,MAAM,KAAKjC,gBAAgBkC,QAAQH,QAAAA;GACjD,IAAIE,OACA7B,GAAG+B,SAAS,8BAA8B,EAAEC,SAASH,MAAMN,GAAG,CAAA;EAEtE;EAEA,OAAOvB,GAAGiC,OAAM;CACpB;CAEA,MAAMC,QAAQX,IAAYxB,OAA6B4B,UAA2C;EAC9F,MAAM3B,KAAK,KAAKL,WAAWM,mBAAmB,QAAA;EAE9C,IAAInB,OAAOyC,EAAAA,GACPvB,GAAG4B,MAAM,mBAAmB,EAAEL,GAAG,CAAA;OAC9B;GACHvB,GAAG4B,MAAM,uBAAuB,EAAEF,MAAMH,GAAG,CAAA;GAE3C,IAAII,UAAU;IACV,MAAME,QAAQ,MAAM,KAAKjC,gBAAgBkC,QAAQH,QAAAA;IACjD,IAAI,CAACE,OACD,OAAO;IAEX7B,GAAG+B,SAAS,8BAA8B,EAAEC,SAASH,MAAMN,GAAG,CAAA;GAClE;EACJ;EAEAxC,WAAWiB,IAAID,SAAS,CAAC,GAAG;GACxBK,cAAc;GACdC,QAAQ;IACJC,SAAS;KACL;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;;IAEJC,SAAS,CAAC,QAAA;GACd;GACAG,WAAW,EAAEH,SAAS,CAAC,OAAA,EAAS;EACpC,CAAA;EAEA,OAAOP,GAAGiC,OAAM;CACpB;CAEA,MAAME,kBAAkBC,UAAkBP,OAAwC;EAC9E,OAAO/C,OAAOsD,QAAAA,IACV,KAAKd,YAAYc,QAAAA,IACjB,KAAKX,cAAcW,UAAUP,KAAAA;CACrC;CAEA,MAAMQ,WAAWT,OAA+C;EAC5D,OAAO,KAAKjC,WAAW2C,OAAOnD,yBAAyByC,KAAAA,CAAAA;CAC3D;CAEA,MAAMJ,UAAUI,OAAoD;EAChE,OAAO,KAAKjC,WAAW6B,UAAUrC,yBAAyByC,KAAAA,CAAAA;CAC9D;CAEA,MAAMW,kBAAkBX,OAAoD;EACxE,MAAM5B,KAAK,KAAKL,WAAWM,mBAAmB,QAAA;EAE9CuC,OAAOC,QAAQb,KAAAA,CAAAA,CAAOc,SAAS,CAAC7B,KAAK8B,WAAM;GACvC3C,GAAG+B,SAAS,UAAUlB,IAAI,MAAMA,OAAO,GAAGA,MAAM8B,MAAM,CAAA;EAC1D,CAAA;EAEA3C,GAAG4C,UAAU,eAAA;EAEb,OAAO5C,GAAGiC,OAAM;CACpB;CAEAY,OAAOzB,MAA+B;EAClC,OAAO,KAAKzB,WAAWkD,OAAOzB,IAAAA;CAClC;CAEA0B,MAAMC,QAAgB3B,MAA+B;EACjD,OAAO,KAAKzB,WAAWmD,MAAMC,QAAQ3B,IAAAA;CACzC;CAEA,MAAM4B,KAAKD,QAAiC;EACxC,OAAO,KAAKpD,WAAWqD,KAAKD,MAAAA;CAChC;CAEA,MAAME,OAAOF,QAA+B;EACxC,MAAM,KAAKpD,WAAWsD,OAAOF,MAAAA;CACjC;CAEA,MAAMG,oBAAoB9B,MAAsC;EAC5D,MAAMnC,0BAA0BmC,MAAM;GAClC+B,YAAY,KAAKxD,WAAWyD,QAAQC;GACpCC,cAAchE;EAClB,CAAA;CACJ;CAEA,MAAMiE,gBAAgBnC,MAAuBoC,UAAkC;EAQ3E,IAAI,CAACC,MAPkBzE,eAAe;GAClCmE,YAAY,KAAKxD,WAAWyD,QAAQC;GACpCC,cAAchE;GACdyD,QAAQ3B;GACRsC,gBAAgBF;EACpB,CAAA,GAGI,MAAM,IAAItE,sBAAAA;CAElB;CAEA,MAAMyE,cAAcZ,QAA0C;EAC1D,MAAMxB,KAAK,OAAOwB,WAAW,WAAWA,SAASA,OAAOxB;EAexD,QAAOkB,MAde,KAAK9C,WAAWyD,QACjCQ,cAAcpE,gBAAAA,CAAAA,CACdqE,KAAK;GACFjC,OAAO,EAAEkC,WAAWvC,GAAG;GACvBb,WAAW,EAAEqD,MAAM,KAAK;GACxBC,OAAO;IACHzC,IAAI1C,kBAAkB;KAClBoF,QAAQ5E,YAAY6E;KACpBrD,KAAKU;IACT,CAAA;IACA4C,cAAc;GAClB;EACJ,CAAA,EAAA,CAEWC,KAAKC,UAAUA,MAAMN,IAAI;CAC5C;CAEA,MAAMO,oBAAoBvB,QAA6D;EACnF,MAAMxB,KAAK,OAAOwB,WAAW,WAAWA,SAASA,OAAOxB;EACxD,OAAOnC,qBAAqB;GACxBgE,SAAS,KAAKzD,WAAWyD;GACzBmB,gBAAgBhF;GAChBqC,OAAO,EAAEkC,WAAWvC,GAAG;GACvBiD,aAAanF,YAAYoF;GACzBC,UAAUnD;EACd,CAAA;CACJ;AACJ"}
+{"version":3,"file":"repository.mjs","names":["buildRedisKeyPath","isUUID","applyQuery","isEntityUnique","validateEntityJoinColumns","DatabaseConflictError","applyRealmScopeSelect","translateWhereConditions","loadBoundPermissions","CachePrefix","ClientEntity","ClientPermissionEntity","ClientRoleEntity","RealmRepositoryAdapter","ClientRepositoryAdapter","repository","realmRepository","ctx","findMany","query","qb","createQueryBuilder","groupBy","pagination","defaultAlias","fields","default","allowed","filters","maxLimit","relations","onJoin","_property","key","q","addGroupBy","sort","entities","total","getManyAndCount","data","meta","findOneById","id","findOneBy","findOneByName","name","realmKey","where","realmId","resolveId","andWhere","getOne","findOne","findOneByIdOrName","idOrName","realm","findManyBy","findBy","findOneWithSecret","Object","entries","forEach","value","addSelect","create","merge","entity","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget","checkUniqueness","existing","isUnique","entityExisting","getBoundRoles","getRepository","find","client_id","role","cache","prefix","CLIENT_OWNED_ROLES","milliseconds","map","entry","getBoundPermissions","junctionTarget","cachePrefix","CLIENT_OWNED_PERMISSIONS","cacheKey"],"sources":["../../../../../../src/app/modules/database/repositories/client/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Client, Realm, Role } from '@authup/core-kit';\nimport type { PermissionPolicyBinding } from '@authup/access';\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport { applyQuery, isEntityUnique, validateEntityJoinColumns } from 'typeorm-extension';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IClientRepository, IRealmRepository } from '../../../../../core/index.ts';\nimport { DatabaseConflictError } from '../../../../../adapters/database/index.ts';\nimport { applyRealmScopeSelect, translateWhereConditions } from '../helpers.ts';\nimport { loadBoundPermissions } from '../bindings.ts';\nimport {\n    CachePrefix,\n    ClientEntity,\n    ClientPermissionEntity,\n    ClientRoleEntity,\n} from '../../../../../adapters/database/domains/index.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type ClientRepositoryAdapterContext = {\n    repository: Repository<Client>,\n    realmRepository: Repository<Realm>,\n};\n\nexport class ClientRepositoryAdapter implements IClientRepository {\n    private readonly repository: Repository<Client>;\n\n    private readonly realmRepository: IRealmRepository;\n\n    constructor(ctx: ClientRepositoryAdapterContext) {\n        this.repository = ctx.repository;\n        this.realmRepository = new RealmRepositoryAdapter(ctx.realmRepository);\n    }\n\n    async findMany(query: Record<string, any>): Promise<EntityRepositoryFindManyResult<Client>> {\n        const qb = this.repository.createQueryBuilder('client');\n        qb.groupBy('client.id');\n\n        const { pagination } = applyQuery(qb, query, {\n            defaultAlias: 'client',\n            fields: {\n                default: [\n                    'id',\n                    'active',\n                    'built_in',\n                    'name',\n                    'display_name',\n                    'description',\n                    'secret_hashed',\n                    'secret_encrypted',\n                    'base_url',\n                    'root_url',\n                    'redirect_uri',\n                    'post_logout_redirect_uri',\n                    'grant_types',\n                    'scope',\n                    'is_confidential',\n                    'realm_id',\n                    'updated_at',\n                    'created_at',\n                ],\n                allowed: ['secret'],\n            },\n            filters: { allowed: ['id', 'name', 'realm_id', 'realm.name'] },\n            pagination: { maxLimit: 50 },\n            relations: {\n                allowed: ['realm'],\n                onJoin: (_property: string, key: string, q: any) => {\n                    q.addGroupBy(`${key}.id`);\n                },\n            },\n            sort: { allowed: ['id', 'created_at', 'updated_at'] },\n        });\n\n        applyRealmScopeSelect(qb, 'client', ['secret_hashed', 'secret_encrypted']);\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    findOneById(id: string): Promise<Client | null> {\n        return this.findOneBy({ id });\n    }\n\n    async findOneByName(name: string, realmKey?: string): Promise<Client | null> {\n        const qb = this.repository.createQueryBuilder('client');\n        qb.where('client.name = :name', { name });\n\n        if (realmKey) {\n            const realmId = await this.realmRepository.resolveId(realmKey);\n            if (!realmId) {\n                return null;\n            }\n            qb.andWhere('client.realm_id = :realmId', { realmId });\n        }\n\n        return qb.getOne();\n    }\n\n    async findOne(id: string, query?: Record<string, any>, realmKey?: string): Promise<Client | null> {\n        const qb = this.repository.createQueryBuilder('client');\n\n        if (isUUID(id)) {\n            qb.where('client.id = :id', { id });\n        } else {\n            qb.where('client.name = :name', { name: id });\n\n            if (realmKey) {\n                const realmId = await this.realmRepository.resolveId(realmKey);\n                if (!realmId) {\n                    return null;\n                }\n                qb.andWhere('client.realm_id = :realmId', { realmId });\n            }\n        }\n\n        applyQuery(qb, query || {}, {\n            defaultAlias: 'client',\n            fields: {\n                default: [\n                    'id',\n                    'active',\n                    'built_in',\n                    'name',\n                    'display_name',\n                    'description',\n                    'secret_hashed',\n                    'secret_encrypted',\n                    'base_url',\n                    'root_url',\n                    'redirect_uri',\n                    'post_logout_redirect_uri',\n                    'grant_types',\n                    'scope',\n                    'is_confidential',\n                    'realm_id',\n                    'updated_at',\n                    'created_at',\n                ],\n                allowed: ['secret'],\n            },\n            relations: { allowed: ['realm'] },\n        });\n\n        return qb.getOne();\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Client | null> {\n        return isUUID(idOrName) ?\n            this.findOneById(idOrName) :\n            this.findOneByName(idOrName, realm);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<Client[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Client | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    async findOneWithSecret(where: Record<string, any>): Promise<Client | null> {\n        const qb = this.repository.createQueryBuilder('client');\n\n        Object.entries(where).forEach(([key, value]) => {\n            qb.andWhere(`client.${key} = :${key}`, { [key]: value });\n        });\n\n        qb.addSelect('client.secret');\n\n        return qb.getOne();\n    }\n\n    create(data: Partial<Client>): Client {\n        return this.repository.create(data);\n    }\n\n    merge(entity: Client, data: Partial<Client>): Client {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: Client): Promise<Client> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: Client): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<Client>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: ClientEntity,\n        });\n    }\n\n    async checkUniqueness(data: Partial<Client>, existing?: Client): Promise<void> {\n        const isUnique = await isEntityUnique({\n            dataSource: this.repository.manager.connection,\n            entityTarget: ClientEntity,\n            entity: data,\n            entityExisting: existing,\n        });\n\n        if (!isUnique) {\n            throw new DatabaseConflictError();\n        }\n    }\n\n    async getBoundRoles(entity: string | Client): Promise<Role[]> {\n        const id = typeof entity === 'string' ? entity : entity.id;\n        const entries = await this.repository.manager\n            .getRepository(ClientRoleEntity)\n            .find({\n                where: { client_id: id },\n                relations: { role: true },\n                cache: {\n                    id: buildRedisKeyPath({\n                        prefix: CachePrefix.CLIENT_OWNED_ROLES,\n                        key: id,\n                    }),\n                    milliseconds: 60_000,\n                },\n            });\n\n        return entries.map((entry) => entry.role);\n    }\n\n    async getBoundPermissions(entity: string | Client): Promise<PermissionPolicyBinding[]> {\n        const id = typeof entity === 'string' ? entity : entity.id;\n        return loadBoundPermissions({\n            manager: this.repository.manager,\n            junctionTarget: ClientPermissionEntity,\n            where: { client_id: id },\n            cachePrefix: CachePrefix.CLIENT_OWNED_PERMISSIONS,\n            cacheKey: id,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA+BA,IAAac,0BAAb,MAAaA;CACQC;CAEAC;CAEjB,YAAYC,KAAqC;EAC7C,KAAKF,aAAaE,IAAIF;EACtB,KAAKC,kBAAkB,IAAIH,uBAAuBI,IAAID,eAAe;CACzE;CAEA,MAAME,SAASC,OAA6E;EACxF,MAAMC,KAAK,KAAKL,WAAWM,mBAAmB,QAAA;EAC9CD,GAAGE,QAAQ,WAAA;EAEX,MAAM,EAAEC,eAAerB,WAAWkB,IAAID,OAAO;GACzCK,cAAc;GACdC,QAAQ;IACJC,SAAS;KACL;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;;IAEJC,SAAS,CAAC,QAAA;GACd;GACAC,SAAS,EAAED,SAAS;IAAC;IAAM;IAAQ;IAAY;KAAc;GAC7DJ,YAAY,EAAEM,UAAU,GAAG;GAC3BC,WAAW;IACPH,SAAS,CAAC,OAAA;IACVI,SAASC,WAAmBC,KAAaC,MAAAA;KACrCA,EAAEC,WAAW,GAAGF,IAAI,IAAI;IAC5B;GACJ;GACAG,MAAM,EAAET,SAAS;IAAC;IAAM;IAAc;KAAc;EACxD,CAAA;EAEArB,sBAAsBc,IAAI,UAAU,CAAC,iBAAiB,kBAAA,CAAmB;EAEzE,MAAM,CAACiB,UAAUC,SAAS,MAAMlB,GAAGmB,gBAAe;EAElD,OAAO;GACHC,MAAMH;GACNI,MAAM;IACFH;IACA,GAAGf;GACP;EACJ;CACJ;CAEAmB,YAAYC,IAAoC;EAC5C,OAAO,KAAKC,UAAU,EAAED,GAAG,CAAA;CAC/B;CAEA,MAAME,cAAcC,MAAcC,UAA2C;EACzE,MAAM3B,KAAK,KAAKL,WAAWM,mBAAmB,QAAA;EAC9CD,GAAG4B,MAAM,uBAAuB,EAAEF,KAAK,CAAA;EAEvC,IAAIC,UAAU;GACV,MAAME,UAAU,MAAM,KAAKjC,gBAAgBkC,UAAUH,QAAAA;GACrD,IAAI,CAACE,SACD,OAAO;GAEX7B,GAAG+B,SAAS,8BAA8B,EAAEF,QAAQ,CAAA;EACxD;EAEA,OAAO7B,GAAGgC,OAAM;CACpB;CAEA,MAAMC,QAAQV,IAAYxB,OAA6B4B,UAA2C;EAC9F,MAAM3B,KAAK,KAAKL,WAAWM,mBAAmB,QAAA;EAE9C,IAAIpB,OAAO0C,EAAAA,GACPvB,GAAG4B,MAAM,mBAAmB,EAAEL,GAAG,CAAA;OAC9B;GACHvB,GAAG4B,MAAM,uBAAuB,EAAEF,MAAMH,GAAG,CAAA;GAE3C,IAAII,UAAU;IACV,MAAME,UAAU,MAAM,KAAKjC,gBAAgBkC,UAAUH,QAAAA;IACrD,IAAI,CAACE,SACD,OAAO;IAEX7B,GAAG+B,SAAS,8BAA8B,EAAEF,QAAQ,CAAA;GACxD;EACJ;EAEA/C,WAAWkB,IAAID,SAAS,CAAC,GAAG;GACxBK,cAAc;GACdC,QAAQ;IACJC,SAAS;KACL;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;KACA;;IAEJC,SAAS,CAAC,QAAA;GACd;GACAG,WAAW,EAAEH,SAAS,CAAC,OAAA,EAAS;EACpC,CAAA;EAEA,OAAOP,GAAGgC,OAAM;CACpB;CAEA,MAAME,kBAAkBC,UAAkBC,OAAwC;EAC9E,OAAOvD,OAAOsD,QAAAA,IACV,KAAKb,YAAYa,QAAAA,IACjB,KAAKV,cAAcU,UAAUC,KAAAA;CACrC;CAEA,MAAMC,WAAWT,OAA+C;EAC5D,OAAO,KAAKjC,WAAW2C,OAAOnD,yBAAyByC,KAAAA,CAAAA;CAC3D;CAEA,MAAMJ,UAAUI,OAAoD;EAChE,OAAO,KAAKjC,WAAW6B,UAAUrC,yBAAyByC,KAAAA,CAAAA;CAC9D;CAEA,MAAMW,kBAAkBX,OAAoD;EACxE,MAAM5B,KAAK,KAAKL,WAAWM,mBAAmB,QAAA;EAE9CuC,OAAOC,QAAQb,KAAAA,CAAAA,CAAOc,SAAS,CAAC7B,KAAK8B,WAAM;GACvC3C,GAAG+B,SAAS,UAAUlB,IAAI,MAAMA,OAAO,GAAGA,MAAM8B,MAAM,CAAA;EAC1D,CAAA;EAEA3C,GAAG4C,UAAU,eAAA;EAEb,OAAO5C,GAAGgC,OAAM;CACpB;CAEAa,OAAOzB,MAA+B;EAClC,OAAO,KAAKzB,WAAWkD,OAAOzB,IAAAA;CAClC;CAEA0B,MAAMC,QAAgB3B,MAA+B;EACjD,OAAO,KAAKzB,WAAWmD,MAAMC,QAAQ3B,IAAAA;CACzC;CAEA,MAAM4B,KAAKD,QAAiC;EACxC,OAAO,KAAKpD,WAAWqD,KAAKD,MAAAA;CAChC;CAEA,MAAME,OAAOF,QAA+B;EACxC,MAAM,KAAKpD,WAAWsD,OAAOF,MAAAA;CACjC;CAEA,MAAMG,oBAAoB9B,MAAsC;EAC5D,MAAMpC,0BAA0BoC,MAAM;GAClC+B,YAAY,KAAKxD,WAAWyD,QAAQC;GACpCC,cAAchE;EAClB,CAAA;CACJ;CAEA,MAAMiE,gBAAgBnC,MAAuBoC,UAAkC;EAQ3E,IAAI,CAACC,MAPkB1E,eAAe;GAClCoE,YAAY,KAAKxD,WAAWyD,QAAQC;GACpCC,cAAchE;GACdyD,QAAQ3B;GACRsC,gBAAgBF;EACpB,CAAA,GAGI,MAAM,IAAIvE,sBAAAA;CAElB;CAEA,MAAM0E,cAAcZ,QAA0C;EAC1D,MAAMxB,KAAK,OAAOwB,WAAW,WAAWA,SAASA,OAAOxB;EAexD,QAAOkB,MAde,KAAK9C,WAAWyD,QACjCQ,cAAcpE,gBAAAA,CAAAA,CACdqE,KAAK;GACFjC,OAAO,EAAEkC,WAAWvC,GAAG;GACvBb,WAAW,EAAEqD,MAAM,KAAK;GACxBC,OAAO;IACHzC,IAAI3C,kBAAkB;KAClBqF,QAAQ5E,YAAY6E;KACpBrD,KAAKU;IACT,CAAA;IACA4C,cAAc;GAClB;EACJ,CAAA,EAAA,CAEWC,KAAKC,UAAUA,MAAMN,IAAI;CAC5C;CAEA,MAAMO,oBAAoBvB,QAA6D;EACnF,MAAMxB,KAAK,OAAOwB,WAAW,WAAWA,SAASA,OAAOxB;EACxD,OAAOnC,qBAAqB;GACxBgE,SAAS,KAAKzD,WAAWyD;GACzBmB,gBAAgBhF;GAChBqC,OAAO,EAAEkC,WAAWvC,GAAG;GACvBiD,aAAanF,YAAYoF;GACzBC,UAAUnD;EACd,CAAA;CACJ;AACJ"}

