npm - @authup/server-core - Versions diffs - 1.0.0-beta.52 → 1.0.0-beta.54 - Mend

@authup/server-core 1.0.0-beta.52 → 1.0.0-beta.54

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1541) hide show

package/dist/core/oauth2/token/verifier/module.mjs CHANGED Viewed

@@ -1,14 +1,15 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { KeyStatus } from "@authup/core-kit";
 import { extractTokenHeader, verifyToken } from "@authup/server-kit";
-import { JWKError, JWKType, JWTError } from "@authup/specs";
+import { JWKError, JWKType, JWKUse, JWTError } from "@authup/specs";
 //#region src/core/oauth2/token/verifier/module.ts
 var OAuth2TokenVerifier = class {
-	keyRepository;
+	keyStore;
 	tokenRepository;
-	constructor(keyRepository, tokenRepository) {
-		this.keyRepository = keyRepository;
+	constructor(keyStore, tokenRepository) {
+		this.keyStore = keyStore;
 		this.tokenRepository = tokenRepository;
 	}
 	async isInactive(id) {
@@ -25,30 +26,32 @@ var OAuth2TokenVerifier = class {
 		}
 		const header = extractTokenHeader(token);
 		if (!header.kid) throw JWTError.headerPropertyInvalid("kid");
-		const key = await this.keyRepository.findById(header.kid);
+		const key = await this.keyStore.resolveById(header.kid);
 		if (!key) throw JWKError.notFound(header.kid);
+		if (key.use !== JWKUse.SIGNATURE) throw JWKError.notFound(header.kid);
+		if (key.status === KeyStatus.DISABLED) throw JWKError.notFound(header.kid);
 		switch (key.type) {
 			case JWKType.OCT:
-				if (!key.decryption_key) throw JWKError.decryptionKeyMissing();
+				if (!key.decryptionKey) throw JWKError.decryptionKeyMissing();
 				payload = await verifyToken(token, {
 					type: JWKType.OCT,
-					key: key.decryption_key
+					key: key.decryptionKey
 				}, { ignoreExpiry: options.ignoreExpiry });
 				break;
 			case JWKType.EC:
-				if (!key.encryption_key) throw JWKError.decryptionKeyMissing();
+				if (!key.encryptionKey) throw JWKError.decryptionKeyMissing();
 				payload = await verifyToken(token, {
 					type: key.type,
-					key: key.encryption_key,
-					...key.signature_algorithm ? { algorithms: [key.signature_algorithm] } : []
+					key: key.encryptionKey,
+					...key.signatureAlgorithm ? { algorithms: [key.signatureAlgorithm] } : []
 				}, { ignoreExpiry: options.ignoreExpiry });
 				break;
 			default:
-				if (!key.encryption_key) throw JWKError.decryptionKeyMissing();
+				if (!key.encryptionKey) throw JWKError.decryptionKeyMissing();
 				payload = await verifyToken(token, {
 					type: key.type,
-					key: key.encryption_key,
-					...key.signature_algorithm ? { algorithms: [key.signature_algorithm] } : []
+					key: key.encryptionKey,
+					...key.signatureAlgorithm ? { algorithms: [key.signatureAlgorithm] } : []
 				}, { ignoreExpiry: options.ignoreExpiry });
 		}
 		if (!payload.jti) throw JWTError.payloadPropertyInvalid("jti");

package/dist/core/oauth2/token/verifier/module.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"module.mjs","names":["extractTokenHeader","verifyToken","JWKError","JWKType","JWTError","OAuth2TokenVerifier","~~keyRepository~~","tokenRepository","isInactive","id","verify","token","options","payload","findOneBySignature","jti","payloadPropertyInvalid","skipActiveCheck","notActive","header","kid","headerPropertyInvalid","key","~~findById~~","notFound","type","OCT","~~decryption_key~~","decryptionKeyMissing","ignoreExpiry","EC","~~encryption_key~~","~~signature_algorithm~~","algorithms","saveWithSignature"],"sources":["../../../../../src/core/oauth2/token/verifier/module.ts"],"sourcesContent":["/\n Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n type TokenECAlgorithm,\n type TokenRSAAlgorithm,\n extractTokenHeader,\n verifyToken,\n} from '@authup/server-kit';\nimport type { OAuth2TokenPayload } from '@authup/specs';\nimport { JWKError, JWKType, JWTError } from '@authup/specs';\nimport type { ~~IOAuth2KeyRepository~~ } from '~~../../~~key/index.ts';\nimport type { IOAuth2TokenRepository } from '../repository/types.ts';\nimport type { IOAuth2TokenVerifier, OAuth2TokenVerifyOptions } from './types.ts';\n\nexport class OAuth2TokenVerifier implements IOAuth2TokenVerifier {\n protected ~~keyRepository~~ : ~~IOAuth2KeyRepository~~;\n\n protected tokenRepository : IOAuth2TokenRepository;\n\n constructor(\n ~~keyRepository~~ : ~~IOAuth2KeyRepository~~,\n tokenRepository : IOAuth2TokenRepository,\n ) {\n this.~~keyRepository~~ = ~~keyRepository~~;\n this.tokenRepository = tokenRepository;\n }\n\n async isInactive(id: string): Promise<boolean> {\n return this.tokenRepository.isInactive(id);\n }\n\n async verify(token: string, options: OAuth2TokenVerifyOptions = {}) : Promise<OAuth2TokenPayload> {\n let payload = await this.tokenRepository.findOneBySignature(token);\n if (payload) {\n if (!payload.jti) {\n throw JWTError.payloadPropertyInvalid('jti');\n }\n\n if (!options.skipActiveCheck) {\n const isInactive = await this.isInactive(payload.jti);\n if (isInactive) {\n throw JWTError.notActive();\n }\n }\n\n return payload;\n }\n\n const header = extractTokenHeader(token);\n if (!header.kid) {\n throw JWTError.headerPropertyInvalid('kid');\n }\n\n const key = await this.~~keyRepository~~.~~findById~~(header.kid);\n if (!key) {\n throw JWKError.notFound(header.kid);\n }\n\n switch (key.type) {\n case JWKType.OCT: {\n if (!key.~~decryption_key~~) {\n throw JWKError.decryptionKeyMissing();\n }\n\n payload = await verifyToken(\n token,\n {\n type: JWKType.OCT,\n key: key.~~decryption_key~~,\n },\n { ignoreExpiry: options.ignoreExpiry },\n );\n break;\n }\n case JWKType.EC: {\n if (!key.~~encryption_key~~) {\n throw JWKError.decryptionKeyMissing();\n }\n\n payload = await verifyToken(\n token,\n {\n type: key.type,\n key: key.~~encryption_key~~,\n ...(\n key.~~signature_algorithm~~ ?\n { algorithms: [key.~~signature_algorithm~~] } :\n []\n ) as TokenECAlgorithm[],\n },\n { ignoreExpiry: options.ignoreExpiry },\n );\n break;\n }\n default: {\n if (!key.~~encryption_key~~) {\n throw JWKError.decryptionKeyMissing();\n }\n\n payload = await verifyToken(\n token,\n {\n type: key.type,\n key: key.~~encryption_key~~,\n ...(\n key.~~signature_algorithm~~ ?\n { algorithms: [key.~~signature_algorithm~~] } :\n []\n ) as TokenRSAAlgorithm[],\n },\n { ignoreExpiry: options.ignoreExpiry },\n );\n }\n }\n\n if (!payload.jti) {\n throw JWTError.payloadPropertyInvalid('jti');\n }\n\n // Never populate the shared signature-keyed claims cache on the\n // exp-ignoring path. An expired token verified with `ignoreExpiry`\n // (the RP-initiated-logout id_token_hint) would otherwise be re-cached\n // with buildTTL's 1h fallback (a past exp yields a non-positive ttl),\n // and the cache-first branch above returns it with no exp re-check on\n // every subsequent verify — so `/token/introspect` would report an\n // expired token as active for up to an hour (RFC 7662). Keep the\n // exp-bypass scoped to this single call.\n if (!options.ignoreExpiry) {\n await this.tokenRepository.saveWithSignature(payload, token);\n }\n\n if (!options.skipActiveCheck) {\n const isInactive = await this.isInactive(payload.jti);\n if (isInactive) {\n throw JWTError.notActive();\n }\n }\n\n return payload;\n }\n}\n"],"mappings":"~~;;;;;;AAmBA~~,~~IAAaK~~,sBAAb,MAAaA;CACCC;CAEAC;CAEV,YACID,~~eACAC~~,iBACF;EACE,KAAKD,~~gBAAgBA~~;~~EACrB~~,KAAKC,kBAAkBA;CAC3B;CAEA,MAAMC,WAAWC,IAA8B;EAC3C,OAAO,KAAKF,gBAAgBC,WAAWC,EAAAA;CAC3C;CAEA,MAAMC,OAAOC,OAAeC,UAAoC,CAAC,GAAiC;EAC9F,IAAIC,UAAU,MAAM,KAAKN,gBAAgBO,mBAAmBH,KAAAA;EAC5D,IAAIE,SAAS;GACT,IAAI,CAACA,QAAQE,KACT,MAAMX,SAASY,uBAAuB,KAAA;GAG1C,IAAI,CAACJ,QAAQK;QAELT,MADqB,KAAKA,WAAWK,QAAQE,GAAG,GAEhD,MAAMX,SAASc,UAAS;GAAA;GAIhC,OAAOL;EACX;EAEA,MAAMM,~~SAASnB~~,~~mBAAmBW~~,KAAAA;EAClC,IAAI,CAACQ,OAAOC,KACR,MAAMhB,SAASiB,sBAAsB,KAAA;EAGzC,MAAMC,MAAM,MAAM,KAAKhB,~~cAAciB~~,~~SAASJ~~,OAAOC,GAAG;~~EACxD~~,IAAI,CAACE,KACD,~~MAAMpB~~,~~SAASsB~~,SAASL,OAAOC,GAAG;EAGtC,QAAQE,~~IAAIG~~,MAAZ;GACI,~~KAAKtB~~,~~QAAQuB~~;IACT,IAAI,~~CAACJ~~,~~IAAIK~~,~~gBACL~~,~~MAAMzB~~,~~SAAS0B~~,qBAAoB;~~IAGvCf~~,UAAU,~~MAAMZ~~,~~YACZU~~,OACA;~~KACIc~~,~~MAAMtB~~,~~QAAQuB~~;~~KACdJ~~,KAAKA,~~IAAIK~~;IACb,GACA,EAAEE,~~cAAcjB~~,~~QAAQiB~~,aAAa,CAAA;IAEzC;GAEJ,~~KAAK1B~~,~~QAAQ2B~~;IACT,IAAI,~~CAACR~~,~~IAAIS~~,~~gBACL~~,~~MAAM7B~~,~~SAAS0B~~,qBAAoB;~~IAGvCf~~,UAAU,~~MAAMZ~~,~~YACZU~~,OACA;~~KACIc~~,~~MAAMH~~,~~IAAIG~~;~~KACVH~~,KAAKA,~~IAAIS~~;KACT,~~GACIT~~,~~IAAIU~~,~~sBACA~~,EAAEC,YAAY,~~CAACX~~,~~IAAIU~~,~~mBAAAA~~,~~EAAqB~~,~~IACxC~~,CAAA;IAEZ,GACA,EAAEH,~~cAAcjB~~,~~QAAQiB~~,aAAa,CAAA;IAEzC;GAEJ;IACI,IAAI,~~CAACP~~,~~IAAIS~~,~~gBACL~~,~~MAAM7B~~,~~SAAS0B~~,qBAAoB;~~IAGvCf~~,UAAU,~~MAAMZ~~,~~YACZU~~,OACA;~~KACIc~~,~~MAAMH~~,~~IAAIG~~;~~KACVH~~,KAAKA,~~IAAIS~~;KACT,~~GACIT~~,~~IAAIU~~,~~sBACA~~,EAAEC,YAAY,~~CAACX~~,~~IAAIU~~,~~mBAAAA~~,~~EAAqB~~,~~IACxC~~,CAAA;IAEZ,GACA,EAAEH,~~cAAcjB~~,~~QAAQiB~~,aAAa,CAAA;EAGjD;EAEA,IAAI,~~CAAChB~~,QAAQE,KACT,MAAMX,SAASY,uBAAuB,KAAA;EAW1C,IAAI,CAACJ,~~QAAQiB~~,cACT,MAAM,~~KAAKtB~~,~~gBAAgB2B~~,~~kBAAkBrB~~,SAASF,KAAAA;EAG1D,IAAI,CAACC,QAAQK;OAELT,MADqB,KAAKA,WAAWK,QAAQE,GAAG,GAEhD,MAAMX,SAASc,UAAS;EAAA;EAIhC,OAAOL;CACX;AACJ"}
1	+ {"version":3,"file":"module.mjs","names":["extractTokenHeader","verifyToken","KeyStatus","JWKError","JWKType","JWKUse","JWTError","OAuth2TokenVerifier","keyStore","tokenRepository","isInactive","id","verify","token","options","payload","findOneBySignature","jti","payloadPropertyInvalid","skipActiveCheck","notActive","header","kid","headerPropertyInvalid","key","resolveById","notFound","use","SIGNATURE","status","DISABLED","type","OCT","decryptionKey","decryptionKeyMissing","ignoreExpiry","EC","encryptionKey","signatureAlgorithm","algorithms","saveWithSignature"],"sources":["../../../../../src/core/oauth2/token/verifier/module.ts"],"sourcesContent":["/\n Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n type TokenECAlgorithm,\n type TokenRSAAlgorithm,\n extractTokenHeader,\n verifyToken,\n} from '@authup/server-kit';\nimport { KeyStatus } from '@authup/core-kit';\nimport type { OAuth2TokenPayload } from '@authup/specs';\nimport {\n JWKError,\n JWKType,\n JWKUse,\n JWTError,\n} from '@authup/specs';\nimport type { IKeyStore } from '../../../key/index.ts';\nimport type { IOAuth2TokenRepository } from '../repository/types.ts';\nimport type { IOAuth2TokenVerifier, OAuth2TokenVerifyOptions } from './types.ts';\n\nexport class OAuth2TokenVerifier implements IOAuth2TokenVerifier {\n protected keyStore : IKeyStore;\n\n protected tokenRepository : IOAuth2TokenRepository;\n\n constructor(\n keyStore : IKeyStore,\n tokenRepository : IOAuth2TokenRepository,\n ) {\n this.keyStore = keyStore;\n this.tokenRepository = tokenRepository;\n }\n\n async isInactive(id: string): Promise<boolean> {\n return this.tokenRepository.isInactive(id);\n }\n\n async verify(token: string, options: OAuth2TokenVerifyOptions = {}) : Promise<OAuth2TokenPayload> {\n let payload = await this.tokenRepository.findOneBySignature(token);\n if (payload) {\n if (!payload.jti) {\n throw JWTError.payloadPropertyInvalid('jti');\n }\n\n if (!options.skipActiveCheck) {\n const isInactive = await this.isInactive(payload.jti);\n if (isInactive) {\n throw JWTError.notActive();\n }\n }\n\n return payload;\n }\n\n const header = extractTokenHeader(token);\n if (!header.kid) {\n throw JWTError.headerPropertyInvalid('kid');\n }\n\n const key = await this.keyStore.resolveById(header.kid);\n if (!key) {\n throw JWKError.notFound(header.kid);\n }\n\n // the key store also holds at-rest encryption keys (use: enc) —\n // those must never verify a token.\n if (key.use !== JWKUse.SIGNATURE) {\n throw JWKError.notFound(header.kid);\n }\n\n // disabled = neither signs nor verifies (passive still verifies).\n if (key.status === KeyStatus.DISABLED) {\n throw JWKError.notFound(header.kid);\n }\n\n switch (key.type) {\n case JWKType.OCT: {\n if (!key.decryptionKey) {\n throw JWKError.decryptionKeyMissing();\n }\n\n payload = await verifyToken(\n token,\n {\n type: JWKType.OCT,\n key: key.decryptionKey,\n },\n { ignoreExpiry: options.ignoreExpiry },\n );\n break;\n }\n case JWKType.EC: {\n if (!key.encryptionKey) {\n throw JWKError.decryptionKeyMissing();\n }\n\n payload = await verifyToken(\n token,\n {\n type: key.type,\n key: key.encryptionKey,\n ...(\n key.signatureAlgorithm ?\n { algorithms: [key.signatureAlgorithm] } :\n []\n ) as TokenECAlgorithm[],\n },\n { ignoreExpiry: options.ignoreExpiry },\n );\n break;\n }\n default: {\n if (!key.encryptionKey) {\n throw JWKError.decryptionKeyMissing();\n }\n\n payload = await verifyToken(\n token,\n {\n type: key.type,\n key: key.encryptionKey,\n ...(\n key.signatureAlgorithm ?\n { algorithms: [key.signatureAlgorithm] } :\n []\n ) as TokenRSAAlgorithm[],\n },\n { ignoreExpiry: options.ignoreExpiry },\n );\n }\n }\n\n if (!payload.jti) {\n throw JWTError.payloadPropertyInvalid('jti');\n }\n\n // Never populate the shared signature-keyed claims cache on the\n // exp-ignoring path. An expired token verified with `ignoreExpiry`\n // (the RP-initiated-logout id_token_hint) would otherwise be re-cached\n // with buildTTL's 1h fallback (a past exp yields a non-positive ttl),\n // and the cache-first branch above returns it with no exp re-check on\n // every subsequent verify — so `/token/introspect` would report an\n // expired token as active for up to an hour (RFC 7662). Keep the\n // exp-bypass scoped to this single call.\n if (!options.ignoreExpiry) {\n await this.tokenRepository.saveWithSignature(payload, token);\n }\n\n if (!options.skipActiveCheck) {\n const isInactive = await this.isInactive(payload.jti);\n if (isInactive) {\n throw JWTError.notActive();\n }\n }\n\n return payload;\n }\n}\n"],"mappings":";;;;;;;AAyBA,IAAaO,sBAAb,MAAaA;CACCC;CAEAC;CAEV,YACID,UACAC,iBACF;EACE,KAAKD,WAAWA;EAChB,KAAKC,kBAAkBA;CAC3B;CAEA,MAAMC,WAAWC,IAA8B;EAC3C,OAAO,KAAKF,gBAAgBC,WAAWC,EAAAA;CAC3C;CAEA,MAAMC,OAAOC,OAAeC,UAAoC,CAAC,GAAiC;EAC9F,IAAIC,UAAU,MAAM,KAAKN,gBAAgBO,mBAAmBH,KAAAA;EAC5D,IAAIE,SAAS;GACT,IAAI,CAACA,QAAQE,KACT,MAAMX,SAASY,uBAAuB,KAAA;GAG1C,IAAI,CAACJ,QAAQK;QAELT,MADqB,KAAKA,WAAWK,QAAQE,GAAG,GAEhD,MAAMX,SAASc,UAAS;GAAA;GAIhC,OAAOL;EACX;EAEA,MAAMM,SAASrB,mBAAmBa,KAAAA;EAClC,IAAI,CAACQ,OAAOC,KACR,MAAMhB,SAASiB,sBAAsB,KAAA;EAGzC,MAAMC,MAAM,MAAM,KAAKhB,SAASiB,YAAYJ,OAAOC,GAAG;EACtD,IAAI,CAACE,KACD,MAAMrB,SAASuB,SAASL,OAAOC,GAAG;EAKtC,IAAIE,IAAIG,QAAQtB,OAAOuB,WACnB,MAAMzB,SAASuB,SAASL,OAAOC,GAAG;EAItC,IAAIE,IAAIK,WAAW3B,UAAU4B,UACzB,MAAM3B,SAASuB,SAASL,OAAOC,GAAG;EAGtC,QAAQE,IAAIO,MAAZ;GACI,KAAK3B,QAAQ4B;IACT,IAAI,CAACR,IAAIS,eACL,MAAM9B,SAAS+B,qBAAoB;IAGvCnB,UAAU,MAAMd,YACZY,OACA;KACIkB,MAAM3B,QAAQ4B;KACdR,KAAKA,IAAIS;IACb,GACA,EAAEE,cAAcrB,QAAQqB,aAAa,CAAA;IAEzC;GAEJ,KAAK/B,QAAQgC;IACT,IAAI,CAACZ,IAAIa,eACL,MAAMlC,SAAS+B,qBAAoB;IAGvCnB,UAAU,MAAMd,YACZY,OACA;KACIkB,MAAMP,IAAIO;KACVP,KAAKA,IAAIa;KACT,GACIb,IAAIc,qBACA,EAAEC,YAAY,CAACf,IAAIc,kBAAAA,EAAoB,IACvC,CAAA;IAEZ,GACA,EAAEH,cAAcrB,QAAQqB,aAAa,CAAA;IAEzC;GAEJ;IACI,IAAI,CAACX,IAAIa,eACL,MAAMlC,SAAS+B,qBAAoB;IAGvCnB,UAAU,MAAMd,YACZY,OACA;KACIkB,MAAMP,IAAIO;KACVP,KAAKA,IAAIa;KACT,GACIb,IAAIc,qBACA,EAAEC,YAAY,CAACf,IAAIc,kBAAAA,EAAoB,IACvC,CAAA;IAEZ,GACA,EAAEH,cAAcrB,QAAQqB,aAAa,CAAA;EAGjD;EAEA,IAAI,CAACpB,QAAQE,KACT,MAAMX,SAASY,uBAAuB,KAAA;EAW1C,IAAI,CAACJ,QAAQqB,cACT,MAAM,KAAK1B,gBAAgB+B,kBAAkBzB,SAASF,KAAAA;EAG1D,IAAI,CAACC,QAAQK;OAELT,MADqB,KAAKA,WAAWK,QAAQE,GAAG,GAEhD,MAAMX,SAASc,UAAS;EAAA;EAIhC,OAAOL;CACX;AACJ"}

