@authup/server-core 1.0.0-beta.53 → 1.0.0-beta.54

package/dist/core/entities/robot/types.d.ts

@@ -1,24 +0,0 @@
-import type { Robot, Role } from '@authup/core-kit';
-import type { PermissionPolicyBinding } from '@authup/access';
-import type { ActorContext, EntityRepositoryFindManyResult, IEntityRepository } from '@authup/server-kit';
-export interface IRobotRepository extends IEntityRepository<Robot> {
-    checkUniqueness(data: Partial<Robot>, existing?: Robot): Promise<void>;
-    findOne(id: string, query?: Record<string, any>, realm?: string): Promise<Robot | null>;
-    findOneWithSecret(where: Record<string, any>): Promise<Robot | null>;
-    getBoundRoles(entity: string | Robot): Promise<Role[]>;
-    getBoundPermissions(entity: string | Robot): Promise<PermissionPolicyBinding[]>;
-}
-export interface IRobotService {
-    getMany(query: Record<string, any>, actor: ActorContext): Promise<EntityRepositoryFindManyResult<Robot>>;
-    getOne(idOrName: string, actor: ActorContext, query?: Record<string, any>, realmId?: string): Promise<Robot>;
-    create(data: Record<string, any>, actor: ActorContext): Promise<Robot>;
-    update(idOrName: string, data: Record<string, any>, actor: ActorContext): Promise<Robot>;
-    save(idOrName: string | undefined, data: Record<string, any>, actor: ActorContext, options?: {
-        updateOnly?: boolean;
-    }): Promise<{
-        entity: Robot;
-        created: boolean;
-    }>;
-    delete(id: string, actor: ActorContext): Promise<Robot>;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/core/entities/robot/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/robot/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,8BAA8B,EAAE,iBAAiB,EAAG,MAAM,oBAAoB,CAAC;AAE3G,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB,CAAC,KAAK,CAAC;IAC9D,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAExF,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAErE,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAEvD,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAC;CACnF;AAED,MAAM,WAAW,aAAa;IAC1B,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC,CAAC;IACzG,MAAM,CACF,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,YAAY,EACnB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC3B,OAAO,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,KAAK,CAAC,CAAC;IAClB,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACzF,IAAI,CACA,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,EACnB,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GACnC,OAAO,CAAC;QACP,MAAM,EAAE,KAAK,CAAC;QACd,OAAO,EAAE,OAAO,CAAA;KACnB,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;CAC3D"}

package/dist/core/entities/robot/types.mjs

@@ -1,4 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-export {};

package/dist/core/entities/robot-permission/index.d.ts

@@ -1,3 +0,0 @@
-export * from './service.ts';
-export * from './types.ts';
-//# sourceMappingURL=index.d.ts.map

package/dist/core/entities/robot-permission/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/robot-permission/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}

package/dist/core/entities/robot-permission/index.mjs

@@ -1,5 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { RobotPermissionService } from "./service.mjs";
-export { RobotPermissionService };

package/dist/core/entities/robot-permission/service.d.ts

@@ -1,25 +0,0 @@
-import { RobotPermissionValidator } from '@authup/core-kit';
-import type { Permission, RobotPermission } from '@authup/core-kit';
-import type { IIdentityPermissionProvider } from '../../identity/permission/types.ts';
-import type { ActorContext, EntityRepositoryFindManyResult, IEntityRepository } from '@authup/server-kit';
-import { JunctionEntityService } from '@authup/server-kit';
-import type { IRobotPermissionRepository, IRobotPermissionService } from './types.ts';
-export type RobotPermissionServiceContext = {
-    repository: IRobotPermissionRepository;
-    permissionRepository: IEntityRepository<Permission>;
-    identityPermissionProvider: IIdentityPermissionProvider;
-};
-export declare class RobotPermissionService extends JunctionEntityService implements IRobotPermissionService {
-    protected readonly ownerRealmKey = "robot_realm_id";
-    protected repository: IRobotPermissionRepository;
-    protected permissionRepository: IEntityRepository<Permission>;
-    protected identityPermissionProvider: IIdentityPermissionProvider;
-    protected validator: RobotPermissionValidator;
-    constructor(ctx: RobotPermissionServiceContext);
-    getMany(query: Record<string, any>, actor: ActorContext): Promise<EntityRepositoryFindManyResult<RobotPermission>>;
-    getOne(id: string, actor: ActorContext): Promise<RobotPermission>;
-    create(data: Record<string, any>, actor: ActorContext): Promise<RobotPermission>;
-    update(id: string, data: Record<string, any>, actor: ActorContext): Promise<RobotPermission>;
-    delete(id: string, actor: ActorContext): Promise<RobotPermission>;
-}
-//# sourceMappingURL=service.d.ts.map

package/dist/core/entities/robot-permission/service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/robot-permission/service.ts"],"names":[],"mappings":"AAcA,OAAO,EAAkB,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AAEtF,OAAO,KAAK,EAAE,YAAY,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC1G,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAEtF,MAAM,MAAM,6BAA6B,GAAG;IACxC,UAAU,EAAE,0BAA0B,CAAC;IACvC,oBAAoB,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACpD,0BAA0B,EAAE,2BAA2B,CAAC;CAC3D,CAAC;AAEF,qBAAa,sBAAuB,SAAQ,qBAAsB,YAAW,uBAAuB;IAChG,SAAS,CAAC,QAAQ,CAAC,aAAa,oBAAoB;IAEpD,SAAS,CAAC,UAAU,EAAE,0BAA0B,CAAC;IAEjD,SAAS,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAE9D,SAAS,CAAC,0BAA0B,EAAE,2BAA2B,CAAC;IAElE,SAAS,CAAC,SAAS,EAAE,wBAAwB,CAAC;gBAElC,GAAG,EAAE,6BAA6B;IAQxC,OAAO,CACT,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,8BAA8B,CAAC,eAAe,CAAC,CAAC;IAWrD,MAAM,CACR,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,eAAe,CAAC;IAgBrB,MAAM,CACR,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,eAAe,CAAC;IA4DrB,MAAM,CACR,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,eAAe,CAAC;IAgErB,MAAM,CACR,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,eAAe,CAAC;CAsB9B"}

