@authup/server-core 1.0.0-beta.51 → 1.0.0-beta.53

package/dist/core/provisioning/entities/realm/relations-validator.mjs

@@ -5,6 +5,7 @@ import { PermissionProvisioningValidator } from "../permission/validator.mjs";
 import "../permission/index.mjs";
 import { RoleProvisioningValidator } from "../role/validator.mjs";
 import "../role/index.mjs";
+import { createProvisioningEntitiesValidator } from "../utils.mjs";
 import { ClientProvisioningValidator } from "../client/validator.mjs";
 import "../client/index.mjs";
 import { RobotProvisioningValidator } from "../robot/validator.mjs";
@@ -13,8 +14,8 @@ import { ScopeProvisioningValidator } from "../scope/validator.mjs";
 import "../scope/index.mjs";
 import { UserProvisioningValidator } from "../user/validator.mjs";
 import "../user/index.mjs";
-import { Container, isValidupError } from "validup";
-import { buildZodIssuesForError, createValidator } from "@validup/zod";
+import { Container } from "validup";
+import { createValidator } from "@validup/zod";
 import { z } from "zod";
 //#region src/core/provisioning/entities/realm/relations-validator.ts
 var RealmProvisioningRelationsValidator = class extends Container {
@@ -26,56 +27,12 @@ var RealmProvisioningRelationsValidator = class extends Container {
 		const robotValidator = new RobotProvisioningValidator();
 		const scopeValidator = new ScopeProvisioningValidator();
 		const userValidator = new UserProvisioningValidator();
-		this.mount("clients", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
-			try {
-				for (let i = 0; i < ctx.value.length; i++) await clientValidator.run(ctx.value[i]);
-			} catch (e) {
-				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
-			}
-		})));
-		this.mount("roles", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
-			try {
-				for (let i = 0; i < ctx.value.length; i++) await roleValidator.run(ctx.value[i]);
-			} catch (e) {
-				if (isValidupError(e)) {
-					ctx.issues.push({
-						code: "custom",
-						message: "",
-						path: [],
-						input: void 0
-					});
-					ctx.issues.push(...buildZodIssuesForError(e));
-				}
-			}
-		})));
-		this.mount("permissions", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
-			try {
-				for (let i = 0; i < ctx.value.length; i++) await permissionValidator.run(ctx.value[i]);
-			} catch (e) {
-				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
-			}
-		})));
-		this.mount("robots", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
-			try {
-				for (let i = 0; i < ctx.value.length; i++) await robotValidator.run(ctx.value[i]);
-			} catch (e) {
-				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
-			}
-		})));
-		this.mount("scopes", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
-			try {
-				for (let i = 0; i < ctx.value.length; i++) await scopeValidator.run(ctx.value[i]);
-			} catch (e) {
-				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
-			}
-		})));
-		this.mount("users", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
-			try {
-				for (let i = 0; i < ctx.value.length; i++) await userValidator.run(ctx.value[i]);
-			} catch (e) {
-				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
-			}
-		})));
+		this.mount("clients", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(clientValidator))));
+		this.mount("roles", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(roleValidator))));
+		this.mount("permissions", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(permissionValidator))));
+		this.mount("robots", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(robotValidator))));
+		this.mount("scopes", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(scopeValidator))));
+		this.mount("users", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(userValidator))));
 	}
 };
 //#endregion