package/dist/core/provisioning/entities/index.d.ts CHANGED Viewed

@@ -2,7 +2,6 @@ export * from './client/index.ts';
 export * from './permission/index.ts';
 export * from './policy/index.ts';
 export * from './realm/index.ts';
-export * from './robot/index.ts';
 export * from './role/index.ts';
 export * from './root/index.ts';
 export * from './scope/index.ts';

package/dist/core/provisioning/entities/index.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/provisioning/entities/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,~~kBAAkB,CAAC;AACjC,cAAc,~~iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC"}
1	+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/provisioning/entities/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC"}

package/dist/core/provisioning/entities/index.mjs CHANGED Viewed

@@ -11,8 +11,6 @@ import { ClientProvisioningValidator } from "./client/validator.mjs";
 import "./client/index.mjs";
 import { PolicyProvisioningValidator } from "./policy/validator.mjs";
 import "./policy/index.mjs";
-import { RobotProvisioningValidator } from "./robot/validator.mjs";
-import "./robot/index.mjs";
 import { ScopeProvisioningValidator } from "./scope/validator.mjs";
 import "./scope/index.mjs";
 import { UserProvisioningValidator } from "./user/validator.mjs";
@@ -21,4 +19,4 @@ import { RealmProvisioningValidator } from "./realm/validator.mjs";
 import "./realm/index.mjs";
 import { RootProvisioningValidator } from "./root/validator.mjs";
 import "./root/index.mjs";
-export { ClientProvisioningValidator, PermissionProvisioningRelationsValidator, PermissionProvisioningValidator, PolicyProvisioningValidator, RealmProvisioningValidator, RobotProvisioningValidator, RoleProvisioningValidator, RootProvisioningValidator, ScopeProvisioningValidator, UserProvisioningValidator, createProvisioningEntitiesValidator };
+export { ClientProvisioningValidator, PermissionProvisioningRelationsValidator, PermissionProvisioningValidator, PolicyProvisioningValidator, RealmProvisioningValidator, RoleProvisioningValidator, RootProvisioningValidator, ScopeProvisioningValidator, UserProvisioningValidator, createProvisioningEntitiesValidator };

package/dist/core/provisioning/entities/policy/validator.d.ts CHANGED Viewed

@@ -1,6 +1,8 @@
+import type { ContainerInput, ContainerRunOptions } from 'validup';
 import { Container } from 'validup';
 import type { PolicyProvisioningEntity } from './types.ts';
 export declare class PolicyProvisioningValidator extends Container<PolicyProvisioningEntity> {
+    run(input?: ContainerInput<PolicyProvisioningEntity>, options?: ContainerRunOptions<PolicyProvisioningEntity>): Promise<PolicyProvisioningEntity>;
     protected initialize(): void;
 }
 //# sourceMappingURL=validator.d.ts.map

package/dist/core/provisioning/entities/policy/validator.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/policy/validator.ts"],"names":[],"mappings":"~~AASA~~,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;~~AAIpC~~,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAE3D,qBAAa,2BAA4B,SAAQ,SAAS,CAAC,wBAAwB,CAAC;~~IAChF~~,SAAS,CAAC,UAAU;CAmBvB"}
1	+ {"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/policy/validator.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,EAAE,SAAS,EAAiC,MAAM,SAAS,CAAC;AAInE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAE3D,qBAAa,2BAA4B,SAAQ,SAAS,CAAC,wBAAwB,CAAC;IACjE,GAAG,CACd,KAAK,CAAC,EAAE,cAAc,CAAC,wBAAwB,CAAC,EAChD,OAAO,CAAC,EAAE,mBAAmB,CAAC,wBAAwB,CAAC,GACxD,OAAO,CAAC,wBAAwB,CAAC;IAuBpC,SAAS,CAAC,UAAU;CAmBvB"}