package/dist/app/modules/database/repositories/helpers.d.ts

@@ -1,2 +1,13 @@
+import type { ObjectLiteral, SelectQueryBuilder } from 'typeorm';
+/**
+ * Force-load the columns a realm-gated `getMany` per-row check depends on.
+ * rapiq honors a client `fields` projection over the adapter `default`, so a
+ * projection omitting `realm_id` would otherwise leave the per-row
+ * `resourceRealmMatch` with no realm to match — neutralizing the realm_scope
+ * reach factor and leaking cross-realm rows to an own/ownOrNull-scoped reader.
+ * `addSelect` appends to the projected SELECT and is a no-op when the column
+ * is already selected. Call it AFTER `applyQuery`.
+ */
+export declare function applyRealmScopeSelect<T extends ObjectLiteral>(qb: SelectQueryBuilder<T>, alias: string, extraColumns?: string[]): void;
 export declare function translateWhereConditions(where: Record<string, any>): Record<string, any>;
 //# sourceMappingURL=helpers.d.ts.map

package/dist/app/modules/database/repositories/helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/database/repositories/helpers.ts"],"names":[],"mappings":"AASA,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAYxF"}
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/database/repositories/helpers.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAGjE;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,SAAS,aAAa,EACzD,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC,EACzB,KAAK,EAAE,MAAM,EACb,YAAY,GAAE,MAAM,EAAO,GAC5B,IAAI,CAKN;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAYxF"}

package/dist/app/modules/database/repositories/helpers.mjs

@@ -3,6 +3,17 @@ import "node:url";
 import.meta.url;
 import { In, IsNull } from "typeorm";
 //#region src/app/modules/database/repositories/helpers.ts
+/**
+* Force-load the columns a realm-gated `getMany` per-row check depends on.
+* rapiq honors a client `fields` projection over the adapter `default`, so a
+* projection omitting `realm_id` would otherwise leave the per-row
+* `resourceRealmMatch` with no realm to match — neutralizing the realm_scope
+* reach factor and leaking cross-realm rows to an own/ownOrNull-scoped reader.
+* `addSelect` appends to the projected SELECT and is a no-op when the column
+* is already selected. Call it AFTER `applyQuery`.
+*/ function applyRealmScopeSelect(qb, alias, extraColumns = []) {
+	qb.addSelect([`${alias}.realm_id`, ...extraColumns.map((column) => `${alias}.${column}`)]);
+}
 function translateWhereConditions(where) {
 	const result = {};
 	Object.entries(where).forEach(([key, value]) => {
@@ -13,6 +24,6 @@ function translateWhereConditions(where) {
 	return result;
 }
 //#endregion
-export { translateWhereConditions };
+export { applyRealmScopeSelect, translateWhereConditions };
 
 //# sourceMappingURL=helpers.mjs.map

package/dist/app/modules/database/repositories/helpers.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.mjs","names":["In","IsNull","translateWhereConditions","where","result","Object","entries","forEach","key","value","Array","isArray"],"sources":["../../../../../src/app/modules/database/repositories/helpers.ts"],"sourcesContent":["/*\n * Copyright (c) 2025-2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { In, IsNull } from 'typeorm';\n\nexport function translateWhereConditions(where: Record<string, any>): Record<string, any> {\n    const result: Record<string, any> = {};\n    Object.entries(where).forEach(([key, value]) => {\n        if (value === null) {\n            result[key] = IsNull();\n        } else if (Array.isArray(value)) {\n            result[key] = In(value);\n        } else {\n            result[key] = value;\n        }\n    });\n    return result;\n}\n"],"mappings":";;;;;AASA,SAAgBE,yBAAyBC,OAA0B;CAC/D,MAAMC,SAA8B,CAAC;CACrCC,OAAOC,QAAQH,KAAAA,CAAAA,CAAOI,SAAS,CAACC,KAAKC,WAAM;EACvC,IAAIA,UAAU,MACVL,OAAOI,OAAOP,OAAAA;OACX,IAAIS,MAAMC,QAAQF,KAAAA,GACrBL,OAAOI,OAAOR,GAAGS,KAAAA;OAEjBL,OAAOI,OAAOC;CAEtB,CAAA;CACA,OAAOL;AACX"}
+{"version":3,"file":"helpers.mjs","names":["In","IsNull","applyRealmScopeSelect","qb","alias","extraColumns","addSelect","map","column","translateWhereConditions","where","result","Object","entries","forEach","key","value","Array","isArray"],"sources":["../../../../../src/app/modules/database/repositories/helpers.ts"],"sourcesContent":["/*\n * Copyright (c) 2025-2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { ObjectLiteral, SelectQueryBuilder } from 'typeorm';\nimport { In, IsNull } from 'typeorm';\n\n/**\n * Force-load the columns a realm-gated `getMany` per-row check depends on.\n * rapiq honors a client `fields` projection over the adapter `default`, so a\n * projection omitting `realm_id` would otherwise leave the per-row\n * `resourceRealmMatch` with no realm to match — neutralizing the realm_scope\n * reach factor and leaking cross-realm rows to an own/ownOrNull-scoped reader.\n * `addSelect` appends to the projected SELECT and is a no-op when the column\n * is already selected. Call it AFTER `applyQuery`.\n */\nexport function applyRealmScopeSelect<T extends ObjectLiteral>(\n    qb: SelectQueryBuilder<T>,\n    alias: string,\n    extraColumns: string[] = [],\n): void {\n    qb.addSelect([\n        `${alias}.realm_id`,\n        ...extraColumns.map((column) => `${alias}.${column}`),\n    ]);\n}\n\nexport function translateWhereConditions(where: Record<string, any>): Record<string, any> {\n    const result: Record<string, any> = {};\n    Object.entries(where).forEach(([key, value]) => {\n        if (value === null) {\n            result[key] = IsNull();\n        } else if (Array.isArray(value)) {\n            result[key] = In(value);\n        } else {\n            result[key] = value;\n        }\n    });\n    return result;\n}\n"],"mappings":";;;;;;;;;;;;;GAmBA,SAAgBE,sBACZC,IACAC,OACAC,eAAyB,CAAA,GAAE;CAE3BF,GAAGG,UAAU,CACT,GAAGF,MAAM,YAAA,GACNC,aAAaE,KAAKC,WAAW,GAAGJ,MAAM,GAAGI,QAAQ,CAAA,CACvD;AACL;AAEA,SAAgBC,yBAAyBC,OAA0B;CAC/D,MAAMC,SAA8B,CAAC;CACrCC,OAAOC,QAAQH,KAAAA,CAAAA,CAAOI,SAAS,CAACC,KAAKC,WAAM;EACvC,IAAIA,UAAU,MACVL,OAAOI,OAAOd,OAAAA;OACX,IAAIgB,MAAMC,QAAQF,KAAAA,GACrBL,OAAOI,OAAOf,GAAGgB,KAAAA;OAEjBL,OAAOI,OAAOC;CAEtB,CAAA;CACA,OAAOL;AACX"}

package/dist/app/modules/database/repositories/identity-provider/repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/identity-provider/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAE1F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,2BAA2B,EAAoB,MAAM,8BAA8B,CAAC;AAElG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,mDAAmD,CAAC;AAKpG,MAAM,MAAM,wCAAwC,GAAG;IACnD,UAAU,EAAE,0BAA0B,CAAC;IACvC,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;CACtC,CAAC;AAEF,qBAAa,iCAAkC,YAAW,2BAA2B;IACjF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IAExD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;gBAEvC,GAAG,EAAE,wCAAwC;IAKnD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,8BAA8B,CAAC,gBAAgB,CAAC,CAAC;IAyC/F,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAQzD,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAkBhF,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAMrF,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAInE,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAI7E,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB;IAIzD,KAAK,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB;IAI5E,IAAI,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAIzD,UAAU,CAAC,MAAM,EAAE,gBAAgB,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAKjG,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxD,MAAM,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAOnE,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAC,EAAE,QAAQ,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAa5F,cAAc,CAAC,QAAQ,EAAE,wBAAwB,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;CAe3G"}
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/identity-provider/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAE1F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,2BAA2B,EAAoB,MAAM,8BAA8B,CAAC;AAElG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,mDAAmD,CAAC;AAKpG,MAAM,MAAM,wCAAwC,GAAG;IACnD,UAAU,EAAE,0BAA0B,CAAC;IACvC,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;CACtC,CAAC;AAEF,qBAAa,iCAAkC,YAAW,2BAA2B;IACjF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IAExD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;gBAEvC,GAAG,EAAE,wCAAwC;IAKnD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,8BAA8B,CAAC,gBAAgB,CAAC,CAAC;IAyC/F,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAQzD,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAmBhF,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAMrF,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAInE,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAI7E,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB;IAIzD,KAAK,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB;IAI5E,IAAI,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAIzD,UAAU,CAAC,MAAM,EAAE,gBAAgB,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAKjG,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxD,MAAM,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAOnE,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAC,EAAE,QAAQ,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAa5F,cAAc,CAAC,QAAQ,EAAE,wBAAwB,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;CAgB3G"}