package/dist/core/provisioning/entities/realm/relations-validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"relations-validator.mjs","names":["buildZodIssuesForError","createValidator","Container","isValidupError","z","ClientProvisioningValidator","PermissionProvisioningValidator","RobotProvisioningValidator","RoleProvisioningValidator","ScopeProvisioningValidator","UserProvisioningValidator","RealmProvisioningRelationsValidator","initialize","clientValidator","roleValidator","permissionValidator","robotValidator","scopeValidator","userValidator","mount","optional","array","any","check","ctx","i","value","length","run","e","issues","push","code","message","path","input","undefined"],"sources":["../../../../../src/core/provisioning/entities/realm/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { buildZodIssuesForError, createValidator } from '@validup/zod';\nimport { Container, isValidupError } from 'validup';\nimport { z } from 'zod';\nimport { ClientProvisioningValidator } from '../client/index.ts';\nimport { PermissionProvisioningValidator } from '../permission/index.ts';\nimport { RobotProvisioningValidator } from '../robot/index.ts';\nimport { RoleProvisioningValidator } from '../role/index.ts';\nimport { ScopeProvisioningValidator } from '../scope/index.ts';\nimport { UserProvisioningValidator } from '../user/index.ts';\nimport type { RealmProvisioningRelations } from './types.ts';\n\nexport class RealmProvisioningRelationsValidator extends Container<RealmProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        const clientValidator = new ClientProvisioningValidator();\n        const roleValidator = new RoleProvisioningValidator();\n        const permissionValidator = new PermissionProvisioningValidator();\n        const robotValidator = new RobotProvisioningValidator();\n        const scopeValidator = new ScopeProvisioningValidator();\n        const userValidator = new UserProvisioningValidator();\n\n        this.mount('clients', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await clientValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('roles', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await roleValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push({\n                                code: 'custom',\n                                message: '',\n                                path: [],\n                                input: undefined,\n                            });\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('permissions', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await permissionValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('robots', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await robotValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('scopes', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await scopeValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        this.mount('users', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await userValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAkBA,IAAaW,sCAAb,cAAyDT,UAAAA;CAC3CU,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,kBAAkB,IAAIR,4BAAAA;EAC5B,MAAMS,gBAAgB,IAAIN,0BAAAA;EAC1B,MAAMO,sBAAsB,IAAIT,gCAAAA;EAChC,MAAMU,iBAAiB,IAAIT,2BAAAA;EAC3B,MAAMU,iBAAiB,IAAIR,2BAAAA;EAC3B,MAAMS,gBAAgB,IAAIR,0BAAAA;EAE1B,KAAKS,MAAM,WAAW,EAAEC,UAAU,KAAK,GAAGnB,gBACtCG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMZ,gBAAgBe,IAAIJ,IAAIE,MAAMD,EAAE;GAE9C,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GACfL,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;EAGR,KAAKV,MAAM,SAAS,EAAEC,UAAU,KAAK,GAAGnB,gBACpCG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMX,cAAcc,IAAIJ,IAAIE,MAAMD,EAAE;GAE5C,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GAAI;KACnBL,IAAIM,OAAOC,KAAK;MACZC,MAAM;MACNC,SAAS;MACTC,MAAM,CAAA;MACNC,OAAOC,KAAAA;KACX,CAAA;KACAZ,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;IAC9C;GACJ;EACJ,CAAA,CAAA,CAAA;EAGR,KAAKV,MAAM,eAAe,EAAEC,UAAU,KAAK,GAAGnB,gBAC1CG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMV,oBAAoBa,IAAIJ,IAAIE,MAAMD,EAAE;GAElD,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GACfL,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;EAGR,KAAKV,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGnB,gBACrCG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMT,eAAeY,IAAIJ,IAAIE,MAAMD,EAAE;GAE7C,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GACfL,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;EAGR,KAAKV,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGnB,gBACrCG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMR,eAAeW,IAAIJ,IAAIE,MAAMD,EAAE;GAE7C,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GACfL,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;EAGR,KAAKV,MAAM,SAAS,EAAEC,UAAU,KAAK,GAAGnB,gBACpCG,EACKiB,MAAMjB,EAAEkB,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMP,cAAcU,IAAIJ,IAAIE,MAAMD,EAAE;GAE5C,SAASI,GAAG;IACR,IAAI1B,eAAe0B,CAAAA,GACfL,IAAIM,OAAOC,KAAI,GAAI/B,uBAAuB6B,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;CAEZ;AACJ"}
+{"version":3,"file":"relations-validator.mjs","names":["createValidator","Container","z","ClientProvisioningValidator","PermissionProvisioningValidator","RobotProvisioningValidator","RoleProvisioningValidator","ScopeProvisioningValidator","UserProvisioningValidator","createProvisioningEntitiesValidator","RealmProvisioningRelationsValidator","initialize","clientValidator","roleValidator","permissionValidator","robotValidator","scopeValidator","userValidator","mount","optional","array","any","check"],"sources":["../../../../../src/core/provisioning/entities/realm/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport { ClientProvisioningValidator } from '../client/index.ts';\nimport { PermissionProvisioningValidator } from '../permission/index.ts';\nimport { RobotProvisioningValidator } from '../robot/index.ts';\nimport { RoleProvisioningValidator } from '../role/index.ts';\nimport { ScopeProvisioningValidator } from '../scope/index.ts';\nimport { UserProvisioningValidator } from '../user/index.ts';\nimport { createProvisioningEntitiesValidator } from '../utils.ts';\nimport type { RealmProvisioningRelations } from './types.ts';\n\nexport class RealmProvisioningRelationsValidator extends Container<RealmProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        const clientValidator = new ClientProvisioningValidator();\n        const roleValidator = new RoleProvisioningValidator();\n        const permissionValidator = new PermissionProvisioningValidator();\n        const robotValidator = new RobotProvisioningValidator();\n        const scopeValidator = new ScopeProvisioningValidator();\n        const userValidator = new UserProvisioningValidator();\n\n        this.mount('clients', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(clientValidator)),\n        ));\n\n        this.mount('roles', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(roleValidator)),\n        ));\n\n        this.mount('permissions', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(permissionValidator)),\n        ));\n\n        this.mount('robots', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(robotValidator)),\n        ));\n\n        this.mount('scopes', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(scopeValidator)),\n        ));\n\n        this.mount('users', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(userValidator)),\n        ));\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAmBA,IAAaU,sCAAb,cAAyDT,UAAAA;CAC3CU,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,kBAAkB,IAAIT,4BAAAA;EAC5B,MAAMU,gBAAgB,IAAIP,0BAAAA;EAC1B,MAAMQ,sBAAsB,IAAIV,gCAAAA;EAChC,MAAMW,iBAAiB,IAAIV,2BAAAA;EAC3B,MAAMW,iBAAiB,IAAIT,2BAAAA;EAC3B,MAAMU,gBAAgB,IAAIT,0BAAAA;EAE1B,KAAKU,MAAM,WAAW,EAAEC,UAAU,KAAK,GAAGnB,gBACtCE,EACKkB,MAAMlB,EAAEmB,IAAG,CAAA,CAAA,CACXC,MAAMb,oCAAoCG,eAAAA,CAAAA,CAAAA,CAAAA;EAGnD,KAAKM,MAAM,SAAS,EAAEC,UAAU,KAAK,GAAGnB,gBACpCE,EACKkB,MAAMlB,EAAEmB,IAAG,CAAA,CAAA,CACXC,MAAMb,oCAAoCI,aAAAA,CAAAA,CAAAA,CAAAA;EAGnD,KAAKK,MAAM,eAAe,EAAEC,UAAU,KAAK,GAAGnB,gBAC1CE,EACKkB,MAAMlB,EAAEmB,IAAG,CAAA,CAAA,CACXC,MAAMb,oCAAoCK,mBAAAA,CAAAA,CAAAA,CAAAA;EAGnD,KAAKI,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGnB,gBACrCE,EACKkB,MAAMlB,EAAEmB,IAAG,CAAA,CAAA,CACXC,MAAMb,oCAAoCM,cAAAA,CAAAA,CAAAA,CAAAA;EAGnD,KAAKG,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGnB,gBACrCE,EACKkB,MAAMlB,EAAEmB,IAAG,CAAA,CAAA,CACXC,MAAMb,oCAAoCO,cAAAA,CAAAA,CAAAA,CAAAA;EAGnD,KAAKE,MAAM,SAAS,EAAEC,UAAU,KAAK,GAAGnB,gBACpCE,EACKkB,MAAMlB,EAAEmB,IAAG,CAAA,CAAA,CACXC,MAAMb,oCAAoCQ,aAAAA,CAAAA,CAAAA,CAAAA;CAEvD;AACJ"}