package/dist/core/provisioning/entities/policy/validator.mjs CHANGED Viewed

@@ -5,11 +5,20 @@ import { ProvisioningStrategyValidator } from "../../strategy/validator.mjs";
 import "../../strategy/index.mjs";
 import { createProvisioningEntitiesValidator } from "../utils.mjs";
 import { PolicyValidator } from "@authup/core-kit";
-import { Container } from "validup";
+import { BuiltInPolicyType } from "@authup/access";
+import { Container, ValidupError, defineIssueItem } from "validup";
 import { createValidator } from "@validup/zod";
 import { z } from "zod";
 //#region src/core/provisioning/entities/policy/validator.ts
 var PolicyProvisioningValidator = class extends Container {
+	async run(input, options) {
+		const output = await super.run(input, options);
+		if (output.attributes?.type === BuiltInPolicyType.COMPOSITE && (!output.children || output.children.length === 0)) throw new ValidupError([defineIssueItem({
+			path: ["children"],
+			message: "A composite policy must define at least one child policy."
+		})]);
+		return output;
+	}
 	initialize() {
 		super.initialize();
 		const strategyValidator = new ProvisioningStrategyValidator();

package/dist/core/provisioning/entities/policy/validator.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"validator.mjs","names":["PolicyValidator","createValidator","Container","z","ProvisioningStrategyValidator","createProvisioningEntitiesValidator","PolicyProvisioningValidator","initialize","strategyValidator","mount","optional","attributesValidator","record","string","any","array","check"],"sources":["../../../../../src/core/provisioning/entities/policy/validator.ts"],"sourcesContent":["/\n Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { PolicyValidator } from '@authup/core-kit';\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\nimport { createProvisioningEntitiesValidator } from '../utils.ts';\nimport type { PolicyProvisioningEntity } from './types.ts';\n\nexport class PolicyProvisioningValidator extends Container<PolicyProvisioningEntity> {\n protected initialize() {\n super.initialize();\n\n const strategyValidator = new ProvisioningStrategyValidator();\n this.mount('strategy', { optional: true }, strategyValidator);\n\n const attributesValidator = new PolicyValidator();\n this.mount('attributes', attributesValidator);\n\n this.mount('extraAttributes', { optional: true }, createValidator(\n z.record(z.string(), z.any()),\n ));\n\n this.mount('children', { optional: true }, createValidator(\n z\n .array(z.any())\n .check(createProvisioningEntitiesValidator(this)),\n ));\n }\n}\n"],"mappings":"~~;;;;;;;;;;;AAeA~~,~~IAAaM~~,8BAAb,~~cAAiDJ~~,UAAAA;~~CACnCK~~,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,oBAAoB,~~IAAIJ~~,8BAAAA;EAC9B,~~KAAKK~~,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGF,iBAAAA;EAE3C,MAAMG,sBAAsB,~~IAAIX~~,gBAAAA;EAChC,~~KAAKS~~,MAAM,cAAcE,mBAAAA;EAEzB,KAAKF,MAAM,mBAAmB,EAAEC,UAAU,KAAK,~~GAAGT~~,~~gBAC9CE~~,~~EAAES~~,~~OAAOT~~,~~EAAEU~~,OAAM,~~GAAIV~~,~~EAAEW~~,IAAG,CAAA,CAAA,CAAA;EAG9B,KAAKL,MAAM,YAAY,EAAEC,UAAU,KAAK,~~GAAGT~~,~~gBACvCE~~,~~EACKY~~,~~MAAMZ~~,~~EAAEW~~,IAAG,CAAA,CAAA,CACXE,~~MAAMX~~,oCAAoC,IAAI,CAAA,CAAA,CAAA;CAE3D;AACJ"}
1	+ {"version":3,"file":"validator.mjs","names":["BuiltInPolicyType","PolicyValidator","createValidator","Container","ValidupError","defineIssueItem","z","ProvisioningStrategyValidator","createProvisioningEntitiesValidator","PolicyProvisioningValidator","run","input","options","output","attributes","type","COMPOSITE","children","length","path","message","initialize","strategyValidator","mount","optional","attributesValidator","record","string","any","array","check"],"sources":["../../../../../src/core/provisioning/entities/policy/validator.ts"],"sourcesContent":["/\n Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { BuiltInPolicyType } from '@authup/access';\nimport { PolicyValidator } from '@authup/core-kit';\nimport { createValidator } from '@validup/zod';\nimport type { ContainerInput, ContainerRunOptions } from 'validup';\nimport { Container, ValidupError, defineIssueItem } from 'validup';\nimport { z } from 'zod';\nimport { ProvisioningStrategyValidator } from '../../strategy/index.ts';\nimport { createProvisioningEntitiesValidator } from '../utils.ts';\nimport type { PolicyProvisioningEntity } from './types.ts';\n\nexport class PolicyProvisioningValidator extends Container<PolicyProvisioningEntity> {\n override async run(\n input?: ContainerInput<PolicyProvisioningEntity>,\n options?: ContainerRunOptions<PolicyProvisioningEntity>,\n ): Promise<PolicyProvisioningEntity> {\n const output = await super.run(input, options);\n\n // A composite policy with no children can never be satisfied and makes\n // any permission bound to it permanently un-grantable (#3304). Reject\n // it up front so provisioning fails at config load with a clear\n // message, rather than silently provisioning a \"stale\" permission that\n // only fails — with an opaque empty-issue error — once evaluated.\n if (\n output.attributes?.type === BuiltInPolicyType.COMPOSITE &&\n (!output.children \|\| output.children.length === 0)\n ) {\n throw new ValidupError([\n defineIssueItem({\n path: ['children'],\n message: 'A composite policy must define at least one child policy.',\n }),\n ]);\n }\n\n return output;\n }\n\n protected initialize() {\n super.initialize();\n\n const strategyValidator = new ProvisioningStrategyValidator();\n this.mount('strategy', { optional: true }, strategyValidator);\n\n const attributesValidator = new PolicyValidator();\n this.mount('attributes', attributesValidator);\n\n this.mount('extraAttributes', { optional: true }, createValidator(\n z.record(z.string(), z.any()),\n ));\n\n this.mount('children', { optional: true }, createValidator(\n z\n .array(z.any())\n .check(createProvisioningEntitiesValidator(this)),\n ));\n }\n}\n"],"mappings":";;;;;;;;;;;;AAiBA,IAAaS,8BAAb,cAAiDN,UAAAA;CAC7C,MAAeO,IACXC,OACAC,SACiC;EACjC,MAAMC,SAAS,MAAM,MAAMH,IAAIC,OAAOC,OAAAA;EAOtC,IACIC,OAAOC,YAAYC,SAASf,kBAAkBgB,cAC7C,CAACH,OAAOI,YAAYJ,OAAOI,SAASC,WAAW,IAEhD,MAAM,IAAId,aAAa,CACnBC,gBAAgB;GACZc,MAAM,CAAC,UAAA;GACPC,SAAS;EACb,CAAA,CAAA,CACH;EAGL,OAAOP;CACX;CAEUQ,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,oBAAoB,IAAIf,8BAAAA;EAC9B,KAAKgB,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGF,iBAAAA;EAE3C,MAAMG,sBAAsB,IAAIxB,gBAAAA;EAChC,KAAKsB,MAAM,cAAcE,mBAAAA;EAEzB,KAAKF,MAAM,mBAAmB,EAAEC,UAAU,KAAK,GAAGtB,gBAC9CI,EAAEoB,OAAOpB,EAAEqB,OAAM,GAAIrB,EAAEsB,IAAG,CAAA,CAAA,CAAA;EAG9B,KAAKL,MAAM,YAAY,EAAEC,UAAU,KAAK,GAAGtB,gBACvCI,EACKuB,MAAMvB,EAAEsB,IAAG,CAAA,CAAA,CACXE,MAAMtB,oCAAoC,IAAI,CAAA,CAAA,CAAA;CAE3D;AACJ"}

package/dist/core/provisioning/entities/realm/relations-validator.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"relations-validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/realm/relations-validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;~~AASpC~~,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAE7D,qBAAa,mCAAoC,SAAQ,SAAS,CAAC,0BAA0B,CAAC;IAC1F,SAAS,CAAC,UAAU;~~CA8CvB~~"}
1	+ {"version":3,"file":"relations-validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/realm/relations-validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAQpC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAE7D,qBAAa,mCAAoC,SAAQ,SAAS,CAAC,0BAA0B,CAAC;IAC1F,SAAS,CAAC,UAAU;CAuCvB"}

package/dist/core/provisioning/entities/realm/relations-validator.mjs CHANGED Viewed

@@ -8,8 +8,6 @@ import "../role/index.mjs";
 import { createProvisioningEntitiesValidator } from "../utils.mjs";
 import { ClientProvisioningValidator } from "../client/validator.mjs";
 import "../client/index.mjs";
-import { RobotProvisioningValidator } from "../robot/validator.mjs";
-import "../robot/index.mjs";
 import { ScopeProvisioningValidator } from "../scope/validator.mjs";
 import "../scope/index.mjs";
 import { UserProvisioningValidator } from "../user/validator.mjs";
@@ -24,13 +22,11 @@ var RealmProvisioningRelationsValidator = class extends Container {
 		const clientValidator = new ClientProvisioningValidator();
 		const roleValidator = new RoleProvisioningValidator();
 		const permissionValidator = new PermissionProvisioningValidator();
-		const robotValidator = new RobotProvisioningValidator();
 		const scopeValidator = new ScopeProvisioningValidator();
 		const userValidator = new UserProvisioningValidator();
 		this.mount("clients", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(clientValidator))));
 		this.mount("roles", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(roleValidator))));
 		this.mount("permissions", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(permissionValidator))));
-		this.mount("robots", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(robotValidator))));
 		this.mount("scopes", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(scopeValidator))));
 		this.mount("users", { optional: true }, createValidator(z.array(z.any()).check(createProvisioningEntitiesValidator(userValidator))));
 	}