package/dist/app/modules/database/repositories/identity-provider/repository.mjs

@@ -3,9 +3,9 @@ import "node:url";
 import.meta.url;
 import { IdentityProviderEntity } from "../../../../../adapters/database/domains/identity-provider/entity.mjs";
 import "../../../../../adapters/database/domains/index.mjs";
+import { translateWhereConditions } from "../helpers.mjs";
 import { DatabaseConflictError } from "../../../../../adapters/database/errors/conflict.mjs";
 import "../../../../../adapters/database/index.mjs";
-import { translateWhereConditions } from "../helpers.mjs";
 import { RealmRepositoryAdapter } from "../realm/repository.mjs";
 import { isUUID } from "@authup/kit";
 import { applyQuery, isEntityUnique, validateEntityJoinColumns } from "typeorm-extension";
@@ -71,8 +71,9 @@ var IdentityProviderRepositoryAdapter = class {
 		const qb = this.repository.createQueryBuilder("provider");
 		qb.where("provider.name = :name", { name });
 		if (realmKey) {
-			const realm = await this.realmRepository.resolve(realmKey);
-			if (realm) qb.andWhere("provider.realm_id = :realmId", { realmId: realm.id });
+			const realmId = await this.realmRepository.resolveId(realmKey);
+			if (!realmId) return null;
+			qb.andWhere("provider.realm_id = :realmId", { realmId });
 		}
 		const entity = await qb.getOne();
 		if (entity) await this.repository.extendOneWithEA(entity);
@@ -124,8 +125,9 @@ var IdentityProviderRepositoryAdapter = class {
 		const qb = this.repository.createQueryBuilder("provider");
 		qb.where("provider.protocol = :protocol", { protocol });
 		if (realmKey) {
-			const realm = await this.realmRepository.resolve(realmKey);
-			if (realm) qb.andWhere("provider.realm_id = :realmId", { realmId: realm.id });
+			const realmId = await this.realmRepository.resolveId(realmKey);
+			if (!realmId) return [];
+			qb.andWhere("provider.realm_id = :realmId", { realmId });
 		}
 		const entities = await qb.getMany();
 		await this.repository.extendManyWithEA(entities);

package/dist/app/modules/database/repositories/identity-provider/repository.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"repository.mjs","names":["isUUID","applyQuery","isEntityUnique","validateEntityJoinColumns","DatabaseConflictError","IdentityProviderEntity","translateWhereConditions","RealmRepositoryAdapter","IdentityProviderRepositoryAdapter","repository","realmRepository","ctx","findMany","query","qb","createQueryBuilder","groupBy","pagination","defaultAlias","relations","allowed","onJoin","_property","key","q","addGroupBy","fields","default","filters","sort","maxLimit","entities","total","getManyAndCount","data","meta","findOneById","id","entity","findOneBy","extendOneWithEA","findOneByName","name","realmKey","where","realm","resolve","andWhere","realmId","getOne","findOneByIdOrName","idOrName","findManyBy","findBy","create","merge","save","saveWithEA","attributes","saveOneWithEA","remove","validateJoinColumns","dataSource","manager","connection","entityTarget","checkUniqueness","existing","isUnique","entityExisting","findByProtocol","protocol","getMany","extendManyWithEA"],"sources":["../../../../../../src/app/modules/database/repositories/identity-provider/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProvider, IdentityProviderProtocol, Realm } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport { applyQuery, isEntityUnique, validateEntityJoinColumns } from 'typeorm-extension';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IIdentityProviderRepository, IRealmRepository } from '../../../../../core/index.ts';\nimport { DatabaseConflictError } from '../../../../../adapters/database/index.ts';\nimport type { IdentityProviderRepository } from '../../../../../adapters/database/domains/index.ts';\nimport { IdentityProviderEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { translateWhereConditions } from '../helpers.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type IdentityProviderRepositoryAdapterContext = {\n    repository: IdentityProviderRepository,\n    realmRepository: Repository<Realm>,\n};\n\nexport class IdentityProviderRepositoryAdapter implements IIdentityProviderRepository {\n    private readonly repository: IdentityProviderRepository;\n\n    private readonly realmRepository: IRealmRepository;\n\n    constructor(ctx: IdentityProviderRepositoryAdapterContext) {\n        this.repository = ctx.repository;\n        this.realmRepository = new RealmRepositoryAdapter(ctx.realmRepository);\n    }\n\n    async findMany(query: Record<string, any>): Promise<EntityRepositoryFindManyResult<IdentityProvider>> {\n        const qb = this.repository.createQueryBuilder('provider');\n        qb.groupBy('provider.id');\n\n        const { pagination } = applyQuery(qb, query, {\n            defaultAlias: 'provider',\n            relations: {\n                allowed: ['realm'],\n                onJoin: (_property: string, key: string, q: any) => {\n                    q.addGroupBy(`${key}.id`);\n                },\n            },\n            fields: {\n                default: [\n                    'id',\n                    'name',\n                    'display_name',\n                    'protocol',\n                    'preset',\n                    'enabled',\n                    'realm_id',\n                    'created_at',\n                    'updated_at',\n                ],\n            },\n            filters: { allowed: ['name', 'protocol', 'enabled', 'realm_id', 'realm.name'] },\n            sort: { allowed: ['id', 'created_at', 'updated_at'] },\n            pagination: { maxLimit: 50 },\n        });\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    async findOneById(id: string): Promise<IdentityProvider | null> {\n        const entity = await this.findOneBy({ id });\n        if (entity) {\n            await this.repository.extendOneWithEA(entity);\n        }\n        return entity;\n    }\n\n    async findOneByName(name: string, realmKey?: string): Promise<IdentityProvider | null> {\n        const qb = this.repository.createQueryBuilder('provider');\n        qb.where('provider.name = :name', { name });\n\n        if (realmKey) {\n            const realm = await this.realmRepository.resolve(realmKey);\n            if (realm) {\n                qb.andWhere('provider.realm_id = :realmId', { realmId: realm.id });\n            }\n        }\n\n        const entity = await qb.getOne();\n        if (entity) {\n            await this.repository.extendOneWithEA(entity);\n        }\n        return entity;\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<IdentityProvider | null> {\n        return isUUID(idOrName) ?\n            this.findOneById(idOrName) :\n            this.findOneByName(idOrName, realm);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<IdentityProvider[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<IdentityProvider | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<IdentityProvider>): IdentityProvider {\n        return this.repository.create(data);\n    }\n\n    merge(entity: IdentityProvider, data: Partial<IdentityProvider>): IdentityProvider {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: IdentityProvider): Promise<IdentityProvider> {\n        return this.repository.save(entity);\n    }\n\n    async saveWithEA(entity: IdentityProvider, attributes?: Record<string, any>): Promise<IdentityProvider> {\n        await this.repository.saveOneWithEA(entity, attributes);\n        return entity;\n    }\n\n    async extendOneWithEA(entity: IdentityProvider): Promise<void> {\n        await this.repository.extendOneWithEA(entity);\n    }\n\n    async remove(entity: IdentityProvider): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<IdentityProvider>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: IdentityProviderEntity,\n        });\n    }\n\n    async checkUniqueness(data: Partial<IdentityProvider>, existing?: IdentityProvider): Promise<void> {\n        const isUnique = await isEntityUnique({\n            dataSource: this.repository.manager.connection,\n            entityTarget: IdentityProviderEntity,\n            entity: data,\n            entityExisting: existing,\n        });\n\n        if (!isUnique) {\n            throw new DatabaseConflictError();\n        }\n    }\n\n    async findByProtocol(protocol: IdentityProviderProtocol, realmKey?: string): Promise<IdentityProvider[]> {\n        const qb = this.repository.createQueryBuilder('provider');\n        qb.where('provider.protocol = :protocol', { protocol });\n\n        if (realmKey) {\n            const realm = await this.realmRepository.resolve(realmKey);\n            if (realm) {\n                qb.andWhere('provider.realm_id = :realmId', { realmId: realm.id });\n            }\n        }\n\n        const entities = await qb.getMany();\n        await this.repository.extendManyWithEA(entities);\n        return entities;\n    }\n}\n"],"mappings":";;;;;;;;;;;;AAwBA,IAAaQ,oCAAb,MAAaA;CACQC;CAEAC;CAEjB,YAAYC,KAA+C;EACvD,KAAKF,aAAaE,IAAIF;EACtB,KAAKC,kBAAkB,IAAIH,uBAAuBI,IAAID,eAAe;CACzE;CAEA,MAAME,SAASC,OAAuF;EAClG,MAAMC,KAAK,KAAKL,WAAWM,mBAAmB,UAAA;EAC9CD,GAAGE,QAAQ,aAAA;EAEX,MAAM,EAAEC,eAAehB,WAAWa,IAAID,OAAO;GACzCK,cAAc;GACdC,WAAW;IACPC,SAAS,CAAC,OAAA;IACVC,SAASC,WAAmBC,KAAaC,MAAAA;KACrCA,EAAEC,WAAW,GAAGF,IAAI,IAAI;IAC5B;GACJ;GACAG,QAAQ,EACJC,SAAS;IACL;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;KAER;GACAC,SAAS,EAAER,SAAS;IAAC;IAAQ;IAAY;IAAW;IAAY;KAAc;GAC9ES,MAAM,EAAET,SAAS;IAAC;IAAM;IAAc;KAAc;GACpDH,YAAY,EAAEa,UAAU,GAAG;EAC/B,CAAA;EAEA,MAAM,CAACC,UAAUC,SAAS,MAAMlB,GAAGmB,gBAAe;EAElD,OAAO;GACHC,MAAMH;GACNI,MAAM;IACFH;IACA,GAAGf;GACP;EACJ;CACJ;CAEA,MAAMmB,YAAYC,IAA8C;EAC5D,MAAMC,SAAS,MAAM,KAAKC,UAAU,EAAEF,GAAG,CAAA;EACzC,IAAIC,QACA,MAAM,KAAK7B,WAAW+B,gBAAgBF,MAAAA;EAE1C,OAAOA;CACX;CAEA,MAAMG,cAAcC,MAAcC,UAAqD;EACnF,MAAM7B,KAAK,KAAKL,WAAWM,mBAAmB,UAAA;EAC9CD,GAAG8B,MAAM,yBAAyB,EAAEF,KAAK,CAAA;EAEzC,IAAIC,UAAU;GACV,MAAME,QAAQ,MAAM,KAAKnC,gBAAgBoC,QAAQH,QAAAA;GACjD,IAAIE,OACA/B,GAAGiC,SAAS,gCAAgC,EAAEC,SAASH,MAAMR,GAAG,CAAA;EAExE;EAEA,MAAMC,SAAS,MAAMxB,GAAGmC,OAAM;EAC9B,IAAIX,QACA,MAAM,KAAK7B,WAAW+B,gBAAgBF,MAAAA;EAE1C,OAAOA;CACX;CAEA,MAAMY,kBAAkBC,UAAkBN,OAAkD;EACxF,OAAO7C,OAAOmD,QAAAA,IACV,KAAKf,YAAYe,QAAAA,IACjB,KAAKV,cAAcU,UAAUN,KAAAA;CACrC;CAEA,MAAMO,WAAWR,OAAyD;EACtE,OAAO,KAAKnC,WAAW4C,OAAO/C,yBAAyBsC,KAAAA,CAAAA;CAC3D;CAEA,MAAML,UAAUK,OAA8D;EAC1E,OAAO,KAAKnC,WAAW8B,UAAUjC,yBAAyBsC,KAAAA,CAAAA;CAC9D;CAEAU,OAAOpB,MAAmD;EACtD,OAAO,KAAKzB,WAAW6C,OAAOpB,IAAAA;CAClC;CAEAqB,MAAMjB,QAA0BJ,MAAmD;EAC/E,OAAO,KAAKzB,WAAW8C,MAAMjB,QAAQJ,IAAAA;CACzC;CAEA,MAAMsB,KAAKlB,QAAqD;EAC5D,OAAO,KAAK7B,WAAW+C,KAAKlB,MAAAA;CAChC;CAEA,MAAMmB,WAAWnB,QAA0BoB,YAA6D;EACpG,MAAM,KAAKjD,WAAWkD,cAAcrB,QAAQoB,UAAAA;EAC5C,OAAOpB;CACX;CAEA,MAAME,gBAAgBF,QAAyC;EAC3D,MAAM,KAAK7B,WAAW+B,gBAAgBF,MAAAA;CAC1C;CAEA,MAAMsB,OAAOtB,QAAyC;EAClD,MAAM,KAAK7B,WAAWmD,OAAOtB,MAAAA;CACjC;CAEA,MAAMuB,oBAAoB3B,MAAgD;EACtE,MAAM/B,0BAA0B+B,MAAM;GAClC4B,YAAY,KAAKrD,WAAWsD,QAAQC;GACpCC,cAAc5D;EAClB,CAAA;CACJ;CAEA,MAAM6D,gBAAgBhC,MAAiCiC,UAA4C;EAQ/F,IAAI,CAACC,MAPkBlE,eAAe;GAClC4D,YAAY,KAAKrD,WAAWsD,QAAQC;GACpCC,cAAc5D;GACdiC,QAAQJ;GACRmC,gBAAgBF;EACpB,CAAA,GAGI,MAAM,IAAI/D,sBAAAA;CAElB;CAEA,MAAMkE,eAAeC,UAAoC5B,UAAgD;EACrG,MAAM7B,KAAK,KAAKL,WAAWM,mBAAmB,UAAA;EAC9CD,GAAG8B,MAAM,iCAAiC,EAAE2B,SAAS,CAAA;EAErD,IAAI5B,UAAU;GACV,MAAME,QAAQ,MAAM,KAAKnC,gBAAgBoC,QAAQH,QAAAA;GACjD,IAAIE,OACA/B,GAAGiC,SAAS,gCAAgC,EAAEC,SAASH,MAAMR,GAAG,CAAA;EAExE;EAEA,MAAMN,WAAW,MAAMjB,GAAG0D,QAAO;EACjC,MAAM,KAAK/D,WAAWgE,iBAAiB1C,QAAAA;EACvC,OAAOA;CACX;AACJ"}
+{"version":3,"file":"repository.mjs","names":["isUUID","applyQuery","isEntityUnique","validateEntityJoinColumns","DatabaseConflictError","IdentityProviderEntity","translateWhereConditions","RealmRepositoryAdapter","IdentityProviderRepositoryAdapter","repository","realmRepository","ctx","findMany","query","qb","createQueryBuilder","groupBy","pagination","defaultAlias","relations","allowed","onJoin","_property","key","q","addGroupBy","fields","default","filters","sort","maxLimit","entities","total","getManyAndCount","data","meta","findOneById","id","entity","findOneBy","extendOneWithEA","findOneByName","name","realmKey","where","realmId","resolveId","andWhere","getOne","findOneByIdOrName","idOrName","realm","findManyBy","findBy","create","merge","save","saveWithEA","attributes","saveOneWithEA","remove","validateJoinColumns","dataSource","manager","connection","entityTarget","checkUniqueness","existing","isUnique","entityExisting","findByProtocol","protocol","getMany","extendManyWithEA"],"sources":["../../../../../../src/app/modules/database/repositories/identity-provider/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProvider, IdentityProviderProtocol, Realm } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport { applyQuery, isEntityUnique, validateEntityJoinColumns } from 'typeorm-extension';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IIdentityProviderRepository, IRealmRepository } from '../../../../../core/index.ts';\nimport { DatabaseConflictError } from '../../../../../adapters/database/index.ts';\nimport type { IdentityProviderRepository } from '../../../../../adapters/database/domains/index.ts';\nimport { IdentityProviderEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { translateWhereConditions } from '../helpers.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type IdentityProviderRepositoryAdapterContext = {\n    repository: IdentityProviderRepository,\n    realmRepository: Repository<Realm>,\n};\n\nexport class IdentityProviderRepositoryAdapter implements IIdentityProviderRepository {\n    private readonly repository: IdentityProviderRepository;\n\n    private readonly realmRepository: IRealmRepository;\n\n    constructor(ctx: IdentityProviderRepositoryAdapterContext) {\n        this.repository = ctx.repository;\n        this.realmRepository = new RealmRepositoryAdapter(ctx.realmRepository);\n    }\n\n    async findMany(query: Record<string, any>): Promise<EntityRepositoryFindManyResult<IdentityProvider>> {\n        const qb = this.repository.createQueryBuilder('provider');\n        qb.groupBy('provider.id');\n\n        const { pagination } = applyQuery(qb, query, {\n            defaultAlias: 'provider',\n            relations: {\n                allowed: ['realm'],\n                onJoin: (_property: string, key: string, q: any) => {\n                    q.addGroupBy(`${key}.id`);\n                },\n            },\n            fields: {\n                default: [\n                    'id',\n                    'name',\n                    'display_name',\n                    'protocol',\n                    'preset',\n                    'enabled',\n                    'realm_id',\n                    'created_at',\n                    'updated_at',\n                ],\n            },\n            filters: { allowed: ['name', 'protocol', 'enabled', 'realm_id', 'realm.name'] },\n            sort: { allowed: ['id', 'created_at', 'updated_at'] },\n            pagination: { maxLimit: 50 },\n        });\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    async findOneById(id: string): Promise<IdentityProvider | null> {\n        const entity = await this.findOneBy({ id });\n        if (entity) {\n            await this.repository.extendOneWithEA(entity);\n        }\n        return entity;\n    }\n\n    async findOneByName(name: string, realmKey?: string): Promise<IdentityProvider | null> {\n        const qb = this.repository.createQueryBuilder('provider');\n        qb.where('provider.name = :name', { name });\n\n        if (realmKey) {\n            const realmId = await this.realmRepository.resolveId(realmKey);\n            if (!realmId) {\n                return null;\n            }\n            qb.andWhere('provider.realm_id = :realmId', { realmId });\n        }\n\n        const entity = await qb.getOne();\n        if (entity) {\n            await this.repository.extendOneWithEA(entity);\n        }\n        return entity;\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<IdentityProvider | null> {\n        return isUUID(idOrName) ?\n            this.findOneById(idOrName) :\n            this.findOneByName(idOrName, realm);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<IdentityProvider[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<IdentityProvider | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<IdentityProvider>): IdentityProvider {\n        return this.repository.create(data);\n    }\n\n    merge(entity: IdentityProvider, data: Partial<IdentityProvider>): IdentityProvider {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: IdentityProvider): Promise<IdentityProvider> {\n        return this.repository.save(entity);\n    }\n\n    async saveWithEA(entity: IdentityProvider, attributes?: Record<string, any>): Promise<IdentityProvider> {\n        await this.repository.saveOneWithEA(entity, attributes);\n        return entity;\n    }\n\n    async extendOneWithEA(entity: IdentityProvider): Promise<void> {\n        await this.repository.extendOneWithEA(entity);\n    }\n\n    async remove(entity: IdentityProvider): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<IdentityProvider>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: IdentityProviderEntity,\n        });\n    }\n\n    async checkUniqueness(data: Partial<IdentityProvider>, existing?: IdentityProvider): Promise<void> {\n        const isUnique = await isEntityUnique({\n            dataSource: this.repository.manager.connection,\n            entityTarget: IdentityProviderEntity,\n            entity: data,\n            entityExisting: existing,\n        });\n\n        if (!isUnique) {\n            throw new DatabaseConflictError();\n        }\n    }\n\n    async findByProtocol(protocol: IdentityProviderProtocol, realmKey?: string): Promise<IdentityProvider[]> {\n        const qb = this.repository.createQueryBuilder('provider');\n        qb.where('provider.protocol = :protocol', { protocol });\n\n        if (realmKey) {\n            const realmId = await this.realmRepository.resolveId(realmKey);\n            if (!realmId) {\n                return [];\n            }\n            qb.andWhere('provider.realm_id = :realmId', { realmId });\n        }\n\n        const entities = await qb.getMany();\n        await this.repository.extendManyWithEA(entities);\n        return entities;\n    }\n}\n"],"mappings":";;;;;;;;;;;;AAwBA,IAAaQ,oCAAb,MAAaA;CACQC;CAEAC;CAEjB,YAAYC,KAA+C;EACvD,KAAKF,aAAaE,IAAIF;EACtB,KAAKC,kBAAkB,IAAIH,uBAAuBI,IAAID,eAAe;CACzE;CAEA,MAAME,SAASC,OAAuF;EAClG,MAAMC,KAAK,KAAKL,WAAWM,mBAAmB,UAAA;EAC9CD,GAAGE,QAAQ,aAAA;EAEX,MAAM,EAAEC,eAAehB,WAAWa,IAAID,OAAO;GACzCK,cAAc;GACdC,WAAW;IACPC,SAAS,CAAC,OAAA;IACVC,SAASC,WAAmBC,KAAaC,MAAAA;KACrCA,EAAEC,WAAW,GAAGF,IAAI,IAAI;IAC5B;GACJ;GACAG,QAAQ,EACJC,SAAS;IACL;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;KAER;GACAC,SAAS,EAAER,SAAS;IAAC;IAAQ;IAAY;IAAW;IAAY;KAAc;GAC9ES,MAAM,EAAET,SAAS;IAAC;IAAM;IAAc;KAAc;GACpDH,YAAY,EAAEa,UAAU,GAAG;EAC/B,CAAA;EAEA,MAAM,CAACC,UAAUC,SAAS,MAAMlB,GAAGmB,gBAAe;EAElD,OAAO;GACHC,MAAMH;GACNI,MAAM;IACFH;IACA,GAAGf;GACP;EACJ;CACJ;CAEA,MAAMmB,YAAYC,IAA8C;EAC5D,MAAMC,SAAS,MAAM,KAAKC,UAAU,EAAEF,GAAG,CAAA;EACzC,IAAIC,QACA,MAAM,KAAK7B,WAAW+B,gBAAgBF,MAAAA;EAE1C,OAAOA;CACX;CAEA,MAAMG,cAAcC,MAAcC,UAAqD;EACnF,MAAM7B,KAAK,KAAKL,WAAWM,mBAAmB,UAAA;EAC9CD,GAAG8B,MAAM,yBAAyB,EAAEF,KAAK,CAAA;EAEzC,IAAIC,UAAU;GACV,MAAME,UAAU,MAAM,KAAKnC,gBAAgBoC,UAAUH,QAAAA;GACrD,IAAI,CAACE,SACD,OAAO;GAEX/B,GAAGiC,SAAS,gCAAgC,EAAEF,QAAQ,CAAA;EAC1D;EAEA,MAAMP,SAAS,MAAMxB,GAAGkC,OAAM;EAC9B,IAAIV,QACA,MAAM,KAAK7B,WAAW+B,gBAAgBF,MAAAA;EAE1C,OAAOA;CACX;CAEA,MAAMW,kBAAkBC,UAAkBC,OAAkD;EACxF,OAAOnD,OAAOkD,QAAAA,IACV,KAAKd,YAAYc,QAAAA,IACjB,KAAKT,cAAcS,UAAUC,KAAAA;CACrC;CAEA,MAAMC,WAAWR,OAAyD;EACtE,OAAO,KAAKnC,WAAW4C,OAAO/C,yBAAyBsC,KAAAA,CAAAA;CAC3D;CAEA,MAAML,UAAUK,OAA8D;EAC1E,OAAO,KAAKnC,WAAW8B,UAAUjC,yBAAyBsC,KAAAA,CAAAA;CAC9D;CAEAU,OAAOpB,MAAmD;EACtD,OAAO,KAAKzB,WAAW6C,OAAOpB,IAAAA;CAClC;CAEAqB,MAAMjB,QAA0BJ,MAAmD;EAC/E,OAAO,KAAKzB,WAAW8C,MAAMjB,QAAQJ,IAAAA;CACzC;CAEA,MAAMsB,KAAKlB,QAAqD;EAC5D,OAAO,KAAK7B,WAAW+C,KAAKlB,MAAAA;CAChC;CAEA,MAAMmB,WAAWnB,QAA0BoB,YAA6D;EACpG,MAAM,KAAKjD,WAAWkD,cAAcrB,QAAQoB,UAAAA;EAC5C,OAAOpB;CACX;CAEA,MAAME,gBAAgBF,QAAyC;EAC3D,MAAM,KAAK7B,WAAW+B,gBAAgBF,MAAAA;CAC1C;CAEA,MAAMsB,OAAOtB,QAAyC;EAClD,MAAM,KAAK7B,WAAWmD,OAAOtB,MAAAA;CACjC;CAEA,MAAMuB,oBAAoB3B,MAAgD;EACtE,MAAM/B,0BAA0B+B,MAAM;GAClC4B,YAAY,KAAKrD,WAAWsD,QAAQC;GACpCC,cAAc5D;EAClB,CAAA;CACJ;CAEA,MAAM6D,gBAAgBhC,MAAiCiC,UAA4C;EAQ/F,IAAI,CAACC,MAPkBlE,eAAe;GAClC4D,YAAY,KAAKrD,WAAWsD,QAAQC;GACpCC,cAAc5D;GACdiC,QAAQJ;GACRmC,gBAAgBF;EACpB,CAAA,GAGI,MAAM,IAAI/D,sBAAAA;CAElB;CAEA,MAAMkE,eAAeC,UAAoC5B,UAAgD;EACrG,MAAM7B,KAAK,KAAKL,WAAWM,mBAAmB,UAAA;EAC9CD,GAAG8B,MAAM,iCAAiC,EAAE2B,SAAS,CAAA;EAErD,IAAI5B,UAAU;GACV,MAAME,UAAU,MAAM,KAAKnC,gBAAgBoC,UAAUH,QAAAA;GACrD,IAAI,CAACE,SACD,OAAO,CAAA;GAEX/B,GAAGiC,SAAS,gCAAgC,EAAEF,QAAQ,CAAA;EAC1D;EAEA,MAAMd,WAAW,MAAMjB,GAAG0D,QAAO;EACjC,MAAM,KAAK/D,WAAWgE,iBAAiB1C,QAAAA;EACvC,OAAOA;CACX;AACJ"}