package/dist/core/provisioning/entities/role/relations-validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"relations-validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/role/relations-validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAE5D,qBAAa,kCAAmC,SAAQ,SAAS,CAAC,yBAAyB,CAAC;IACxF,SAAS,CAAC,UAAU;CAWvB"}
+{"version":3,"file":"relations-validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/role/relations-validator.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAE5D,qBAAa,kCAAmC,SAAQ,SAAS,CAAC,yBAAyB,CAAC;IACxF,SAAS,CAAC,UAAU;CAuBvB"}

package/dist/core/provisioning/entities/role/relations-validator.mjs

@@ -1,6 +1,7 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { RealmScope } from "@authup/access";
 import { Container } from "validup";
 import { createValidator } from "@validup/zod";
 import { z } from "zod";
@@ -10,6 +11,9 @@ var RoleProvisioningRelationsValidator = class extends Container {
 		super.initialize();
 		this.mount("realmPermissions", { optional: true }, createValidator(z.array(z.string())));
 		this.mount("globalPermissions", { optional: true }, createValidator(z.array(z.string())));
+		this.mount("globalPermissionsExclude", { optional: true }, createValidator(z.array(z.string())));
+		this.mount("globalPermissionsRealmScope", { optional: true }, createValidator(z.enum(RealmScope)));
+		this.mount("globalPermissionsRealmScopeOverrides", { optional: true }, createValidator(z.partialRecord(z.enum(RealmScope), z.array(z.string()))));
 	}
 };
 //#endregion

package/dist/core/provisioning/entities/role/relations-validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"relations-validator.mjs","names":["createValidator","Container","z","RoleProvisioningRelationsValidator","initialize","mount","optional","array","string"],"sources":["../../../../../src/core/provisioning/entities/role/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { RoleProvisioningRelations } from './types.ts';\n\nexport class RoleProvisioningRelationsValidator extends Container<RoleProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount('realmPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n    }\n}\n"],"mappings":";;;;;;;AAYA,IAAaG,qCAAb,cAAwDF,UAAAA;CAC1CG,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MAAM,oBAAoB,EAAEC,UAAU,KAAK,GAAGN,gBAC/CE,EAAEK,MAAML,EAAEM,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,qBAAqB,EAAEC,UAAU,KAAK,GAAGN,gBAChDE,EAAEK,MAAML,EAAEM,OAAM,CAAA,CAAA,CAAA;CAExB;AACJ"}
+{"version":3,"file":"relations-validator.mjs","names":["RealmScope","createValidator","Container","z","RoleProvisioningRelationsValidator","initialize","mount","optional","array","string","enum","partialRecord"],"sources":["../../../../../src/core/provisioning/entities/role/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { RealmScope } from '@authup/access';\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { RoleProvisioningRelations } from './types.ts';\n\nexport class RoleProvisioningRelationsValidator extends Container<RoleProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount('realmPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalPermissionsExclude', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalPermissionsRealmScope', { optional: true }, createValidator(\n            z.enum(RealmScope),\n        ));\n\n        this.mount('globalPermissionsRealmScopeOverrides', { optional: true }, createValidator(\n            z.partialRecord(z.enum(RealmScope), z.array(z.string())),\n        ));\n    }\n}\n"],"mappings":";;;;;;;;AAaA,IAAaI,qCAAb,cAAwDF,UAAAA;CAC1CG,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MAAM,oBAAoB,EAAEC,UAAU,KAAK,GAAGN,gBAC/CE,EAAEK,MAAML,EAAEM,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,qBAAqB,EAAEC,UAAU,KAAK,GAAGN,gBAChDE,EAAEK,MAAML,EAAEM,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,4BAA4B,EAAEC,UAAU,KAAK,GAAGN,gBACvDE,EAAEK,MAAML,EAAEM,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,+BAA+B,EAAEC,UAAU,KAAK,GAAGN,gBAC1DE,EAAEO,KAAKV,UAAAA,CAAAA,CAAAA;EAGX,KAAKM,MAAM,wCAAwC,EAAEC,UAAU,KAAK,GAAGN,gBACnEE,EAAEQ,cAAcR,EAAEO,KAAKV,UAAAA,GAAaG,EAAEK,MAAML,EAAEM,OAAM,CAAA,CAAA,CAAA,CAAA;CAE5D;AACJ"}