package/dist/core/entities/robot-permission/service.mjs

@@ -1,137 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { applyJunctionCreateGrant, buildJunctionUpdateData } from "../../identity/permission/junction-grant.mjs";
-import { ValidatorGroup } from "@authup/kit";
-import { PermissionName, RobotPermissionValidator } from "@authup/core-kit";
-import { JunctionEntityService } from "@authup/server-kit";
-import { BuiltInPolicyType, RealmScope, definePolicyData } from "@authup/access";
-import { EntityConflictError, EntityNotFoundError } from "@authup/errors";
-//#region src/core/entities/robot-permission/service.ts
-var RobotPermissionService = class extends JunctionEntityService {
-	ownerRealmKey = "robot_realm_id";
-	repository;
-	permissionRepository;
-	identityPermissionProvider;
-	validator;
-	constructor(ctx) {
-		super();
-		this.repository = ctx.repository;
-		this.permissionRepository = ctx.permissionRepository;
-		this.identityPermissionProvider = ctx.identityPermissionProvider;
-		this.validator = new RobotPermissionValidator();
-	}
-	async getMany(query, actor) {
-		await actor.permissionEvaluator.preEvaluateOneOf({ name: [PermissionName.ROBOT_PERMISSION_CREATE, PermissionName.ROBOT_PERMISSION_DELETE] });
-		return this.repository.findMany(query);
-	}
-	async getOne(id, actor) {
-		await actor.permissionEvaluator.preEvaluateOneOf({ name: [PermissionName.ROBOT_PERMISSION_CREATE, PermissionName.ROBOT_PERMISSION_DELETE] });
-		const entity = await this.repository.findOneBy({ id });
-		if (!entity) throw new EntityNotFoundError();
-		return entity;
-	}
-	async create(data, actor) {
-		await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_PERMISSION_CREATE });
-		const validated = await this.validator.run(data, { group: ValidatorGroup.CREATE });
-		await this.repository.validateJoinColumns(validated);
-		if (await this.repository.findOneBy({
-			permission_id: validated.permission_id,
-			robot_id: validated.robot_id
-		})) throw new EntityConflictError({ entity: "robot-permission" });
-		if (validated.permission) {
-			validated.permission_realm_id = validated.permission.realm_id;
-			await actor.permissionEvaluator.preEvaluate({
-				name: validated.permission.name,
-				realmId: validated.permission.realm_id,
-				clientId: validated.permission.client_id
-			});
-		}
-		if (validated.robot) validated.robot_realm_id = validated.robot.realm_id;
-		if (validated.permission && actor.identity) applyJunctionCreateGrant(validated, await this.identityPermissionProvider.resolveJunctionGrant({
-			type: actor.identity.type,
-			id: actor.identity.data.id
-		}, {
-			name: validated.permission.name,
-			realmId: validated.permission.realm_id,
-			clientId: validated.permission.client_id,
-			realmScope: validated.realm_scope ?? RealmScope.OWN
-		}));
-		await actor.permissionEvaluator.evaluate({
-			name: PermissionName.ROBOT_PERMISSION_CREATE,
-			data: definePolicyData({
-				[BuiltInPolicyType.ATTRIBUTES]: this.junctionAttributes(validated),
-				[BuiltInPolicyType.REALM_MATCH]: this.junctionResourceRealm(validated)
-			})
-		});
-		let entity = this.repository.create(validated);
-		entity = await this.repository.save(entity);
-		return entity;
-	}
-	async update(id, data, actor) {
-		await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_PERMISSION_UPDATE });
-		const entity = await this.repository.findOneBy({ id });
-		if (!entity) throw new EntityNotFoundError();
-		const validated = await this.validator.run(data, { group: ValidatorGroup.UPDATE });
-		const permission = await this.permissionRepository.findOneById(entity.permission_id);
-		if (permission) await actor.permissionEvaluator.preEvaluate({
-			name: permission.name,
-			realmId: permission.realm_id,
-			clientId: permission.client_id
-		});
-		let actorScope = RealmScope.ANY;
-		let actorPolicyFree = true;
-		let actorPolicyId = null;
-		if (actor.identity && permission) {
-			const grant = await this.identityPermissionProvider.resolveJunctionGrant({
-				type: actor.identity.type,
-				id: actor.identity.data.id
-			}, {
-				name: permission.name,
-				realmId: permission.realm_id,
-				clientId: permission.client_id,
-				realmScope: validated.realm_scope ?? entity.realm_scope
-			});
-			actorScope = grant.realmScope;
-			actorPolicyFree = !grant.policy;
-			actorPolicyId = grant.policy ? grant.policy.id : null;
-		} else if (actor.identity) actorScope = RealmScope.OWN;
-		const updateData = buildJunctionUpdateData({
-			data: validated,
-			existingScope: entity.realm_scope,
-			actorScope,
-			actorPolicyFree,
-			actorPolicyId
-		});
-		await this.repository.validateJoinColumns(updateData);
-		const merged = this.repository.merge(entity, updateData);
-		await actor.permissionEvaluator.evaluate({
-			name: PermissionName.ROBOT_PERMISSION_UPDATE,
-			data: definePolicyData({
-				[BuiltInPolicyType.ATTRIBUTES]: this.junctionAttributes(merged),
-				[BuiltInPolicyType.REALM_MATCH]: this.junctionResourceRealm(merged)
-			})
-		});
-		return this.repository.save(merged);
-	}
-	async delete(id, actor) {
-		await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_PERMISSION_DELETE });
-		const entity = await this.repository.findOneBy({ id });
-		if (!entity) throw new EntityNotFoundError();
-		await actor.permissionEvaluator.evaluate({
-			name: PermissionName.ROBOT_PERMISSION_DELETE,
-			data: definePolicyData({
-				[BuiltInPolicyType.ATTRIBUTES]: this.junctionAttributes(entity),
-				[BuiltInPolicyType.REALM_MATCH]: this.junctionResourceRealm(entity)
-			})
-		});
-		const { id: entityId } = entity;
-		await this.repository.remove(entity);
-		entity.id = entityId;
-		return entity;
-	}
-};
-//#endregion
-export { RobotPermissionService };
-
-//# sourceMappingURL=service.mjs.map