package/dist/app/modules/database/repositories/permission/repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/permission/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,qBAAqB,EAAoB,MAAM,8BAA8B,CAAC;AAM5F,MAAM,MAAM,kCAAkC,GAAG;IAC7C,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IACnC,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;CACtC,CAAC;AAEF,qBAAa,2BAA4B,YAAW,qBAAqB;IACrE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;IAEpD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;gBAEvC,GAAG,EAAE,kCAAkC;IAK7C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,8BAA8B,CAAC,UAAU,CAAC,CAAC;IAuB/F,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAI7C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAc1E,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAQ/E,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAI7D,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAIvE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU;IAI7C,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU;IAI1D,IAAI,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAI7C,MAAM,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAO7D,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAYzF"}
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/permission/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,qBAAqB,EAAoB,MAAM,8BAA8B,CAAC;AAM5F,MAAM,MAAM,kCAAkC,GAAG;IAC7C,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IACnC,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;CACtC,CAAC;AAEF,qBAAa,2BAA4B,YAAW,qBAAqB;IACrE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;IAEpD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;gBAEvC,GAAG,EAAE,kCAAkC;IAK7C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,8BAA8B,CAAC,UAAU,CAAC,CAAC;IAuB/F,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAI7C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAe1E,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAQ/E,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAI7D,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAIvE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU;IAI7C,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU;IAI1D,IAAI,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAI7C,MAAM,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAO7D,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAYzF"}

package/dist/app/modules/database/repositories/permission/repository.mjs

@@ -3,9 +3,9 @@ import "node:url";
 import.meta.url;
 import { PermissionEntity } from "../../../../../adapters/database/domains/permission/entity.mjs";
 import "../../../../../adapters/database/domains/index.mjs";
+import { translateWhereConditions } from "../helpers.mjs";
 import { DatabaseConflictError } from "../../../../../adapters/database/errors/conflict.mjs";
 import "../../../../../adapters/database/index.mjs";
-import { translateWhereConditions } from "../helpers.mjs";
 import { RealmRepositoryAdapter } from "../realm/repository.mjs";
 import { isUUID } from "@authup/kit";
 import { applyQuery, isEntityUnique, validateEntityJoinColumns } from "typeorm-extension";
@@ -53,8 +53,9 @@ var PermissionRepositoryAdapter = class {
 		const qb = this.repository.createQueryBuilder("permission");
 		qb.where("permission.name = :name", { name });
 		if (realmKey) {
-			const realm = await this.realmRepository.resolve(realmKey);
-			if (realm) qb.andWhere("permission.realm_id = :realmId", { realmId: realm.id });
+			const realmId = await this.realmRepository.resolveId(realmKey);
+			if (!realmId) return null;
+			qb.andWhere("permission.realm_id = :realmId", { realmId });
 		}
 		return qb.getOne();
 	}

