@authup/server-core 1.0.0-beta.52 → 1.0.0-beta.54

package/dist/app/modules/database/repositories/identity-provider-role-mapping/repository.d.ts

@@ -1,11 +1,12 @@
 import type { IdentityProviderRoleMapping } from '@authup/core-kit';
+import type { IQuery } from '@rapiq/core';
 import type { Repository } from 'typeorm';
 import type { EntityRepositoryFindManyResult } from '@authup/server-kit';
 import type { IIdentityProviderRoleMappingRepository } from '../../../../../core/index.ts';
 export declare class IdentityProviderRoleMappingRepositoryAdapter implements IIdentityProviderRoleMappingRepository {
     private readonly repository;
     constructor(repository: Repository<IdentityProviderRoleMapping>);
-    findMany(query: Record<string, any>): Promise<EntityRepositoryFindManyResult<IdentityProviderRoleMapping>>;
+    findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<IdentityProviderRoleMapping>>;
     findOneById(id: string): Promise<IdentityProviderRoleMapping | null>;
     findOneByName(): Promise<IdentityProviderRoleMapping | null>;
     findOneByIdOrName(idOrName: string): Promise<IdentityProviderRoleMapping | null>;

package/dist/app/modules/database/repositories/identity-provider-role-mapping/repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/identity-provider-role-mapping/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,8BAA8B,CAAC;AAI3F,qBAAa,4CAA6C,YAAW,sCAAsC;IACvG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0C;gBAEzD,UAAU,EAAE,UAAU,CAAC,2BAA2B,CAAC;IAIzD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,8BAA8B,CAAC,2BAA2B,CAAC,CAAC;IA0ChH,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAAC;IAI9D,aAAa,IAAI,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAAC;IAI5D,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAAC;IAIhF,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,2BAA2B,EAAE,CAAC;IAI9E,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAAC;IAIxF,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,2BAA2B,CAAC,GAAG,2BAA2B;IAI/E,KAAK,CAAC,MAAM,EAAE,2BAA2B,EAAE,IAAI,EAAE,OAAO,CAAC,2BAA2B,CAAC,GAAG,2BAA2B;IAI7G,IAAI,CAAC,MAAM,EAAE,2BAA2B,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAI/E,MAAM,CAAC,MAAM,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1D,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,2BAA2B,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;CAMvF"}
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/identity-provider-role-mapping/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAG1C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,8BAA8B,CAAC;AAI3F,qBAAa,4CAA6C,YAAW,sCAAsC;IACvG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0C;gBAEzD,UAAU,EAAE,UAAU,CAAC,2BAA2B,CAAC;IAIzD,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,8BAA8B,CAAC,2BAA2B,CAAC,CAAC;IAiBnG,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAAC;IAI9D,aAAa,IAAI,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAAC;IAI5D,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAAC;IAIhF,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,2BAA2B,EAAE,CAAC;IAI9E,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAAC;IAIxF,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,2BAA2B,CAAC,GAAG,2BAA2B;IAI/E,KAAK,CAAC,MAAM,EAAE,2BAA2B,EAAE,IAAI,EAAE,OAAO,CAAC,2BAA2B,CAAC,GAAG,2BAA2B;IAI7G,IAAI,CAAC,MAAM,EAAE,2BAA2B,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAI/E,MAAM,CAAC,MAAM,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1D,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,2BAA2B,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;CAMvF"}

package/dist/app/modules/database/repositories/identity-provider-role-mapping/repository.mjs

@@ -3,8 +3,9 @@ import "node:url";
 import.meta.url;
 import { IdentityProviderRoleMappingEntity } from "../../../../../adapters/database/domains/identity-provider-role-mapping/entity.mjs";
 import "../../../../../adapters/database/domains/index.mjs";
+import { applyQuery } from "../query.mjs";
 import { translateWhereConditions } from "../helpers.mjs";
-import { applyQuery, validateEntityJoinColumns } from "typeorm-extension";
+import { validateEntityJoinColumns } from "typeorm-extension";
 //#region src/app/modules/database/repositories/identity-provider-role-mapping/repository.ts
 var IdentityProviderRoleMappingRepositoryAdapter = class {
 	repository;
@@ -14,22 +15,7 @@ var IdentityProviderRoleMappingRepositoryAdapter = class {
 	async findMany(query) {
 		const qb = this.repository.createQueryBuilder("providerRole");
 		qb.groupBy("providerRole.id");
-		const { pagination } = applyQuery(qb, query, {
-			defaultAlias: "providerRole",
-			filters: { allowed: ["role_id", "provider_id"] },
-			sort: { allowed: [
-				"id",
-				"created_at",
-				"updated_at"
-			] },
-			relations: {
-				allowed: ["role", "provider"],
-				onJoin: (_property, key, q) => {
-					q.addGroupBy(`${key}.id`);
-				}
-			},
-			pagination: { maxLimit: 50 }
-		});
+		const { pagination } = applyQuery(qb, query);
 		const [entities, total] = await qb.getManyAndCount();
 		return {
 			data: entities,