package/dist/core/entities/robot-permission/service.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"service.mjs","names":["BuiltInPolicyType","RealmScope","definePolicyData","EntityConflictError","EntityNotFoundError","ValidatorGroup","PermissionName","RobotPermissionValidator","applyJunctionCreateGrant","buildJunctionUpdateData","JunctionEntityService","RobotPermissionService","ownerRealmKey","repository","permissionRepository","identityPermissionProvider","validator","ctx","getMany","query","actor","permissionEvaluator","preEvaluateOneOf","name","ROBOT_PERMISSION_CREATE","ROBOT_PERMISSION_DELETE","findMany","getOne","id","entity","findOneBy","create","data","preEvaluate","validated","run","group","CREATE","validateJoinColumns","existing","permission_id","robot_id","permission","permission_realm_id","realm_id","realmId","clientId","client_id","robot","robot_realm_id","identity","grant","resolveJunctionGrant","type","realmScope","realm_scope","OWN","evaluate","ATTRIBUTES","junctionAttributes","REALM_MATCH","junctionResourceRealm","save","update","ROBOT_PERMISSION_UPDATE","UPDATE","findOneById","actorScope","ANY","actorPolicyFree","actorPolicyId","policy","updateData","existingScope","merged","merge","delete","entityId","remove"],"sources":["../../../../src/core/entities/robot-permission/service.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    BuiltInPolicyType,\n    RealmScope,\n    definePolicyData,\n} from '@authup/access';\nimport { EntityConflictError, EntityNotFoundError } from '@authup/errors';\nimport { ValidatorGroup } from '@authup/kit';\nimport { PermissionName, RobotPermissionValidator } from '@authup/core-kit';\nimport type { Permission, RobotPermission } from '@authup/core-kit';\nimport type { IIdentityPermissionProvider } from '../../identity/permission/types.ts';\nimport { applyJunctionCreateGrant, buildJunctionUpdateData } from '../../identity/permission/junction-grant.ts';\nimport type { ActorContext, EntityRepositoryFindManyResult, IEntityRepository } from '@authup/server-kit';\nimport { JunctionEntityService } from '@authup/server-kit';\nimport type { IRobotPermissionRepository, IRobotPermissionService } from './types.ts';\n\nexport type RobotPermissionServiceContext = {\n    repository: IRobotPermissionRepository;\n    permissionRepository: IEntityRepository<Permission>;\n    identityPermissionProvider: IIdentityPermissionProvider;\n};\n\nexport class RobotPermissionService extends JunctionEntityService implements IRobotPermissionService {\n    protected readonly ownerRealmKey = 'robot_realm_id';\n\n    protected repository: IRobotPermissionRepository;\n\n    protected permissionRepository: IEntityRepository<Permission>;\n\n    protected identityPermissionProvider: IIdentityPermissionProvider;\n\n    protected validator: RobotPermissionValidator;\n\n    constructor(ctx: RobotPermissionServiceContext) {\n        super();\n        this.repository = ctx.repository;\n        this.permissionRepository = ctx.permissionRepository;\n        this.identityPermissionProvider = ctx.identityPermissionProvider;\n        this.validator = new RobotPermissionValidator();\n    }\n\n    async getMany(\n        query: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<EntityRepositoryFindManyResult<RobotPermission>> {\n        await actor.permissionEvaluator.preEvaluateOneOf({\n            name: [\n                PermissionName.ROBOT_PERMISSION_CREATE,\n                PermissionName.ROBOT_PERMISSION_DELETE,\n            ],\n        });\n\n        return this.repository.findMany(query);\n    }\n\n    async getOne(\n        id: string,\n        actor: ActorContext,\n    ): Promise<RobotPermission> {\n        await actor.permissionEvaluator.preEvaluateOneOf({\n            name: [\n                PermissionName.ROBOT_PERMISSION_CREATE,\n                PermissionName.ROBOT_PERMISSION_DELETE,\n            ],\n        });\n\n        const entity = await this.repository.findOneBy({ id });\n        if (!entity) {\n            throw new EntityNotFoundError();\n        }\n\n        return entity;\n    }\n\n    async create(\n        data: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<RobotPermission> {\n        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_PERMISSION_CREATE });\n\n        const validated = await this.validator.run(data, { group: ValidatorGroup.CREATE });\n\n        await this.repository.validateJoinColumns(validated);\n\n        const existing = await this.repository.findOneBy({\n            permission_id: validated.permission_id,\n            robot_id: validated.robot_id,\n        });\n        if (existing) {\n            throw new EntityConflictError({ entity: 'robot-permission' });\n        }\n\n        if (validated.permission) {\n            validated.permission_realm_id = validated.permission.realm_id;\n\n            await actor.permissionEvaluator.preEvaluate({\n                name: validated.permission.name,\n                realmId: validated.permission.realm_id,\n                clientId: validated.permission.client_id,\n            });\n        }\n\n        if (validated.robot) {\n            validated.robot_realm_id = validated.robot.realm_id;\n        }\n\n        if (validated.permission && actor.identity) {\n            const grant = await this.identityPermissionProvider.resolveJunctionGrant(\n                {\n                    type: actor.identity.type,\n                    id: actor.identity.data.id,\n                },\n                {\n                    name: validated.permission.name,\n                    realmId: validated.permission.realm_id,\n                    clientId: validated.permission.client_id,\n                    realmScope: validated.realm_scope ?? RealmScope.OWN,\n                },\n            );\n\n            applyJunctionCreateGrant(validated, grant);\n        }\n\n        await actor.permissionEvaluator.evaluate({\n            name: PermissionName.ROBOT_PERMISSION_CREATE,\n            data: definePolicyData({\n                [BuiltInPolicyType.ATTRIBUTES]: this.junctionAttributes(validated),\n                [BuiltInPolicyType.REALM_MATCH]: this.junctionResourceRealm(validated),\n            }),\n        });\n\n        let entity = this.repository.create(validated);\n        entity = await this.repository.save(entity);\n\n        return entity;\n    }\n\n    async update(\n        id: string,\n        data: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<RobotPermission> {\n        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_PERMISSION_UPDATE });\n\n        const entity = await this.repository.findOneBy({ id });\n        if (!entity) {\n            throw new EntityNotFoundError();\n        }\n\n        const validated = await this.validator.run(data, { group: ValidatorGroup.UPDATE });\n\n        const permission = await this.permissionRepository.findOneById(entity.permission_id);\n        if (permission) {\n            // Member-permission gate: an actor may only modify a binding for a permission it\n            // holds (mirrors create()).\n            await actor.permissionEvaluator.preEvaluate({\n                name: permission.name,\n                realmId: permission.realm_id,\n                clientId: permission.client_id,\n            });\n        }\n\n        let actorScope: `${RealmScope}` = RealmScope.ANY;\n        let actorPolicyFree = true;\n        let actorPolicyId: string | null = null;\n        if (actor.identity && permission) {\n            const grant = await this.identityPermissionProvider.resolveJunctionGrant(\n                { type: actor.identity.type, id: actor.identity.data.id },\n                {\n                    name: permission.name,\n                    realmId: permission.realm_id,\n                    clientId: permission.client_id,\n                    realmScope: validated.realm_scope ?? entity.realm_scope,\n                },\n            );\n            actorScope = grant.realmScope;\n            actorPolicyFree = !grant.policy;\n            actorPolicyId = grant.policy ? grant.policy.id : null;\n        } else if (actor.identity) {\n            actorScope = RealmScope.OWN;\n        }\n\n        const updateData = buildJunctionUpdateData({\n            data: validated,\n            existingScope: entity.realm_scope,\n            actorScope,\n            actorPolicyFree,\n            actorPolicyId,\n        });\n\n        await this.repository.validateJoinColumns(updateData);\n\n        const merged = this.repository.merge(entity, updateData);\n\n        await actor.permissionEvaluator.evaluate({\n            name: PermissionName.ROBOT_PERMISSION_UPDATE,\n            data: definePolicyData({\n                [BuiltInPolicyType.ATTRIBUTES]: this.junctionAttributes(merged),\n                [BuiltInPolicyType.REALM_MATCH]: this.junctionResourceRealm(merged),\n            }),\n        });\n\n        return this.repository.save(merged);\n    }\n\n    async delete(\n        id: string,\n        actor: ActorContext,\n    ): Promise<RobotPermission> {\n        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_PERMISSION_DELETE });\n\n        const entity = await this.repository.findOneBy({ id });\n        if (!entity) {\n            throw new EntityNotFoundError();\n        }\n\n        await actor.permissionEvaluator.evaluate({\n            name: PermissionName.ROBOT_PERMISSION_DELETE,\n            data: definePolicyData({\n                [BuiltInPolicyType.ATTRIBUTES]: this.junctionAttributes(entity),\n                [BuiltInPolicyType.REALM_MATCH]: this.junctionResourceRealm(entity),\n            }),\n        });\n\n        const { id: entityId } = entity;\n        await this.repository.remove(entity);\n        entity.id = entityId;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;;AA4BA,IAAaW,yBAAb,cAA4CD,sBAAAA;CACrBE,gBAAgB;CAEzBC;CAEAC;CAEAC;CAEAC;CAEV,YAAYC,KAAoC;EAC5C,MAAK;EACL,KAAKJ,aAAaI,IAAIJ;EACtB,KAAKC,uBAAuBG,IAAIH;EAChC,KAAKC,6BAA6BE,IAAIF;EACtC,KAAKC,YAAY,IAAIT,yBAAAA;CACzB;CAEA,MAAMW,QACFC,OACAC,OACwD;EACxD,MAAMA,MAAMC,oBAAoBC,iBAAiB,EAC7CC,MAAM,CACFjB,eAAekB,yBACflB,eAAemB,uBAAAA,EAEvB,CAAA;EAEA,OAAO,KAAKZ,WAAWa,SAASP,KAAAA;CACpC;CAEA,MAAMQ,OACFC,IACAR,OACwB;EACxB,MAAMA,MAAMC,oBAAoBC,iBAAiB,EAC7CC,MAAM,CACFjB,eAAekB,yBACflB,eAAemB,uBAAAA,EAEvB,CAAA;EAEA,MAAMI,SAAS,MAAM,KAAKhB,WAAWiB,UAAU,EAAEF,GAAG,CAAA;EACpD,IAAI,CAACC,QACD,MAAM,IAAIzB,oBAAAA;EAGd,OAAOyB;CACX;CAEA,MAAME,OACFC,MACAZ,OACwB;EACxB,MAAMA,MAAMC,oBAAoBY,YAAY,EAAEV,MAAMjB,eAAekB,wBAAwB,CAAA;EAE3F,MAAMU,YAAY,MAAM,KAAKlB,UAAUmB,IAAIH,MAAM,EAAEI,OAAO/B,eAAegC,OAAO,CAAA;EAEhF,MAAM,KAAKxB,WAAWyB,oBAAoBJ,SAAAA;EAM1C,IAAIK,MAJmB,KAAK1B,WAAWiB,UAAU;GAC7CU,eAAeN,UAAUM;GACzBC,UAAUP,UAAUO;EACxB,CAAA,GAEI,MAAM,IAAItC,oBAAoB,EAAE0B,QAAQ,mBAAmB,CAAA;EAG/D,IAAIK,UAAUQ,YAAY;GACtBR,UAAUS,sBAAsBT,UAAUQ,WAAWE;GAErD,MAAMxB,MAAMC,oBAAoBY,YAAY;IACxCV,MAAMW,UAAUQ,WAAWnB;IAC3BsB,SAASX,UAAUQ,WAAWE;IAC9BE,UAAUZ,UAAUQ,WAAWK;GACnC,CAAA;EACJ;EAEA,IAAIb,UAAUc,OACVd,UAAUe,iBAAiBf,UAAUc,MAAMJ;EAG/C,IAAIV,UAAUQ,cAActB,MAAM8B,UAc9B1C,yBAAyB0B,WAAWiB,MAbhB,KAAKpC,2BAA2BqC,qBAChD;GACIC,MAAMjC,MAAM8B,SAASG;GACrBzB,IAAIR,MAAM8B,SAASlB,KAAKJ;EAC5B,GACA;GACIL,MAAMW,UAAUQ,WAAWnB;GAC3BsB,SAASX,UAAUQ,WAAWE;GAC9BE,UAAUZ,UAAUQ,WAAWK;GAC/BO,YAAYpB,UAAUqB,eAAetD,WAAWuD;EACpD,CAAA,CAGgCL;EAGxC,MAAM/B,MAAMC,oBAAoBoC,SAAS;GACrClC,MAAMjB,eAAekB;GACrBQ,MAAM9B,iBAAiB;KAClBF,kBAAkB0D,aAAa,KAAKC,mBAAmBzB,SAAAA;KACvDlC,kBAAkB4D,cAAc,KAAKC,sBAAsB3B,SAAAA;GAChE,CAAA;EACJ,CAAA;EAEA,IAAIL,SAAS,KAAKhB,WAAWkB,OAAOG,SAAAA;EACpCL,SAAS,MAAM,KAAKhB,WAAWiD,KAAKjC,MAAAA;EAEpC,OAAOA;CACX;CAEA,MAAMkC,OACFnC,IACAI,MACAZ,OACwB;EACxB,MAAMA,MAAMC,oBAAoBY,YAAY,EAAEV,MAAMjB,eAAe0D,wBAAwB,CAAA;EAE3F,MAAMnC,SAAS,MAAM,KAAKhB,WAAWiB,UAAU,EAAEF,GAAG,CAAA;EACpD,IAAI,CAACC,QACD,MAAM,IAAIzB,oBAAAA;EAGd,MAAM8B,YAAY,MAAM,KAAKlB,UAAUmB,IAAIH,MAAM,EAAEI,OAAO/B,eAAe4D,OAAO,CAAA;EAEhF,MAAMvB,aAAa,MAAM,KAAK5B,qBAAqBoD,YAAYrC,OAAOW,aAAa;EACnF,IAAIE,YAGA,MAAMtB,MAAMC,oBAAoBY,YAAY;GACxCV,MAAMmB,WAAWnB;GACjBsB,SAASH,WAAWE;GACpBE,UAAUJ,WAAWK;EACzB,CAAA;EAGJ,IAAIoB,aAA8BlE,WAAWmE;EAC7C,IAAIC,kBAAkB;EACtB,IAAIC,gBAA+B;EACnC,IAAIlD,MAAM8B,YAAYR,YAAY;GAC9B,MAAMS,QAAQ,MAAM,KAAKpC,2BAA2BqC,qBAChD;IAAEC,MAAMjC,MAAM8B,SAASG;IAAMzB,IAAIR,MAAM8B,SAASlB,KAAKJ;GAAG,GACxD;IACIL,MAAMmB,WAAWnB;IACjBsB,SAASH,WAAWE;IACpBE,UAAUJ,WAAWK;IACrBO,YAAYpB,UAAUqB,eAAe1B,OAAO0B;GAChD,CAAA;GAEJY,aAAahB,MAAMG;GACnBe,kBAAkB,CAAClB,MAAMoB;GACzBD,gBAAgBnB,MAAMoB,SAASpB,MAAMoB,OAAO3C,KAAK;EACrD,OAAO,IAAIR,MAAM8B,UACbiB,aAAalE,WAAWuD;EAG5B,MAAMgB,aAAa/D,wBAAwB;GACvCuB,MAAME;GACNuC,eAAe5C,OAAO0B;GACtBY;GACAE;GACAC;EACJ,CAAA;EAEA,MAAM,KAAKzD,WAAWyB,oBAAoBkC,UAAAA;EAE1C,MAAME,SAAS,KAAK7D,WAAW8D,MAAM9C,QAAQ2C,UAAAA;EAE7C,MAAMpD,MAAMC,oBAAoBoC,SAAS;GACrClC,MAAMjB,eAAe0D;GACrBhC,MAAM9B,iBAAiB;KAClBF,kBAAkB0D,aAAa,KAAKC,mBAAmBe,MAAAA;KACvD1E,kBAAkB4D,cAAc,KAAKC,sBAAsBa,MAAAA;GAChE,CAAA;EACJ,CAAA;EAEA,OAAO,KAAK7D,WAAWiD,KAAKY,MAAAA;CAChC;CAEA,MAAME,OACFhD,IACAR,OACwB;EACxB,MAAMA,MAAMC,oBAAoBY,YAAY,EAAEV,MAAMjB,eAAemB,wBAAwB,CAAA;EAE3F,MAAMI,SAAS,MAAM,KAAKhB,WAAWiB,UAAU,EAAEF,GAAG,CAAA;EACpD,IAAI,CAACC,QACD,MAAM,IAAIzB,oBAAAA;EAGd,MAAMgB,MAAMC,oBAAoBoC,SAAS;GACrClC,MAAMjB,eAAemB;GACrBO,MAAM9B,iBAAiB;KAClBF,kBAAkB0D,aAAa,KAAKC,mBAAmB9B,MAAAA;KACvD7B,kBAAkB4D,cAAc,KAAKC,sBAAsBhC,MAAAA;GAChE,CAAA;EACJ,CAAA;EAEA,MAAM,EAAED,IAAIiD,aAAahD;EACzB,MAAM,KAAKhB,WAAWiE,OAAOjD,MAAAA;EAC7BA,OAAOD,KAAKiD;EAEZ,OAAOhD;CACX;AACJ"}