package/dist/core/provisioning/entities/realm/relations-validator.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"relations-validator.mjs","names":["createValidator","Container","z","ClientProvisioningValidator","PermissionProvisioningValidator","~~RobotProvisioningValidator","~~RoleProvisioningValidator","ScopeProvisioningValidator","UserProvisioningValidator","createProvisioningEntitiesValidator","RealmProvisioningRelationsValidator","initialize","clientValidator","roleValidator","permissionValidator","~~robotValidator","~~scopeValidator","userValidator","mount","optional","array","any","check"],"sources":["../../../../../src/core/provisioning/entities/realm/relations-validator.ts"],"sourcesContent":["/\n Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport { ClientProvisioningValidator } from '../client/index.ts';\nimport { PermissionProvisioningValidator } from '../permission/index.ts';\nimport { ~~RobotProvisioningValidator } from '../robot/index.ts';\nimport {~~ RoleProvisioningValidator } from '../role/index.ts';\nimport { ScopeProvisioningValidator } from '../scope/index.ts';\nimport { UserProvisioningValidator } from '../user/index.ts';\nimport { createProvisioningEntitiesValidator } from '../utils.ts';\nimport type { RealmProvisioningRelations } from './types.ts';\n\nexport class RealmProvisioningRelationsValidator extends Container<RealmProvisioningRelations> {\n protected initialize() {\n super.initialize();\n\n const clientValidator = new ClientProvisioningValidator();\n const roleValidator = new RoleProvisioningValidator();\n const permissionValidator = new PermissionProvisioningValidator();\n const ~~robotValidator = new RobotProvisioningValidator();\n const~~ scopeValidator = new ScopeProvisioningValidator();\n const userValidator = new UserProvisioningValidator();\n\n this.mount('clients', { optional: true }, createValidator(\n z\n .array(z.any())\n .check(createProvisioningEntitiesValidator(clientValidator)),\n ));\n\n this.mount('roles', { optional: true }, createValidator(\n z\n .array(z.any())\n .check(createProvisioningEntitiesValidator(roleValidator)),\n ));\n\n this.mount('permissions', { optional: true }, createValidator(\n z\n .array(z.any())\n .check(createProvisioningEntitiesValidator(permissionValidator)),\n ));\n\n this.mount('robots', { optional: true }, createValidator(\n z\n .array(z.any())\n .check(createProvisioningEntitiesValidator(robotValidator)),\n ));\n\n this.mount('scopes', { optional: true }, createValidator(\n z\n .array(z.any())\n .check(createProvisioningEntitiesValidator(scopeValidator)),\n ));\n\n this.mount('users', { optional: true }, createValidator(\n z\n .array(z.any())\n .check(createProvisioningEntitiesValidator(userValidator)),\n ));\n }\n}\n"],"mappings":"~~;;;;;;;;;;;;;;;;;;;;AAmBA~~,~~IAAaU~~,sCAAb,~~cAAyDT~~,UAAAA;~~CAC3CU~~,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,kBAAkB,~~IAAIT~~,4BAAAA;EAC5B,~~MAAMU~~,gBAAgB,IAAIP,0BAAAA;EAC1B,MAAMQ,sBAAsB,~~IAAIV~~,gCAAAA;EAChC,~~MAAMW~~,iBAAiB,~~IAAIV~~,2BAAAA;EAC3B,~~MAAMW~~,~~iBAAiB,IAAIT,2BAAAA;EAC3B,MAAMU,~~gBAAgB,~~IAAIT~~,0BAAAA;EAE1B,~~KAAKU~~,MAAM,WAAW,EAAEC,UAAU,KAAK,~~GAAGnB~~,gBACtCE,~~EACKkB~~,~~MAAMlB~~,~~EAAEmB~~,IAAG,CAAA,CAAA,CACXC,~~MAAMb~~,oCAAoCG,eAAAA,CAAAA,CAAAA,CAAAA;EAGnD,~~KAAKM~~,MAAM,SAAS,EAAEC,UAAU,KAAK,~~GAAGnB~~,gBACpCE,~~EACKkB~~,~~MAAMlB~~,~~EAAEmB~~,IAAG,CAAA,CAAA,CACXC,~~MAAMb~~,oCAAoCI,aAAAA,CAAAA,CAAAA,CAAAA;EAGnD,~~KAAKK~~,MAAM,eAAe,EAAEC,UAAU,KAAK,~~GAAGnB~~,gBAC1CE,~~EACKkB~~,~~MAAMlB~~,~~EAAEmB~~,IAAG,CAAA,CAAA,CACXC,~~MAAMb~~,oCAAoCK,mBAAAA,CAAAA,CAAAA,CAAAA;EAGnD,~~KAAKI~~,MAAM,UAAU,EAAEC,UAAU,KAAK,~~GAAGnB~~,gBACrCE,~~EACKkB~~,~~MAAMlB~~,~~EAAEmB~~,IAAG,CAAA,CAAA,CACXC,~~MAAMb~~,oCAAoCM,cAAAA,CAAAA,CAAAA,CAAAA;EAGnD,~~KAAKG,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGnB,gBACrCE,EACKkB,MAAMlB,EAAEmB,IAAG,CAAA,CAAA,CACXC,MAAMb,oCAAoCO,cAAAA,CAAAA,CAAAA,CAAAA;EAGnD,~~KAAKE,MAAM,SAAS,EAAEC,UAAU,KAAK,~~GAAGnB~~,gBACpCE,~~EACKkB~~,~~MAAMlB~~,~~EAAEmB~~,IAAG,CAAA,CAAA,CACXC,~~MAAMb~~,~~oCAAoCQ~~,aAAAA,CAAAA,CAAAA,CAAAA;CAEvD;AACJ"}
1	+ {"version":3,"file":"relations-validator.mjs","names":["createValidator","Container","z","ClientProvisioningValidator","PermissionProvisioningValidator","RoleProvisioningValidator","ScopeProvisioningValidator","UserProvisioningValidator","createProvisioningEntitiesValidator","RealmProvisioningRelationsValidator","initialize","clientValidator","roleValidator","permissionValidator","scopeValidator","userValidator","mount","optional","array","any","check"],"sources":["../../../../../src/core/provisioning/entities/realm/relations-validator.ts"],"sourcesContent":["/\n Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport { ClientProvisioningValidator } from '../client/index.ts';\nimport { PermissionProvisioningValidator } from '../permission/index.ts';\nimport { RoleProvisioningValidator } from '../role/index.ts';\nimport { ScopeProvisioningValidator } from '../scope/index.ts';\nimport { UserProvisioningValidator } from '../user/index.ts';\nimport { createProvisioningEntitiesValidator } from '../utils.ts';\nimport type { RealmProvisioningRelations } from './types.ts';\n\nexport class RealmProvisioningRelationsValidator extends Container<RealmProvisioningRelations> {\n protected initialize() {\n super.initialize();\n\n const clientValidator = new ClientProvisioningValidator();\n const roleValidator = new RoleProvisioningValidator();\n const permissionValidator = new PermissionProvisioningValidator();\n const scopeValidator = new ScopeProvisioningValidator();\n const userValidator = new UserProvisioningValidator();\n\n this.mount('clients', { optional: true }, createValidator(\n z\n .array(z.any())\n .check(createProvisioningEntitiesValidator(clientValidator)),\n ));\n\n this.mount('roles', { optional: true }, createValidator(\n z\n .array(z.any())\n .check(createProvisioningEntitiesValidator(roleValidator)),\n ));\n\n this.mount('permissions', { optional: true }, createValidator(\n z\n .array(z.any())\n .check(createProvisioningEntitiesValidator(permissionValidator)),\n ));\n\n this.mount('scopes', { optional: true }, createValidator(\n z\n .array(z.any())\n .check(createProvisioningEntitiesValidator(scopeValidator)),\n ));\n\n this.mount('users', { optional: true }, createValidator(\n z\n .array(z.any())\n .check(createProvisioningEntitiesValidator(userValidator)),\n ));\n }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAkBA,IAAaS,sCAAb,cAAyDR,UAAAA;CAC3CS,aAAa;EACnB,MAAMA,WAAAA;EAEN,MAAMC,kBAAkB,IAAIR,4BAAAA;EAC5B,MAAMS,gBAAgB,IAAIP,0BAAAA;EAC1B,MAAMQ,sBAAsB,IAAIT,gCAAAA;EAChC,MAAMU,iBAAiB,IAAIR,2BAAAA;EAC3B,MAAMS,gBAAgB,IAAIR,0BAAAA;EAE1B,KAAKS,MAAM,WAAW,EAAEC,UAAU,KAAK,GAAGjB,gBACtCE,EACKgB,MAAMhB,EAAEiB,IAAG,CAAA,CAAA,CACXC,MAAMZ,oCAAoCG,eAAAA,CAAAA,CAAAA,CAAAA;EAGnD,KAAKK,MAAM,SAAS,EAAEC,UAAU,KAAK,GAAGjB,gBACpCE,EACKgB,MAAMhB,EAAEiB,IAAG,CAAA,CAAA,CACXC,MAAMZ,oCAAoCI,aAAAA,CAAAA,CAAAA,CAAAA;EAGnD,KAAKI,MAAM,eAAe,EAAEC,UAAU,KAAK,GAAGjB,gBAC1CE,EACKgB,MAAMhB,EAAEiB,IAAG,CAAA,CAAA,CACXC,MAAMZ,oCAAoCK,mBAAAA,CAAAA,CAAAA,CAAAA;EAGnD,KAAKG,MAAM,UAAU,EAAEC,UAAU,KAAK,GAAGjB,gBACrCE,EACKgB,MAAMhB,EAAEiB,IAAG,CAAA,CAAA,CACXC,MAAMZ,oCAAoCM,cAAAA,CAAAA,CAAAA,CAAAA;EAGnD,KAAKE,MAAM,SAAS,EAAEC,UAAU,KAAK,GAAGjB,gBACpCE,EACKgB,MAAMhB,EAAEiB,IAAG,CAAA,CAAA,CACXC,MAAMZ,oCAAoCO,aAAAA,CAAAA,CAAAA,CAAAA;CAEvD;AACJ"}

package/dist/core/provisioning/entities/realm/types.d.ts CHANGED Viewed

@@ -1,14 +1,12 @@
 import type { Realm } from '@authup/core-kit';
 import type { ClientProvisioningEntity } from '../client/index.ts';
 import type { PermissionProvisioningEntity } from '../permission';
-import type { RobotProvisioningEntity } from '../robot';
 import type { RoleProvisioningEntity } from '../role';
 import type { ScopeProvisioningEntity } from '../scope';
 import type { BaseProvisioningEntity } from '../types.ts';
 import type { UserProvisioningEntity } from '../user';
 export type RealmProvisioningRelations = {
     users?: UserProvisioningEntity[];
-    robots?: RobotProvisioningEntity[];
     clients?: ClientProvisioningEntity[];
     roles?: RoleProvisioningEntity[];
     scopes?: ScopeProvisioningEntity[];

package/dist/core/provisioning/entities/realm/types.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/realm/types.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,KAAK,EAAE,~~uBAAuB,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,KAAK,EAAE,~~sBAAsB,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAEtD,MAAM,MAAM,0BAA0B,GAAG;IACrC,KAAK,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAEjC,~~MAAM,CAAC,EAAE,uBAAuB,EAAE,CAAA;IAElC,~~OAAO,CAAC,EAAE,wBAAwB,EAAE,CAAA;IAGpC,KAAK,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAEjC,MAAM,CAAC,EAAE,uBAAuB,EAAE,CAAC;IAGnC,WAAW,CAAC,EAAE,4BAA4B,EAAE,CAAC;CAChD,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,sBAAsB,CAAC,KAAK,CAAC,GAAG;IAClE,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IAE1B,SAAS,CAAC,EAAE,0BAA0B,CAAA;CACzC,CAAC"}
1	+ {"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/realm/types.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAEtD,MAAM,MAAM,0BAA0B,GAAG;IACrC,KAAK,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAEjC,OAAO,CAAC,EAAE,wBAAwB,EAAE,CAAA;IAGpC,KAAK,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAEjC,MAAM,CAAC,EAAE,uBAAuB,EAAE,CAAC;IAGnC,WAAW,CAAC,EAAE,4BAA4B,EAAE,CAAC;CAChD,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,sBAAsB,CAAC,KAAK,CAAC,GAAG;IAClE,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IAE1B,SAAS,CAAC,EAAE,0BAA0B,CAAA;CACzC,CAAC"}

package/dist/core/provisioning/entities/role/types.d.ts CHANGED Viewed

@@ -11,13 +11,13 @@ export type RoleProvisioningRelations = {
      */
     globalPermissionsExclude?: string[];
     /**
-     * Default realm_scope (own | ownOrNull | any) to stamp on each
+     * Default realmScope (own | ownOrNull | any) to stamp on each
      * role-permission junction entry. Realm reach is a coarse, actor-relative
      * enum on the junction (not a policy).
      */
     globalPermissionsRealmScope?: RealmScope;
     /**
-     * Per-permission realm_scope overrides. Maps a realm_scope value to the
+     * Per-permission realmScope overrides. Maps a realmScope value to the
      * permission names that should use that scope instead of the default.
      */
     globalPermissionsRealmScopeOverrides?: Partial<Record<RealmScope, string[]>>;

package/dist/core/provisioning/index.mjs CHANGED Viewed

@@ -11,7 +11,6 @@ import { RoleProvisioningValidator } from "./entities/role/validator.mjs";
 import { createProvisioningEntitiesValidator } from "./entities/utils.mjs";
 import { ClientProvisioningValidator } from "./entities/client/validator.mjs";
 import { PolicyProvisioningValidator } from "./entities/policy/validator.mjs";
-import { RobotProvisioningValidator } from "./entities/robot/validator.mjs";
 import { ScopeProvisioningValidator } from "./entities/scope/validator.mjs";
 import { UserProvisioningValidator } from "./entities/user/validator.mjs";
 import { RealmProvisioningValidator } from "./entities/realm/validator.mjs";
@@ -25,8 +24,7 @@ import { PolicyProvisioningSynchronizer } from "./synchronizer/policy/module.mjs
 import { RealmProvisioningSynchronizer } from "./synchronizer/realm/module.mjs";
 import { RoleProvisioningSynchronizer } from "./synchronizer/role/module.mjs";
 import { GraphProvisioningSynchronizer } from "./synchronizer/root/module.mjs";
-import { RobotProvisioningSynchronizer } from "./synchronizer/robot/module.mjs";
 import { ScopeProvisioningSynchronizer } from "./synchronizer/scope/module.mjs";
 import { UserProvisioningSynchronizer } from "./synchronizer/user/module.mjs";
 import "./synchronizer/index.mjs";
-export { ClientProvisioningSynchronizer, ClientProvisioningValidator, GraphProvisioningSynchronizer, PermissionProvisioningRelationsValidator, PermissionProvisioningSynchronizer, PermissionProvisioningValidator, PolicyProvisioningSynchronizer, PolicyProvisioningValidator, ProvisioningEntityResolver, ProvisioningEntityStrategyType, ProvisioningJunctionSynchronizer, ProvisioningStrategyValidator, RealmProvisioningSynchronizer, RealmProvisioningValidator, RobotProvisioningSynchronizer, RobotProvisioningValidator, RoleProvisioningSynchronizer, RoleProvisioningValidator, RootProvisioningValidator, ScopeProvisioningSynchronizer, ScopeProvisioningValidator, UserProvisioningSynchronizer, UserProvisioningValidator, createProvisioningEntitiesValidator, normalizeEntityProvisioningStrategy };
+export { ClientProvisioningSynchronizer, ClientProvisioningValidator, GraphProvisioningSynchronizer, PermissionProvisioningRelationsValidator, PermissionProvisioningSynchronizer, PermissionProvisioningValidator, PolicyProvisioningSynchronizer, PolicyProvisioningValidator, ProvisioningEntityResolver, ProvisioningEntityStrategyType, ProvisioningJunctionSynchronizer, ProvisioningStrategyValidator, RealmProvisioningSynchronizer, RealmProvisioningValidator, RoleProvisioningSynchronizer, RoleProvisioningValidator, RootProvisioningValidator, ScopeProvisioningSynchronizer, ScopeProvisioningValidator, UserProvisioningSynchronizer, UserProvisioningValidator, createProvisioningEntitiesValidator, normalizeEntityProvisioningStrategy };