package/dist/app/modules/database/repositories/identity-provider-role-mapping/repository.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"repository.mjs","names":["applyQuery","validateEntityJoinColumns","IdentityProviderRoleMappingEntity","translateWhereConditions","IdentityProviderRoleMappingRepositoryAdapter","repository","findMany","query","qb","createQueryBuilder","groupBy","pagination","defaultAlias","filters","allowed","sort","relations","onJoin","_property","key","q","addGroupBy","maxLimit","entities","total","getManyAndCount","data","meta","findOneById","id","findOneBy","findOneByName","findOneByIdOrName","idOrName","findManyBy","where","findBy","create","merge","entity","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget"],"sources":["../../../../../../src/app/modules/database/repositories/identity-provider-role-mapping/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderRoleMapping } from '@authup/core-kit';\nimport type { Repository } from 'typeorm';\nimport { applyQuery, validateEntityJoinColumns } from 'typeorm-extension';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IIdentityProviderRoleMappingRepository } from '../../../../../core/index.ts';\nimport { IdentityProviderRoleMappingEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { translateWhereConditions } from '../helpers.ts';\n\nexport class IdentityProviderRoleMappingRepositoryAdapter implements IIdentityProviderRoleMappingRepository {\n    private readonly repository: Repository<IdentityProviderRoleMapping>;\n\n    constructor(repository: Repository<IdentityProviderRoleMapping>) {\n        this.repository = repository;\n    }\n\n    async findMany(query: Record<string, any>): Promise<EntityRepositoryFindManyResult<IdentityProviderRoleMapping>> {\n        const qb = this.repository.createQueryBuilder('providerRole');\n        qb.groupBy('providerRole.id');\n\n        const { pagination } = applyQuery(qb, query, {\n            defaultAlias: 'providerRole',\n            filters: {\n                allowed: [\n                    'role_id',\n                    'provider_id',\n                ],\n            },\n            sort: {\n                allowed: [\n                    'id',\n                    'created_at',\n                    'updated_at',\n                ],\n            },\n            relations: {\n                allowed: [\n                    'role',\n                    'provider',\n                ],\n                onJoin: (_property: string, key: string, q: any) => {\n                    q.addGroupBy(`${key}.id`);\n                },\n            },\n            pagination: { maxLimit: 50 },\n        });\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    findOneById(id: string): Promise<IdentityProviderRoleMapping | null> {\n        return this.findOneBy({ id });\n    }\n\n    async findOneByName(): Promise<IdentityProviderRoleMapping | null> {\n        return null;\n    }\n\n    async findOneByIdOrName(idOrName: string): Promise<IdentityProviderRoleMapping | null> {\n        return this.findOneById(idOrName);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<IdentityProviderRoleMapping[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<IdentityProviderRoleMapping | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<IdentityProviderRoleMapping>): IdentityProviderRoleMapping {\n        return this.repository.create(data);\n    }\n\n    merge(entity: IdentityProviderRoleMapping, data: Partial<IdentityProviderRoleMapping>): IdentityProviderRoleMapping {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: IdentityProviderRoleMapping): Promise<IdentityProviderRoleMapping> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: IdentityProviderRoleMapping): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<IdentityProviderRoleMapping>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: IdentityProviderRoleMappingEntity,\n        });\n    }\n}\n"],"mappings":";;;;;;;;AAeA,IAAaI,+CAAb,MAAaA;CACQC;CAEjB,YAAYA,YAAqD;EAC7D,KAAKA,aAAaA;CACtB;CAEA,MAAMC,SAASC,OAAkG;EAC7G,MAAMC,KAAK,KAAKH,WAAWI,mBAAmB,cAAA;EAC9CD,GAAGE,QAAQ,iBAAA;EAEX,MAAM,EAAEC,eAAeX,WAAWQ,IAAID,OAAO;GACzCK,cAAc;GACdC,SAAS,EACLC,SAAS,CACL,WACA,aAAA,EAER;GACAC,MAAM,EACFD,SAAS;IACL;IACA;IACA;KAER;GACAE,WAAW;IACPF,SAAS,CACL,QACA,UAAA;IAEJG,SAASC,WAAmBC,KAAaC,MAAAA;KACrCA,EAAEC,WAAW,GAAGF,IAAI,IAAI;IAC5B;GACJ;GACAR,YAAY,EAAEW,UAAU,GAAG;EAC/B,CAAA;EAEA,MAAM,CAACC,UAAUC,SAAS,MAAMhB,GAAGiB,gBAAe;EAElD,OAAO;GACHC,MAAMH;GACNI,MAAM;IACFH;IACA,GAAGb;GACP;EACJ;CACJ;CAEAiB,YAAYC,IAAyD;EACjE,OAAO,KAAKC,UAAU,EAAED,GAAG,CAAA;CAC/B;CAEA,MAAME,gBAA6D;EAC/D,OAAO;CACX;CAEA,MAAMC,kBAAkBC,UAA+D;EACnF,OAAO,KAAKL,YAAYK,QAAAA;CAC5B;CAEA,MAAMC,WAAWC,OAAoE;EACjF,OAAO,KAAK9B,WAAW+B,OAAOjC,yBAAyBgC,KAAAA,CAAAA;CAC3D;CAEA,MAAML,UAAUK,OAAyE;EACrF,OAAO,KAAK9B,WAAWyB,UAAU3B,yBAAyBgC,KAAAA,CAAAA;CAC9D;CAEAE,OAAOX,MAAyE;EAC5E,OAAO,KAAKrB,WAAWgC,OAAOX,IAAAA;CAClC;CAEAY,MAAMC,QAAqCb,MAAyE;EAChH,OAAO,KAAKrB,WAAWiC,MAAMC,QAAQb,IAAAA;CACzC;CAEA,MAAMc,KAAKD,QAA2E;EAClF,OAAO,KAAKlC,WAAWmC,KAAKD,MAAAA;CAChC;CAEA,MAAME,OAAOF,QAAoD;EAC7D,MAAM,KAAKlC,WAAWoC,OAAOF,MAAAA;CACjC;CAEA,MAAMG,oBAAoBhB,MAA2D;EACjF,MAAMzB,0BAA0ByB,MAAM;GAClCiB,YAAY,KAAKtC,WAAWuC,QAAQC;GACpCC,cAAc5C;EAClB,CAAA;CACJ;AACJ"}
+{"version":3,"file":"repository.mjs","names":["validateEntityJoinColumns","applyQuery","IdentityProviderRoleMappingEntity","translateWhereConditions","IdentityProviderRoleMappingRepositoryAdapter","repository","findMany","query","qb","createQueryBuilder","groupBy","pagination","entities","total","getManyAndCount","data","meta","findOneById","id","findOneBy","findOneByName","findOneByIdOrName","idOrName","findManyBy","where","findBy","create","merge","entity","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget"],"sources":["../../../../../../src/app/modules/database/repositories/identity-provider-role-mapping/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderRoleMapping } from '@authup/core-kit';\nimport type { IQuery } from '@rapiq/core';\nimport type { Repository } from 'typeorm';\nimport { validateEntityJoinColumns } from 'typeorm-extension';\nimport { applyQuery } from '../query.ts';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IIdentityProviderRoleMappingRepository } from '../../../../../core/index.ts';\nimport { IdentityProviderRoleMappingEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { translateWhereConditions } from '../helpers.ts';\n\nexport class IdentityProviderRoleMappingRepositoryAdapter implements IIdentityProviderRoleMappingRepository {\n    private readonly repository: Repository<IdentityProviderRoleMapping>;\n\n    constructor(repository: Repository<IdentityProviderRoleMapping>) {\n        this.repository = repository;\n    }\n\n    async findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<IdentityProviderRoleMapping>> {\n        const qb = this.repository.createQueryBuilder('providerRole');\n        qb.groupBy('providerRole.id');\n\n        const { pagination } = applyQuery(qb, query);\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    findOneById(id: string): Promise<IdentityProviderRoleMapping | null> {\n        return this.findOneBy({ id });\n    }\n\n    async findOneByName(): Promise<IdentityProviderRoleMapping | null> {\n        return null;\n    }\n\n    async findOneByIdOrName(idOrName: string): Promise<IdentityProviderRoleMapping | null> {\n        return this.findOneById(idOrName);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<IdentityProviderRoleMapping[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<IdentityProviderRoleMapping | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<IdentityProviderRoleMapping>): IdentityProviderRoleMapping {\n        return this.repository.create(data);\n    }\n\n    merge(entity: IdentityProviderRoleMapping, data: Partial<IdentityProviderRoleMapping>): IdentityProviderRoleMapping {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: IdentityProviderRoleMapping): Promise<IdentityProviderRoleMapping> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: IdentityProviderRoleMapping): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<IdentityProviderRoleMapping>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: IdentityProviderRoleMappingEntity,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;AAiBA,IAAaI,+CAAb,MAAaA;CACQC;CAEjB,YAAYA,YAAqD;EAC7D,KAAKA,aAAaA;CACtB;CAEA,MAAMC,SAASC,OAAqF;EAChG,MAAMC,KAAK,KAAKH,WAAWI,mBAAmB,cAAA;EAC9CD,GAAGE,QAAQ,iBAAA;EAEX,MAAM,EAAEC,eAAeV,WAAWO,IAAID,KAAAA;EAEtC,MAAM,CAACK,UAAUC,SAAS,MAAML,GAAGM,gBAAe;EAElD,OAAO;GACHC,MAAMH;GACNI,MAAM;IACFH;IACA,GAAGF;GACP;EACJ;CACJ;CAEAM,YAAYC,IAAyD;EACjE,OAAO,KAAKC,UAAU,EAAED,GAAG,CAAA;CAC/B;CAEA,MAAME,gBAA6D;EAC/D,OAAO;CACX;CAEA,MAAMC,kBAAkBC,UAA+D;EACnF,OAAO,KAAKL,YAAYK,QAAAA;CAC5B;CAEA,MAAMC,WAAWC,OAAoE;EACjF,OAAO,KAAKnB,WAAWoB,OAAOtB,yBAAyBqB,KAAAA,CAAAA;CAC3D;CAEA,MAAML,UAAUK,OAAyE;EACrF,OAAO,KAAKnB,WAAWc,UAAUhB,yBAAyBqB,KAAAA,CAAAA;CAC9D;CAEAE,OAAOX,MAAyE;EAC5E,OAAO,KAAKV,WAAWqB,OAAOX,IAAAA;CAClC;CAEAY,MAAMC,QAAqCb,MAAyE;EAChH,OAAO,KAAKV,WAAWsB,MAAMC,QAAQb,IAAAA;CACzC;CAEA,MAAMc,KAAKD,QAA2E;EAClF,OAAO,KAAKvB,WAAWwB,KAAKD,MAAAA;CAChC;CAEA,MAAME,OAAOF,QAAoD;EAC7D,MAAM,KAAKvB,WAAWyB,OAAOF,MAAAA;CACjC;CAEA,MAAMG,oBAAoBhB,MAA2D;EACjF,MAAMf,0BAA0Be,MAAM;GAClCiB,YAAY,KAAK3B,WAAW4B,QAAQC;GACpCC,cAAcjC;EAClB,CAAA;CACJ;AACJ"}