package/dist/core/entities/robot-permission/types.d.ts

@@ -1,12 +0,0 @@
-import type { RobotPermission } from '@authup/core-kit';
-import type { ActorContext, EntityRepositoryFindManyResult, IEntityRepository } from '@authup/server-kit';
-export interface IRobotPermissionRepository extends IEntityRepository<RobotPermission> {
-}
-export interface IRobotPermissionService {
-    getMany(query: Record<string, any>, actor: ActorContext): Promise<EntityRepositoryFindManyResult<RobotPermission>>;
-    getOne(id: string, actor: ActorContext): Promise<RobotPermission>;
-    create(data: Record<string, any>, actor: ActorContext): Promise<RobotPermission>;
-    update(id: string, data: Record<string, any>, actor: ActorContext): Promise<RobotPermission>;
-    delete(id: string, actor: ActorContext): Promise<RobotPermission>;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/core/entities/robot-permission/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/robot-permission/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,8BAA8B,EAAE,iBAAiB,EAAG,MAAM,oBAAoB,CAAC;AAE3G,MAAM,WAAW,0BAA2B,SAAQ,iBAAiB,CAAC,eAAe,CAAC;CACrF;AAED,MAAM,WAAW,uBAAuB;IACpC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,8BAA8B,CAAC,eAAe,CAAC,CAAC,CAAC;IACnH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAClE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACjF,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC7F,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CACrE"}