package/dist/core/provisioning/synchronizer/client/module.mjs CHANGED Viewed

@@ -24,13 +24,13 @@ var ClientProvisioningSynchronizer = class extends BaseProvisioningSynchronizer
 		this.roleResolver = new ProvisioningEntityResolver(ctx.roleRepository);
 		this.permissionJunction = new ProvisioningJunctionSynchronizer({
 			repository: ctx.clientPermissionRepository,
-			ownerKey: "client_id",
-			ownerRealmKey: "client_realm_id"
+			ownerKey: "clientId",
+			ownerRealmKey: "clientRealmId"
 		});
 		this.roleJunction = new ProvisioningJunctionSynchronizer({
 			repository: ctx.clientRoleRepository,
-			ownerKey: "client_id",
-			ownerRealmKey: "client_realm_id"
+			ownerKey: "clientId",
+			ownerRealmKey: "clientRealmId"
 		});
 		this.permissionSynchronizer = ctx.permissionSynchronizer;
 		this.roleSynchronizer = ctx.roleSynchronizer;
@@ -40,7 +40,7 @@ var ClientProvisioningSynchronizer = class extends BaseProvisioningSynchronizer
 		const strategy = normalizeEntityProvisioningStrategy(input.strategy);
 		let attributes = await this.clientRepository.findOneBy({
 			name: input.attributes.name,
-			realm_id: input.attributes.realm_id || null
+			realmId: input.attributes.realmId || null
 		});
 		if (strategy.type === ProvisioningEntityStrategyType.ABSENT) {
 			if (attributes) await this.clientRepository.remove(attributes);
@@ -60,13 +60,13 @@ var ClientProvisioningSynchronizer = class extends BaseProvisioningSynchronizer
 				break;
 		}
 		else attributes = await this.clientRepository.save(this.clientRepository.create(input.attributes));
-		const permissions = [...await this.permissionResolver.resolveGlobal(input.relations && input.relations.globalPermissions), ...attributes.realm_id ? await this.permissionResolver.resolveRealm(input.relations && input.relations.realmPermissions, attributes.realm_id) : []];
-		if (permissions.length > 0) await this.permissionJunction.synchronize(attributes, permissions, "permission_id", "permission_realm_id");
-		const roles = [...await this.roleResolver.resolveGlobal(input.relations && input.relations.globalRoles), ...attributes.realm_id ? await this.roleResolver.resolveRealm(input.relations && input.relations.realmRoles, attributes.realm_id) : []];
-		if (roles.length > 0) await this.roleJunction.synchronize(attributes, roles, "role_id", "role_realm_id");
+		const permissions = [...await this.permissionResolver.resolveGlobal(input.relations && input.relations.globalPermissions), ...attributes.realmId ? await this.permissionResolver.resolveRealm(input.relations && input.relations.realmPermissions, attributes.realmId) : []];
+		if (permissions.length > 0) await this.permissionJunction.synchronize(attributes, permissions, "permissionId", "permissionRealmId");
+		const roles = [...await this.roleResolver.resolveGlobal(input.relations && input.relations.globalRoles), ...attributes.realmId ? await this.roleResolver.resolveRealm(input.relations && input.relations.realmRoles, attributes.realmId) : []];
+		if (roles.length > 0) await this.roleJunction.synchronize(attributes, roles, "roleId", "roleRealmId");
 		if (input.relations && input.relations.permissions) {
 			const children = input.relations.permissions.map((child) => {
-				child.attributes.client_id = attributes.id;
+				child.attributes.clientId = attributes.id;
 				child.attributes.client = attributes;
 				return child;
 			});
@@ -74,7 +74,7 @@ var ClientProvisioningSynchronizer = class extends BaseProvisioningSynchronizer
 		}
 		if (input.relations && input.relations.roles) {
 			const children = input.relations.roles.map((child) => {
-				child.attributes.client_id = attributes.id;
+				child.attributes.clientId = attributes.id;
 				child.attributes.client = attributes;
 				return child;
 			});