package/dist/app/modules/database/repositories/index.d.ts

@@ -2,21 +2,22 @@ export * from './client/index.ts';
 export * from './client-permission/index.ts';
 export * from './client-role/index.ts';
 export * from './client-scope/index.ts';
+export * from './event/index.ts';
 export * from './identity-provider/index.ts';
+export * from './key/index.ts';
 export * from './permission/index.ts';
 export * from './permission-policy/index.ts';
 export * from './permission-provider/index.ts';
 export * from './policy/index.ts';
 export * from './realm/index.ts';
-export * from './robot/index.ts';
-export * from './robot-permission/index.ts';
-export * from './robot-role/index.ts';
 export * from './role/index.ts';
 export * from './role-attribute/index.ts';
 export * from './role-permission/index.ts';
 export * from './scope/index.ts';
+export * from './trust-anchor/index.ts';
 export * from './user/index.ts';
 export * from './user-attribute/index.ts';
+export * from './user-authenticator/index.ts';
 export * from './user-permission/index.ts';
 export * from './user-role/index.ts';
 export * from './identity-provider-role-mapping/index.ts';

package/dist/app/modules/database/repositories/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/database/repositories/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC;AAClC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,2CAA2C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/database/repositories/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC;AAClC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,2CAA2C,CAAC"}

package/dist/app/modules/database/repositories/index.mjs

@@ -10,8 +10,12 @@ import { ClientRoleRepositoryAdapter } from "./client-role/repository.mjs";
 import "./client-role/index.mjs";
 import { ClientScopeRepositoryAdapter } from "./client-scope/repository.mjs";
 import "./client-scope/index.mjs";
+import { EventRepositoryAdapter } from "./event/repository.mjs";
+import "./event/index.mjs";
 import { IdentityProviderRepositoryAdapter } from "./identity-provider/repository.mjs";
 import "./identity-provider/index.mjs";
+import { KeyRepositoryAdapter } from "./key/repository.mjs";
+import "./key/index.mjs";
 import { PermissionRepositoryAdapter } from "./permission/repository.mjs";
 import "./permission/index.mjs";
 import { PermissionPolicyRepositoryAdapter } from "./permission-policy/repository.mjs";
@@ -21,12 +25,6 @@ import "./permission-provider/index.mjs";
 import { PolicyRepositoryAdapter } from "./policy/repository.mjs";
 import "./policy/index.mjs";
 import "./realm/index.mjs";
-import { RobotRepositoryAdapter } from "./robot/repository.mjs";
-import "./robot/index.mjs";
-import { RobotPermissionRepositoryAdapter } from "./robot-permission/repository.mjs";
-import "./robot-permission/index.mjs";
-import { RobotRoleRepositoryAdapter } from "./robot-role/repository.mjs";
-import "./robot-role/index.mjs";
 import { RoleRepositoryAdapter } from "./role/repository.mjs";
 import "./role/index.mjs";
 import { RoleAttributeRepositoryAdapter } from "./role-attribute/repository.mjs";
@@ -35,14 +33,18 @@ import { RolePermissionRepositoryAdapter } from "./role-permission/repository.mj
 import "./role-permission/index.mjs";
 import { ScopeRepositoryAdapter } from "./scope/repository.mjs";
 import "./scope/index.mjs";
+import { TrustAnchorRepositoryAdapter } from "./trust-anchor/repository.mjs";
+import "./trust-anchor/index.mjs";
 import { UserRepositoryAdapter } from "./user/repository.mjs";
 import "./user/index.mjs";
 import { UserAttributeRepositoryAdapter } from "./user-attribute/repository.mjs";
 import "./user-attribute/index.mjs";
+import { UserAuthenticatorRepositoryAdapter } from "./user-authenticator/repository.mjs";
+import "./user-authenticator/index.mjs";
 import { UserPermissionRepositoryAdapter } from "./user-permission/repository.mjs";
 import "./user-permission/index.mjs";
 import { UserRoleRepositoryAdapter } from "./user-role/repository.mjs";
 import "./user-role/index.mjs";
 import { IdentityProviderRoleMappingRepositoryAdapter } from "./identity-provider-role-mapping/repository.mjs";
 import "./identity-provider-role-mapping/index.mjs";
-export { ClientPermissionRepositoryAdapter, ClientRepositoryAdapter, ClientRoleRepositoryAdapter, ClientScopeRepositoryAdapter, IdentityProviderRepositoryAdapter, IdentityProviderRoleMappingRepositoryAdapter, PermissionDatabaseProvider, PermissionPolicyRepositoryAdapter, PermissionRepositoryAdapter, PolicyRepositoryAdapter, RealmRepositoryAdapter, RobotPermissionRepositoryAdapter, RobotRepositoryAdapter, RobotRoleRepositoryAdapter, RoleAttributeRepositoryAdapter, RolePermissionRepositoryAdapter, RoleRepositoryAdapter, ScopeRepositoryAdapter, UserAttributeRepositoryAdapter, UserPermissionRepositoryAdapter, UserRepositoryAdapter, UserRoleRepositoryAdapter };
+export { ClientPermissionRepositoryAdapter, ClientRepositoryAdapter, ClientRoleRepositoryAdapter, ClientScopeRepositoryAdapter, EventRepositoryAdapter, IdentityProviderRepositoryAdapter, IdentityProviderRoleMappingRepositoryAdapter, KeyRepositoryAdapter, PermissionDatabaseProvider, PermissionPolicyRepositoryAdapter, PermissionRepositoryAdapter, PolicyRepositoryAdapter, RealmRepositoryAdapter, RoleAttributeRepositoryAdapter, RolePermissionRepositoryAdapter, RoleRepositoryAdapter, ScopeRepositoryAdapter, TrustAnchorRepositoryAdapter, UserAttributeRepositoryAdapter, UserAuthenticatorRepositoryAdapter, UserPermissionRepositoryAdapter, UserRepositoryAdapter, UserRoleRepositoryAdapter };

package/dist/app/modules/database/repositories/key/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/key/index.ts"],"names":[],"mappings":"AAOA,cAAc,iBAAiB,CAAC"}

package/dist/app/modules/database/repositories/key/index.mjs

@@ -0,0 +1,5 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { KeyRepositoryAdapter } from "./repository.mjs";
+export { KeyRepositoryAdapter };

package/dist/app/modules/database/repositories/key/repository.d.ts

@@ -0,0 +1,51 @@
+import type { IQuery } from '@rapiq/core';
+import type { Key } from '@authup/core-kit';
+import { type EntityRepositoryFindManyResult, type ISymmetricCipher, type Logger } from '@authup/server-kit';
+import { JWKUse } from '@authup/specs';
+import type { DataSource, Repository } from 'typeorm';
+import { KeyEntity } from '../../../../../adapters/database/index.ts';
+import type { IKeyRepository, IKeyStore, IRealmRepository } from '../../../../../core/index.ts';
+export type KeyRepositoryAdapterOptions = {
+    /**
+     * Optional KEK (config secretsEncryptionKey) — when present, key
+     * material is persisted wrapped and unwrapped transparently on read.
+     */
+    secretsCipher?: ISymmetricCipher | null;
+    logger?: Logger;
+};
+/**
+ * One adapter, two ports: the entity CRUD surface (IKeyRepository) for the
+ * key management API and the material-resolving store (IKeyStore) for the
+ * signer / verifier / realm cipher. Entity reads never select
+ * decryptionKey; only the IKeyStore surface hands out (unwrapped) material.
+ */
+export declare class KeyRepositoryAdapter implements IKeyRepository, IKeyStore {
+    protected dataSource: DataSource;
+    protected secretsCipher: ISymmetricCipher | null;
+    protected realmRepository: IRealmRepository;
+    protected logger?: Logger;
+    constructor(dataSource: DataSource, options?: KeyRepositoryAdapterOptions);
+    protected get repository(): Repository<KeyEntity>;
+    resolveOrCreate(realmId: string, use: `${JWKUse}`): Promise<Key>;
+    resolveById(id: string): Promise<Key | null>;
+    protected createSignatureKey(repository: Repository<KeyEntity>, realmId: string): Promise<Key>;
+    protected createEncryptionKey(repository: Repository<KeyEntity>, realmId: string): Promise<Key>;
+    protected generateName(use: `${JWKUse}`): string;
+    protected afterLoad(repository: Repository<KeyEntity>, entity: KeyEntity): Promise<Key>;
+    protected protect(material: string): Promise<string>;
+    findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<Key>>;
+    findOneById(id: string): Promise<Key | null>;
+    findOneByName(name: string, realmKey?: string): Promise<Key | null>;
+    findOneByIdOrName(idOrName: string, realm?: string): Promise<Key | null>;
+    findManyBy(where: Record<string, any>): Promise<Key[]>;
+    findOneBy(where: Record<string, any>): Promise<Key | null>;
+    create(data: Partial<Key>): Key;
+    merge(entity: Key, data: Partial<Key>): Key;
+    save(entity: Key): Promise<Key>;
+    remove(entity: Key): Promise<void>;
+    validateJoinColumns(data: Partial<Key>): Promise<void>;
+    checkUniqueness(data: Partial<Key>, existing?: Key): Promise<void>;
+    countBlobReferences(keyId: string): Promise<number>;
+    findHighestPriority(realmId: string, use: string): Promise<number | null>;
+}
+//# sourceMappingURL=repository.d.ts.map