package/dist/app/modules/database/repositories/permission/repository.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"repository.mjs","names":["isUUID","applyQuery","isEntityUnique","validateEntityJoinColumns","DatabaseConflictError","translateWhereConditions","PermissionEntity","RealmRepositoryAdapter","PermissionRepositoryAdapter","repository","realmRepository","ctx","findMany","query","qb","createQueryBuilder","groupBy","pagination","defaultAlias","filters","allowed","maxLimit","relations","sort","entities","total","getManyAndCount","data","meta","findOneById","id","findOneBy","findOneByName","name","realmKey","where","realm","resolve","andWhere","realmId","getOne","findOneByIdOrName","idOrName","result","findManyBy","findBy","create","merge","entity","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget","checkUniqueness","existing","isUnique","entityExisting"],"sources":["../../../../../../src/app/modules/database/repositories/permission/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Permission, Realm } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport { applyQuery, isEntityUnique, validateEntityJoinColumns } from 'typeorm-extension';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IPermissionRepository, IRealmRepository } from '../../../../../core/index.ts';\nimport { DatabaseConflictError } from '../../../../../adapters/database/index.ts';\nimport { translateWhereConditions } from '../helpers.ts';\nimport { PermissionEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type PermissionRepositoryAdapterContext = {\n    repository: Repository<Permission>,\n    realmRepository: Repository<Realm>,\n};\n\nexport class PermissionRepositoryAdapter implements IPermissionRepository {\n    private readonly repository: Repository<Permission>;\n\n    private readonly realmRepository: IRealmRepository;\n\n    constructor(ctx: PermissionRepositoryAdapterContext) {\n        this.repository = ctx.repository;\n        this.realmRepository = new RealmRepositoryAdapter(ctx.realmRepository);\n    }\n\n    async findMany(query: Record<string, any>): Promise<EntityRepositoryFindManyResult<Permission>> {\n        const qb = this.repository.createQueryBuilder('permission');\n        qb.groupBy('permission.id');\n\n        const { pagination } = applyQuery(qb, query, {\n            defaultAlias: 'permission',\n            filters: { allowed: ['id', 'display_name', 'name', 'built_in'] },\n            pagination: { maxLimit: 50 },\n            relations: { allowed: [] },\n            sort: { allowed: ['id', 'name', 'created_at', 'updated_at'] },\n        });\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    findOneById(id: string): Promise<Permission | null> {\n        return this.findOneBy({ id });\n    }\n\n    async findOneByName(name: string, realmKey?: string): Promise<Permission | null> {\n        const qb = this.repository.createQueryBuilder('permission');\n        qb.where('permission.name = :name', { name });\n\n        if (realmKey) {\n            const realm = await this.realmRepository.resolve(realmKey);\n            if (realm) {\n                qb.andWhere('permission.realm_id = :realmId', { realmId: realm.id });\n            }\n        }\n\n        return qb.getOne();\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Permission | null> {\n        const result = isUUID(idOrName) ?\n            await this.findOneById(idOrName) :\n            await this.findOneByName(idOrName, realm);\n\n        return result;\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<Permission[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Permission | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<Permission>): Permission {\n        return this.repository.create(data);\n    }\n\n    merge(entity: Permission, data: Partial<Permission>): Permission {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: Permission): Promise<Permission> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: Permission): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<Permission>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: PermissionEntity,\n        });\n    }\n\n    async checkUniqueness(data: Partial<Permission>, existing?: Permission): Promise<void> {\n        const isUnique = await isEntityUnique({\n            dataSource: this.repository.manager.connection,\n            entityTarget: PermissionEntity,\n            entity: data,\n            entityExisting: existing,\n        });\n\n        if (!isUnique) {\n            throw new DatabaseConflictError();\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;;AAuBA,IAAaQ,8BAAb,MAAaA;CACQC;CAEAC;CAEjB,YAAYC,KAAyC;EACjD,KAAKF,aAAaE,IAAIF;EACtB,KAAKC,kBAAkB,IAAIH,uBAAuBI,IAAID,eAAe;CACzE;CAEA,MAAME,SAASC,OAAiF;EAC5F,MAAMC,KAAK,KAAKL,WAAWM,mBAAmB,YAAA;EAC9CD,GAAGE,QAAQ,eAAA;EAEX,MAAM,EAAEC,eAAehB,WAAWa,IAAID,OAAO;GACzCK,cAAc;GACdC,SAAS,EAAEC,SAAS;IAAC;IAAM;IAAgB;IAAQ;KAAY;GAC/DH,YAAY,EAAEI,UAAU,GAAG;GAC3BC,WAAW,EAAEF,SAAS,CAAA,EAAG;GACzBG,MAAM,EAAEH,SAAS;IAAC;IAAM;IAAQ;IAAc;KAAc;EAChE,CAAA;EAEA,MAAM,CAACI,UAAUC,SAAS,MAAMX,GAAGY,gBAAe;EAElD,OAAO;GACHC,MAAMH;GACNI,MAAM;IACFH;IACA,GAAGR;GACP;EACJ;CACJ;CAEAY,YAAYC,IAAwC;EAChD,OAAO,KAAKC,UAAU,EAAED,GAAG,CAAA;CAC/B;CAEA,MAAME,cAAcC,MAAcC,UAA+C;EAC7E,MAAMpB,KAAK,KAAKL,WAAWM,mBAAmB,YAAA;EAC9CD,GAAGqB,MAAM,2BAA2B,EAAEF,KAAK,CAAA;EAE3C,IAAIC,UAAU;GACV,MAAME,QAAQ,MAAM,KAAK1B,gBAAgB2B,QAAQH,QAAAA;GACjD,IAAIE,OACAtB,GAAGwB,SAAS,kCAAkC,EAAEC,SAASH,MAAMN,GAAG,CAAA;EAE1E;EAEA,OAAOhB,GAAG0B,OAAM;CACpB;CAEA,MAAMC,kBAAkBC,UAAkBN,OAA4C;EAKlF,OAJepC,OAAO0C,QAAAA,IAClB,MAAM,KAAKb,YAAYa,QAAAA,IACvB,MAAM,KAAKV,cAAcU,UAAUN,KAAAA;CAG3C;CAEA,MAAMQ,WAAWT,OAAmD;EAChE,OAAO,KAAK1B,WAAWoC,OAAOxC,yBAAyB8B,KAAAA,CAAAA;CAC3D;CAEA,MAAMJ,UAAUI,OAAwD;EACpE,OAAO,KAAK1B,WAAWsB,UAAU1B,yBAAyB8B,KAAAA,CAAAA;CAC9D;CAEAW,OAAOnB,MAAuC;EAC1C,OAAO,KAAKlB,WAAWqC,OAAOnB,IAAAA;CAClC;CAEAoB,MAAMC,QAAoBrB,MAAuC;EAC7D,OAAO,KAAKlB,WAAWsC,MAAMC,QAAQrB,IAAAA;CACzC;CAEA,MAAMsB,KAAKD,QAAyC;EAChD,OAAO,KAAKvC,WAAWwC,KAAKD,MAAAA;CAChC;CAEA,MAAME,OAAOF,QAAmC;EAC5C,MAAM,KAAKvC,WAAWyC,OAAOF,MAAAA;CACjC;CAEA,MAAMG,oBAAoBxB,MAA0C;EAChE,MAAMxB,0BAA0BwB,MAAM;GAClCyB,YAAY,KAAK3C,WAAW4C,QAAQC;GACpCC,cAAcjD;EAClB,CAAA;CACJ;CAEA,MAAMkD,gBAAgB7B,MAA2B8B,UAAsC;EAQnF,IAAI,CAACC,MAPkBxD,eAAe;GAClCkD,YAAY,KAAK3C,WAAW4C,QAAQC;GACpCC,cAAcjD;GACd0C,QAAQrB;GACRgC,gBAAgBF;EACpB,CAAA,GAGI,MAAM,IAAIrD,sBAAAA;CAElB;AACJ"}
+{"version":3,"file":"repository.mjs","names":["isUUID","applyQuery","isEntityUnique","validateEntityJoinColumns","DatabaseConflictError","translateWhereConditions","PermissionEntity","RealmRepositoryAdapter","PermissionRepositoryAdapter","repository","realmRepository","ctx","findMany","query","qb","createQueryBuilder","groupBy","pagination","defaultAlias","filters","allowed","maxLimit","relations","sort","entities","total","getManyAndCount","data","meta","findOneById","id","findOneBy","findOneByName","name","realmKey","where","realmId","resolveId","andWhere","getOne","findOneByIdOrName","idOrName","realm","result","findManyBy","findBy","create","merge","entity","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget","checkUniqueness","existing","isUnique","entityExisting"],"sources":["../../../../../../src/app/modules/database/repositories/permission/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Permission, Realm } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport { applyQuery, isEntityUnique, validateEntityJoinColumns } from 'typeorm-extension';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IPermissionRepository, IRealmRepository } from '../../../../../core/index.ts';\nimport { DatabaseConflictError } from '../../../../../adapters/database/index.ts';\nimport { translateWhereConditions } from '../helpers.ts';\nimport { PermissionEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type PermissionRepositoryAdapterContext = {\n    repository: Repository<Permission>,\n    realmRepository: Repository<Realm>,\n};\n\nexport class PermissionRepositoryAdapter implements IPermissionRepository {\n    private readonly repository: Repository<Permission>;\n\n    private readonly realmRepository: IRealmRepository;\n\n    constructor(ctx: PermissionRepositoryAdapterContext) {\n        this.repository = ctx.repository;\n        this.realmRepository = new RealmRepositoryAdapter(ctx.realmRepository);\n    }\n\n    async findMany(query: Record<string, any>): Promise<EntityRepositoryFindManyResult<Permission>> {\n        const qb = this.repository.createQueryBuilder('permission');\n        qb.groupBy('permission.id');\n\n        const { pagination } = applyQuery(qb, query, {\n            defaultAlias: 'permission',\n            filters: { allowed: ['id', 'display_name', 'name', 'built_in'] },\n            pagination: { maxLimit: 50 },\n            relations: { allowed: [] },\n            sort: { allowed: ['id', 'name', 'created_at', 'updated_at'] },\n        });\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    findOneById(id: string): Promise<Permission | null> {\n        return this.findOneBy({ id });\n    }\n\n    async findOneByName(name: string, realmKey?: string): Promise<Permission | null> {\n        const qb = this.repository.createQueryBuilder('permission');\n        qb.where('permission.name = :name', { name });\n\n        if (realmKey) {\n            const realmId = await this.realmRepository.resolveId(realmKey);\n            if (!realmId) {\n                return null;\n            }\n            qb.andWhere('permission.realm_id = :realmId', { realmId });\n        }\n\n        return qb.getOne();\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Permission | null> {\n        const result = isUUID(idOrName) ?\n            await this.findOneById(idOrName) :\n            await this.findOneByName(idOrName, realm);\n\n        return result;\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<Permission[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Permission | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<Permission>): Permission {\n        return this.repository.create(data);\n    }\n\n    merge(entity: Permission, data: Partial<Permission>): Permission {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: Permission): Promise<Permission> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: Permission): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<Permission>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: PermissionEntity,\n        });\n    }\n\n    async checkUniqueness(data: Partial<Permission>, existing?: Permission): Promise<void> {\n        const isUnique = await isEntityUnique({\n            dataSource: this.repository.manager.connection,\n            entityTarget: PermissionEntity,\n            entity: data,\n            entityExisting: existing,\n        });\n\n        if (!isUnique) {\n            throw new DatabaseConflictError();\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;;AAuBA,IAAaQ,8BAAb,MAAaA;CACQC;CAEAC;CAEjB,YAAYC,KAAyC;EACjD,KAAKF,aAAaE,IAAIF;EACtB,KAAKC,kBAAkB,IAAIH,uBAAuBI,IAAID,eAAe;CACzE;CAEA,MAAME,SAASC,OAAiF;EAC5F,MAAMC,KAAK,KAAKL,WAAWM,mBAAmB,YAAA;EAC9CD,GAAGE,QAAQ,eAAA;EAEX,MAAM,EAAEC,eAAehB,WAAWa,IAAID,OAAO;GACzCK,cAAc;GACdC,SAAS,EAAEC,SAAS;IAAC;IAAM;IAAgB;IAAQ;KAAY;GAC/DH,YAAY,EAAEI,UAAU,GAAG;GAC3BC,WAAW,EAAEF,SAAS,CAAA,EAAG;GACzBG,MAAM,EAAEH,SAAS;IAAC;IAAM;IAAQ;IAAc;KAAc;EAChE,CAAA;EAEA,MAAM,CAACI,UAAUC,SAAS,MAAMX,GAAGY,gBAAe;EAElD,OAAO;GACHC,MAAMH;GACNI,MAAM;IACFH;IACA,GAAGR;GACP;EACJ;CACJ;CAEAY,YAAYC,IAAwC;EAChD,OAAO,KAAKC,UAAU,EAAED,GAAG,CAAA;CAC/B;CAEA,MAAME,cAAcC,MAAcC,UAA+C;EAC7E,MAAMpB,KAAK,KAAKL,WAAWM,mBAAmB,YAAA;EAC9CD,GAAGqB,MAAM,2BAA2B,EAAEF,KAAK,CAAA;EAE3C,IAAIC,UAAU;GACV,MAAME,UAAU,MAAM,KAAK1B,gBAAgB2B,UAAUH,QAAAA;GACrD,IAAI,CAACE,SACD,OAAO;GAEXtB,GAAGwB,SAAS,kCAAkC,EAAEF,QAAQ,CAAA;EAC5D;EAEA,OAAOtB,GAAGyB,OAAM;CACpB;CAEA,MAAMC,kBAAkBC,UAAkBC,OAA4C;EAKlF,OAJe1C,OAAOyC,QAAAA,IAClB,MAAM,KAAKZ,YAAYY,QAAAA,IACvB,MAAM,KAAKT,cAAcS,UAAUC,KAAAA;CAG3C;CAEA,MAAME,WAAWT,OAAmD;EAChE,OAAO,KAAK1B,WAAWoC,OAAOxC,yBAAyB8B,KAAAA,CAAAA;CAC3D;CAEA,MAAMJ,UAAUI,OAAwD;EACpE,OAAO,KAAK1B,WAAWsB,UAAU1B,yBAAyB8B,KAAAA,CAAAA;CAC9D;CAEAW,OAAOnB,MAAuC;EAC1C,OAAO,KAAKlB,WAAWqC,OAAOnB,IAAAA;CAClC;CAEAoB,MAAMC,QAAoBrB,MAAuC;EAC7D,OAAO,KAAKlB,WAAWsC,MAAMC,QAAQrB,IAAAA;CACzC;CAEA,MAAMsB,KAAKD,QAAyC;EAChD,OAAO,KAAKvC,WAAWwC,KAAKD,MAAAA;CAChC;CAEA,MAAME,OAAOF,QAAmC;EAC5C,MAAM,KAAKvC,WAAWyC,OAAOF,MAAAA;CACjC;CAEA,MAAMG,oBAAoBxB,MAA0C;EAChE,MAAMxB,0BAA0BwB,MAAM;GAClCyB,YAAY,KAAK3C,WAAW4C,QAAQC;GACpCC,cAAcjD;EAClB,CAAA;CACJ;CAEA,MAAMkD,gBAAgB7B,MAA2B8B,UAAsC;EAQnF,IAAI,CAACC,MAPkBxD,eAAe;GAClCkD,YAAY,KAAK3C,WAAW4C,QAAQC;GACpCC,cAAcjD;GACd0C,QAAQrB;GACRgC,gBAAgBF;EACpB,CAAA,GAGI,MAAM,IAAIrD,sBAAAA;CAElB;AACJ"}