package/dist/core/provisioning/entities/root/validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/root/validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAkB,MAAM,SAAS,CAAC;AAQpD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEzD,qBAAa,yBAA0B,SAAQ,SAAS,CAAC,sBAAsB,CAAC;IAC5E,SAAS,CAAC,UAAU;CAoEvB"}
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/root/validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAUpC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEzD,qBAAa,yBAA0B,SAAQ,SAAS,CAAC,sBAAsB,CAAC;IAC5E,SAAS,CAAC,UAAU;CAyCvB"}

package/dist/core/provisioning/entities/root/validator.mjs

@@ -7,12 +7,15 @@ import { PermissionProvisioningValidator } from "../permission/validator.mjs";
 import "../permission/index.mjs";
 import { RoleProvisioningValidator } from "../role/validator.mjs";
 import "../role/index.mjs";
+import { createProvisioningEntitiesValidator } from "../utils.mjs";
+import { PolicyProvisioningValidator } from "../policy/validator.mjs";
+import "../policy/index.mjs";
 import { ScopeProvisioningValidator } from "../scope/validator.mjs";
 import "../scope/index.mjs";
 import { RealmProvisioningValidator } from "../realm/validator.mjs";
 import "../realm/index.mjs";
-import { Container, isValidupError } from "validup";
-import { buildZodIssuesForError, createValidator } from "@validup/zod";
+import { Container } from "validup";
+import { createValidator } from "@validup/zod";
 import { z } from "zod";
 //#region src/core/provisioning/entities/root/validator.ts
 var RootProvisioningValidator = class extends Container {
@@ -20,34 +23,16 @@ var RootProvisioningValidator = class extends Container {
 		super.initialize();
 		const strategyValidator = new ProvisioningStrategyValidator();
 		this.mount("strategy", { optional: true }, strategyValidator);
+		const policyValidator = new PolicyProvisioningValidator();
+		this.mount("policies", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(policyValidator))));
 		const realmValidator = new RealmProvisioningValidator();
-		this.mount("realms", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
-			for (let i = 0; i < ctx.value.length; i++) await realmValidator.run(ctx.value[i]);
-		})));
+		this.mount("realms", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(realmValidator))));
 		const roleValidator = new RoleProvisioningValidator();
-		this.mount("roles", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
-			try {
-				for (let i = 0; i < ctx.value.length; i++) await roleValidator.run(ctx.value[i]);
-			} catch (e) {
-				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
-			}
-		})));
+		this.mount("roles", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(roleValidator))));
 		const scopeValidator = new ScopeProvisioningValidator();
-		this.mount("scopes", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
-			try {
-				for (let i = 0; i < ctx.value.length; i++) await scopeValidator.run(ctx.value[i]);
-			} catch (e) {
-				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
-			}
-		})));
+		this.mount("scopes", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(scopeValidator))));
 		const permissionValidator = new PermissionProvisioningValidator();
-		this.mount("permissions", { optional: true }, createValidator(z.array(z.any()).check(async (ctx) => {
-			try {
-				for (let i = 0; i < ctx.value.length; i++) await permissionValidator.run(ctx.value[i]);
-			} catch (e) {
-				if (isValidupError(e)) ctx.issues.push(...buildZodIssuesForError(e));
-			}
-		})));
+		this.mount("permissions", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(permissionValidator))));
 	}
 };
 //#endregion