package/dist/app/modules/database/repositories/key/repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/key/repository.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAG5C,OAAO,EAGH,KAAK,8BAA8B,EACnC,KAAK,gBAAgB,EACrB,KAAK,MAAM,EAEd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAW,MAAM,EAAgB,MAAM,eAAe,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAoB,UAAU,EAAE,MAAM,SAAS,CAAC;AAKxE,OAAO,EAEH,SAAS,EAGZ,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAUhG,MAAM,MAAM,2BAA2B,GAAG;IACtC;;;OAGG;IACH,aAAa,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;GAKG;AACH,qBAAa,oBAAqB,YAAW,cAAc,EAAE,SAAS;IAClE,SAAS,CAAC,UAAU,EAAG,UAAU,CAAC;IAElC,SAAS,CAAC,aAAa,EAAG,gBAAgB,GAAG,IAAI,CAAC;IAElD,SAAS,CAAC,eAAe,EAAG,gBAAgB,CAAC;IAE7C,SAAS,CAAC,MAAM,CAAC,EAAG,MAAM,CAAC;gBAEf,UAAU,EAAE,UAAU,EAAE,OAAO,GAAE,2BAAgC;IAO7E,SAAS,KAAK,UAAU,IAAK,UAAU,CAAC,SAAS,CAAC,CAEjD;IAMK,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAmDhE,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;cAkClC,kBAAkB,CAC9B,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EACjC,OAAO,EAAE,MAAM,GACf,OAAO,CAAC,GAAG,CAAC;cA2BA,mBAAmB,CAC/B,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EACjC,OAAO,EAAE,MAAM,GACf,OAAO,CAAC,GAAG,CAAC;IAwBhB,SAAS,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,GAAI,MAAM;cAIjC,SAAS,CACrB,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EACjC,MAAM,EAAE,SAAS,GACjB,OAAO,CAAC,GAAG,CAAC;cA6BA,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAI,OAAO,CAAC,MAAM,CAAC;IAYrD,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,8BAA8B,CAAC,GAAG,CAAC,CAAC;IAmBrE,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;IAI5C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;IAenE,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;IAMxE,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAItD,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;IAIhE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG;IAI/B,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG;IAIrC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAgB/B,MAAM,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAOtD,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAalE,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAInD,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAGlF"}

package/dist/app/modules/database/repositories/key/repository.mjs

@@ -0,0 +1,239 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { RealmEntity } from "../../../../../adapters/database/domains/realm/entity.mjs";
+import { KeyEntity } from "../../../../../adapters/database/domains/key/entity.mjs";
+import { UserAuthenticatorEntity } from "../../../../../adapters/database/domains/user-authenticator/entity.mjs";
+import "../../../../../core/key/constants.mjs";
+import { isWrappedKeyMaterial, unwrapKeyMaterial, wrapKeyMaterial } from "../../../../../core/key/wrap.mjs";
+import "../../../../../core/index.mjs";
+import { applyQuery } from "../query.mjs";
+import { applyRealmScopeSelect, isEntityUnique, translateWhereConditions } from "../helpers.mjs";
+import { DatabaseConflictError } from "../../../../../adapters/database/errors/conflict.mjs";
+import "../../../../../adapters/database/index.mjs";
+import { RealmRepositoryAdapter } from "../realm/repository.mjs";
+import { Like } from "typeorm";
+import { arrayBufferToBase64, createNanoID, isUUID } from "@authup/kit";
+import { KeyStatus } from "@authup/core-kit";
+import { AsymmetricKey, CryptoAsymmetricAlgorithm, createAsymmetricKeyPair } from "@authup/server-kit";
+import { AuthupError } from "@authup/errors";
+import { JWKType, JWKUse, JWTAlgorithm } from "@authup/specs";
+import { getRandomValues } from "uncrypto";
+import { validateEntityJoinColumns } from "typeorm-extension";
+//#region src/app/modules/database/repositories/key/repository.ts
+/**
+* One adapter, two ports: the entity CRUD surface (IKeyRepository) for the
+* key management API and the material-resolving store (IKeyStore) for the
+* signer / verifier / realm cipher. Entity reads never select
+* decryptionKey; only the IKeyStore surface hands out (unwrapped) material.
+*/ var KeyRepositoryAdapter = class {
+	dataSource;
+	secretsCipher;
+	realmRepository;
+	logger;
+	constructor(dataSource, options = {}) {
+		this.dataSource = dataSource;
+		this.secretsCipher = options.secretsCipher ?? null;
+		this.logger = options.logger;
+		this.realmRepository = new RealmRepositoryAdapter(dataSource.getRepository(RealmEntity));
+	}
+	get repository() {
+		return this.dataSource.getRepository(KeyEntity);
+	}
+	async resolveOrCreate(realmId, use) {
+		const { repository } = this;
+		const entity = await repository.findOne({
+			select: {
+				id: true,
+				name: true,
+				type: true,
+				use: true,
+				status: true,
+				signatureAlgorithm: true,
+				encryptionKey: true,
+				decryptionKey: true,
+				realmId: true
+			},
+			where: {
+				realmId,
+				use,
+				status: KeyStatus.ACTIVE
+			},
+			order: {
+				priority: "DESC",
+				createdAt: "DESC",
+				id: "ASC"
+			}
+		});
+		if (entity) return this.afterLoad(repository, entity);
+		const total = await repository.countBy({
+			realmId,
+			use
+		});
+		if (total > 0) throw new AuthupError(`No active ${use} key is available for realm ${realmId} (${total} key(s) exist, none active).`);
+		if (use === JWKUse.ENCRYPTION) return this.createEncryptionKey(repository, realmId);
+		return this.createSignatureKey(repository, realmId);
+	}
+	async resolveById(id) {
+		const { repository } = this;
+		if (!isUUID(id)) return null;
+		const entity = await repository.findOne({
+			select: {
+				id: true,
+				name: true,
+				type: true,
+				use: true,
+				status: true,
+				signatureAlgorithm: true,
+				encryptionKey: true,
+				decryptionKey: true,
+				realmId: true
+			},
+			where: { id }
+		});
+		if (!entity) return null;
+		return this.afterLoad(repository, entity);
+	}
+	async createSignatureKey(repository, realmId) {
+		const keyPair = await createAsymmetricKeyPair({ name: CryptoAsymmetricAlgorithm.RSASSA_PKCS1_V1_5 });
+		const privateKeyContainer = new AsymmetricKey(keyPair.privateKey);
+		const publicKeyContainer = new AsymmetricKey(keyPair.publicKey);
+		const material = await privateKeyContainer.toBase64();
+		const entity = repository.create({
+			name: this.generateName(JWKUse.SIGNATURE),
+			type: JWKType.RSA,
+			use: JWKUse.SIGNATURE,
+			status: KeyStatus.ACTIVE,
+			decryptionKey: await this.protect(material),
+			encryptionKey: await publicKeyContainer.toBase64(),
+			realmId,
+			signatureAlgorithm: `${JWTAlgorithm.RS256}`
+		});
+		await repository.save(entity);
+		entity.decryptionKey = material;
+		return entity;
+	}
+	async createEncryptionKey(repository, realmId) {
+		const raw = /* @__PURE__ */ new Uint8Array(32);
+		getRandomValues(raw);
+		const material = arrayBufferToBase64(raw.buffer);
+		const entity = repository.create({
+			name: this.generateName(JWKUse.ENCRYPTION),
+			type: JWKType.OCT,
+			use: JWKUse.ENCRYPTION,
+			status: KeyStatus.ACTIVE,
+			decryptionKey: await this.protect(material),
+			encryptionKey: null,
+			realmId,
+			signatureAlgorithm: null
+		});
+		await repository.save(entity);
+		entity.decryptionKey = material;
+		return entity;
+	}
+	generateName(use) {
+		return `${use}-${createNanoID(10)}`;
+	}
+	async afterLoad(repository, entity) {
+		if (!entity.decryptionKey) return entity;
+		if (isWrappedKeyMaterial(entity.decryptionKey)) {
+			entity.decryptionKey = await unwrapKeyMaterial(this.secretsCipher, entity.decryptionKey);
+			return entity;
+		}
+		if (this.secretsCipher) {
+			const material = entity.decryptionKey;
+			try {
+				await repository.update(entity.id, { decryptionKey: await wrapKeyMaterial(this.secretsCipher, material) });
+			} catch (e) {
+				this.logger?.warn(`Failed to wrap key material at rest for key ${entity.id}.`, { error: e });
+			}
+			entity.decryptionKey = material;
+		}
+		return entity;
+	}
+	async protect(material) {
+		if (!this.secretsCipher) return material;
+		return wrapKeyMaterial(this.secretsCipher, material);
+	}
+	async findMany(query) {
+		const qb = this.repository.createQueryBuilder("keyEntity");
+		qb.groupBy("keyEntity.id");
+		const { pagination } = applyQuery(qb, query);
+		applyRealmScopeSelect(qb, "keyEntity");
+		const [entities, total] = await qb.getManyAndCount();
+		return {
+			data: entities,
+			meta: {
+				total,
+				...pagination
+			}
+		};
+	}
+	async findOneById(id) {
+		return this.findOneBy({ id });
+	}
+	async findOneByName(name, realmKey) {
+		const where = { name };
+		if (realmKey) {
+			const realmId = await this.realmRepository.resolveId(realmKey);
+			if (!realmId) return null;
+			where.realmId = realmId;
+		}
+		return this.repository.findOneBy(where);
+	}
+	async findOneByIdOrName(idOrName, realm) {
+		return isUUID(idOrName) ? this.findOneById(idOrName) : this.findOneByName(idOrName, realm);
+	}
+	async findManyBy(where) {
+		return this.repository.findBy(translateWhereConditions(where));
+	}
+	async findOneBy(where) {
+		return this.repository.findOneBy(translateWhereConditions(where));
+	}
+	create(data) {
+		return this.repository.create(data);
+	}
+	merge(entity, data) {
+		return this.repository.merge(entity, data);
+	}
+	async save(entity) {
+		if (entity.decryptionKey && this.secretsCipher && !isWrappedKeyMaterial(entity.decryptionKey)) {
+			const material = entity.decryptionKey;
+			entity.decryptionKey = await wrapKeyMaterial(this.secretsCipher, material);
+			const saved = await this.repository.save(entity);
+			saved.decryptionKey = material;
+			return saved;
+		}
+		return this.repository.save(entity);
+	}
+	async remove(entity) {
+		await this.repository.remove(entity);
+	}
+	async validateJoinColumns(data) {
+		await validateEntityJoinColumns(data, {
+			dataSource: this.dataSource,
+			entityTarget: KeyEntity
+		});
+	}
+	async checkUniqueness(data, existing) {
+		if (!await isEntityUnique({
+			dataSource: this.dataSource,
+			entityTarget: KeyEntity,
+			entity: data,
+			entityExisting: existing
+		})) throw new DatabaseConflictError();
+	}
+	async countBlobReferences(keyId) {
+		return this.dataSource.getRepository(UserAuthenticatorEntity).countBy({ secret: Like(`v1.${keyId}.%`) });
+	}
+	async findHighestPriority(realmId, use) {
+		return this.repository.maximum("priority", {
+			realmId,
+			use
+		});
+	}
+};
+//#endregion
+export { KeyRepositoryAdapter };
+
+//# sourceMappingURL=repository.mjs.map