package/dist/core/entities/robot-role/index.d.ts

@@ -1,3 +0,0 @@
-export * from './service.ts';
-export * from './types.ts';
-//# sourceMappingURL=index.d.ts.map

package/dist/core/entities/robot-role/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/robot-role/index.ts"],"names":[],"mappings":"AAOA,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}

package/dist/core/entities/robot-role/index.mjs

@@ -1,5 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { RobotRoleService } from "./service.mjs";
-export { RobotRoleService };

package/dist/core/entities/robot-role/service.d.ts

@@ -1,22 +0,0 @@
-import { RobotRoleValidator } from '@authup/core-kit';
-import type { RobotRole } from '@authup/core-kit';
-import type { ActorContext, EntityRepositoryFindManyResult } from '@authup/server-kit';
-import { JunctionEntityService } from '@authup/server-kit';
-import type { IIdentityPermissionProvider } from '../../identity/permission/types.ts';
-import type { IRobotRoleRepository, IRobotRoleService } from './types.ts';
-export type RobotRoleServiceContext = {
-    repository: IRobotRoleRepository;
-    identityPermissionProvider: IIdentityPermissionProvider;
-};
-export declare class RobotRoleService extends JunctionEntityService implements IRobotRoleService {
-    protected readonly ownerRealmKey = "robot_realm_id";
-    protected repository: IRobotRoleRepository;
-    protected identityPermissionProvider: IIdentityPermissionProvider;
-    protected validator: RobotRoleValidator;
-    constructor(ctx: RobotRoleServiceContext);
-    getMany(query: Record<string, any>, actor: ActorContext): Promise<EntityRepositoryFindManyResult<RobotRole>>;
-    getOne(id: string, actor: ActorContext): Promise<RobotRole>;
-    create(data: Record<string, any>, actor: ActorContext): Promise<RobotRole>;
-    delete(id: string, actor: ActorContext): Promise<RobotRole>;
-}
-//# sourceMappingURL=service.d.ts.map

package/dist/core/entities/robot-role/service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/robot-role/service.ts"],"names":[],"mappings":"AAUA,OAAO,EAAkB,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,8BAA8B,EAAG,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE1E,MAAM,MAAM,uBAAuB,GAAG;IAClC,UAAU,EAAE,oBAAoB,CAAC;IACjC,0BAA0B,EAAE,2BAA2B,CAAC;CAC3D,CAAC;AAEF,qBAAa,gBAAiB,SAAQ,qBAAsB,YAAW,iBAAiB;IACpF,SAAS,CAAC,QAAQ,CAAC,aAAa,oBAAoB;IAEpD,SAAS,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAE3C,SAAS,CAAC,0BAA0B,EAAE,2BAA2B,CAAC;IAElE,SAAS,CAAC,SAAS,EAAE,kBAAkB,CAAC;gBAE5B,GAAG,EAAE,uBAAuB;IAOlC,OAAO,CACT,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,8BAA8B,CAAC,SAAS,CAAC,CAAC;IAY/C,MAAM,CACR,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,SAAS,CAAC;IAiBf,MAAM,CACR,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,SAAS,CAAC;IAuDf,MAAM,CACR,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,SAAS,CAAC;CAuBxB"}

package/dist/core/entities/robot-role/service.mjs

@@ -1,90 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { ValidatorGroup } from "@authup/kit";
-import { PermissionName, RobotRoleValidator } from "@authup/core-kit";
-import { JunctionEntityService } from "@authup/server-kit";
-import { BuiltInPolicyType, PermissionError, definePolicyData } from "@authup/access";
-import { EntityConflictError, EntityNotFoundError } from "@authup/errors";
-//#region src/core/entities/robot-role/service.ts
-var RobotRoleService = class extends JunctionEntityService {
-	ownerRealmKey = "robot_realm_id";
-	repository;
-	identityPermissionProvider;
-	validator;
-	constructor(ctx) {
-		super();
-		this.repository = ctx.repository;
-		this.identityPermissionProvider = ctx.identityPermissionProvider;
-		this.validator = new RobotRoleValidator();
-	}
-	async getMany(query, actor) {
-		await actor.permissionEvaluator.preEvaluateOneOf({ name: [
-			PermissionName.ROBOT_ROLE_READ,
-			PermissionName.ROBOT_ROLE_UPDATE,
-			PermissionName.ROBOT_ROLE_DELETE
-		] });
-		return this.repository.findMany(query);
-	}
-	async getOne(id, actor) {
-		await actor.permissionEvaluator.preEvaluateOneOf({ name: [
-			PermissionName.ROBOT_ROLE_READ,
-			PermissionName.ROBOT_ROLE_UPDATE,
-			PermissionName.ROBOT_ROLE_DELETE
-		] });
-		const entity = await this.repository.findOneBy({ id });
-		if (!entity) throw new EntityNotFoundError();
-		return entity;
-	}
-	async create(data, actor) {
-		await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_ROLE_CREATE });
-		const validated = await this.validator.run(data, { group: ValidatorGroup.CREATE });
-		await this.repository.validateJoinColumns(validated);
-		if (await this.repository.findOneBy({
-			role_id: validated.role_id,
-			robot_id: validated.robot_id
-		})) throw new EntityConflictError({ entity: "robot-role" });
-		if (validated.role) validated.role_realm_id = validated.role.realm_id;
-		if (validated.robot) validated.robot_realm_id = validated.robot.realm_id;
-		if (validated.role && actor.identity) {
-			if (!await this.identityPermissionProvider.isSuperset({
-				type: actor.identity.type,
-				id: actor.identity.data.id
-			}, {
-				type: "role",
-				id: validated.role_id,
-				clientId: validated.role.client_id
-			})) throw new PermissionError({ message: "You don't own the required permissions." });
-		}
-		await actor.permissionEvaluator.evaluate({
-			name: PermissionName.ROBOT_ROLE_CREATE,
-			data: definePolicyData({
-				[BuiltInPolicyType.ATTRIBUTES]: this.junctionAttributes(validated),
-				[BuiltInPolicyType.REALM_MATCH]: this.junctionResourceRealm(validated)
-			})
-		});
-		let entity = this.repository.create(validated);
-		entity = await this.repository.save(entity);
-		return entity;
-	}
-	async delete(id, actor) {
-		await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_ROLE_DELETE });
-		const entity = await this.repository.findOneBy({ id });
-		if (!entity) throw new EntityNotFoundError();
-		await actor.permissionEvaluator.evaluate({
-			name: PermissionName.ROBOT_ROLE_DELETE,
-			data: definePolicyData({
-				[BuiltInPolicyType.ATTRIBUTES]: this.junctionAttributes(entity),
-				[BuiltInPolicyType.REALM_MATCH]: this.junctionResourceRealm(entity)
-			})
-		});
-		const { id: entityId } = entity;
-		await this.repository.remove(entity);
-		entity.id = entityId;
-		return entity;
-	}
-};
-//#endregion
-export { RobotRoleService };
-
-//# sourceMappingURL=service.mjs.map