package/dist/app/modules/database/repositories/permission-provider/module.d.ts

@@ -1,4 +1,4 @@
-import type { IPermissionProvider, PermissionGetOptions, PermissionPolicyBinding } from '@authup/access';
+import type { IPermissionProvider, PermissionGetOptions, PermissionPolicyBindingAggregated } from '@authup/access';
 import type { DataSource, Repository } from 'typeorm';
 import { PermissionEntity, PermissionPolicyEntity, PolicyRepository } from '../../../../../adapters/database/domains/index.ts';
 export declare class PermissionDatabaseProvider implements IPermissionProvider {
@@ -7,6 +7,6 @@ export declare class PermissionDatabaseProvider implements IPermissionProvider {
     protected permissionPolicyRepository: Repository<PermissionPolicyEntity>;
     protected policyRepository: PolicyRepository;
     constructor(dataSource: DataSource);
-    findOne(options: PermissionGetOptions): Promise<PermissionPolicyBinding | null>;
+    findOne(options: PermissionGetOptions): Promise<PermissionPolicyBindingAggregated | null>;
 }
 //# sourceMappingURL=module.d.ts.map

package/dist/app/modules/database/repositories/permission-provider/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/permission-provider/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAER,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EAC1B,MAAM,gBAAgB,CAAC;AAKxB,OAAO,KAAK,EAAE,UAAU,EAAoB,UAAU,EAAE,MAAM,SAAS,CAAC;AAExE,OAAO,EAEH,gBAAgB,EAChB,sBAAsB,EACtB,gBAAgB,EACnB,MAAM,mDAAmD,CAAC;AAE3D,qBAAa,0BAA2B,YAAW,mBAAmB;IAClE,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC;IAEjC,SAAS,CAAC,UAAU,EAAG,UAAU,CAAC,gBAAgB,CAAC,CAAC;IAEpD,SAAS,CAAC,0BAA0B,EAAG,UAAU,CAAC,sBAAsB,CAAC,CAAC;IAE1E,SAAS,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;gBAEjC,UAAU,EAAE,UAAU;IAO5B,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAI,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC;CAkDzF"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/permission-provider/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAER,mBAAmB,EACnB,oBAAoB,EACpB,iCAAiC,EACpC,MAAM,gBAAgB,CAAC;AAMxB,OAAO,KAAK,EAAE,UAAU,EAAoB,UAAU,EAAE,MAAM,SAAS,CAAC;AAExE,OAAO,EAEH,gBAAgB,EAChB,sBAAsB,EACtB,gBAAgB,EACnB,MAAM,mDAAmD,CAAC;AAE3D,qBAAa,0BAA2B,YAAW,mBAAmB;IAClE,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC;IAEjC,SAAS,CAAC,UAAU,EAAG,UAAU,CAAC,gBAAgB,CAAC,CAAC;IAEpD,SAAS,CAAC,0BAA0B,EAAG,UAAU,CAAC,sBAAsB,CAAC,CAAC;IAE1E,SAAS,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;gBAEjC,UAAU,EAAE,UAAU;IAO5B,OAAO,CAAC,OAAO,EAAE,oBAAoB,GAAI,OAAO,CAAC,iCAAiC,GAAG,IAAI,CAAC;CAsDnG"}

package/dist/app/modules/database/repositories/permission-provider/module.mjs

@@ -8,7 +8,7 @@ import { PermissionPolicyEntity } from "../../../../../adapters/database/domains
 import "../../../../../adapters/database/domains/index.mjs";
 import { IsNull } from "typeorm";
 import { buildCacheKey } from "@authup/server-kit";
-import { buildPermissionKey } from "@authup/access";
+import { aggregatePermissionPolicyBindings, buildPermissionKey } from "@authup/access";
 //#region src/app/modules/database/repositories/permission-provider/module.ts
 var PermissionDatabaseProvider = class {
 	dataSource;
@@ -49,10 +49,11 @@ var PermissionDatabaseProvider = class {
 				const tree = await this.policyRepository.findDescendantsTree(junction.policy);
 				if (tree) policies.push(tree);
 			}
-			return {
+			const [aggregated] = aggregatePermissionPolicyBindings([{
 				permission: entity,
 				policies: policies.length > 0 ? policies : void 0
-			};
+			}]);
+			return aggregated ?? null;
 		}
 		return null;
 	}

package/dist/app/modules/database/repositories/permission-provider/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["buildPermissionKey","buildCacheKey","IsNull","CachePrefix","PermissionEntity","PermissionPolicyEntity","PolicyRepository","PermissionDatabaseProvider","dataSource","repository","permissionPolicyRepository","policyRepository","getRepository","findOne","options","where","name","clientId","client_id","realmId","realm_id","entity","cache","id","prefix","PERMISSION","key","milliseconds","junctions","find","permission_id","relations","policies","junction","policy","tree","findDescendantsTree","push","permission","length","undefined"],"sources":["../../../../../../src/app/modules/database/repositories/permission-provider/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    BasePolicy,\n    IPermissionProvider,\n    PermissionGetOptions,\n    PermissionPolicyBinding,\n} from '@authup/access';\nimport {\n    buildPermissionKey,\n} from '@authup/access';\nimport { buildCacheKey } from '@authup/server-kit';\nimport type { DataSource, FindOptionsWhere, Repository } from 'typeorm';\nimport { IsNull } from 'typeorm';\nimport {\n    CachePrefix,\n    PermissionEntity,\n    PermissionPolicyEntity,\n    PolicyRepository,\n} from '../../../../../adapters/database/domains/index.ts';\n\nexport class PermissionDatabaseProvider implements IPermissionProvider {\n    protected dataSource: DataSource;\n\n    protected repository : Repository<PermissionEntity>;\n\n    protected permissionPolicyRepository : Repository<PermissionPolicyEntity>;\n\n    protected policyRepository: PolicyRepository;\n\n    constructor(dataSource: DataSource) {\n        this.dataSource = dataSource;\n        this.repository = this.dataSource.getRepository(PermissionEntity);\n        this.permissionPolicyRepository = this.dataSource.getRepository(PermissionPolicyEntity);\n        this.policyRepository = new PolicyRepository(this.dataSource);\n    }\n\n    async findOne(options: PermissionGetOptions) : Promise<PermissionPolicyBinding | null> {\n        const where : FindOptionsWhere<PermissionEntity> = { name: options.name };\n\n        if (typeof options.clientId !== 'undefined') {\n            where.client_id = options.clientId === null ? IsNull() : options.clientId;\n        }\n\n        if (typeof options.realmId !== 'undefined') {\n            where.realm_id = options.realmId === null ? IsNull() : options.realmId;\n        }\n\n        const entity = await this.repository.findOne({\n            where,\n            cache: {\n                id: buildCacheKey({\n                    prefix: CachePrefix.PERMISSION,\n                    key: buildPermissionKey({\n                        name: options.name,\n                        client_id: options.clientId,\n                        realm_id: options.realmId,\n                    }),\n                }),\n                milliseconds: 60_000,\n            },\n        });\n\n        if (entity) {\n            const junctions = await this.permissionPolicyRepository.find({\n                where: { permission_id: entity.id },\n                relations: ['policy'],\n            });\n\n            const policies : BasePolicy[] = [];\n            for (const junction of junctions) {\n                if (junction.policy) {\n                    const tree = await this.policyRepository.findDescendantsTree(junction.policy);\n                    if (tree) {\n                        policies.push(tree);\n                    }\n                }\n            }\n\n            return {\n                permission: entity,\n                policies: policies.length > 0 ? policies : undefined,\n            };\n        }\n\n        return null;\n    }\n}\n"],"mappings":";;;;;;;;;;;;AA0BA,IAAaO,6BAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEV,YAAYH,YAAwB;EAChC,KAAKA,aAAaA;EAClB,KAAKC,aAAa,KAAKD,WAAWI,cAAcR,gBAAAA;EAChD,KAAKM,6BAA6B,KAAKF,WAAWI,cAAcP,sBAAAA;EAChE,KAAKM,mBAAmB,IAAIL,iBAAiB,KAAKE,UAAU;CAChE;CAEA,MAAMK,QAAQC,SAAyE;EACnF,MAAMC,QAA6C,EAAEC,MAAMF,QAAQE,KAAK;EAExE,IAAI,OAAOF,QAAQG,aAAa,aAC5BF,MAAMG,YAAYJ,QAAQG,aAAa,OAAOf,OAAAA,IAAWY,QAAQG;EAGrE,IAAI,OAAOH,QAAQK,YAAY,aAC3BJ,MAAMK,WAAWN,QAAQK,YAAY,OAAOjB,OAAAA,IAAWY,QAAQK;EAGnE,MAAME,SAAS,MAAM,KAAKZ,WAAWI,QAAQ;GACzCE;GACAO,OAAO;IACHC,IAAItB,cAAc;KACduB,QAAQrB,YAAYsB;KACpBC,KAAK1B,mBAAmB;MACpBgB,MAAMF,QAAQE;MACdE,WAAWJ,QAAQG;MACnBG,UAAUN,QAAQK;KACtB,CAAA;IACJ,CAAA;IACAQ,cAAc;GAClB;EACJ,CAAA;EAEA,IAAIN,QAAQ;GACR,MAAMO,YAAY,MAAM,KAAKlB,2BAA2BmB,KAAK;IACzDd,OAAO,EAAEe,eAAeT,OAAOE,GAAG;IAClCQ,WAAW,CAAC,QAAA;GAChB,CAAA;GAEA,MAAMC,WAA0B,CAAA;GAChC,KAAK,MAAMC,YAAYL,WACnB,IAAIK,SAASC,QAAQ;IACjB,MAAMC,OAAO,MAAM,KAAKxB,iBAAiByB,oBAAoBH,SAASC,MAAM;IAC5E,IAAIC,MACAH,SAASK,KAAKF,IAAAA;GAEtB;GAGJ,OAAO;IACHG,YAAYjB;IACZW,UAAUA,SAASO,SAAS,IAAIP,WAAWQ,KAAAA;GAC/C;EACJ;EAEA,OAAO;CACX;AACJ"}
+{"version":3,"file":"module.mjs","names":["aggregatePermissionPolicyBindings","buildPermissionKey","buildCacheKey","IsNull","CachePrefix","PermissionEntity","PermissionPolicyEntity","PolicyRepository","PermissionDatabaseProvider","dataSource","repository","permissionPolicyRepository","policyRepository","getRepository","findOne","options","where","name","clientId","client_id","realmId","realm_id","entity","cache","id","prefix","PERMISSION","key","milliseconds","junctions","find","permission_id","relations","policies","junction","policy","tree","findDescendantsTree","push","aggregated","permission","length","undefined"],"sources":["../../../../../../src/app/modules/database/repositories/permission-provider/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2024.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    BasePolicy,\n    IPermissionProvider,\n    PermissionGetOptions,\n    PermissionPolicyBindingAggregated,\n} from '@authup/access';\nimport {\n    aggregatePermissionPolicyBindings,\n    buildPermissionKey,\n} from '@authup/access';\nimport { buildCacheKey } from '@authup/server-kit';\nimport type { DataSource, FindOptionsWhere, Repository } from 'typeorm';\nimport { IsNull } from 'typeorm';\nimport {\n    CachePrefix,\n    PermissionEntity,\n    PermissionPolicyEntity,\n    PolicyRepository,\n} from '../../../../../adapters/database/domains/index.ts';\n\nexport class PermissionDatabaseProvider implements IPermissionProvider {\n    protected dataSource: DataSource;\n\n    protected repository : Repository<PermissionEntity>;\n\n    protected permissionPolicyRepository : Repository<PermissionPolicyEntity>;\n\n    protected policyRepository: PolicyRepository;\n\n    constructor(dataSource: DataSource) {\n        this.dataSource = dataSource;\n        this.repository = this.dataSource.getRepository(PermissionEntity);\n        this.permissionPolicyRepository = this.dataSource.getRepository(PermissionPolicyEntity);\n        this.policyRepository = new PolicyRepository(this.dataSource);\n    }\n\n    async findOne(options: PermissionGetOptions) : Promise<PermissionPolicyBindingAggregated | null> {\n        const where : FindOptionsWhere<PermissionEntity> = { name: options.name };\n\n        if (typeof options.clientId !== 'undefined') {\n            where.client_id = options.clientId === null ? IsNull() : options.clientId;\n        }\n\n        if (typeof options.realmId !== 'undefined') {\n            where.realm_id = options.realmId === null ? IsNull() : options.realmId;\n        }\n\n        const entity = await this.repository.findOne({\n            where,\n            cache: {\n                id: buildCacheKey({\n                    prefix: CachePrefix.PERMISSION,\n                    key: buildPermissionKey({\n                        name: options.name,\n                        client_id: options.clientId,\n                        realm_id: options.realmId,\n                    }),\n                }),\n                milliseconds: 60_000,\n            },\n        });\n\n        if (entity) {\n            const junctions = await this.permissionPolicyRepository.find({\n                where: { permission_id: entity.id },\n                relations: ['policy'],\n            });\n\n            const policies : BasePolicy[] = [];\n            for (const junction of junctions) {\n                if (junction.policy) {\n                    const tree = await this.policyRepository.findDescendantsTree(junction.policy);\n                    if (tree) {\n                        policies.push(tree);\n                    }\n                }\n            }\n\n            const [aggregated] = aggregatePermissionPolicyBindings([\n                {\n                    permission: entity,\n                    policies: policies.length > 0 ? policies : undefined,\n                },\n            ]);\n\n            return aggregated ?? null;\n        }\n\n        return null;\n    }\n}\n"],"mappings":";;;;;;;;;;;;AA2BA,IAAaQ,6BAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEV,YAAYH,YAAwB;EAChC,KAAKA,aAAaA;EAClB,KAAKC,aAAa,KAAKD,WAAWI,cAAcR,gBAAAA;EAChD,KAAKM,6BAA6B,KAAKF,WAAWI,cAAcP,sBAAAA;EAChE,KAAKM,mBAAmB,IAAIL,iBAAiB,KAAKE,UAAU;CAChE;CAEA,MAAMK,QAAQC,SAAmF;EAC7F,MAAMC,QAA6C,EAAEC,MAAMF,QAAQE,KAAK;EAExE,IAAI,OAAOF,QAAQG,aAAa,aAC5BF,MAAMG,YAAYJ,QAAQG,aAAa,OAAOf,OAAAA,IAAWY,QAAQG;EAGrE,IAAI,OAAOH,QAAQK,YAAY,aAC3BJ,MAAMK,WAAWN,QAAQK,YAAY,OAAOjB,OAAAA,IAAWY,QAAQK;EAGnE,MAAME,SAAS,MAAM,KAAKZ,WAAWI,QAAQ;GACzCE;GACAO,OAAO;IACHC,IAAItB,cAAc;KACduB,QAAQrB,YAAYsB;KACpBC,KAAK1B,mBAAmB;MACpBgB,MAAMF,QAAQE;MACdE,WAAWJ,QAAQG;MACnBG,UAAUN,QAAQK;KACtB,CAAA;IACJ,CAAA;IACAQ,cAAc;GAClB;EACJ,CAAA;EAEA,IAAIN,QAAQ;GACR,MAAMO,YAAY,MAAM,KAAKlB,2BAA2BmB,KAAK;IACzDd,OAAO,EAAEe,eAAeT,OAAOE,GAAG;IAClCQ,WAAW,CAAC,QAAA;GAChB,CAAA;GAEA,MAAMC,WAA0B,CAAA;GAChC,KAAK,MAAMC,YAAYL,WACnB,IAAIK,SAASC,QAAQ;IACjB,MAAMC,OAAO,MAAM,KAAKxB,iBAAiByB,oBAAoBH,SAASC,MAAM;IAC5E,IAAIC,MACAH,SAASK,KAAKF,IAAAA;GAEtB;GAGJ,MAAM,CAACG,cAAcvC,kCAAkC,CACnD;IACIwC,YAAYlB;IACZW,UAAUA,SAASQ,SAAS,IAAIR,WAAWS,KAAAA;GAC/C,CAAA,CACH;GAED,OAAOH,cAAc;EACzB;EAEA,OAAO;CACX;AACJ"}