package/dist/app/modules/database/repositories/key/repository.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.mjs","names":["AuthupError","KeyStatus","arrayBufferToBase64","createNanoID","isUUID","AsymmetricKey","CryptoAsymmetricAlgorithm","createAsymmetricKeyPair","JWKType","JWKUse","JWTAlgorithm","Like","validateEntityJoinColumns","applyQuery","getRandomValues","DatabaseConflictError","KeyEntity","RealmEntity","UserAuthenticatorEntity","REALM_CIPHER_BLOB_VERSION","isWrappedKeyMaterial","unwrapKeyMaterial","wrapKeyMaterial","applyRealmScopeSelect","isEntityUnique","translateWhereConditions","RealmRepositoryAdapter","KeyRepositoryAdapter","dataSource","secretsCipher","realmRepository","logger","options","getRepository","repository","resolveOrCreate","realmId","use","entity","findOne","select","id","name","type","status","signatureAlgorithm","encryptionKey","decryptionKey","where","ACTIVE","order","priority","createdAt","afterLoad","total","countBy","ENCRYPTION","createEncryptionKey","createSignatureKey","resolveById","keyPair","RSASSA_PKCS1_V1_5","privateKeyContainer","privateKey","publicKeyContainer","publicKey","material","toBase64","create","generateName","SIGNATURE","RSA","protect","RS256","save","raw","Uint8Array","buffer","OCT","update","e","warn","error","findMany","query","qb","createQueryBuilder","groupBy","pagination","entities","getManyAndCount","data","meta","findOneById","findOneBy","findOneByName","realmKey","resolveId","findOneByIdOrName","idOrName","realm","findManyBy","findBy","merge","saved","remove","validateJoinColumns","entityTarget","checkUniqueness","existing","isUnique","entityExisting","countBlobReferences","keyId","secret","findHighestPriority","maximum"],"sources":["../../../../../../src/app/modules/database/repositories/key/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { AuthupError } from '@authup/errors';\nimport type { IQuery } from '@rapiq/core';\nimport type { Key } from '@authup/core-kit';\nimport { KeyStatus  } from '@authup/core-kit';\nimport { arrayBufferToBase64, createNanoID, isUUID } from '@authup/kit';\nimport {\n    AsymmetricKey,\n    CryptoAsymmetricAlgorithm,\n    type EntityRepositoryFindManyResult,\n    type ISymmetricCipher,\n    type Logger,\n    createAsymmetricKeyPair,\n} from '@authup/server-kit';\nimport { JWKType, JWKUse, JWTAlgorithm } from '@authup/specs';\nimport type { DataSource, FindOptionsWhere, Repository } from 'typeorm';\nimport { Like } from 'typeorm';\nimport { validateEntityJoinColumns } from 'typeorm-extension';\nimport { applyQuery } from '../query.ts';\nimport { getRandomValues } from 'uncrypto';\nimport {\n    DatabaseConflictError,\n    KeyEntity,\n    RealmEntity,\n    UserAuthenticatorEntity,\n} from '../../../../../adapters/database/index.ts';\nimport type { IKeyRepository, IKeyStore, IRealmRepository } from '../../../../../core/index.ts';\nimport {\n    REALM_CIPHER_BLOB_VERSION,\n    isWrappedKeyMaterial,\n    unwrapKeyMaterial,\n    wrapKeyMaterial,\n} from '../../../../../core/index.ts';\nimport { applyRealmScopeSelect, isEntityUnique, translateWhereConditions } from '../helpers.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type KeyRepositoryAdapterOptions = {\n    /**\n     * Optional KEK (config secretsEncryptionKey) — when present, key\n     * material is persisted wrapped and unwrapped transparently on read.\n     */\n    secretsCipher?: ISymmetricCipher | null,\n    logger?: Logger,\n};\n\n/**\n * One adapter, two ports: the entity CRUD surface (IKeyRepository) for the\n * key management API and the material-resolving store (IKeyStore) for the\n * signer / verifier / realm cipher. Entity reads never select\n * decryptionKey; only the IKeyStore surface hands out (unwrapped) material.\n */\nexport class KeyRepositoryAdapter implements IKeyRepository, IKeyStore {\n    protected dataSource : DataSource;\n\n    protected secretsCipher : ISymmetricCipher | null;\n\n    protected realmRepository : IRealmRepository;\n\n    protected logger? : Logger;\n\n    constructor(dataSource: DataSource, options: KeyRepositoryAdapterOptions = {}) {\n        this.dataSource = dataSource;\n        this.secretsCipher = options.secretsCipher ?? null;\n        this.logger = options.logger;\n        this.realmRepository = new RealmRepositoryAdapter(dataSource.getRepository(RealmEntity));\n    }\n\n    protected get repository() : Repository<KeyEntity> {\n        return this.dataSource.getRepository(KeyEntity);\n    }\n\n    // ------------------------------------------------------------------\n    // IKeyStore — material resolution (signer / verifier / realm cipher)\n    // ------------------------------------------------------------------\n\n    async resolveOrCreate(realmId: string, use: `${JWKUse}`): Promise<Key> {\n        const { repository } = this;\n\n        const entity = await repository.findOne({\n            select: {\n                id: true,\n                name: true,\n                type: true,\n                use: true,\n                status: true,\n                signatureAlgorithm: true,\n                encryptionKey: true,\n                decryptionKey: true,\n                realmId: true,\n            },\n            where: {\n                realmId,\n                use,\n                status: KeyStatus.ACTIVE,\n            },\n            // createdAt + id break priority ties deterministically (e.g.\n            // duplicate mints from a concurrent zero-row backstop race —\n            // benign, both keys verify, but selection must be stable).\n            order: {\n                priority: 'DESC', \n                createdAt: 'DESC', \n                id: 'ASC', \n            },\n        });\n\n        if (entity) {\n            return this.afterLoad(repository, entity);\n        }\n\n        const total = await repository.countBy({ realmId, use });\n        if (total > 0) {\n            // an admin who disabled every key meant it — do not silently\n            // re-mint around the kill switch.\n            throw new AuthupError(\n                `No active ${use} key is available for realm ${realmId} ` +\n                `(${total} key(s) exist, none active).