package/dist/core/provisioning/entities/root/validator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"validator.mjs","names":["buildZodIssuesForError","createValidator","Container","isValidupError","z","ProvisioningStrategyValidator","PermissionProvisioningValidator","RealmProvisioningValidator","RoleProvisioningValidator","ScopeProvisioningValidator","RootProvisioningValidator","initialize","strategyValidator","mount","optional","realmValidator","array","any","check","ctx","i","value","length","run","roleValidator","e","issues","push","scopeValidator","permissionValidator"],"sources":["../../../../../src/core/provisioning/entities/root/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { buildZodIssuesForError, createValidator } from '@validup/zod';\nimport { Container, isValidupError } from 'validup';\nimport { z } from 'zod';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\nimport { PermissionProvisioningValidator } from '../permission/index.ts';\nimport { RealmProvisioningValidator } from '../realm/index.ts';\nimport { RoleProvisioningValidator } from '../role/index.ts';\nimport { ScopeProvisioningValidator } from '../scope/index.ts';\n\nimport type { RootProvisioningEntity } from './types.ts';\n\nexport class RootProvisioningValidator extends Container<RootProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const realmValidator = new RealmProvisioningValidator();\n        this.mount('realms', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    for (let i = 0; i < ctx.value.length; i++) {\n                        await realmValidator.run(ctx.value[i]);\n                    }\n                }),\n        ));\n\n        const roleValidator = new RoleProvisioningValidator();\n        this.mount('roles', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await roleValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        const scopeValidator = new ScopeProvisioningValidator();\n        this.mount('scopes', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await scopeValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n\n        const permissionValidator = new PermissionProvisioningValidator();\n        this.mount('permissions', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(async (ctx) => {\n                    try {\n                        for (let i = 0; i < ctx.value.length; i++) {\n                            await permissionValidator.run(ctx.value[i]);\n                        }\n                    } catch (e) {\n                        if (isValidupError(e)) {\n                            ctx.issues.push(...buildZodIssuesForError(e));\n                        }\n                    }\n                }),\n        ));\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAkBA,IAAaU,4BAAb,cAA+CR,UAAAA;CACjCS,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,oBAAoB,IAAIP,8BAAAA;EAC9B,KAAKQ,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGF,iBAAAA;EAE3C,MAAMG,iBAAiB,IAAIR,2BAAAA;EAC3B,KAAKM,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGb,gBACrCG,EACKY,MAAMZ,EAAEa,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAML,eAAeQ,IAAIJ,IAAIE,MAAMD,EAAE;EAE7C,CAAA,CAAA,CAAA;EAGR,MAAMI,gBAAgB,IAAIhB,0BAAAA;EAC1B,KAAKK,MAAM,SAAS,EAAEC,UAAU,KAAK,GAAGb,gBACpCG,EACKY,MAAMZ,EAAEa,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMI,cAAcD,IAAIJ,IAAIE,MAAMD,EAAE;GAE5C,SAASK,GAAG;IACR,IAAItB,eAAesB,CAAAA,GACfN,IAAIO,OAAOC,KAAI,GAAI3B,uBAAuByB,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;EAGR,MAAMG,iBAAiB,IAAInB,2BAAAA;EAC3B,KAAKI,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGb,gBACrCG,EACKY,MAAMZ,EAAEa,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMQ,eAAeL,IAAIJ,IAAIE,MAAMD,EAAE;GAE7C,SAASK,GAAG;IACR,IAAItB,eAAesB,CAAAA,GACfN,IAAIO,OAAOC,KAAI,GAAI3B,uBAAuByB,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;EAGR,MAAMI,sBAAsB,IAAIvB,gCAAAA;EAChC,KAAKO,MAAM,eAAe,EAAEC,UAAU,KAAK,GAAGb,gBAC1CG,EACKY,MAAMZ,EAAEa,IAAG,CAAA,CAAA,CACXC,MAAM,OAAOC,QAAAA;GACV,IAAI;IACA,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,MAAMS,oBAAoBN,IAAIJ,IAAIE,MAAMD,EAAE;GAElD,SAASK,GAAG;IACR,IAAItB,eAAesB,CAAAA,GACfN,IAAIO,OAAOC,KAAI,GAAI3B,uBAAuByB,CAAAA,CAAAA;GAElD;EACJ,CAAA,CAAA,CAAA;CAEZ;AACJ"}
+{"version":3,"file":"validator.mjs","names":["createValidator","Container","z","ProvisioningStrategyValidator","PermissionProvisioningValidator","PolicyProvisioningValidator","RealmProvisioningValidator","RoleProvisioningValidator","ScopeProvisioningValidator","createProvisioningEntitiesValidator","RootProvisioningValidator","initialize","strategyValidator","mount","optional","policyValidator","array","any","check","realmValidator","roleValidator","scopeValidator","permissionValidator"],"sources":["../../../../../src/core/provisioning/entities/root/validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\nimport { PermissionProvisioningValidator } from '../permission/index.ts';\nimport { PolicyProvisioningValidator } from '../policy/index.ts';\nimport { RealmProvisioningValidator } from '../realm/index.ts';\nimport { RoleProvisioningValidator } from '../role/index.ts';\nimport { ScopeProvisioningValidator } from '../scope/index.ts';\nimport { createProvisioningEntitiesValidator } from '../utils.ts';\n\nimport type { RootProvisioningEntity } from './types.ts';\n\nexport class RootProvisioningValidator extends Container<RootProvisioningEntity> {\n    protected initialize() {\n        super.initialize();\n\n        const strategyValidator = new ProvisioningStrategyValidator();\n        this.mount('strategy', { optional: true }, strategyValidator);\n\n        const policyValidator = new PolicyProvisioningValidator();\n        this.mount('policies', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(policyValidator)),\n        ));\n\n        const realmValidator = new RealmProvisioningValidator();\n        this.mount('realms', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(realmValidator)),\n        ));\n\n        const roleValidator = new RoleProvisioningValidator();\n        this.mount('roles', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(roleValidator)),\n        ));\n\n        const scopeValidator = new ScopeProvisioningValidator();\n        this.mount('scopes', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(scopeValidator)),\n        ));\n\n        const permissionValidator = new PermissionProvisioningValidator();\n        this.mount('permissions', { optional: true }, createValidator(\n            z\n                .array(z.any())\n                .check(createProvisioningEntitiesValidator(permissionValidator)),\n        ));\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAoBA,IAAaU,4BAAb,cAA+CT,UAAAA;CACjCU,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,oBAAoB,IAAIT,8BAAAA;EAC9B,KAAKU,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGF,iBAAAA;EAE3C,MAAMG,kBAAkB,IAAIV,4BAAAA;EAC5B,KAAKQ,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGd,gBACvCE,EACKc,MAAMd,EAAEe,IAAG,CAAA,CAAA,CACXC,MAAMT,oCAAoCM,eAAAA,CAAAA,CAAAA,CAAAA;EAGnD,MAAMI,iBAAiB,IAAIb,2BAAAA;EAC3B,KAAKO,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGd,gBACrCE,EACKc,MAAMd,EAAEe,IAAG,CAAA,CAAA,CACXC,MAAMT,oCAAoCU,cAAAA,CAAAA,CAAAA,CAAAA;EAGnD,MAAMC,gBAAgB,IAAIb,0BAAAA;EAC1B,KAAKM,MAAM,SAAS,EAAEC,UAAU,KAAK,GAAGd,gBACpCE,EACKc,MAAMd,EAAEe,IAAG,CAAA,CAAA,CACXC,MAAMT,oCAAoCW,aAAAA,CAAAA,CAAAA,CAAAA;EAGnD,MAAMC,iBAAiB,IAAIb,2BAAAA;EAC3B,KAAKK,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGd,gBACrCE,EACKc,MAAMd,EAAEe,IAAG,CAAA,CAAA,CACXC,MAAMT,oCAAoCY,cAAAA,CAAAA,CAAAA,CAAAA;EAGnD,MAAMC,sBAAsB,IAAIlB,gCAAAA;EAChC,KAAKS,MAAM,eAAe,EAAEC,UAAU,KAAK,GAAGd,gBAC1CE,EACKc,MAAMd,EAAEe,IAAG,CAAA,CAAA,CACXC,MAAMT,oCAAoCa,mBAAAA,CAAAA,CAAAA,CAAAA;CAEvD;AACJ"}