package/dist/core/provisioning/synchronizer/client/module.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"module.mjs","names":["pickRecord","ProvisioningEntityStrategyType","normalizeEntityProvisioningStrategy","BaseProvisioningSynchronizer","ProvisioningEntityResolver","ProvisioningJunctionSynchronizer","ClientProvisioningSynchronizer","clientRepository","permissionResolver","roleResolver","permissionJunction","roleJunction","permissionSynchronizer","roleSynchronizer","ctx","permissionRepository","roleRepository","repository","clientPermissionRepository","ownerKey","ownerRealmKey","clientRoleRepository","synchronize","input","canonicalizeName","attributes","strategy","findOneBy","name","~~realm_id~~","type","ABSENT","remove","MERGE","merge","save","REPLACE","id","create","permissions","resolveGlobal","relations","globalPermissions","resolveRealm","realmPermissions","length","roles","globalRoles","realmRoles","children","map","child","~~client_id~~","client","synchronizeMany"],"sources":["../../../../../src/core/provisioning/synchronizer/client/module.ts"],"sourcesContent":["/\n Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n ClientPermission, \n ClientRole, \n Permission, \n Role,\n} from '@authup/core-kit';\nimport { pickRecord } from '@authup/kit';\nimport type { IClientRepository } from '../../../entities/index.ts';\nimport type { ClientProvisioningEntity } from '../../entities/client';\nimport type { PermissionProvisioningEntity } from '../../entities/permission';\nimport type { RoleProvisioningEntity } from '../../entities/role';\nimport { ProvisioningEntityStrategyType, normalizeEntityProvisioningStrategy } from '../../strategy/index.ts';\nimport type { IProvisioningSynchronizer } from '../../types.ts';\nimport { BaseProvisioningSynchronizer } from '../base.ts';\nimport { ProvisioningEntityResolver } from '../entity-resolver.ts';\nimport { ProvisioningJunctionSynchronizer } from '../junction-synchronizer.ts';\nimport type { ClientProvisioningSynchronizerContext } from './types.ts';\n\nexport class ClientProvisioningSynchronizer extends BaseProvisioningSynchronizer<ClientProvisioningEntity> {\n protected clientRepository: IClientRepository;\n\n protected permissionResolver: ProvisioningEntityResolver<Permission>;\n\n protected roleResolver: ProvisioningEntityResolver<Role>;\n\n protected permissionJunction: ProvisioningJunctionSynchronizer<ClientPermission>;\n\n protected roleJunction: ProvisioningJunctionSynchronizer<ClientRole>;\n\n protected permissionSynchronizer: IProvisioningSynchronizer<PermissionProvisioningEntity>;\n\n protected roleSynchronizer: IProvisioningSynchronizer<RoleProvisioningEntity>;\n\n constructor(ctx: ClientProvisioningSynchronizerContext) {\n super();\n\n this.clientRepository = ctx.clientRepository;\n\n this.permissionResolver = new ProvisioningEntityResolver(ctx.permissionRepository);\n this.roleResolver = new ProvisioningEntityResolver(ctx.roleRepository);\n\n this.permissionJunction = new ProvisioningJunctionSynchronizer({\n repository: ctx.clientPermissionRepository,\n ownerKey: '~~client_id~~',\n ownerRealmKey: '~~client_realm_id~~',\n });\n this.roleJunction = new ProvisioningJunctionSynchronizer({\n repository: ctx.clientRoleRepository,\n ownerKey: '~~client_id~~',\n ownerRealmKey: '~~client_realm_id~~',\n });\n\n this.permissionSynchronizer = ctx.permissionSynchronizer;\n this.roleSynchronizer = ctx.roleSynchronizer;\n }\n\n async synchronize(input: ClientProvisioningEntity): Promise<ClientProvisioningEntity> {\n this.canonicalizeName(input.attributes);\n\n const strategy = normalizeEntityProvisioningStrategy(input.strategy);\n\n let attributes = await this.clientRepository.findOneBy({\n name: input.attributes.name,\n ~~realm_id~~: input.attributes.~~realm_id~~ \|\| null,\n });\n\n if (strategy.type === ProvisioningEntityStrategyType.ABSENT) {\n if (attributes) {\n await this.clientRepository.remove(attributes);\n }\n return {\n ...input,\n attributes: attributes \|\| input.attributes, \n };\n }\n\n if (attributes) {\n switch (strategy.type) {\n case ProvisioningEntityStrategyType.MERGE:\n attributes = this.clientRepository.merge(\n attributes,\n strategy.attributes ?\n pickRecord(input.attributes, strategy.attributes) :\n input.attributes,\n );\n attributes = await this.clientRepository.save(attributes);\n break;\n case ProvisioningEntityStrategyType.REPLACE:\n input.attributes.id = attributes.id;\n attributes = await this.clientRepository.save(this.clientRepository.create(input.attributes));\n break;\n }\n } else {\n attributes = await this.clientRepository.save(this.clientRepository.create(input.attributes));\n }\n\n // Permissions (Global + Realm)\n const permissions = [\n ...await this.permissionResolver.resolveGlobal(\n input.relations && input.relations.globalPermissions,\n ),\n ...(attributes.~~realm_id~~ ?\n await this.permissionResolver.resolveRealm(\n input.relations && input.relations.realmPermissions,\n attributes.~~realm_id~~,\n ) :\n []),\n ];\n\n if (permissions.length > 0) {\n await this.permissionJunction.synchronize(\n attributes,\n permissions,\n '~~permission_id~~',\n '~~permission_realm_id~~',\n );\n }\n\n // Roles (Global + Realm)\n const roles = [\n ...await this.roleResolver.resolveGlobal(\n input.relations && input.relations.globalRoles,\n ),\n ...(attributes.~~realm_id~~ ?\n await this.roleResolver.resolveRealm(\n input.relations && input.relations.realmRoles,\n attributes.~~realm_id~~,\n ) :\n []),\n ];\n\n if (roles.length > 0) {\n await this.roleJunction.synchronize(\n attributes,\n roles,\n '~~role_id~~',\n '~~role_realm_id~~',\n );\n }\n\n // Containers\n\n if (input.relations && input.relations.permissions) {\n const children = input.relations.permissions.map((child) => {\n child.attributes.~~client_id~~ = attributes.id;\n child.attributes.client = attributes;\n return child;\n });\n\n await this.permissionSynchronizer.synchronizeMany(children);\n }\n\n if (input.relations && input.relations.roles) {\n const children = input.relations.roles.map((child) => {\n child.attributes.~~client_id~~ = attributes.id;\n child.attributes.client = attributes;\n return child;\n });\n\n await this.roleSynchronizer.synchronizeMany(children);\n }\n\n return {\n ...input,\n attributes,\n };\n }\n}\n"],"mappings":";;;;;;;;;;;AAyBA,IAAaM,iCAAb,cAAoDH,6BAAAA;CACtCI;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEV,YAAYC,KAA4C;EACpD,MAAK;EAEL,KAAKP,mBAAmBO,IAAIP;EAE5B,KAAKC,qBAAqB,IAAIJ,2BAA2BU,IAAIC,oBAAoB;EACjF,KAAKN,eAAe,IAAIL,2BAA2BU,IAAIE,cAAc;EAErE,KAAKN,qBAAqB,IAAIL,iCAAiC;GAC3DY,YAAYH,IAAII;GAChBC,UAAU;GACVC,eAAe;EACnB,CAAA;EACA,KAAKT,eAAe,IAAIN,iCAAiC;GACrDY,YAAYH,IAAIO;GAChBF,UAAU;GACVC,eAAe;EACnB,CAAA;EAEA,KAAKR,yBAAyBE,IAAIF;EAClC,KAAKC,mBAAmBC,IAAID;CAChC;CAEA,MAAMS,YAAYC,OAAoE;EAClF,KAAKC,iBAAiBD,MAAME,UAAU;EAEtC,MAAMC,WAAWxB,oCAAoCqB,MAAMG,QAAQ;EAEnE,IAAID,aAAa,MAAM,KAAKlB,iBAAiBoB,UAAU;GACnDC,MAAML,MAAME,WAAWG;GACvBC,~~UAAUN~~,MAAME,WAAWI,~~YAAY~~;~~EAC3C~~,CAAA;EAEA,IAAIH,SAASI,SAAS7B,+BAA+B8B,QAAQ;GACzD,IAAIN,YACA,MAAM,KAAKlB,iBAAiByB,OAAOP,UAAAA;GAEvC,OAAO;IACH,GAAGF;IACHE,YAAYA,cAAcF,MAAME;GACpC;EACJ;EAEA,IAAIA,YACA,QAAQC,SAASI,MAAjB;GACI,KAAK7B,+BAA+BgC;IAChCR,aAAa,KAAKlB,iBAAiB2B,MAC/BT,YACAC,SAASD,aACLzB,WAAWuB,MAAME,YAAYC,SAASD,UAAU,IAChDF,MAAME,UAAU;IAExBA,aAAa,MAAM,KAAKlB,iBAAiB4B,KAAKV,UAAAA;IAC9C;GACJ,KAAKxB,+BAA+BmC;IAChCb,MAAME,WAAWY,KAAKZ,WAAWY;IACjCZ,aAAa,MAAM,KAAKlB,iBAAiB4B,KAAK,KAAK5B,iBAAiB+B,OAAOf,MAAME,UAAU,CAAA;IAC3F;EACR;OAEAA,aAAa,MAAM,KAAKlB,iBAAiB4B,KAAK,KAAK5B,iBAAiB+B,OAAOf,MAAME,UAAU,CAAA;EAI/F,MAAMc,cAAc,CAAA,GACb,MAAM,KAAK/B,mBAAmBgC,cAC7BjB,MAAMkB,aAAalB,MAAMkB,UAAUC,iBAAiB,GAAA,GAEpDjB,WAAWI,~~WACX~~,MAAM,KAAKrB,mBAAmBmC,aAC1BpB,MAAMkB,aAAalB,MAAMkB,UAAUG,kBACnCnB,WAAWI,~~QAAQ~~,~~IAEvB~~,CAAA,CAAA;EAGR,IAAIU,YAAYM,SAAS,GACrB,MAAM,KAAKnC,mBAAmBY,YAC1BG,YACAc,aACA,~~iBACA~~,~~qBAAA~~;EAKR,MAAMO,QAAQ,CAAA,GACP,MAAM,KAAKrC,aAAa+B,cACvBjB,MAAMkB,aAAalB,MAAMkB,UAAUM,WAAW,GAAA,GAE9CtB,WAAWI,~~WACX~~,MAAM,KAAKpB,aAAakC,aACpBpB,MAAMkB,aAAalB,MAAMkB,UAAUO,YACnCvB,WAAWI,~~QAAQ~~,~~IAEvB~~,CAAA,CAAA;EAGR,IAAIiB,MAAMD,SAAS,GACf,MAAM,KAAKlC,aAAaW,YACpBG,YACAqB,OACA,~~WACA~~,~~eAAA~~;EAMR,IAAIvB,MAAMkB,aAAalB,MAAMkB,UAAUF,aAAa;GAChD,MAAMU,WAAW1B,MAAMkB,UAAUF,YAAYW,KAAKC,UAAAA;IAC9CA,MAAM1B,WAAW2B,~~YAAY3B~~,WAAWY;~~IACxCc~~,MAAM1B,WAAW4B,SAAS5B;IAC1B,OAAO0B;GACX,CAAA;GAEA,MAAM,KAAKvC,uBAAuB0C,gBAAgBL,QAAAA;EACtD;EAEA,IAAI1B,MAAMkB,aAAalB,MAAMkB,UAAUK,OAAO;GAC1C,MAAMG,WAAW1B,MAAMkB,UAAUK,MAAMI,KAAKC,UAAAA;IACxCA,MAAM1B,WAAW2B,~~YAAY3B~~,WAAWY;~~IACxCc~~,MAAM1B,WAAW4B,SAAS5B;IAC1B,OAAO0B;GACX,CAAA;GAEA,MAAM,KAAKtC,iBAAiByC,gBAAgBL,QAAAA;EAChD;EAEA,OAAO;GACH,GAAG1B;GACHE;EACJ;CACJ;AACJ"}
1	+ {"version":3,"file":"module.mjs","names":["pickRecord","ProvisioningEntityStrategyType","normalizeEntityProvisioningStrategy","BaseProvisioningSynchronizer","ProvisioningEntityResolver","ProvisioningJunctionSynchronizer","ClientProvisioningSynchronizer","clientRepository","permissionResolver","roleResolver","permissionJunction","roleJunction","permissionSynchronizer","roleSynchronizer","ctx","permissionRepository","roleRepository","repository","clientPermissionRepository","ownerKey","ownerRealmKey","clientRoleRepository","synchronize","input","canonicalizeName","attributes","strategy","findOneBy","name","realmId","type","ABSENT","remove","MERGE","merge","save","REPLACE","id","create","permissions","resolveGlobal","relations","globalPermissions","resolveRealm","realmPermissions","length","roles","globalRoles","realmRoles","children","map","child","clientId","client","synchronizeMany"],"sources":["../../../../../src/core/provisioning/synchronizer/client/module.ts"],"sourcesContent":["/\n Copyright (c) 2026-2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n ClientPermission, \n ClientRole, \n Permission, \n Role,\n} from '@authup/core-kit';\nimport { pickRecord } from '@authup/kit';\nimport type { IClientRepository } from '../../../entities/index.ts';\nimport type { ClientProvisioningEntity } from '../../entities/client';\nimport type { PermissionProvisioningEntity } from '../../entities/permission';\nimport type { RoleProvisioningEntity } from '../../entities/role';\nimport { ProvisioningEntityStrategyType, normalizeEntityProvisioningStrategy } from '../../strategy/index.ts';\nimport type { IProvisioningSynchronizer } from '../../types.ts';\nimport { BaseProvisioningSynchronizer } from '../base.ts';\nimport { ProvisioningEntityResolver } from '../entity-resolver.ts';\nimport { ProvisioningJunctionSynchronizer } from '../junction-synchronizer.ts';\nimport type { ClientProvisioningSynchronizerContext } from './types.ts';\n\nexport class ClientProvisioningSynchronizer extends BaseProvisioningSynchronizer<ClientProvisioningEntity> {\n protected clientRepository: IClientRepository;\n\n protected permissionResolver: ProvisioningEntityResolver<Permission>;\n\n protected roleResolver: ProvisioningEntityResolver<Role>;\n\n protected permissionJunction: ProvisioningJunctionSynchronizer<ClientPermission>;\n\n protected roleJunction: ProvisioningJunctionSynchronizer<ClientRole>;\n\n protected permissionSynchronizer: IProvisioningSynchronizer<PermissionProvisioningEntity>;\n\n protected roleSynchronizer: IProvisioningSynchronizer<RoleProvisioningEntity>;\n\n constructor(ctx: ClientProvisioningSynchronizerContext) {\n super();\n\n this.clientRepository = ctx.clientRepository;\n\n this.permissionResolver = new ProvisioningEntityResolver(ctx.permissionRepository);\n this.roleResolver = new ProvisioningEntityResolver(ctx.roleRepository);\n\n this.permissionJunction = new ProvisioningJunctionSynchronizer({\n repository: ctx.clientPermissionRepository,\n ownerKey: 'clientId',\n ownerRealmKey: 'clientRealmId',\n });\n this.roleJunction = new ProvisioningJunctionSynchronizer({\n repository: ctx.clientRoleRepository,\n ownerKey: 'clientId',\n ownerRealmKey: 'clientRealmId',\n });\n\n this.permissionSynchronizer = ctx.permissionSynchronizer;\n this.roleSynchronizer = ctx.roleSynchronizer;\n }\n\n async synchronize(input: ClientProvisioningEntity): Promise<ClientProvisioningEntity> {\n this.canonicalizeName(input.attributes);\n\n const strategy = normalizeEntityProvisioningStrategy(input.strategy);\n\n let attributes = await this.clientRepository.findOneBy({\n name: input.attributes.name,\n realmId: input.attributes.realmId \|\| null,\n });\n\n if (strategy.type === ProvisioningEntityStrategyType.ABSENT) {\n if (attributes) {\n await this.clientRepository.remove(attributes);\n }\n return {\n ...input,\n attributes: attributes \|\| input.attributes, \n };\n }\n\n if (attributes) {\n switch (strategy.type) {\n case ProvisioningEntityStrategyType.MERGE:\n attributes = this.clientRepository.merge(\n attributes,\n strategy.attributes ?\n pickRecord(input.attributes, strategy.attributes) :\n input.attributes,\n );\n attributes = await this.clientRepository.save(attributes);\n break;\n case ProvisioningEntityStrategyType.REPLACE:\n input.attributes.id = attributes.id;\n attributes = await this.clientRepository.save(this.clientRepository.create(input.attributes));\n break;\n }\n } else {\n attributes = await this.clientRepository.save(this.clientRepository.create(input.attributes));\n }\n\n // Permissions (Global + Realm)\n const permissions = [\n ...await this.permissionResolver.resolveGlobal(\n input.relations && input.relations.globalPermissions,\n ),\n ...(attributes.realmId ?\n await this.permissionResolver.resolveRealm(\n input.relations && input.relations.realmPermissions,\n attributes.realmId,\n ) :\n []),\n ];\n\n if (permissions.length > 0) {\n await this.permissionJunction.synchronize(\n attributes,\n permissions,\n 'permissionId',\n 'permissionRealmId',\n );\n }\n\n // Roles (Global + Realm)\n const roles = [\n ...await this.roleResolver.resolveGlobal(\n input.relations && input.relations.globalRoles,\n ),\n ...(attributes.realmId ?\n await this.roleResolver.resolveRealm(\n input.relations && input.relations.realmRoles,\n attributes.realmId,\n ) :\n []),\n ];\n\n if (roles.length > 0) {\n await this.roleJunction.synchronize(\n attributes,\n roles,\n 'roleId',\n 'roleRealmId',\n );\n }\n\n // Containers\n\n if (input.relations && input.relations.permissions) {\n const children = input.relations.permissions.map((child) => {\n child.attributes.clientId = attributes.id;\n child.attributes.client = attributes;\n return child;\n });\n\n await this.permissionSynchronizer.synchronizeMany(children);\n }\n\n if (input.relations && input.relations.roles) {\n const children = input.relations.roles.map((child) => {\n child.attributes.clientId = attributes.id;\n child.attributes.client = attributes;\n return child;\n });\n\n await this.roleSynchronizer.synchronizeMany(children);\n }\n\n return {\n ...input,\n attributes,\n };\n }\n}\n"],"mappings":";;;;;;;;;;;AAyBA,IAAaM,iCAAb,cAAoDH,6BAAAA;CACtCI;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEAC;CAEV,YAAYC,KAA4C;EACpD,MAAK;EAEL,KAAKP,mBAAmBO,IAAIP;EAE5B,KAAKC,qBAAqB,IAAIJ,2BAA2BU,IAAIC,oBAAoB;EACjF,KAAKN,eAAe,IAAIL,2BAA2BU,IAAIE,cAAc;EAErE,KAAKN,qBAAqB,IAAIL,iCAAiC;GAC3DY,YAAYH,IAAII;GAChBC,UAAU;GACVC,eAAe;EACnB,CAAA;EACA,KAAKT,eAAe,IAAIN,iCAAiC;GACrDY,YAAYH,IAAIO;GAChBF,UAAU;GACVC,eAAe;EACnB,CAAA;EAEA,KAAKR,yBAAyBE,IAAIF;EAClC,KAAKC,mBAAmBC,IAAID;CAChC;CAEA,MAAMS,YAAYC,OAAoE;EAClF,KAAKC,iBAAiBD,MAAME,UAAU;EAEtC,MAAMC,WAAWxB,oCAAoCqB,MAAMG,QAAQ;EAEnE,IAAID,aAAa,MAAM,KAAKlB,iBAAiBoB,UAAU;GACnDC,MAAML,MAAME,WAAWG;GACvBC,SAASN,MAAME,WAAWI,WAAW;EACzC,CAAA;EAEA,IAAIH,SAASI,SAAS7B,+BAA+B8B,QAAQ;GACzD,IAAIN,YACA,MAAM,KAAKlB,iBAAiByB,OAAOP,UAAAA;GAEvC,OAAO;IACH,GAAGF;IACHE,YAAYA,cAAcF,MAAME;GACpC;EACJ;EAEA,IAAIA,YACA,QAAQC,SAASI,MAAjB;GACI,KAAK7B,+BAA+BgC;IAChCR,aAAa,KAAKlB,iBAAiB2B,MAC/BT,YACAC,SAASD,aACLzB,WAAWuB,MAAME,YAAYC,SAASD,UAAU,IAChDF,MAAME,UAAU;IAExBA,aAAa,MAAM,KAAKlB,iBAAiB4B,KAAKV,UAAAA;IAC9C;GACJ,KAAKxB,+BAA+BmC;IAChCb,MAAME,WAAWY,KAAKZ,WAAWY;IACjCZ,aAAa,MAAM,KAAKlB,iBAAiB4B,KAAK,KAAK5B,iBAAiB+B,OAAOf,MAAME,UAAU,CAAA;IAC3F;EACR;OAEAA,aAAa,MAAM,KAAKlB,iBAAiB4B,KAAK,KAAK5B,iBAAiB+B,OAAOf,MAAME,UAAU,CAAA;EAI/F,MAAMc,cAAc,CAAA,GACb,MAAM,KAAK/B,mBAAmBgC,cAC7BjB,MAAMkB,aAAalB,MAAMkB,UAAUC,iBAAiB,GAAA,GAEpDjB,WAAWI,UACX,MAAM,KAAKrB,mBAAmBmC,aAC1BpB,MAAMkB,aAAalB,MAAMkB,UAAUG,kBACnCnB,WAAWI,OAAO,IAEtB,CAAA,CAAA;EAGR,IAAIU,YAAYM,SAAS,GACrB,MAAM,KAAKnC,mBAAmBY,YAC1BG,YACAc,aACA,gBACA,mBAAA;EAKR,MAAMO,QAAQ,CAAA,GACP,MAAM,KAAKrC,aAAa+B,cACvBjB,MAAMkB,aAAalB,MAAMkB,UAAUM,WAAW,GAAA,GAE9CtB,WAAWI,UACX,MAAM,KAAKpB,aAAakC,aACpBpB,MAAMkB,aAAalB,MAAMkB,UAAUO,YACnCvB,WAAWI,OAAO,IAEtB,CAAA,CAAA;EAGR,IAAIiB,MAAMD,SAAS,GACf,MAAM,KAAKlC,aAAaW,YACpBG,YACAqB,OACA,UACA,aAAA;EAMR,IAAIvB,MAAMkB,aAAalB,MAAMkB,UAAUF,aAAa;GAChD,MAAMU,WAAW1B,MAAMkB,UAAUF,YAAYW,KAAKC,UAAAA;IAC9CA,MAAM1B,WAAW2B,WAAW3B,WAAWY;IACvCc,MAAM1B,WAAW4B,SAAS5B;IAC1B,OAAO0B;GACX,CAAA;GAEA,MAAM,KAAKvC,uBAAuB0C,gBAAgBL,QAAAA;EACtD;EAEA,IAAI1B,MAAMkB,aAAalB,MAAMkB,UAAUK,OAAO;GAC1C,MAAMG,WAAW1B,MAAMkB,UAAUK,MAAMI,KAAKC,UAAAA;IACxCA,MAAM1B,WAAW2B,WAAW3B,WAAWY;IACvCc,MAAM1B,WAAW4B,SAAS5B;IAC1B,OAAO0B;GACX,CAAA;GAEA,MAAM,KAAKtC,iBAAiByC,gBAAgBL,QAAAA;EAChD;EAEA,OAAO;GACH,GAAG1B;GACHE;EACJ;CACJ;AACJ"}