`,\n            );\n        }\n\n        if (use === JWKUse.ENCRYPTION) {\n            return this.createEncryptionKey(repository, realmId);\n        }\n\n        return this.createSignatureKey(repository, realmId);\n    }\n\n    async resolveById(id: string): Promise<Key | null> {\n        const { repository } = this;\n\n        // `id` reaches here from an attacker-controlled JWT `kid` header on the\n        // token-verification hot path. A non-UUID value binds against a\n        // postgres `uuid` column as a driver-level type error (500) instead of\n        // a clean miss — short-circuit to \"not found\" so a garbage kid is a\n        // plain verification failure.\n        if (!isUUID(id)) {\n            return null;\n        }\n\n        const entity = await repository.findOne({\n            select: {\n                id: true,\n                name: true,\n                type: true,\n                use: true,\n                status: true,\n                signatureAlgorithm: true,\n                encryptionKey: true,\n                decryptionKey: true,\n                realmId: true,\n            },\n            where: { id },\n        });\n\n        if (!entity) {\n            return null;\n        }\n\n        return this.afterLoad(repository, entity);\n    }\n\n    protected async createSignatureKey(\n        repository: Repository<KeyEntity>,\n        realmId: string,\n    ) : Promise<Key> {\n        const keyPair = await createAsymmetricKeyPair({ name: CryptoAsymmetricAlgorithm.RSASSA_PKCS1_V1_5 });\n\n        const privateKeyContainer = new AsymmetricKey(keyPair.privateKey);\n        const publicKeyContainer = new AsymmetricKey(keyPair.publicKey);\n\n        const material = await privateKeyContainer.toBase64();\n\n        const entity = repository.create({\n            name: this.generateName(JWKUse.SIGNATURE),\n            type: JWKType.RSA,\n            use: JWKUse.SIGNATURE,\n            status: KeyStatus.ACTIVE,\n            decryptionKey: await this.protect(material),\n            encryptionKey: await publicKeyContainer.toBase64(),\n            realmId,\n            signatureAlgorithm: `${JWTAlgorithm.RS256}`,\n        });\n\n        await repository.save(entity);\n\n        // hand the caller usable material regardless of the persisted form.\n        entity.decryptionKey = material;\n\n        return entity;\n    }\n\n    protected async createEncryptionKey(\n        repository: Repository<KeyEntity>,\n        realmId: string,\n    ) : Promise<Key> {\n        const raw = new Uint8Array(32);\n        getRandomValues(raw);\n\n        const material = arrayBufferToBase64(raw.buffer);\n\n        const entity = repository.create({\n            name: this.generateName(JWKUse.ENCRYPTION),\n            type: JWKType.OCT,\n            use: JWKUse.ENCRYPTION,\n            status: KeyStatus.ACTIVE,\n            decryptionKey: await this.protect(material),\n            encryptionKey: null,\n            realmId,\n            signatureAlgorithm: null,\n        });\n\n        await repository.save(entity);\n\n        entity.decryptionKey = material;\n\n        return entity;\n    }\n\n    protected generateName(use: `${JWKUse}`) : string {\n        return `${use}-${createNanoID(10)}`;\n    }\n\n    protected async afterLoad(\n        repository: Repository<KeyEntity>,\n        entity: KeyEntity,\n    ) : Promise<Key> {\n        if (!entity.decryptionKey) {\n            return entity;\n        }\n\n        if (isWrappedKeyMaterial(entity.decryptionKey)) {\n            entity.decryptionKey = await unwrapKeyMaterial(this.secretsCipher, entity.decryptionKey);\n            return entity;\n        }\n\n        if (this.secretsCipher) {\n            // lazy wrap-on-read: a KEK added to a running deployment\n            // hardens existing rows without a migration step. Best-effort —\n            // the material stays readable either way.\n            const material = entity.decryptionKey;\n            try {\n                await repository.update(entity.id, { decryptionKey: await wrapKeyMaterial(this.secretsCipher, material) });\n            } catch (e) {\n                // Best-effort — the material stays readable and the next read\n                // retries. Surface it though: a persistent failure (e.g. a\n                // read-only replica) means the row is never hardened at rest.\n                this.logger?.warn(`Failed to wrap key material at rest for key ${entity.id}.`, { error: e });\n            }\n            entity.decryptionKey = material;\n        }\n\n        return entity;\n    }\n\n    protected async protect(material: string) : Promise<string> {\n        if (!this.secretsCipher) {\n            return material;\n        }\n\n        return wrapKeyMaterial(this.secretsCipher, material);\n    }\n\n    // ------------------------------------------------------------------\n    // IKeyRepository — entity CRUD surface (key management API)\n    // ------------------------------------------------------------------\n\n    async findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<Key>> {\n        const qb = this.repository.createQueryBuilder('keyEntity');\n        qb.groupBy('keyEntity.id');\n\n        const { pagination } = applyQuery(qb, query);\n\n        applyRealmScopeSelect(qb, 'keyEntity');\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    async findOneById(id: string): Promise<Key | null> {\n        return this.findOneBy({ id });\n    }\n\n    async findOneByName(name: string, realmKey?: string): Promise<Key | null> {\n        const where : FindOptionsWhere<KeyEntity> = { name };\n\n        if (realmKey) {\n            const realmId = await this.realmRepository.resolveId(realmKey);\n            if (!realmId) {\n                return null;\n            }\n\n            where.realmId = realmId;\n        }\n\n        return this.repository.findOneBy(where);\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Key | null> {\n        return isUUID(idOrName) ?