package/dist/core/provisioning/entities/utils.d.ts

@@ -0,0 +1,10 @@
+import type { ParsePayload } from 'zod/v4/core';
+import type { Container } from 'validup';
+/**
+ * Run a provisioning entity validator over every array element with the
+ * PROVISIONING group (zod check closures do not inherit the validup run
+ * group) and write the validated output back, so validator transforms
+ * (canonicalization, stripping) reach the synchronizers.
+ */
+export declare function createProvisioningEntitiesValidator(validator: Container<any>): (ctx: ParsePayload<any[]>) => Promise<void>;
+//# sourceMappingURL=utils.d.ts.map

package/dist/core/provisioning/entities/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../../src/core/provisioning/entities/utils.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAGzC;;;;;GAKG;AACH,wBAAgB,mCAAmC,CAC/C,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,GAC1B,CAAC,GAAG,EAAE,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAiB7C"}

package/dist/core/provisioning/entities/utils.mjs

@@ -0,0 +1,29 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { ValidatorGroup } from "@authup/kit";
+import { isValidupError } from "validup";
+import { buildZodIssuesForError } from "@validup/zod";
+//#region src/core/provisioning/entities/utils.ts
+/**
+* Run a provisioning entity validator over every array element with the
+* PROVISIONING group (zod check closures do not inherit the validup run
+* group) and write the validated output back, so validator transforms
+* (canonicalization, stripping) reach the synchronizers.
+*/ function createProvisioningEntitiesValidator(validator) {
+	return async (ctx) => {
+		for (let i = 0; i < ctx.value.length; i++) try {
+			ctx.value[i] = await validator.run(ctx.value[i], { group: ValidatorGroup.PROVISIONING });
+		} catch (e) {
+			if (!isValidupError(e)) throw e;
+			ctx.issues.push(...buildZodIssuesForError(e).map((issue) => ({
+				...issue,
+				path: [i, ...issue.path ?? []]
+			})));
+		}
+	};
+}
+//#endregion
+export { createProvisioningEntitiesValidator };
+
+//# sourceMappingURL=utils.mjs.map