package/dist/core/provisioning/synchronizer/entity-resolver.mjs CHANGED Viewed

@@ -11,39 +11,39 @@ var ProvisioningEntityResolver = class {
 		if (!names || names.length === 0) return [];
 		names = names.map((name) => name.trim().toLowerCase());
 		if (names.includes("*")) return this.repository.findManyBy({
-			realm_id: null,
-			client_id: null
+			realmId: null,
+			clientId: null
 		});
 		return this.repository.findManyBy({
 			name: names,
-			realm_id: null,
-			client_id: null
+			realmId: null,
+			clientId: null
 		});
 	}
 	async resolveRealm(names, realmId) {
 		if (!names || names.length === 0) return [];
 		names = names.map((name) => name.trim().toLowerCase());
 		if (names.includes("*")) return this.repository.findManyBy({
-			realm_id: realmId,
-			client_id: null
+			realmId,
+			clientId: null
 		});
 		return this.repository.findManyBy({
 			name: names,
-			realm_id: realmId,
-			client_id: null
+			realmId,
+			clientId: null
 		});
 	}
 	async resolveClient(names, realmId, clientId) {
 		if (!names || names.length === 0) return [];
 		names = names.map((name) => name.trim().toLowerCase());
 		if (names.includes("*")) return this.repository.findManyBy({
-			realm_id: realmId,
-			client_id: clientId
+			realmId,
+			clientId
 		});
 		return this.repository.findManyBy({
 			name: names,
-			realm_id: realmId,
-			client_id: clientId
+			realmId,
+			clientId
 		});
 	}
 };

package/dist/core/provisioning/synchronizer/entity-resolver.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"entity-resolver.mjs","names":["ProvisioningEntityResolver","repository","resolveGlobal","names","length","map","name","trim","toLowerCase","hasWildcard","includes","findManyBy","~~realm_id~~","~~client_id~~","resolveRealm","~~realmId","~~resolveClient"~~,"clientId"~~],"sources":["../../../../src/core/provisioning/synchronizer/entity-resolver.ts"],"sourcesContent":["/\n Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n /\n\nimport type { ObjectLiteral } from '@authup/kit';\nimport type { IEntityRepository } from '@authup/server-kit';\n\nexport class ProvisioningEntityResolver<T extends ObjectLiteral = ObjectLiteral> {\n protected repository: IEntityRepository<T>;\n\n constructor(repository: IEntityRepository<T>) {\n this.repository = repository;\n }\n\n async resolveGlobal(names?: string[]): Promise<T[]> {\n if (!names \|\| names.length === 0) {\n return [];\n }\n\n names = names.map((name) => name.trim().toLowerCase());\n\n const hasWildcard = names.includes('');\n if (hasWildcard) {\n return this.repository.findManyBy({\n ~~realm_id~~: null,\n ~~client_id~~: null,\n });\n }\n\n return this.repository.findManyBy({\n name: names,\n ~~realm_id~~: null,\n ~~client_id~~: null,\n });\n }\n\n async resolveRealm(names: string[] \| undefined, realmId: string): Promise<T[]> {\n if (!names \|\| names.length === 0) {\n return [];\n }\n\n names = names.map((name) => name.trim().toLowerCase());\n\n const hasWildcard = names.includes('');\n if (hasWildcard) {\n return this.repository.findManyBy({\n ~~realm_id:~~ realmId,\n ~~client_id~~: null,\n });\n }\n\n return this.repository.findManyBy({\n name: names,\n ~~realm_id:~~ realmId,\n ~~client_id~~: null,\n });\n }\n\n async resolveClient(names: string[] \| undefined, realmId: string, clientId: string): Promise<T[]> {\n if (!names \|\| names.length === 0) {\n return [];\n }\n\n names = names.map((name) => name.trim().toLowerCase());\n\n const hasWildcard = names.includes('');\n if (hasWildcard) {\n return this.repository.findManyBy({\n ~~realm_id:~~ realmId,\n ~~client_id:~~ clientId,\n });\n }\n\n return this.repository.findManyBy({\n name: names,\n ~~realm_id:~~ realmId,\n ~~client_id:~~ clientId,\n });\n }\n}\n"],"mappings":";;;;AAUA,IAAaA,6BAAb,MAAaA;CACCC;CAEV,YAAYA,YAAkC;EAC1C,KAAKA,aAAaA;CACtB;CAEA,MAAMC,cAAcC,OAAgC;EAChD,IAAI,CAACA,SAASA,MAAMC,WAAW,GAC3B,OAAO,CAAA;EAGXD,QAAQA,MAAME,KAAKC,SAASA,KAAKC,KAAI,CAAA,CAAGC,YAAW,CAAA;EAGnD,IADoBL,MAAMO,SAAS,GAC/BD,GACA,OAAO,KAAKR,WAAWU,WAAW;GAC9BC,~~UAAU~~;~~GACVC~~,~~WAAW~~;~~EACf~~,CAAA;EAGJ,OAAO,KAAKZ,WAAWU,WAAW;GAC9BL,MAAMH;GACNS,~~UAAU~~;~~GACVC~~,~~WAAW~~;~~EACf~~,CAAA;CACJ;CAEA,MAAMC,aAAaX,~~OAA6BY~~,SAA+B;EAC3E,IAAI,~~CAACZ~~,SAASA,MAAMC,WAAW,GAC3B,OAAO,CAAA;EAGXD,QAAQA,MAAME,KAAKC,SAASA,KAAKC,KAAI,CAAA,CAAGC,YAAW,CAAA;EAGnD,IADoBL,MAAMO,SAAS,GAC/BD,GACA,OAAO,KAAKR,WAAWU,WAAW;GAC9BC~~,UAAUG~~;~~GACVF~~,~~WAAW~~;~~EACf~~,CAAA;EAGJ,OAAO,KAAKZ,WAAWU,WAAW;GAC9BL,MAAMH;GACNS~~,UAAUG~~;~~GACVF~~,~~WAAW~~;~~EACf~~,CAAA;CACJ;CAEA,~~MAAMG~~,~~cAAcb~~,~~OAA6BY~~,~~SAAiBE~~,UAAgC;EAC9F,IAAI,~~CAACd~~,SAASA,MAAMC,WAAW,GAC3B,OAAO,CAAA;EAGXD,QAAQA,MAAME,KAAKC,SAASA,KAAKC,KAAI,CAAA,CAAGC,YAAW,CAAA;EAGnD,IADoBL,MAAMO,SAAS,GAC/BD,GACA,OAAO,KAAKR,WAAWU,WAAW;GAC9BC~~,UAAUG~~;~~GACVF,WAAWI~~;~~EACf~~,CAAA;EAGJ,OAAO,~~KAAKhB~~,WAAWU,WAAW;GAC9BL,MAAMH;GACNS~~,UAAUG~~;~~GACVF,WAAWI~~;~~EACf~~,CAAA;CACJ;AACJ"}
1	+ {"version":3,"file":"entity-resolver.mjs","names":["ProvisioningEntityResolver","repository","resolveGlobal","names","length","map","name","trim","toLowerCase","hasWildcard","includes","findManyBy","realmId","clientId","resolveRealm","resolveClient"],"sources":["../../../../src/core/provisioning/synchronizer/entity-resolver.ts"],"sourcesContent":["/\n Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n /\n\nimport type { ObjectLiteral } from '@authup/kit';\nimport type { IEntityRepository } from '@authup/server-kit';\n\nexport class ProvisioningEntityResolver<T extends ObjectLiteral = ObjectLiteral> {\n protected repository: IEntityRepository<T>;\n\n constructor(repository: IEntityRepository<T>) {\n this.repository = repository;\n }\n\n async resolveGlobal(names?: string[]): Promise<T[]> {\n if (!names \|\| names.length === 0) {\n return [];\n }\n\n names = names.map((name) => name.trim().toLowerCase());\n\n const hasWildcard = names.includes('');\n if (hasWildcard) {\n return this.repository.findManyBy({\n realmId: null,\n clientId: null,\n });\n }\n\n return this.repository.findManyBy({\n name: names,\n realmId: null,\n clientId: null,\n });\n }\n\n async resolveRealm(names: string[] \| undefined, realmId: string): Promise<T[]> {\n if (!names \|\| names.length === 0) {\n return [];\n }\n\n names = names.map((name) => name.trim().toLowerCase());\n\n const hasWildcard = names.includes('');\n if (hasWildcard) {\n return this.repository.findManyBy({\n realmId,\n clientId: null,\n });\n }\n\n return this.repository.findManyBy({\n name: names,\n realmId,\n clientId: null,\n });\n }\n\n async resolveClient(names: string[] \| undefined, realmId: string, clientId: string): Promise<T[]> {\n if (!names \|\| names.length === 0) {\n return [];\n }\n\n names = names.map((name) => name.trim().toLowerCase());\n\n const hasWildcard = names.includes('');\n if (hasWildcard) {\n return this.repository.findManyBy({\n realmId,\n clientId,\n });\n }\n\n return this.repository.findManyBy({\n name: names,\n realmId,\n clientId,\n });\n }\n}\n"],"mappings":";;;;AAUA,IAAaA,6BAAb,MAAaA;CACCC;CAEV,YAAYA,YAAkC;EAC1C,KAAKA,aAAaA;CACtB;CAEA,MAAMC,cAAcC,OAAgC;EAChD,IAAI,CAACA,SAASA,MAAMC,WAAW,GAC3B,OAAO,CAAA;EAGXD,QAAQA,MAAME,KAAKC,SAASA,KAAKC,KAAI,CAAA,CAAGC,YAAW,CAAA;EAGnD,IADoBL,MAAMO,SAAS,GAC/BD,GACA,OAAO,KAAKR,WAAWU,WAAW;GAC9BC,SAAS;GACTC,UAAU;EACd,CAAA;EAGJ,OAAO,KAAKZ,WAAWU,WAAW;GAC9BL,MAAMH;GACNS,SAAS;GACTC,UAAU;EACd,CAAA;CACJ;CAEA,MAAMC,aAAaX,OAA6BS,SAA+B;EAC3E,IAAI,CAACT,SAASA,MAAMC,WAAW,GAC3B,OAAO,CAAA;EAGXD,QAAQA,MAAME,KAAKC,SAASA,KAAKC,KAAI,CAAA,CAAGC,YAAW,CAAA;EAGnD,IADoBL,MAAMO,SAAS,GAC/BD,GACA,OAAO,KAAKR,WAAWU,WAAW;GAC9BC;GACAC,UAAU;EACd,CAAA;EAGJ,OAAO,KAAKZ,WAAWU,WAAW;GAC9BL,MAAMH;GACNS;GACAC,UAAU;EACd,CAAA;CACJ;CAEA,MAAME,cAAcZ,OAA6BS,SAAiBC,UAAgC;EAC9F,IAAI,CAACV,SAASA,MAAMC,WAAW,GAC3B,OAAO,CAAA;EAGXD,QAAQA,MAAME,KAAKC,SAASA,KAAKC,KAAI,CAAA,CAAGC,YAAW,CAAA;EAGnD,IADoBL,MAAMO,SAAS,GAC/BD,GACA,OAAO,KAAKR,WAAWU,WAAW;GAC9BC;GACAC;EACJ,CAAA;EAGJ,OAAO,KAAKZ,WAAWU,WAAW;GAC9BL,MAAMH;GACNS;GACAC;EACJ,CAAA;CACJ;AACJ"}