package/dist/core/entities/robot-role/service.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"service.mjs","names":["BuiltInPolicyType","PermissionError","definePolicyData","EntityConflictError","EntityNotFoundError","ValidatorGroup","PermissionName","RobotRoleValidator","JunctionEntityService","RobotRoleService","ownerRealmKey","repository","identityPermissionProvider","validator","ctx","getMany","query","actor","permissionEvaluator","preEvaluateOneOf","name","ROBOT_ROLE_READ","ROBOT_ROLE_UPDATE","ROBOT_ROLE_DELETE","findMany","getOne","id","entity","findOneBy","create","data","preEvaluate","ROBOT_ROLE_CREATE","validated","run","group","CREATE","validateJoinColumns","existing","role_id","robot_id","role","role_realm_id","realm_id","robot","robot_realm_id","identity","hasPermissions","isSuperset","type","clientId","client_id","message","evaluate","ATTRIBUTES","junctionAttributes","REALM_MATCH","junctionResourceRealm","save","delete","entityId","remove"],"sources":["../../../../src/core/entities/robot-role/service.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { BuiltInPolicyType, PermissionError, definePolicyData } from '@authup/access';\nimport { EntityConflictError, EntityNotFoundError } from '@authup/errors';\nimport { ValidatorGroup } from '@authup/kit';\nimport { PermissionName, RobotRoleValidator } from '@authup/core-kit';\nimport type { RobotRole } from '@authup/core-kit';\nimport type { ActorContext, EntityRepositoryFindManyResult  } from '@authup/server-kit';\nimport { JunctionEntityService } from '@authup/server-kit';\nimport type { IIdentityPermissionProvider } from '../../identity/permission/types.ts';\nimport type { IRobotRoleRepository, IRobotRoleService } from './types.ts';\n\nexport type RobotRoleServiceContext = {\n    repository: IRobotRoleRepository;\n    identityPermissionProvider: IIdentityPermissionProvider;\n};\n\nexport class RobotRoleService extends JunctionEntityService implements IRobotRoleService {\n    protected readonly ownerRealmKey = 'robot_realm_id';\n\n    protected repository: IRobotRoleRepository;\n\n    protected identityPermissionProvider: IIdentityPermissionProvider;\n\n    protected validator: RobotRoleValidator;\n\n    constructor(ctx: RobotRoleServiceContext) {\n        super();\n        this.repository = ctx.repository;\n        this.identityPermissionProvider = ctx.identityPermissionProvider;\n        this.validator = new RobotRoleValidator();\n    }\n\n    async getMany(\n        query: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<EntityRepositoryFindManyResult<RobotRole>> {\n        await actor.permissionEvaluator.preEvaluateOneOf({\n            name: [\n                PermissionName.ROBOT_ROLE_READ,\n                PermissionName.ROBOT_ROLE_UPDATE,\n                PermissionName.ROBOT_ROLE_DELETE,\n            ],\n        });\n\n        return this.repository.findMany(query);\n    }\n\n    async getOne(\n        id: string,\n        actor: ActorContext,\n    ): Promise<RobotRole> {\n        await actor.permissionEvaluator.preEvaluateOneOf({\n            name: [\n                PermissionName.ROBOT_ROLE_READ,\n                PermissionName.ROBOT_ROLE_UPDATE,\n                PermissionName.ROBOT_ROLE_DELETE,\n            ],\n        });\n\n        const entity = await this.repository.findOneBy({ id });\n        if (!entity) {\n            throw new EntityNotFoundError();\n        }\n\n        return entity;\n    }\n\n    async create(\n        data: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<RobotRole> {\n        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_ROLE_CREATE });\n\n        const validated = await this.validator.run(data, { group: ValidatorGroup.CREATE });\n\n        await this.repository.validateJoinColumns(validated);\n\n        const existing = await this.repository.findOneBy({\n            role_id: validated.role_id,\n            robot_id: validated.robot_id,\n        });\n        if (existing) {\n            throw new EntityConflictError({ entity: 'robot-role' });\n        }\n\n        if (validated.role) {\n            validated.role_realm_id = validated.role.realm_id;\n        }\n\n        if (validated.robot) {\n            validated.robot_realm_id = validated.robot.realm_id;\n        }\n\n        if (validated.role && actor.identity) {\n            const hasPermissions = await this.identityPermissionProvider.isSuperset(\n                {\n                    type: actor.identity.type,\n                    id: actor.identity.data.id,\n                },\n                {\n                    type: 'role',\n                    id: validated.role_id,\n                    clientId: validated.role.client_id,\n                },\n            );\n            if (!hasPermissions) {\n                throw new PermissionError({ message: 'You don\\'t own the required permissions.' });\n            }\n        }\n\n        // Stamp the owner (robot) realm so the realm_scope factor gates cross-realm writes.\n        await actor.permissionEvaluator.evaluate({\n            name: PermissionName.ROBOT_ROLE_CREATE,\n            data: definePolicyData({\n                [BuiltInPolicyType.ATTRIBUTES]: this.junctionAttributes(validated),\n                [BuiltInPolicyType.REALM_MATCH]: this.junctionResourceRealm(validated),\n            }),\n        });\n\n        let entity = this.repository.create(validated);\n        entity = await this.repository.save(entity);\n\n        return entity;\n    }\n\n    async delete(\n        id: string,\n        actor: ActorContext,\n    ): Promise<RobotRole> {\n        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_ROLE_DELETE });\n\n        const entity = await this.repository.findOneBy({ id });\n        if (!entity) {\n            throw new EntityNotFoundError();\n        }\n\n        // Stamp the owner (robot) realm so the realm_scope factor gates cross-realm writes.\n        await actor.permissionEvaluator.evaluate({\n            name: PermissionName.ROBOT_ROLE_DELETE,\n            data: definePolicyData({\n                [BuiltInPolicyType.ATTRIBUTES]: this.junctionAttributes(entity),\n                [BuiltInPolicyType.REALM_MATCH]: this.junctionResourceRealm(entity),\n            }),\n        });\n\n        const { id: entityId } = entity;\n        await this.repository.remove(entity);\n        entity.id = entityId;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;AAsBA,IAAaS,mBAAb,cAAsCD,sBAAAA;CACfE,gBAAgB;CAEzBC;CAEAC;CAEAC;CAEV,YAAYC,KAA8B;EACtC,MAAK;EACL,KAAKH,aAAaG,IAAIH;EACtB,KAAKC,6BAA6BE,IAAIF;EACtC,KAAKC,YAAY,IAAIN,mBAAAA;CACzB;CAEA,MAAMQ,QACFC,OACAC,OACkD;EAClD,MAAMA,MAAMC,oBAAoBC,iBAAiB,EAC7CC,MAAM;GACFd,eAAee;GACff,eAAegB;GACfhB,eAAeiB;IAEvB,CAAA;EAEA,OAAO,KAAKZ,WAAWa,SAASR,KAAAA;CACpC;CAEA,MAAMS,OACFC,IACAT,OACkB;EAClB,MAAMA,MAAMC,oBAAoBC,iBAAiB,EAC7CC,MAAM;GACFd,eAAee;GACff,eAAegB;GACfhB,eAAeiB;IAEvB,CAAA;EAEA,MAAMI,SAAS,MAAM,KAAKhB,WAAWiB,UAAU,EAAEF,GAAG,CAAA;EACpD,IAAI,CAACC,QACD,MAAM,IAAIvB,oBAAAA;EAGd,OAAOuB;CACX;CAEA,MAAME,OACFC,MACAb,OACkB;EAClB,MAAMA,MAAMC,oBAAoBa,YAAY,EAAEX,MAAMd,eAAe0B,kBAAkB,CAAA;EAErF,MAAMC,YAAY,MAAM,KAAKpB,UAAUqB,IAAIJ,MAAM,EAAEK,OAAO9B,eAAe+B,OAAO,CAAA;EAEhF,MAAM,KAAKzB,WAAW0B,oBAAoBJ,SAAAA;EAM1C,IAAIK,MAJmB,KAAK3B,WAAWiB,UAAU;GAC7CW,SAASN,UAAUM;GACnBC,UAAUP,UAAUO;EACxB,CAAA,GAEI,MAAM,IAAIrC,oBAAoB,EAAEwB,QAAQ,aAAa,CAAA;EAGzD,IAAIM,UAAUQ,MACVR,UAAUS,gBAAgBT,UAAUQ,KAAKE;EAG7C,IAAIV,UAAUW,OACVX,UAAUY,iBAAiBZ,UAAUW,MAAMD;EAG/C,IAAIV,UAAUQ,QAAQxB,MAAM6B;OAYpB,CAACC,MAXwB,KAAKnC,2BAA2BoC,WACzD;IACIC,MAAMhC,MAAM6B,SAASG;IACrBvB,IAAIT,MAAM6B,SAAShB,KAAKJ;GAC5B,GACA;IACIuB,MAAM;IACNvB,IAAIO,UAAUM;IACdW,UAAUjB,UAAUQ,KAAKU;GAC7B,CAAA,GAGA,MAAM,IAAIlD,gBAAgB,EAAEmD,SAAS,0CAA2C,CAAA;EAAA;EAKxF,MAAMnC,MAAMC,oBAAoBmC,SAAS;GACrCjC,MAAMd,eAAe0B;GACrBF,MAAM5B,iBAAiB;KAClBF,kBAAkBsD,aAAa,KAAKC,mBAAmBtB,SAAAA;KACvDjC,kBAAkBwD,cAAc,KAAKC,sBAAsBxB,SAAAA;GAChE,CAAA;EACJ,CAAA;EAEA,IAAIN,SAAS,KAAKhB,WAAWkB,OAAOI,SAAAA;EACpCN,SAAS,MAAM,KAAKhB,WAAW+C,KAAK/B,MAAAA;EAEpC,OAAOA;CACX;CAEA,MAAMgC,OACFjC,IACAT,OACkB;EAClB,MAAMA,MAAMC,oBAAoBa,YAAY,EAAEX,MAAMd,eAAeiB,kBAAkB,CAAA;EAErF,MAAMI,SAAS,MAAM,KAAKhB,WAAWiB,UAAU,EAAEF,GAAG,CAAA;EACpD,IAAI,CAACC,QACD,MAAM,IAAIvB,oBAAAA;EAId,MAAMa,MAAMC,oBAAoBmC,SAAS;GACrCjC,MAAMd,eAAeiB;GACrBO,MAAM5B,iBAAiB;KAClBF,kBAAkBsD,aAAa,KAAKC,mBAAmB5B,MAAAA;KACvD3B,kBAAkBwD,cAAc,KAAKC,sBAAsB9B,MAAAA;GAChE,CAAA;EACJ,CAAA;EAEA,MAAM,EAAED,IAAIkC,aAAajC;EACzB,MAAM,KAAKhB,WAAWkD,OAAOlC,MAAAA;EAC7BA,OAAOD,KAAKkC;EAEZ,OAAOjC;CACX;AACJ"}