package/dist/core/provisioning/entities/utils.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.mjs","names":["ValidatorGroup","buildZodIssuesForError","isValidupError","createProvisioningEntitiesValidator","validator","ctx","i","value","length","run","group","PROVISIONING","e","issues","push","map","issue","path"],"sources":["../../../../src/core/provisioning/entities/utils.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { ValidatorGroup } from '@authup/kit';\nimport { buildZodIssuesForError } from '@validup/zod';\nimport type { ParsePayload } from 'zod/v4/core';\nimport type { Container } from 'validup';\nimport { isValidupError } from 'validup';\n\n/**\n * Run a provisioning entity validator over every array element with the\n * PROVISIONING group (zod check closures do not inherit the validup run\n * group) and write the validated output back, so validator transforms\n * (canonicalization, stripping) reach the synchronizers.\n */\nexport function createProvisioningEntitiesValidator(\n    validator: Container<any>,\n): (ctx: ParsePayload<any[]>) => Promise<void> {\n    return async (ctx) => {\n        for (let i = 0; i < ctx.value.length; i++) {\n            try {\n                ctx.value[i] = await validator.run(ctx.value[i], { group: ValidatorGroup.PROVISIONING });\n            } catch (e) {\n                if (!isValidupError(e)) {\n                    throw e;\n                }\n\n                ctx.issues.push(...buildZodIssuesForError(e).map((issue) => ({\n                    ...issue,\n                    path: [i, ...(issue.path ?? [])],\n                })));\n            }\n        }\n    };\n}\n"],"mappings":";;;;;;;;;;;;GAmBA,SAAgBG,oCACZC,WAAyB;CAEzB,OAAO,OAAOC,QAAAA;EACV,KAAK,IAAIC,IAAI,GAAGA,IAAID,IAAIE,MAAMC,QAAQF,KAClC,IAAI;GACAD,IAAIE,MAAMD,KAAK,MAAMF,UAAUK,IAAIJ,IAAIE,MAAMD,IAAI,EAAEI,OAAOV,eAAeW,aAAa,CAAA;EAC1F,SAASC,GAAG;GACR,IAAI,CAACV,eAAeU,CAAAA,GAChB,MAAMA;GAGVP,IAAIQ,OAAOC,KAAI,GAAIb,uBAAuBW,CAAAA,CAAAA,CAAGG,KAAKC,WAAW;IACzD,GAAGA;IACHC,MAAM,CAACX,GAAAA,GAAOU,MAAMC,QAAQ,CAAA,CAAA;GAChC,EAAA,CAAA;EACJ;CAER;AACJ"}

package/dist/core/provisioning/index.mjs

@@ -5,9 +5,12 @@ import { ProvisioningEntityStrategyType } from "./strategy/constants.mjs";
 import { normalizeEntityProvisioningStrategy } from "./strategy/normalize.mjs";
 import { ProvisioningStrategyValidator } from "./strategy/validator.mjs";
 import "./strategy/index.mjs";
+import { PermissionProvisioningRelationsValidator } from "./entities/permission/relations-validator.mjs";
 import { PermissionProvisioningValidator } from "./entities/permission/validator.mjs";
 import { RoleProvisioningValidator } from "./entities/role/validator.mjs";
+import { createProvisioningEntitiesValidator } from "./entities/utils.mjs";
 import { ClientProvisioningValidator } from "./entities/client/validator.mjs";
+import { PolicyProvisioningValidator } from "./entities/policy/validator.mjs";
 import { RobotProvisioningValidator } from "./entities/robot/validator.mjs";
 import { ScopeProvisioningValidator } from "./entities/scope/validator.mjs";
 import { UserProvisioningValidator } from "./entities/user/validator.mjs";
@@ -26,4 +29,4 @@ import { RobotProvisioningSynchronizer } from "./synchronizer/robot/module.mjs";
 import { ScopeProvisioningSynchronizer } from "./synchronizer/scope/module.mjs";
 import { UserProvisioningSynchronizer } from "./synchronizer/user/module.mjs";
 import "./synchronizer/index.mjs";
-export { ClientProvisioningSynchronizer, ClientProvisioningValidator, GraphProvisioningSynchronizer, PermissionProvisioningSynchronizer, PermissionProvisioningValidator, PolicyProvisioningSynchronizer, ProvisioningEntityResolver, ProvisioningEntityStrategyType, ProvisioningJunctionSynchronizer, ProvisioningStrategyValidator, RealmProvisioningSynchronizer, RealmProvisioningValidator, RobotProvisioningSynchronizer, RobotProvisioningValidator, RoleProvisioningSynchronizer, RoleProvisioningValidator, RootProvisioningValidator, ScopeProvisioningSynchronizer, ScopeProvisioningValidator, UserProvisioningSynchronizer, UserProvisioningValidator, normalizeEntityProvisioningStrategy };
+export { ClientProvisioningSynchronizer, ClientProvisioningValidator, GraphProvisioningSynchronizer, PermissionProvisioningRelationsValidator, PermissionProvisioningSynchronizer, PermissionProvisioningValidator, PolicyProvisioningSynchronizer, PolicyProvisioningValidator, ProvisioningEntityResolver, ProvisioningEntityStrategyType, ProvisioningJunctionSynchronizer, ProvisioningStrategyValidator, RealmProvisioningSynchronizer, RealmProvisioningValidator, RobotProvisioningSynchronizer, RobotProvisioningValidator, RoleProvisioningSynchronizer, RoleProvisioningValidator, RootProvisioningValidator, ScopeProvisioningSynchronizer, ScopeProvisioningValidator, UserProvisioningSynchronizer, UserProvisioningValidator, createProvisioningEntitiesValidator, normalizeEntityProvisioningStrategy };