package/dist/app/modules/database/repositories/policy/repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/policy/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,iBAAiB,EAAoB,MAAM,8BAA8B,CAAC;AAExF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mDAAmD,CAAC;AAK1F,MAAM,MAAM,8BAA8B,GAAG;IACzC,UAAU,EAAE,gBAAgB,CAAC;IAC7B,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;CACtC,CAAC;AAEF,qBAAa,uBAAwB,YAAW,iBAAiB;IAC7D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAE9C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;gBAEvC,GAAG,EAAE,8BAA8B;IAKzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAgDrF,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAQ/C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAkBtE,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAM3E,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAIzD,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAInE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM;IAIrC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM;IAI9C,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIrC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAOzD,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAaxE,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAOvE,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAItD"}
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/policy/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,iBAAiB,EAAoB,MAAM,8BAA8B,CAAC;AAExF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mDAAmD,CAAC;AAK1F,MAAM,MAAM,8BAA8B,GAAG;IACzC,UAAU,EAAE,gBAAgB,CAAC;IAC7B,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;CACtC,CAAC;AAEF,qBAAa,uBAAwB,YAAW,iBAAiB;IAC7D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAmB;IAE9C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;gBAEvC,GAAG,EAAE,8BAA8B;IAKzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAgDrF,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAQ/C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAmBtE,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAM3E,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAIzD,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAInE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM;IAIrC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM;IAI9C,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIrC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAOzD,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAaxE,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAOvE,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAItD"}

package/dist/app/modules/database/repositories/policy/repository.mjs

@@ -3,9 +3,9 @@ import "node:url";
 import.meta.url;
 import { PolicyEntity } from "../../../../../adapters/database/domains/policy/entity.mjs";
 import "../../../../../adapters/database/domains/index.mjs";
+import { translateWhereConditions } from "../helpers.mjs";
 import { DatabaseConflictError } from "../../../../../adapters/database/errors/conflict.mjs";
 import "../../../../../adapters/database/index.mjs";
-import { translateWhereConditions } from "../helpers.mjs";
 import { RealmRepositoryAdapter } from "../realm/repository.mjs";
 import { isUUID } from "@authup/kit";
 import { applyQuery, isEntityUnique, validateEntityJoinColumns } from "typeorm-extension";
@@ -75,8 +75,9 @@ var PolicyRepositoryAdapter = class {
 		const qb = this.repository.createQueryBuilder("policy");
 		qb.where("policy.name = :name", { name });
 		if (realmKey) {
-			const realm = await this.realmRepository.resolve(realmKey);
-			if (realm) qb.andWhere("policy.realm_id = :realmId", { realmId: realm.id });
+			const realmId = await this.realmRepository.resolveId(realmKey);
+			if (!realmId) return null;
+			qb.andWhere("policy.realm_id = :realmId", { realmId });
 		}
 		const entity = await qb.getOne();
 		if (entity) await this.repository.extendOneWithEA(entity);