\n            this.findOneById(idOrName) :\n            this.findOneByName(idOrName, realm);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<Key[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Key | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<Key>): Key {\n        return this.repository.create(data);\n    }\n\n    merge(entity: Key, data: Partial<Key>): Key {\n        return this.repository.merge(entity as KeyEntity, data);\n    }\n\n    async save(entity: Key): Promise<Key> {\n        if (\n            entity.decryptionKey &&\n            this.secretsCipher &&\n            !isWrappedKeyMaterial(entity.decryptionKey)\n        ) {\n            const material = entity.decryptionKey;\n            entity.decryptionKey = await wrapKeyMaterial(this.secretsCipher, material);\n            const saved = await this.repository.save(entity as KeyEntity);\n            saved.decryptionKey = material;\n            return saved;\n        }\n\n        return this.repository.save(entity as KeyEntity);\n    }\n\n    async remove(entity: Key): Promise<void> {\n        await this.repository.remove(entity as KeyEntity);\n    }\n\n    async validateJoinColumns(data: Partial<Key>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.dataSource,\n            entityTarget: KeyEntity,\n        });\n    }\n\n    async checkUniqueness(data: Partial<Key>, existing?: Key): Promise<void> {\n        const isUnique = await isEntityUnique({\n            dataSource: this.dataSource,\n            entityTarget: KeyEntity,\n            entity: data,\n            entityExisting: existing,\n        });\n\n        if (!isUnique) {\n            throw new DatabaseConflictError();\n        }\n    }\n\n    async countBlobReferences(keyId: string): Promise<number> {\n        return this.dataSource.getRepository(UserAuthenticatorEntity).countBy({ secret: Like(`${REALM_CIPHER_BLOB_VERSION}.${keyId}.%`) });\n    }\n\n    async findHighestPriority(realmId: string, use: string): Promise<number | null> {\n        return this.repository.maximum('priority', { realmId, use: use as `${JWKUse}` });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDA,IAAa2B,uBAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEV,YAAYH,YAAwBI,UAAuC,CAAC,GAAG;EAC3E,KAAKJ,aAAaA;EAClB,KAAKC,gBAAgBG,QAAQH,iBAAiB;EAC9C,KAAKE,SAASC,QAAQD;EACtB,KAAKD,kBAAkB,IAAIJ,uBAAuBE,WAAWK,cAAchB,WAAAA,CAAAA;CAC/E;CAEA,IAAciB,aAAqC;EAC/C,OAAO,KAAKN,WAAWK,cAAcjB,SAAAA;CACzC;CAMA,MAAMmB,gBAAgBC,SAAiBC,KAAgC;EACnE,MAAM,EAAEH,eAAe;EAEvB,MAAMI,SAAS,MAAMJ,WAAWK,QAAQ;GACpCC,QAAQ;IACJC,IAAI;IACJC,MAAM;IACNC,MAAM;IACNN,KAAK;IACLO,QAAQ;IACRC,oBAAoB;IACpBC,eAAe;IACfC,eAAe;IACfX,SAAS;GACb;GACAY,OAAO;IACHZ;IACAC;IACAO,QAAQ3C,UAAUgD;GACtB;GAIAC,OAAO;IACHC,UAAU;IACVC,WAAW;IACXX,IAAI;GACR;EACJ,CAAA;EAEA,IAAIH,QACA,OAAO,KAAKe,UAAUnB,YAAYI,MAAAA;EAGtC,MAAMgB,QAAQ,MAAMpB,WAAWqB,QAAQ;GAAEnB;GAASC;EAAI,CAAA;EACtD,IAAIiB,QAAQ,GAGR,MAAM,IAAItD,YACN,aAAaqC,IAAI,8BAA8BD,QAAQ,IACnDkB,MAAM,6BAA6B;EAI/C,IAAIjB,QAAQ5B,OAAO+C,YACf,OAAO,KAAKC,oBAAoBvB,YAAYE,OAAAA;EAGhD,OAAO,KAAKsB,mBAAmBxB,YAAYE,OAAAA;CAC/C;CAEA,MAAMuB,YAAYlB,IAAiC;EAC/C,MAAM,EAAEP,eAAe;EAOvB,IAAI,CAAC9B,OAAOqC,EAAAA,GACR,OAAO;EAGX,MAAMH,SAAS,MAAMJ,WAAWK,QAAQ;GACpCC,QAAQ;IACJC,IAAI;IACJC,MAAM;IACNC,MAAM;IACNN,KAAK;IACLO,QAAQ;IACRC,oBAAoB;IACpBC,eAAe;IACfC,eAAe;IACfX,SAAS;GACb;GACAY,OAAO,EAAEP,GAAG;EAChB,CAAA;EAEA,IAAI,CAACH,QACD,OAAO;EAGX,OAAO,KAAKe,UAAUnB,YAAYI,MAAAA;CACtC;CAEA,MAAgBoB,mBACZxB,YACAE,SACa;EACb,MAAMwB,UAAU,MAAMrD,wBAAwB,EAAEmC,MAAMpC,0BAA0BuD,kBAAkB,CAAA;EAElG,MAAMC,sBAAsB,IAAIzD,cAAcuD,QAAQG,UAAU;EAChE,MAAMC,qBAAqB,IAAI3D,cAAcuD,QAAQK,SAAS;EAE9D,MAAMC,WAAW,MAAMJ,oBAAoBK,SAAQ;EAEnD,MAAM7B,SAASJ,WAAWkC,OAAO;GAC7B1B,MAAM,KAAK2B,aAAa5D,OAAO6D,SAAS;GACxC3B,MAAMnC,QAAQ+D;GACdlC,KAAK5B,OAAO6D;GACZ1B,QAAQ3C,UAAUgD;GAClBF,eAAe,MAAM,KAAKyB,QAAQN,QAAAA;GAClCpB,eAAe,MAAMkB,mBAAmBG,SAAQ;GAChD/B;GACAS,oBAAoB,GAAGnC,aAAa+D;EACxC,CAAA;EAEA,MAAMvC,WAAWwC,KAAKpC,MAAAA;EAGtBA,OAAOS,gBAAgBmB;EAEvB,OAAO5B;CACX;CAEA,MAAgBmB,oBACZvB,YACAE,SACa;EACb,MAAMuC,sBAAM,IAAIC,WAAW,EAAA;EAC3B9D,gBAAgB6D,GAAAA;EAEhB,MAAMT,WAAWhE,oBAAoByE,IAAIE,MAAM;EAE/C,MAAMvC,SAASJ,WAAWkC,OAAO;GAC7B1B,MAAM,KAAK2B,aAAa5D,OAAO+C,UAAU;GACzCb,MAAMnC,QAAQsE;GACdzC,KAAK5B,OAAO+C;GACZZ,QAAQ3C,UAAUgD;GAClBF,eAAe,MAAM,KAAKyB,QAAQN,QAAAA;GAClCpB,eAAe;GACfV;GACAS,oBAAoB;EACxB,CAAA;EAEA,MAAMX,WAAWwC,KAAKpC,MAAAA;EAEtBA,OAAOS,gBAAgBmB;EAEvB,OAAO5B;CACX;CAEU+B,aAAahC,KAA2B;EAC9C,OAAO,GAAGA,IAAI,GAAGlC,aAAa,EAAA;CAClC;CAEA,MAAgBkD,UACZnB,YACAI,QACa;EACb,IAAI,CAACA,OAAOS,eACR,OAAOT;EAGX,IAAIlB,qBAAqBkB,OAAOS,aAAa,GAAG;GAC5CT,OAAOS,gBAAgB,MAAM1B,kBAAkB,KAAKQ,eAAeS,OAAOS,aAAa;GACvF,OAAOT;EACX;EAEA,IAAI,KAAKT,eAAe;GAIpB,MAAMqC,WAAW5B,OAAOS;GACxB,IAAI;IACA,MAAMb,WAAW6C,OAAOzC,OAAOG,IAAI,EAAEM,eAAe,MAAMzB,gBAAgB,KAAKO,eAAeqC,QAAAA,EAAU,CAAA;GAC5G,SAASc,GAAG;IAIR,KAAKjD,QAAQkD,KAAK,+CAA+C3C,OAAOG,GAAG,IAAI,EAAEyC,OAAOF,EAAE,CAAA;GAC9F;GACA1C,OAAOS,gBAAgBmB;EAC3B;EAEA,OAAO5B;CACX;CAEA,MAAgBkC,QAAQN,UAAoC;EACxD,IAAI,CAAC,KAAKrC,eACN,OAAOqC;EAGX,OAAO5C,gBAAgB,KAAKO,eAAeqC,QAAAA;CAC/C;CAMA,MAAMiB,SAASC,OAA6D;EACxE,MAAMC,KAAK,KAAKnD,WAAWoD,mBAAmB,WAAA;EAC9CD,GAAGE,QAAQ,cAAA;EAEX,MAAM,EAAEC,eAAe3E,WAAWwE,IAAID,KAAAA;EAEtC7D,sBAAsB8D,IAAI,WAAA;EAE1B,MAAM,CAACI,UAAUnC,SAAS,MAAM+B,GAAGK,gBAAe;EAElD,OAAO;GACHC,MAAMF;GACNG,MAAM;IACFtC;IACA,GAAGkC;GACP;EACJ;CACJ;CAEA,MAAMK,YAAYpD,IAAiC;EAC/C,OAAO,KAAKqD,UAAU,EAAErD,GAAG,CAAA;CAC/B;CAEA,MAAMsD,cAAcrD,MAAcsD,UAAwC;EACtE,MAAMhD,QAAsC,EAAEN,KAAK;EAEnD,IAAIsD,UAAU;GACV,MAAM5D,UAAU,MAAM,KAAKN,gBAAgBmE,UAAUD,QAAAA;GACrD,IAAI,CAAC5D,SACD,OAAO;GAGXY,MAAMZ,UAAUA;EACpB;EAEA,OAAO,KAAKF,WAAW4D,UAAU9C,KAAAA;CACrC;CAEA,MAAMkD,kBAAkBC,UAAkBC,OAAqC;EAC3E,OAAOhG,OAAO+F,QAAAA,IACV,KAAKN,YAAYM,QAAAA,IACjB,KAAKJ,cAAcI,UAAUC,KAAAA;CACrC;CAEA,MAAMC,WAAWrD,OAA4C;EACzD,OAAO,KAAKd,WAAWoE,OAAO7E,yBAAyBuB,KAAAA,CAAAA;CAC3D;CAEA,MAAM8C,UAAU9C,OAAiD;EAC7D,OAAO,KAAKd,WAAW4D,UAAUrE,yBAAyBuB,KAAAA,CAAAA;CAC9D;CAEAoB,OAAOuB,MAAyB;EAC5B,OAAO,KAAKzD,WAAWkC,OAAOuB,IAAAA;CAClC;CAEAY,MAAMjE,QAAaqD,MAAyB;EACxC,OAAO,KAAKzD,WAAWqE,MAAMjE,QAAqBqD,IAAAA;CACtD;CAEA,MAAMjB,KAAKpC,QAA2B;EAClC,IACIA,OAAOS,iBACP,KAAKlB,iBACL,CAACT,qBAAqBkB,OAAOS,aAAa,GAC5C;GACE,MAAMmB,WAAW5B,OAAOS;GACxBT,OAAOS,gBAAgB,MAAMzB,gBAAgB,KAAKO,eAAeqC,QAAAA;GACjE,MAAMsC,QAAQ,MAAM,KAAKtE,WAAWwC,KAAKpC,MAAAA;GACzCkE,MAAMzD,gBAAgBmB;GACtB,OAAOsC;EACX;EAEA,OAAO,KAAKtE,WAAWwC,KAAKpC,MAAAA;CAChC;CAEA,MAAMmE,OAAOnE,QAA4B;EACrC,MAAM,KAAKJ,WAAWuE,OAAOnE,MAAAA;CACjC;CAEA,MAAMoE,oBAAoBf,MAAmC;EACzD,MAAM/E,0BAA0B+E,MAAM;GAClC/D,YAAY,KAAKA;GACjB+E,cAAc3F;EAClB,CAAA;CACJ;CAEA,MAAM4F,gBAAgBjB,MAAoBkB,UAA+B;EAQrE,IAAI,CAACC,MAPkBtF,eAAe;GAClCI,YAAY,KAAKA;GACjB+E,cAAc3F;GACdsB,QAAQqD;GACRoB,gBAAgBF;EACpB,CAAA,GAGI,MAAM,IAAI9F,sBAAAA;CAElB;CAEA,MAAMiG,oBAAoBC,OAAgC;EACtD,OAAO,KAAKrF,WAAWK,cAAcf,uBAAAA,CAAAA,CAAyBqC,QAAQ,EAAE2D,QAAQvG,KAAK,MAAgCsG,MAAM,GAAG,EAAE,CAAA;CACpI;CAEA,MAAME,oBAAoB/E,SAAiBC,KAAqC;EAC5E,OAAO,KAAKH,WAAWkF,QAAQ,YAAY;GAAEhF;GAAcC;EAAmB,CAAA;CAClF;AACJ"}