package/dist/core/provisioning/synchronizer/base.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../../src/core/provisioning/synchronizer/base.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAE7D,8BAAsB,4BAA4B,CAAC,CAAC,CAAE,YAAW,yBAAyB,CAAC,CAAC,CAAC;IAGnF,eAAe,CAAC,KAAK,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IAQ/C,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAM1C,SAAS,CAAC,gBAAgB,CAAC,UAAU,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,SAAS,GAAG,IAAI;CAKrF"}
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../../src/core/provisioning/synchronizer/base.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAE7D,8BAAsB,4BAA4B,CAAC,CAAC,CAAE,YAAW,yBAAyB,CAAC,CAAC,CAAC;IAGnF,eAAe,CAAC,KAAK,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IAQ/C,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAO1C,SAAS,CAAC,gBAAgB,CAAC,UAAU,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,SAAS,GAAG,IAAI;CAKrF"}

package/dist/core/provisioning/synchronizer/base.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"base.mjs","names":["BaseProvisioningSynchronizer","synchronizeMany","input","output","entity","push","synchronize","canonicalizeName","attributes","name","trim","toLowerCase"],"sources":["../../../../src/core/provisioning/synchronizer/base.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IProvisioningSynchronizer } from '../types.ts';\n\nexport abstract class BaseProvisioningSynchronizer<T> implements IProvisioningSynchronizer<T> {\n    // Sequential to avoid race conditions on concurrent upserts.\n    // Can be switched to Promise.all() if callers guarantee unique inputs.\n    async synchronizeMany(input: T[]): Promise<T[]> {\n        const output: T[] = [];\n        for (const entity of input) {\n            output.push(await this.synchronize(entity));\n        }\n        return output;\n    }\n\n    abstract synchronize(input: T): Promise<T>;\n\n    // canonical identifier form: provisioning sources may carry raw names\n    // (the file-source entity validators run group-less, so the validator\n    // transforms don't apply); lookups against canonically stored rows\n    // and canonical persistence both require it.\n    protected canonicalizeName(attributes: { name?: string | null } | undefined): void {\n        if (attributes && typeof attributes.name === 'string') {\n            attributes.name = attributes.name.trim().toLowerCase();\n        }\n    }\n}\n"],"mappings":";;;;AASA,IAAsBA,+BAAtB,MAAsBA;CAGlB,MAAMC,gBAAgBC,OAA0B;EAC5C,MAAMC,SAAc,CAAA;EACpB,KAAK,MAAMC,UAAUF,OACjBC,OAAOE,KAAK,MAAM,KAAKC,YAAYF,MAAAA,CAAAA;EAEvC,OAAOD;CACX;CAQUI,iBAAiBC,YAAwD;EAC/E,IAAIA,cAAc,OAAOA,WAAWC,SAAS,UACzCD,WAAWC,OAAOD,WAAWC,KAAKC,KAAI,CAAA,CAAGC,YAAW;CAE5D;AACJ"}
+{"version":3,"file":"base.mjs","names":["BaseProvisioningSynchronizer","synchronizeMany","input","output","entity","push","synchronize","canonicalizeName","attributes","name","trim","toLowerCase"],"sources":["../../../../src/core/provisioning/synchronizer/base.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IProvisioningSynchronizer } from '../types.ts';\n\nexport abstract class BaseProvisioningSynchronizer<T> implements IProvisioningSynchronizer<T> {\n    // Sequential to avoid race conditions on concurrent upserts.\n    // Can be switched to Promise.all() if callers guarantee unique inputs.\n    async synchronizeMany(input: T[]): Promise<T[]> {\n        const output: T[] = [];\n        for (const entity of input) {\n            output.push(await this.synchronize(entity));\n        }\n        return output;\n    }\n\n    abstract synchronize(input: T): Promise<T>;\n\n    // canonical identifier form: provisioning sources may carry raw names.\n    // The file source validates (and canonicalizes) with the PROVISIONING\n    // group, but the default source and programmatic sources bypass that\n    // validation entirely — defense in depth for lookups against canonically\n    // stored rows and canonical persistence.\n    protected canonicalizeName(attributes: { name?: string | null } | undefined): void {\n        if (attributes && typeof attributes.name === 'string') {\n            attributes.name = attributes.name.trim().toLowerCase();\n        }\n    }\n}\n"],"mappings":";;;;AASA,IAAsBA,+BAAtB,MAAsBA;CAGlB,MAAMC,gBAAgBC,OAA0B;EAC5C,MAAMC,SAAc,CAAA;EACpB,KAAK,MAAMC,UAAUF,OACjBC,OAAOE,KAAK,MAAM,KAAKC,YAAYF,MAAAA,CAAAA;EAEvC,OAAOD;CACX;CASUI,iBAAiBC,YAAwD;EAC/E,IAAIA,cAAc,OAAOA,WAAWC,SAAS,UACzCD,WAAWC,OAAOD,WAAWC,KAAKC,KAAI,CAAA,CAAGC,YAAW;CAE5D;AACJ"}