package/dist/app/modules/database/repositories/policy/repository.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"repository.mjs","names":["isUUID","applyQuery","isEntityUnique","validateEntityJoinColumns","DatabaseConflictError","PolicyEntity","translateWhereConditions","RealmRepositoryAdapter","PolicyRepositoryAdapter","repository","realmRepository","ctx","findMany","query","qb","createQueryBuilder","groupBy","pagination","defaultAlias","relations","allowed","onJoin","_property","key","q","addGroupBy","fields","default","filters","sort","maxLimit","entities","total","getManyAndCount","extendManyWithEA","data","meta","findOneById","id","entity","findOneBy","extendOneWithEA","findOneByName","name","realmKey","where","realm","resolve","andWhere","realmId","getOne","findOneByIdOrName","idOrName","findManyBy","findBy","create","merge","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget","checkUniqueness","existing","isUnique","entityExisting","saveWithEA","saveOneWithEA","updateClosureTable","deleteFromTree","treeRepository","getTreeRepository"],"sources":["../../../../../../src/app/modules/database/repositories/policy/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Policy, Realm } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport { applyQuery, isEntityUnique, validateEntityJoinColumns } from 'typeorm-extension';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IPolicyRepository, IRealmRepository } from '../../../../../core/index.ts';\nimport { DatabaseConflictError } from '../../../../../adapters/database/index.ts';\nimport type { PolicyRepository } from '../../../../../adapters/database/domains/index.ts';\nimport { PolicyEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { translateWhereConditions } from '../helpers.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type PolicyRepositoryAdapterContext = {\n    repository: PolicyRepository,\n    realmRepository: Repository<Realm>,\n};\n\nexport class PolicyRepositoryAdapter implements IPolicyRepository {\n    private readonly repository: PolicyRepository;\n\n    private readonly realmRepository: IRealmRepository;\n\n    constructor(ctx: PolicyRepositoryAdapterContext) {\n        this.repository = ctx.repository;\n        this.realmRepository = new RealmRepositoryAdapter(ctx.realmRepository);\n    }\n\n    async findMany(query: Record<string, any>): Promise<EntityRepositoryFindManyResult<Policy>> {\n        const qb = this.repository.createQueryBuilder('policy');\n        qb.groupBy('policy.id');\n\n        const { pagination } = applyQuery(qb, query, {\n            defaultAlias: 'policy',\n            relations: {\n                // @ts-expect-error onJoin is not in the type definition\n                allowed: ['children', 'realm'],\n                onJoin: (_property: string, key: string, q: any) => {\n                    q.addGroupBy(`${key}.id`);\n                },\n            },\n            fields: {\n                default: [\n                    'id',\n                    'built_in',\n                    'type',\n                    'display_name',\n                    'name',\n                    'description',\n                    'invert',\n                    'parent_id',\n                    'realm_id',\n                    'created_at',\n                    'updated_at',\n                ],\n            },\n            filters: {\n                // @ts-expect-error realm.name filter requires relation join\n                allowed: ['id', 'name', 'type', 'parent_id', 'realm_id', 'realm.name'],\n            },\n            sort: { allowed: ['id', 'created_at', 'updated_at'] },\n            pagination: { maxLimit: 50 },\n        });\n\n        const [entities, total] = await qb.getManyAndCount();\n        await this.repository.extendManyWithEA(entities);\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    async findOneById(id: string): Promise<Policy | null> {\n        const entity = await this.findOneBy({ id });\n        if (entity) {\n            await this.repository.extendOneWithEA(entity);\n        }\n        return entity;\n    }\n\n    async findOneByName(name: string, realmKey?: string): Promise<Policy | null> {\n        const qb = this.repository.createQueryBuilder('policy');\n        qb.where('policy.name = :name', { name });\n\n        if (realmKey) {\n            const realm = await this.realmRepository.resolve(realmKey);\n            if (realm) {\n                qb.andWhere('policy.realm_id = :realmId', { realmId: realm.id });\n            }\n        }\n\n        const entity = await qb.getOne();\n        if (entity) {\n            await this.repository.extendOneWithEA(entity);\n        }\n        return entity;\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Policy | null> {\n        return isUUID(idOrName) ?\n            this.findOneById(idOrName) :\n            this.findOneByName(idOrName, realm);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<Policy[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Policy | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<Policy>): Policy {\n        return this.repository.create(data);\n    }\n\n    merge(entity: Policy, data: Partial<Policy>): Policy {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: Policy): Promise<Policy> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: Policy): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<Policy>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: PolicyEntity,\n        });\n    }\n\n    async checkUniqueness(data: Partial<Policy>, existing?: Policy): Promise<void> {\n        const isUnique = await isEntityUnique({\n            dataSource: this.repository.manager.connection,\n            entityTarget: PolicyEntity,\n            entity: data,\n            entityExisting: existing,\n        });\n\n        if (!isUnique) {\n            throw new DatabaseConflictError();\n        }\n    }\n\n    async saveWithEA(entity: Policy, data?: Record<string, any>): Promise<Policy> {\n        await this.repository.saveOneWithEA(entity, data);\n        await this.repository.updateClosureTable(entity, this.repository.manager);\n\n        return entity;\n    }\n\n    async deleteFromTree(entity: Policy): Promise<void> {\n        const treeRepository = this.repository.manager.connection.getTreeRepository(PolicyEntity);\n        await treeRepository.remove(entity);\n    }\n}\n"],"mappings":";;;;;;;;;;;;AAwBA,IAAaQ,0BAAb,MAAaA;CACQC;CAEAC;CAEjB,YAAYC,KAAqC;EAC7C,KAAKF,aAAaE,IAAIF;EACtB,KAAKC,kBAAkB,IAAIH,uBAAuBI,IAAID,eAAe;CACzE;CAEA,MAAME,SAASC,OAA6E;EACxF,MAAMC,KAAK,KAAKL,WAAWM,mBAAmB,QAAA;EAC9CD,GAAGE,QAAQ,WAAA;EAEX,MAAM,EAAEC,eAAehB,WAAWa,IAAID,OAAO;GACzCK,cAAc;GACdC,WAAW;IAEPC,SAAS,CAAC,YAAY,OAAA;IACtBC,SAASC,WAAmBC,KAAaC,MAAAA;KACrCA,EAAEC,WAAW,GAAGF,IAAI,IAAI;IAC5B;GACJ;GACAG,QAAQ,EACJC,SAAS;IACL;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;KAER;GACAC,SAAS,EAELR,SAAS;IAAC;IAAM;IAAQ;IAAQ;IAAa;IAAY;KAC7D;GACAS,MAAM,EAAET,SAAS;IAAC;IAAM;IAAc;KAAc;GACpDH,YAAY,EAAEa,UAAU,GAAG;EAC/B,CAAA;EAEA,MAAM,CAACC,UAAUC,SAAS,MAAMlB,GAAGmB,gBAAe;EAClD,MAAM,KAAKxB,WAAWyB,iBAAiBH,QAAAA;EAEvC,OAAO;GACHI,MAAMJ;GACNK,MAAM;IACFJ;IACA,GAAGf;GACP;EACJ;CACJ;CAEA,MAAMoB,YAAYC,IAAoC;EAClD,MAAMC,SAAS,MAAM,KAAKC,UAAU,EAAEF,GAAG,CAAA;EACzC,IAAIC,QACA,MAAM,KAAK9B,WAAWgC,gBAAgBF,MAAAA;EAE1C,OAAOA;CACX;CAEA,MAAMG,cAAcC,MAAcC,UAA2C;EACzE,MAAM9B,KAAK,KAAKL,WAAWM,mBAAmB,QAAA;EAC9CD,GAAG+B,MAAM,uBAAuB,EAAEF,KAAK,CAAA;EAEvC,IAAIC,UAAU;GACV,MAAME,QAAQ,MAAM,KAAKpC,gBAAgBqC,QAAQH,QAAAA;GACjD,IAAIE,OACAhC,GAAGkC,SAAS,8BAA8B,EAAEC,SAASH,MAAMR,GAAG,CAAA;EAEtE;EAEA,MAAMC,SAAS,MAAMzB,GAAGoC,OAAM;EAC9B,IAAIX,QACA,MAAM,KAAK9B,WAAWgC,gBAAgBF,MAAAA;EAE1C,OAAOA;CACX;CAEA,MAAMY,kBAAkBC,UAAkBN,OAAwC;EAC9E,OAAO9C,OAAOoD,QAAAA,IACV,KAAKf,YAAYe,QAAAA,IACjB,KAAKV,cAAcU,UAAUN,KAAAA;CACrC;CAEA,MAAMO,WAAWR,OAA+C;EAC5D,OAAO,KAAKpC,WAAW6C,OAAOhD,yBAAyBuC,KAAAA,CAAAA;CAC3D;CAEA,MAAML,UAAUK,OAAoD;EAChE,OAAO,KAAKpC,WAAW+B,UAAUlC,yBAAyBuC,KAAAA,CAAAA;CAC9D;CAEAU,OAAOpB,MAA+B;EAClC,OAAO,KAAK1B,WAAW8C,OAAOpB,IAAAA;CAClC;CAEAqB,MAAMjB,QAAgBJ,MAA+B;EACjD,OAAO,KAAK1B,WAAW+C,MAAMjB,QAAQJ,IAAAA;CACzC;CAEA,MAAMsB,KAAKlB,QAAiC;EACxC,OAAO,KAAK9B,WAAWgD,KAAKlB,MAAAA;CAChC;CAEA,MAAMmB,OAAOnB,QAA+B;EACxC,MAAM,KAAK9B,WAAWiD,OAAOnB,MAAAA;CACjC;CAEA,MAAMoB,oBAAoBxB,MAAsC;EAC5D,MAAMhC,0BAA0BgC,MAAM;GAClCyB,YAAY,KAAKnD,WAAWoD,QAAQC;GACpCC,cAAc1D;EAClB,CAAA;CACJ;CAEA,MAAM2D,gBAAgB7B,MAAuB8B,UAAkC;EAQ3E,IAAI,CAACC,MAPkBhE,eAAe;GAClC0D,YAAY,KAAKnD,WAAWoD,QAAQC;GACpCC,cAAc1D;GACdkC,QAAQJ;GACRgC,gBAAgBF;EACpB,CAAA,GAGI,MAAM,IAAI7D,sBAAAA;CAElB;CAEA,MAAMgE,WAAW7B,QAAgBJ,MAA6C;EAC1E,MAAM,KAAK1B,WAAW4D,cAAc9B,QAAQJ,IAAAA;EAC5C,MAAM,KAAK1B,WAAW6D,mBAAmB/B,QAAQ,KAAK9B,WAAWoD,OAAO;EAExE,OAAOtB;CACX;CAEA,MAAMgC,eAAehC,QAA+B;EAEhD,MADuB,KAAK9B,WAAWoD,QAAQC,WAAWW,kBAAkBpE,YACtEmE,CAAAA,CAAed,OAAOnB,MAAAA;CAChC;AACJ"}
+{"version":3,"file":"repository.mjs","names":["isUUID","applyQuery","isEntityUnique","validateEntityJoinColumns","DatabaseConflictError","PolicyEntity","translateWhereConditions","RealmRepositoryAdapter","PolicyRepositoryAdapter","repository","realmRepository","ctx","findMany","query","qb","createQueryBuilder","groupBy","pagination","defaultAlias","relations","allowed","onJoin","_property","key","q","addGroupBy","fields","default","filters","sort","maxLimit","entities","total","getManyAndCount","extendManyWithEA","data","meta","findOneById","id","entity","findOneBy","extendOneWithEA","findOneByName","name","realmKey","where","realmId","resolveId","andWhere","getOne","findOneByIdOrName","idOrName","realm","findManyBy","findBy","create","merge","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget","checkUniqueness","existing","isUnique","entityExisting","saveWithEA","saveOneWithEA","updateClosureTable","deleteFromTree","treeRepository","getTreeRepository"],"sources":["../../../../../../src/app/modules/database/repositories/policy/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Policy, Realm } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport { applyQuery, isEntityUnique, validateEntityJoinColumns } from 'typeorm-extension';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IPolicyRepository, IRealmRepository } from '../../../../../core/index.ts';\nimport { DatabaseConflictError } from '../../../../../adapters/database/index.ts';\nimport type { PolicyRepository } from '../../../../../adapters/database/domains/index.ts';\nimport { PolicyEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { translateWhereConditions } from '../helpers.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type PolicyRepositoryAdapterContext = {\n    repository: PolicyRepository,\n    realmRepository: Repository<Realm>,\n};\n\nexport class PolicyRepositoryAdapter implements IPolicyRepository {\n    private readonly repository: PolicyRepository;\n\n    private readonly realmRepository: IRealmRepository;\n\n    constructor(ctx: PolicyRepositoryAdapterContext) {\n        this.repository = ctx.repository;\n        this.realmRepository = new RealmRepositoryAdapter(ctx.realmRepository);\n    }\n\n    async findMany(query: Record<string, any>): Promise<EntityRepositoryFindManyResult<Policy>> {\n        const qb = this.repository.createQueryBuilder('policy');\n        qb.groupBy('policy.id');\n\n        const { pagination } = applyQuery(qb, query, {\n            defaultAlias: 'policy',\n            relations: {\n                // @ts-expect-error onJoin is not in the type definition\n                allowed: ['children', 'realm'],\n                onJoin: (_property: string, key: string, q: any) => {\n                    q.addGroupBy(`${key}.id`);\n                },\n            },\n            fields: {\n                default: [\n                    'id',\n                    'built_in',\n                    'type',\n                    'display_name',\n                    'name',\n                    'description',\n                    'invert',\n                    'parent_id',\n                    'realm_id',\n                    'created_at',\n                    'updated_at',\n                ],\n            },\n            filters: {\n                // @ts-expect-error realm.name filter requires relation join\n                allowed: ['id', 'name', 'type', 'parent_id', 'realm_id', 'realm.name'],\n            },\n            sort: { allowed: ['id', 'created_at', 'updated_at'] },\n            pagination: { maxLimit: 50 },\n        });\n\n        const [entities, total] = await qb.getManyAndCount();\n        await this.repository.extendManyWithEA(entities);\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    async findOneById(id: string): Promise<Policy | null> {\n        const entity = await this.findOneBy({ id });\n        if (entity) {\n            await this.repository.extendOneWithEA(entity);\n        }\n        return entity;\n    }\n\n    async findOneByName(name: string, realmKey?: string): Promise<Policy | null> {\n        const qb = this.repository.createQueryBuilder('policy');\n        qb.where('policy.name = :name', { name });\n\n        if (realmKey) {\n            const realmId = await this.realmRepository.resolveId(realmKey);\n            if (!realmId) {\n                return null;\n            }\n            qb.andWhere('policy.realm_id = :realmId', { realmId });\n        }\n\n        const entity = await qb.getOne();\n        if (entity) {\n            await this.repository.extendOneWithEA(entity);\n        }\n        return entity;\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Policy | null> {\n        return isUUID(idOrName) ?\n            this.findOneById(idOrName) :\n            this.findOneByName(idOrName, realm);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<Policy[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Policy | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<Policy>): Policy {\n        return this.repository.create(data);\n    }\n\n    merge(entity: Policy, data: Partial<Policy>): Policy {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: Policy): Promise<Policy> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: Policy): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<Policy>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: PolicyEntity,\n        });\n    }\n\n    async checkUniqueness(data: Partial<Policy>, existing?: Policy): Promise<void> {\n        const isUnique = await isEntityUnique({\n            dataSource: this.repository.manager.connection,\n            entityTarget: PolicyEntity,\n            entity: data,\n            entityExisting: existing,\n        });\n\n        if (!isUnique) {\n            throw new DatabaseConflictError();\n        }\n    }\n\n    async saveWithEA(entity: Policy, data?: Record<string, any>): Promise<Policy> {\n        await this.repository.saveOneWithEA(entity, data);\n        await this.repository.updateClosureTable(entity, this.repository.manager);\n\n        return entity;\n    }\n\n    async deleteFromTree(entity: Policy): Promise<void> {\n        const treeRepository = this.repository.manager.connection.getTreeRepository(PolicyEntity);\n        await treeRepository.remove(entity);\n    }\n}\n"],"mappings":";;;;;;;;;;;;AAwBA,IAAaQ,0BAAb,MAAaA;CACQC;CAEAC;CAEjB,YAAYC,KAAqC;EAC7C,KAAKF,aAAaE,IAAIF;EACtB,KAAKC,kBAAkB,IAAIH,uBAAuBI,IAAID,eAAe;CACzE;CAEA,MAAME,SAASC,OAA6E;EACxF,MAAMC,KAAK,KAAKL,WAAWM,mBAAmB,QAAA;EAC9CD,GAAGE,QAAQ,WAAA;EAEX,MAAM,EAAEC,eAAehB,WAAWa,IAAID,OAAO;GACzCK,cAAc;GACdC,WAAW;IAEPC,SAAS,CAAC,YAAY,OAAA;IACtBC,SAASC,WAAmBC,KAAaC,MAAAA;KACrCA,EAAEC,WAAW,GAAGF,IAAI,IAAI;IAC5B;GACJ;GACAG,QAAQ,EACJC,SAAS;IACL;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;KAER;GACAC,SAAS,EAELR,SAAS;IAAC;IAAM;IAAQ;IAAQ;IAAa;IAAY;KAC7D;GACAS,MAAM,EAAET,SAAS;IAAC;IAAM;IAAc;KAAc;GACpDH,YAAY,EAAEa,UAAU,GAAG;EAC/B,CAAA;EAEA,MAAM,CAACC,UAAUC,SAAS,MAAMlB,GAAGmB,gBAAe;EAClD,MAAM,KAAKxB,WAAWyB,iBAAiBH,QAAAA;EAEvC,OAAO;GACHI,MAAMJ;GACNK,MAAM;IACFJ;IACA,GAAGf;GACP;EACJ;CACJ;CAEA,MAAMoB,YAAYC,IAAoC;EAClD,MAAMC,SAAS,MAAM,KAAKC,UAAU,EAAEF,GAAG,CAAA;EACzC,IAAIC,QACA,MAAM,KAAK9B,WAAWgC,gBAAgBF,MAAAA;EAE1C,OAAOA;CACX;CAEA,MAAMG,cAAcC,MAAcC,UAA2C;EACzE,MAAM9B,KAAK,KAAKL,WAAWM,mBAAmB,QAAA;EAC9CD,GAAG+B,MAAM,uBAAuB,EAAEF,KAAK,CAAA;EAEvC,IAAIC,UAAU;GACV,MAAME,UAAU,MAAM,KAAKpC,gBAAgBqC,UAAUH,QAAAA;GACrD,IAAI,CAACE,SACD,OAAO;GAEXhC,GAAGkC,SAAS,8BAA8B,EAAEF,QAAQ,CAAA;EACxD;EAEA,MAAMP,SAAS,MAAMzB,GAAGmC,OAAM;EAC9B,IAAIV,QACA,MAAM,KAAK9B,WAAWgC,gBAAgBF,MAAAA;EAE1C,OAAOA;CACX;CAEA,MAAMW,kBAAkBC,UAAkBC,OAAwC;EAC9E,OAAOpD,OAAOmD,QAAAA,IACV,KAAKd,YAAYc,QAAAA,IACjB,KAAKT,cAAcS,UAAUC,KAAAA;CACrC;CAEA,MAAMC,WAAWR,OAA+C;EAC5D,OAAO,KAAKpC,WAAW6C,OAAOhD,yBAAyBuC,KAAAA,CAAAA;CAC3D;CAEA,MAAML,UAAUK,OAAoD;EAChE,OAAO,KAAKpC,WAAW+B,UAAUlC,yBAAyBuC,KAAAA,CAAAA;CAC9D;CAEAU,OAAOpB,MAA+B;EAClC,OAAO,KAAK1B,WAAW8C,OAAOpB,IAAAA;CAClC;CAEAqB,MAAMjB,QAAgBJ,MAA+B;EACjD,OAAO,KAAK1B,WAAW+C,MAAMjB,QAAQJ,IAAAA;CACzC;CAEA,MAAMsB,KAAKlB,QAAiC;EACxC,OAAO,KAAK9B,WAAWgD,KAAKlB,MAAAA;CAChC;CAEA,MAAMmB,OAAOnB,QAA+B;EACxC,MAAM,KAAK9B,WAAWiD,OAAOnB,MAAAA;CACjC;CAEA,MAAMoB,oBAAoBxB,MAAsC;EAC5D,MAAMhC,0BAA0BgC,MAAM;GAClCyB,YAAY,KAAKnD,WAAWoD,QAAQC;GACpCC,cAAc1D;EAClB,CAAA;CACJ;CAEA,MAAM2D,gBAAgB7B,MAAuB8B,UAAkC;EAQ3E,IAAI,CAACC,MAPkBhE,eAAe;GAClC0D,YAAY,KAAKnD,WAAWoD,QAAQC;GACpCC,cAAc1D;GACdkC,QAAQJ;GACRgC,gBAAgBF;EACpB,CAAA,GAGI,MAAM,IAAI7D,sBAAAA;CAElB;CAEA,MAAMgE,WAAW7B,QAAgBJ,MAA6C;EAC1E,MAAM,KAAK1B,WAAW4D,cAAc9B,QAAQJ,IAAAA;EAC5C,MAAM,KAAK1B,WAAW6D,mBAAmB/B,QAAQ,KAAK9B,WAAWoD,OAAO;EAExE,OAAOtB;CACX;CAEA,MAAMgC,eAAehC,QAA+B;EAEhD,MADuB,KAAK9B,WAAWoD,QAAQC,WAAWW,kBAAkBpE,YACtEmE,CAAAA,CAAed,OAAOnB,MAAAA;CAChC;AACJ"}

package/dist/app/modules/database/repositories/realm/repository.d.ts

@@ -16,6 +16,7 @@ export declare class RealmRepositoryAdapter implements IRealmRepository {
     save(entity: Realm): Promise<Realm>;
     remove(entity: Realm): Promise<void>;
     validateJoinColumns(data: Partial<Realm>): Promise<void>;
+    resolveId(key: string): Promise<string | null>;
     resolve(id: string | undefined, withFallback: true): Promise<Realm>;
     resolve(id: string | undefined, withFallback?: boolean): Promise<Realm | null>;
 }

package/dist/app/modules/database/repositories/realm/repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/realm/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAG9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAIrE,qBAAa,sBAAuB,YAAW,gBAAgB;IAC3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;gBAEnC,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC;IAIzC,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAI9C,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAO5C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC;IAuBpF,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAM1D,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAIxD,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAIlE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK;IAInC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK;IAI3C,IAAI,CAAC,MAAM,EAAE,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAInC,MAAM,CAAC,MAAM,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAOxD,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,EAAE,YAAY,EAAE,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC;IAEnE,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,EAAE,YAAY,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;CAevF"}
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/realm/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAI9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AAEzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAIrE,qBAAa,sBAAuB,YAAW,gBAAgB;IAC3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;gBAEnC,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC;IAIzC,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAc9C,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAO5C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC;IAuBpF,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAM1D,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAIxD,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAIlE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK;IAInC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK;IAI3C,IAAI,CAAC,MAAM,EAAE,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAInC,MAAM,CAAC,MAAM,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAOxD,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAS9C,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,EAAE,YAAY,EAAE,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC;IAEnE,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,EAAE,YAAY,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;CAkBvF"}

package/dist/app/modules/database/repositories/realm/repository.mjs

@@ -2,10 +2,13 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { RealmEntity } from "../../../../../adapters/database/domains/realm/entity.mjs";
+import { CachePrefix } from "../../../../../adapters/database/domains/constants.mjs";
 import "../../../../../adapters/database/domains/index.mjs";
 import { translateWhereConditions } from "../helpers.mjs";
 import { isUUID } from "@authup/kit";
 import { REALM_MASTER_NAME } from "@authup/core-kit";
+import { buildRedisKeyPath } from "@authup/server-kit";
+import { InternalError } from "@authup/errors";
 import { applyQuery, validateEntityJoinColumns } from "typeorm-extension";
 //#region src/app/modules/database/repositories/realm/repository.ts
 var RealmRepositoryAdapter = class {
@@ -14,11 +17,17 @@ var RealmRepositoryAdapter = class {
 		this.repository = repository;
 	}
 	findOneById(id) {
-		return this.findOneBy({ id });
+		const qb = this.repository.createQueryBuilder("realm");
+		qb.where("realm.id = :id", { id });
+		qb.cache(buildRedisKeyPath({
+			prefix: CachePrefix.REALM,
+			key: id
+		}), 6e4);
+		return qb.getOne();
 	}
 	findOneByName(name) {
 		const qb = this.repository.createQueryBuilder("realm");
-		qb.where("realm.name = :name", { name });
+		qb.where("realm.name = :name", { name: name.trim().toLowerCase() });
 		return qb.getOne();
 	}
 	async findMany(query) {
@@ -84,10 +93,18 @@ var RealmRepositoryAdapter = class {
 			entityTarget: RealmEntity
 		});
 	}
+	async resolveId(key) {
+		if (isUUID(key)) return key;
+		const entity = await this.findOneByName(key);
+		return entity ? entity.id : null;
+	}
 	async resolve(id, withFallback) {
 		let entity = null;
 		if (id) entity = await this.findOneByIdOrName(id);
-		if (!entity && withFallback) entity = await this.findOneBy({ name: REALM_MASTER_NAME });
+		if (!entity && withFallback) {
+			entity = await this.findOneBy({ name: REALM_MASTER_NAME });
+			if (!entity) throw new InternalError("The master realm could not be resolved.");
+		}
 		return entity;
 	}
 };