package/dist/core/entities/robot-role/types.d.ts

@@ -1,11 +0,0 @@
-import type { RobotRole } from '@authup/core-kit';
-import type { ActorContext, EntityRepositoryFindManyResult, IEntityRepository } from '@authup/server-kit';
-export interface IRobotRoleRepository extends IEntityRepository<RobotRole> {
-}
-export interface IRobotRoleService {
-    getMany(query: Record<string, any>, actor: ActorContext): Promise<EntityRepositoryFindManyResult<RobotRole>>;
-    getOne(id: string, actor: ActorContext): Promise<RobotRole>;
-    create(data: Record<string, any>, actor: ActorContext): Promise<RobotRole>;
-    delete(id: string, actor: ActorContext): Promise<RobotRole>;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/core/entities/robot-role/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/robot-role/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,8BAA8B,EAAE,iBAAiB,EAAG,MAAM,oBAAoB,CAAC;AAE3G,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB,CAAC,SAAS,CAAC;CACzE;AAED,MAAM,WAAW,iBAAiB;IAC9B,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,8BAA8B,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7G,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5D,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3E,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;CAC/D"}

package/dist/core/entities/robot-role/types.mjs

@@ -1,4 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-export {};

package/dist/core/identity/entities/robot/index.d.ts

@@ -1,2 +0,0 @@
-export * from './types.ts';
-//# sourceMappingURL=index.d.ts.map

package/dist/core/identity/entities/robot/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/identity/entities/robot/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC"}

package/dist/core/identity/entities/robot/types.d.ts

@@ -1,8 +0,0 @@
-import type { Robot } from '@authup/core-kit';
-export interface IRobotIdentityRepository {
-    findOneById(id: string): Promise<Robot | null>;
-    findOneByName(name: string, realm?: string): Promise<Robot | null>;
-    findOneByIdOrName(idOrName: string, realm?: string): Promise<Robot | null>;
-    findOneBy(where: Record<string, any>): Promise<Robot | null>;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/core/identity/entities/robot/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/identity/entities/robot/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAE9C,MAAM,WAAW,wBAAwB;IACrC,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAC/C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IACnE,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAC3E,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;CAChE"}

package/dist/core/identity/entities/robot/types.mjs

@@ -1,4 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-export {};

package/dist/core/oauth2/grant-types/robot-credentials.d.ts

@@ -1,8 +0,0 @@
-import type { OAuth2TokenGrantResponse } from '@authup/specs';
-import type { Robot } from '@authup/core-kit';
-import { OAuth2BaseGrant } from './base.ts';
-import type { OAuth2GrantRunWIthOptions } from './types.ts';
-export declare class RobotCredentialsGrant extends OAuth2BaseGrant<Robot> {
-    runWith(input: Robot, options?: OAuth2GrantRunWIthOptions): Promise<OAuth2TokenGrantResponse>;
-}
-//# sourceMappingURL=robot-credentials.d.ts.map

package/dist/core/oauth2/grant-types/robot-credentials.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"robot-credentials.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/robot-credentials.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAM9C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAE5D,qBAAa,qBAAsB,SAAQ,eAAe,CAAC,KAAK,CAAC;IACvD,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,GAAE,yBAA8B,GAAI,OAAO,CAAC,wBAAwB,CAAC;CA2B3G"}

package/dist/core/oauth2/grant-types/robot-credentials.mjs

@@ -1,39 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { OAuth2BaseGrant } from "./base.mjs";
-import { buildOAuth2BearerTokenResponse } from "../response/bearer.mjs";
-import { IdentityType, ScopeName, SessionAuthMethod } from "@authup/core-kit";
-import { OAuth2SubKind } from "@authup/specs";
-//#region src/core/oauth2/grant-types/robot-credentials.ts
-var RobotCredentialsGrant = class extends OAuth2BaseGrant {
-	async runWith(input, options = {}) {
-		const session = await this.sessionManager.create({
-			user_agent: options.userAgent,
-			ip_address: options.ipAddress,
-			realm_id: input.realm_id,
-			sub: input.id,
-			sub_kind: IdentityType.ROBOT,
-			auth_method: SessionAuthMethod.ROBOT
-		});
-		const [accessToken, accessTokenPayload] = await this.accessTokenIssuer.issue({
-			session_id: session.id,
-			user_agent: session.user_agent,
-			remote_address: session.ip_address,
-			scope: ScopeName.GLOBAL,
-			sub: input.id,
-			sub_kind: OAuth2SubKind.ROBOT,
-			realm_id: input.realm.id,
-			realm_name: input.realm.name,
-			client_id: input.client_id || void 0
-		});
-		return buildOAuth2BearerTokenResponse({
-			accessToken,
-			accessTokenPayload
-		});
-	}
-};
-//#endregion
-export { RobotCredentialsGrant };
-
-//# sourceMappingURL=robot-credentials.mjs.map