package/dist/core/provisioning/synchronizer/index.d.ts CHANGED Viewed

@@ -6,7 +6,6 @@ export * from './policy/index.ts';
 export * from './realm/index.ts';
 export * from './role/index.ts';
 export * from './root/index.ts';
-export * from './robot/index.ts';
 export * from './scope/index.ts';
 export * from './user/index.ts';
 //# sourceMappingURL=index.d.ts.map

package/dist/core/provisioning/synchronizer/index.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/provisioning/synchronizer/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,~~kBAAkB,CAAC;AACjC,cAAc,~~iBAAiB,CAAC"}
1	+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/provisioning/synchronizer/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,iBAAiB,CAAC"}

package/dist/core/provisioning/synchronizer/index.mjs CHANGED Viewed

@@ -14,10 +14,8 @@ import "./realm/index.mjs";
 import { RoleProvisioningSynchronizer } from "./role/module.mjs";
 import "./role/index.mjs";
 import { GraphProvisioningSynchronizer } from "./root/module.mjs";
-import { RobotProvisioningSynchronizer } from "./robot/module.mjs";
-import "./robot/index.mjs";
 import { ScopeProvisioningSynchronizer } from "./scope/module.mjs";
 import "./scope/index.mjs";
 import { UserProvisioningSynchronizer } from "./user/module.mjs";
 import "./user/index.mjs";
-export { ClientProvisioningSynchronizer, GraphProvisioningSynchronizer, PermissionProvisioningSynchronizer, PolicyProvisioningSynchronizer, ProvisioningEntityResolver, ProvisioningJunctionSynchronizer, RealmProvisioningSynchronizer, RobotProvisioningSynchronizer, RoleProvisioningSynchronizer, ScopeProvisioningSynchronizer, UserProvisioningSynchronizer };
+export { ClientProvisioningSynchronizer, GraphProvisioningSynchronizer, PermissionProvisioningSynchronizer, PolicyProvisioningSynchronizer, ProvisioningEntityResolver, ProvisioningJunctionSynchronizer, RealmProvisioningSynchronizer, RoleProvisioningSynchronizer, ScopeProvisioningSynchronizer, UserProvisioningSynchronizer };

package/dist/core/provisioning/synchronizer/junction-synchronizer.d.ts CHANGED Viewed

@@ -10,10 +10,10 @@ export declare class ProvisioningJunctionSynchronizer<T extends ObjectLiteral =
     constructor(ctx: ProvisioningJunctionSynchronizerContext<T>);
     synchronize(owner: {
         id: string;
-        realm_id?: string | null;
+        realmId?: string | null;
     }, targets: Array<{
         id: string;
-        realm_id?: string | null;
+        realmId?: string | null;
     }>, targetKey: string, targetRealmKey: string, extraAttributes?: Record<string, unknown>): Promise<void>;
 }
 //# sourceMappingURL=junction-synchronizer.d.ts.map

package/dist/core/provisioning/synchronizer/junction-synchronizer.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"junction-synchronizer.d.ts","sourceRoot":"","sources":["../../../../src/core/provisioning/synchronizer/junction-synchronizer.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,MAAM,MAAM,uCAAuC,CAAC,CAAC,SAAS,aAAa,GAAG,aAAa,IAAI;IAC3F,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,qBAAa,gCAAgC,CAAC,CAAC,SAAS,aAAa,GAAG,aAAa;IACjF,SAAS,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC,CAAC,CAAC;gBAE9C,GAAG,EAAE,uCAAuC,CAAC,CAAC,CAAC;IAIrD,WAAW,CACb,KAAK,EAAE;QACH,EAAE,EAAE,MAAM,CAAC;QACX,~~QAAQ~~,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;~~KAC3B~~,EACD,OAAO,EAAE,KAAK,CAAC;QACX,EAAE,EAAE,MAAM,CAAC;QACX,~~QAAQ~~,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;~~KAC3B~~,CAAC,EACF,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC1C,OAAO,CAAC,IAAI,CAAC;CAoBnB"}
1	+ {"version":3,"file":"junction-synchronizer.d.ts","sourceRoot":"","sources":["../../../../src/core/provisioning/synchronizer/junction-synchronizer.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,MAAM,MAAM,uCAAuC,CAAC,CAAC,SAAS,aAAa,GAAG,aAAa,IAAI;IAC3F,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,qBAAa,gCAAgC,CAAC,CAAC,SAAS,aAAa,GAAG,aAAa;IACjF,SAAS,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAC,CAAC,CAAC;gBAE9C,GAAG,EAAE,uCAAuC,CAAC,CAAC,CAAC;IAIrD,WAAW,CACb,KAAK,EAAE;QACH,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAC1B,EACD,OAAO,EAAE,KAAK,CAAC;QACX,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAC1B,CAAC,EACF,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC1C,OAAO,CAAC,IAAI,CAAC;CAoBnB"}

package/dist/core/provisioning/synchronizer/junction-synchronizer.mjs CHANGED Viewed

@@ -14,9 +14,9 @@ var ProvisioningJunctionSynchronizer = class {
 		})) {
 			const entity = this.ctx.repository.create({
 				[this.ctx.ownerKey]: owner.id,
-				[this.ctx.ownerRealmKey]: owner.realm_id,
+				[this.ctx.ownerRealmKey]: owner.realmId,
 				[targetKey]: target.id,
-				[targetRealmKey]: target.realm_id,
+				[targetRealmKey]: target.realmId,
 				...extraAttributes || {}
 			});
 			await this.ctx.repository.save(entity);

package/dist/core/provisioning/synchronizer/junction-synchronizer.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"junction-synchronizer.mjs","names":["ProvisioningJunctionSynchronizer","ctx","synchronize","owner","targets","targetKey","targetRealmKey","extraAttributes","target","existing","repository","findOneBy","ownerKey","id","entity","create","ownerRealmKey","~~realm_id~~","save"],"sources":["../../../../src/core/provisioning/synchronizer/junction-synchronizer.ts"],"sourcesContent":["/\n Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { ObjectLiteral } from '@authup/kit';\nimport type { IEntityRepository } from '@authup/server-kit';\n\nexport type ProvisioningJunctionSynchronizerContext<T extends ObjectLiteral = ObjectLiteral> = {\n repository: IEntityRepository<T>,\n ownerKey: string,\n ownerRealmKey: string,\n};\n\nexport class ProvisioningJunctionSynchronizer<T extends ObjectLiteral = ObjectLiteral> {\n protected ctx: ProvisioningJunctionSynchronizerContext<T>;\n\n constructor(ctx: ProvisioningJunctionSynchronizerContext<T>) {\n this.ctx = ctx;\n }\n\n async synchronize(\n owner: {\n id: string,\n ~~realm_id~~?: string \| null \n },\n targets: Array<{\n id: string,\n ~~realm_id~~?: string \| null \n }>,\n targetKey: string,\n targetRealmKey: string,\n extraAttributes?: Record<string, unknown>,\n ): Promise<void> {\n for (const target of targets) {\n const existing = await this.ctx.repository.findOneBy({\n [this.ctx.ownerKey]: owner.id,\n [targetKey]: target.id,\n });\n\n if (!existing) {\n const entity = this.ctx.repository.create({\n [this.ctx.ownerKey]: owner.id,\n [this.ctx.ownerRealmKey]: owner.~~realm_id~~,\n [targetKey]: target.id,\n [targetRealmKey]: target.~~realm_id~~,\n ...(extraAttributes \|\| {}),\n } as Partial<T>);\n\n await this.ctx.repository.save(entity);\n }\n }\n }\n}\n"],"mappings":";;;;AAgBA,IAAaA,mCAAb,MAAaA;CACCC;CAEV,YAAYA,KAAiD;EACzD,KAAKA,MAAMA;CACf;CAEA,MAAMC,YACFC,OAIAC,SAIAC,WACAC,gBACAC,iBACa;EACb,KAAK,MAAMC,UAAUJ,SAMjB,IAAI,CAACK,MALkB,KAAKR,IAAIS,WAAWC,UAAU;IAChD,KAAKV,IAAIW,WAAWT,MAAMU;IAC1BR,YAAYG,OAAOK;EACxB,CAAA,GAEe;GACX,MAAMC,SAAS,KAAKb,IAAIS,WAAWK,OAAO;KACrC,KAAKd,IAAIW,WAAWT,MAAMU;KAC1B,KAAKZ,IAAIe,gBAAgBb,MAAMc;KAC/BZ,YAAYG,OAAOK;KACnBP,iBAAiBE,OAAOS;IACzB,GAAIV,mBAAmB,CAAC;GAC5B,CAAA;GAEA,MAAM,KAAKN,IAAIS,WAAWQ,KAAKJ,MAAAA;EACnC;CAER;AACJ"}
1	+ {"version":3,"file":"junction-synchronizer.mjs","names":["ProvisioningJunctionSynchronizer","ctx","synchronize","owner","targets","targetKey","targetRealmKey","extraAttributes","target","existing","repository","findOneBy","ownerKey","id","entity","create","ownerRealmKey","realmId","save"],"sources":["../../../../src/core/provisioning/synchronizer/junction-synchronizer.ts"],"sourcesContent":["/\n Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { ObjectLiteral } from '@authup/kit';\nimport type { IEntityRepository } from '@authup/server-kit';\n\nexport type ProvisioningJunctionSynchronizerContext<T extends ObjectLiteral = ObjectLiteral> = {\n repository: IEntityRepository<T>,\n ownerKey: string,\n ownerRealmKey: string,\n};\n\nexport class ProvisioningJunctionSynchronizer<T extends ObjectLiteral = ObjectLiteral> {\n protected ctx: ProvisioningJunctionSynchronizerContext<T>;\n\n constructor(ctx: ProvisioningJunctionSynchronizerContext<T>) {\n this.ctx = ctx;\n }\n\n async synchronize(\n owner: {\n id: string,\n realmId?: string \| null \n },\n targets: Array<{\n id: string,\n realmId?: string \| null \n }>,\n targetKey: string,\n targetRealmKey: string,\n extraAttributes?: Record<string, unknown>,\n ): Promise<void> {\n for (const target of targets) {\n const existing = await this.ctx.repository.findOneBy({\n [this.ctx.ownerKey]: owner.id,\n [targetKey]: target.id,\n });\n\n if (!existing) {\n const entity = this.ctx.repository.create({\n [this.ctx.ownerKey]: owner.id,\n [this.ctx.ownerRealmKey]: owner.realmId,\n [targetKey]: target.id,\n [targetRealmKey]: target.realmId,\n ...(extraAttributes \|\| {}),\n } as Partial<T>);\n\n await this.ctx.repository.save(entity);\n }\n }\n }\n}\n"],"mappings":";;;;AAgBA,IAAaA,mCAAb,MAAaA;CACCC;CAEV,YAAYA,KAAiD;EACzD,KAAKA,MAAMA;CACf;CAEA,MAAMC,YACFC,OAIAC,SAIAC,WACAC,gBACAC,iBACa;EACb,KAAK,MAAMC,UAAUJ,SAMjB,IAAI,CAACK,MALkB,KAAKR,IAAIS,WAAWC,UAAU;IAChD,KAAKV,IAAIW,WAAWT,MAAMU;IAC1BR,YAAYG,OAAOK;EACxB,CAAA,GAEe;GACX,MAAMC,SAAS,KAAKb,IAAIS,WAAWK,OAAO;KACrC,KAAKd,IAAIW,WAAWT,MAAMU;KAC1B,KAAKZ,IAAIe,gBAAgBb,MAAMc;KAC/BZ,YAAYG,OAAOK;KACnBP,iBAAiBE,OAAOS;IACzB,GAAIV,mBAAmB,CAAC;GAC5B,CAAA;GAEA,MAAM,KAAKN,IAAIS,WAAWQ,KAAKJ,MAAAA;EACnC;CAER;AACJ"}