package/dist/app/modules/database/repositories/permission/repository.d.ts

@@ -1,4 +1,5 @@
 import type { Permission, Realm } from '@authup/core-kit';
+import type { IQuery } from '@rapiq/core';
 import type { Repository } from 'typeorm';
 import type { EntityRepositoryFindManyResult } from '@authup/server-kit';
 import type { IPermissionRepository } from '../../../../../core/index.ts';
@@ -10,7 +11,7 @@ export declare class PermissionRepositoryAdapter implements IPermissionRepositor
     private readonly repository;
     private readonly realmRepository;
     constructor(ctx: PermissionRepositoryAdapterContext);
-    findMany(query: Record<string, any>): Promise<EntityRepositoryFindManyResult<Permission>>;
+    findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<Permission>>;
     findOneById(id: string): Promise<Permission | null>;
     findOneByName(name: string, realmKey?: string): Promise<Permission | null>;
     findOneByIdOrName(idOrName: string, realm?: string): Promise<Permission | null>;

package/dist/app/modules/database/repositories/permission/repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/permission/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,qBAAqB,EAAoB,MAAM,8BAA8B,CAAC;AAM5F,MAAM,MAAM,kCAAkC,GAAG;IAC7C,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IACnC,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;CACtC,CAAC;AAEF,qBAAa,2BAA4B,YAAW,qBAAqB;IACrE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;IAEpD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;gBAEvC,GAAG,EAAE,kCAAkC;IAK7C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,8BAA8B,CAAC,UAAU,CAAC,CAAC;IAuB/F,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAI7C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAe1E,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAQ/E,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAI7D,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAIvE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU;IAI7C,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU;IAI1D,IAAI,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAI7C,MAAM,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAO7D,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAYzF"}
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/permission/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAG1C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,qBAAqB,EAAoB,MAAM,8BAA8B,CAAC;AAM5F,MAAM,MAAM,kCAAkC,GAAG;IAC7C,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IACnC,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;CACtC,CAAC;AAEF,qBAAa,2BAA4B,YAAW,qBAAqB;IACrE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;IAEpD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;gBAEvC,GAAG,EAAE,kCAAkC;IAK7C,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,8BAA8B,CAAC,UAAU,CAAC,CAAC;IAiBlF,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAI7C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAe1E,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAQ/E,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAI7D,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAIvE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU;IAI7C,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU;IAI1D,IAAI,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAI7C,MAAM,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAO7D,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAYzF"}

package/dist/app/modules/database/repositories/permission/repository.mjs

@@ -3,12 +3,13 @@ import "node:url";
 import.meta.url;
 import { PermissionEntity } from "../../../../../adapters/database/domains/permission/entity.mjs";
 import "../../../../../adapters/database/domains/index.mjs";
-import { translateWhereConditions } from "../helpers.mjs";
+import { applyQuery } from "../query.mjs";
+import { isEntityUnique, translateWhereConditions } from "../helpers.mjs";
 import { DatabaseConflictError } from "../../../../../adapters/database/errors/conflict.mjs";
 import "../../../../../adapters/database/index.mjs";
 import { RealmRepositoryAdapter } from "../realm/repository.mjs";
 import { isUUID } from "@authup/kit";
-import { applyQuery, isEntityUnique, validateEntityJoinColumns } from "typeorm-extension";
+import { validateEntityJoinColumns } from "typeorm-extension";
 //#region src/app/modules/database/repositories/permission/repository.ts
 var PermissionRepositoryAdapter = class {
 	repository;
@@ -20,23 +21,7 @@ var PermissionRepositoryAdapter = class {
 	async findMany(query) {
 		const qb = this.repository.createQueryBuilder("permission");
 		qb.groupBy("permission.id");
-		const { pagination } = applyQuery(qb, query, {
-			defaultAlias: "permission",
-			filters: { allowed: [
-				"id",
-				"display_name",
-				"name",
-				"built_in"
-			] },
-			pagination: { maxLimit: 50 },
-			relations: { allowed: [] },
-			sort: { allowed: [
-				"id",
-				"name",
-				"created_at",
-				"updated_at"
-			] }
-		});
+		const { pagination } = applyQuery(qb, query);
 		const [entities, total] = await qb.getManyAndCount();
 		return {
 			data: entities,
@@ -55,7 +40,7 @@ var PermissionRepositoryAdapter = class {
 		if (realmKey) {
 			const realmId = await this.realmRepository.resolveId(realmKey);
 			if (!realmId) return null;
-			qb.andWhere("permission.realm_id = :realmId", { realmId });
+			qb.andWhere("permission.realmId = :realmId", { realmId });
 		}
 		return qb.getOne();
 	}