package/dist/core/oauth2/grant-types/robot-credentials.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"robot-credentials.mjs","names":["OAuth2SubKind","IdentityType","ScopeName","SessionAuthMethod","OAuth2BaseGrant","buildOAuth2BearerTokenResponse","RobotCredentialsGrant","runWith","input","options","session","sessionManager","create","user_agent","userAgent","ip_address","ipAddress","realm_id","sub","id","sub_kind","ROBOT","auth_method","accessToken","accessTokenPayload","accessTokenIssuer","issue","session_id","remote_address","scope","GLOBAL","realm","realm_name","name","client_id","undefined"],"sources":["../../../../src/core/oauth2/grant-types/robot-credentials.ts"],"sourcesContent":["/*\n * Copyright (c) 2022.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { OAuth2TokenGrantResponse } from '@authup/specs';\nimport { OAuth2SubKind } from '@authup/specs';\nimport type { Robot } from '@authup/core-kit';\nimport {\n    IdentityType,\n    ScopeName, \n    SessionAuthMethod,\n} from '@authup/core-kit';\nimport { OAuth2BaseGrant } from './base.ts';\nimport { buildOAuth2BearerTokenResponse } from '../response/index.ts';\nimport type { OAuth2GrantRunWIthOptions } from './types.ts';\n\nexport class RobotCredentialsGrant extends OAuth2BaseGrant<Robot> {\n    async runWith(input: Robot, options: OAuth2GrantRunWIthOptions = {}) : Promise<OAuth2TokenGrantResponse> {\n        const session = await this.sessionManager.create({\n            user_agent: options.userAgent,\n            ip_address: options.ipAddress,\n            realm_id: input.realm_id,\n            sub: input.id,\n            sub_kind: IdentityType.ROBOT,\n            auth_method: SessionAuthMethod.ROBOT,\n        });\n\n        const [accessToken, accessTokenPayload] = await this.accessTokenIssuer.issue({\n            session_id: session.id,\n            user_agent: session.user_agent,\n            remote_address: session.ip_address,\n            scope: ScopeName.GLOBAL,\n            sub: input.id,\n            sub_kind: OAuth2SubKind.ROBOT,\n            realm_id: input.realm.id,\n            realm_name: input.realm.name,\n            client_id: input.client_id || undefined,\n        });\n\n        return buildOAuth2BearerTokenResponse({\n            accessToken,\n            accessTokenPayload,\n        });\n    }\n}\n"],"mappings":";;;;;;;;AAmBA,IAAaM,wBAAb,cAA2CF,gBAAAA;CACvC,MAAMG,QAAQC,OAAcC,UAAqC,CAAC,GAAuC;EACrG,MAAMC,UAAU,MAAM,KAAKC,eAAeC,OAAO;GAC7CC,YAAYJ,QAAQK;GACpBC,YAAYN,QAAQO;GACpBC,UAAUT,MAAMS;GAChBC,KAAKV,MAAMW;GACXC,UAAUnB,aAAaoB;GACvBC,aAAanB,kBAAkBkB;EACnC,CAAA;EAEA,MAAM,CAACE,aAAaC,sBAAsB,MAAM,KAAKC,kBAAkBC,MAAM;GACzEC,YAAYjB,QAAQS;GACpBN,YAAYH,QAAQG;GACpBe,gBAAgBlB,QAAQK;GACxBc,OAAO3B,UAAU4B;GACjBZ,KAAKV,MAAMW;GACXC,UAAUpB,cAAcqB;GACxBJ,UAAUT,MAAMuB,MAAMZ;GACtBa,YAAYxB,MAAMuB,MAAME;GACxBC,WAAW1B,MAAM0B,aAAaC,KAAAA;EAClC,CAAA;EAEA,OAAO9B,+BAA+B;GAClCkB;GACAC;EACJ,CAAA;CACJ;AACJ"}

package/dist/core/provisioning/entities/robot/index.d.ts

@@ -1,3 +0,0 @@
-export * from './types.ts';
-export * from './validator.ts';
-//# sourceMappingURL=index.d.ts.map

package/dist/core/provisioning/entities/robot/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/robot/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC"}

package/dist/core/provisioning/entities/robot/index.mjs

@@ -1,5 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { RobotProvisioningValidator } from "./validator.mjs";
-export { RobotProvisioningValidator };

package/dist/core/provisioning/entities/robot/relations-validator.d.ts

@@ -1,6 +0,0 @@
-import { Container } from 'validup';
-import type { RobotProvisioningRelations } from './types.ts';
-export declare class RobotProvisioningRelationsValidator extends Container<RobotProvisioningRelations> {
-    protected initialize(): void;
-}
-//# sourceMappingURL=relations-validator.d.ts.map

package/dist/core/provisioning/entities/robot/relations-validator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"relations-validator.d.ts","sourceRoot":"","sources":["../../../../../src/core/provisioning/entities/robot/relations-validator.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEpC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAE7D,qBAAa,mCAAoC,SAAQ,SAAS,CAAC,0BAA0B,CAAC;IAC1F,SAAS,CAAC,UAAU;CAmBvB"}

package/dist/core/provisioning/entities/robot/relations-validator.mjs

@@ -1,20 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { Container } from "validup";
-import { createValidator } from "@validup/zod";
-import { z } from "zod";
-//#region src/core/provisioning/entities/robot/relations-validator.ts
-var RobotProvisioningRelationsValidator = class extends Container {
-	initialize() {
-		super.initialize();
-		this.mount("realmPermissions", { optional: true }, createValidator(z.array(z.string())));
-		this.mount("globalPermissions", { optional: true }, createValidator(z.array(z.string())));
-		this.mount("realmRoles", { optional: true }, createValidator(z.array(z.string())));
-		this.mount("globalRoles", { optional: true }, createValidator(z.array(z.string())));
-	}
-};
-//#endregion
-export { RobotProvisioningRelationsValidator };
-
-//# sourceMappingURL=relations-validator.mjs.map

package/dist/core/provisioning/entities/robot/relations-validator.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"relations-validator.mjs","names":["createValidator","Container","z","RobotProvisioningRelationsValidator","initialize","mount","optional","array","string"],"sources":["../../../../../src/core/provisioning/entities/robot/relations-validator.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createValidator } from '@validup/zod';\nimport { Container } from 'validup';\nimport { z } from 'zod';\nimport type { RobotProvisioningRelations } from './types.ts';\n\nexport class RobotProvisioningRelationsValidator extends Container<RobotProvisioningRelations> {\n    protected initialize() {\n        super.initialize();\n\n        this.mount('realmPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalPermissions', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('realmRoles', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n\n        this.mount('globalRoles', { optional: true }, createValidator(\n            z.array(z.string()),\n        ));\n    }\n}\n"],"mappings":";;;;;;;AAYA,IAAaG,sCAAb,cAAyDF,UAAAA;CAC3CG,aAAa;EACnB,MAAMA,WAAAA;EAEN,KAAKC,MAAM,oBAAoB,EAAEC,UAAU,KAAK,GAAGN,gBAC/CE,EAAEK,MAAML,EAAEM,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,qBAAqB,EAAEC,UAAU,KAAK,GAAGN,gBAChDE,EAAEK,MAAML,EAAEM,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,cAAc,EAAEC,UAAU,KAAK,GAAGN,gBACzCE,EAAEK,MAAML,EAAEM,OAAM,CAAA,CAAA,CAAA;EAGpB,KAAKH,MAAM,eAAe,EAAEC,UAAU,KAAK,GAAGN,gBAC1CE,EAAEK,MAAML,EAAEM,OAAM,CAAA,CAAA,CAAA;CAExB;AACJ"}