@authup/server-core 1.0.0-beta.53 → 1.0.0-beta.55

package/dist/adapters/database/migrations/mysql/1784460916000-RemoveRobots.mjs

@@ -0,0 +1,161 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+//#region src/adapters/database/migrations/mysql/1784460916000-RemoveRobots.ts
+/**
+* Drops the robot entity: auth_robots, auth_robot_roles,
+* auth_robot_permissions, auth_sessions.robot_id and the dangling robot
+* FKs on the legacy auth_refresh_tokens / auth_authorization_codes
+* tables. Robots are superseded by clients (client_credentials grant);
+* robot rows and their role/permission bindings are NOT migrated onto
+* clients — recreate machine identities as clients by hand.
+*
+* down() recreates the pre-removal schema shape, constraint names
+* included, so the older migrations' down() paths keep working.
+*/ var RemoveRobots1784460916000 = class {
+	name = "RemoveRobots1784460916000";
+	async up(queryRunner) {
+		await queryRunner.query(`
+            ALTER TABLE \`auth_sessions\` DROP FOREIGN KEY \`FK_46b30e5d8e5d5de58d454f53f8c\`
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_sessions\` DROP COLUMN \`robot_id\`
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_refresh_tokens\` DROP FOREIGN KEY \`FK_6be38b6dbd4ce86ca3d17494ca9\`
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_authorization_codes\` DROP FOREIGN KEY \`FK_32619f36922f433e27affc169e4\`
+        `);
+		await queryRunner.query(`
+            DROP TABLE \`auth_robot_permissions\`
+        `);
+		await queryRunner.query(`
+            DROP TABLE \`auth_robot_roles\`
+        `);
+		await queryRunner.query(`
+            DROP TABLE \`auth_robots\`
+        `);
+	}
+	async down(queryRunner) {
+		await queryRunner.query(`
+            CREATE TABLE \`auth_robots\` (
+                \`id\` varchar(36) NOT NULL,
+                \`secret\` varchar(256) NOT NULL,
+                \`name\` varchar(128) NOT NULL,
+                \`description\` text NULL,
+                \`active\` tinyint NOT NULL DEFAULT 1,
+                \`created_at\` datetime(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6),
+                \`updated_at\` datetime(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6) ON UPDATE CURRENT_TIMESTAMP(6),
+                \`user_id\` varchar(255) NULL,
+                \`realm_id\` varchar(255) NOT NULL,
+                \`display_name\` varchar(256) NULL,
+                \`client_id\` varchar(255) NULL,
+                INDEX \`IDX_9c99802f3f360718344180c3f6\` (\`realm_id\`),
+                UNIQUE INDEX \`IDX_f89cc2abf1d7e284a7d6cd59c1\` (\`name\`, \`realm_id\`),
+                PRIMARY KEY (\`id\`)
+            ) ENGINE = InnoDB
+        `);
+		await queryRunner.query(`
+            CREATE INDEX \`IDX_91942a5962da3b91175eeaa2db\` ON \`auth_robots\` (\`client_id\`)
+        `);
+		await queryRunner.query(`
+            CREATE TABLE \`auth_robot_roles\` (
+                \`id\` varchar(36) NOT NULL,
+                \`role_id\` varchar(255) NOT NULL,
+                \`role_realm_id\` varchar(255) NULL,
+                \`robot_id\` varchar(255) NOT NULL,
+                \`robot_realm_id\` varchar(255) NULL,
+                \`created_at\` datetime(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6),
+                \`updated_at\` datetime(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6) ON UPDATE CURRENT_TIMESTAMP(6),
+                \`client_id\` varchar(36) NULL,
+                UNIQUE INDEX \`IDX_515b3dc84ba9bec42bd0e92cbd\` (\`role_id\`, \`robot_id\`),
+                PRIMARY KEY (\`id\`)
+            ) ENGINE = InnoDB
+        `);
+		await queryRunner.query(`
+            CREATE TABLE \`auth_robot_permissions\` (
+                \`id\` varchar(36) NOT NULL,
+                \`robot_id\` varchar(255) NOT NULL,
+                \`robot_realm_id\` varchar(255) NULL,
+                \`permission_id\` varchar(255) NOT NULL,
+                \`permission_realm_id\` varchar(255) NULL,
+                \`created_at\` datetime(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6),
+                \`updated_at\` datetime(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6) ON UPDATE CURRENT_TIMESTAMP(6),
+                \`policy_id\` varchar(255) NULL,
+                \`realm_scope\` varchar(50) NOT NULL DEFAULT 'own',
+                UNIQUE INDEX \`IDX_0c2284272043ed8aba6689306b\` (\`permission_id\`, \`robot_id\`),
+                PRIMARY KEY (\`id\`)
+            ) ENGINE = InnoDB
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_robots\`
+            ADD CONSTRAINT \`FK_b6d73e3026e15c0af6c41ef8139\` FOREIGN KEY (\`user_id\`) REFERENCES \`auth_users\`(\`id\`) ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_robots\`
+            ADD CONSTRAINT \`FK_9c99802f3f360718344180c3f68\` FOREIGN KEY (\`realm_id\`) REFERENCES \`auth_realms\`(\`id\`) ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_robots\`
+            ADD CONSTRAINT \`FK_91942a5962da3b91175eeaa2db1\` FOREIGN KEY (\`client_id\`) REFERENCES \`auth_realms\`(\`id\`) ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_robot_roles\`
+            ADD CONSTRAINT \`FK_2256b04cbdb1e16e5144e14750b\` FOREIGN KEY (\`role_id\`) REFERENCES \`auth_roles\`(\`id\`) ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_robot_roles\`
+            ADD CONSTRAINT \`FK_28146c7babddcad18116dabfa9e\` FOREIGN KEY (\`role_realm_id\`) REFERENCES \`auth_realms\`(\`id\`) ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_robot_roles\`
+            ADD CONSTRAINT \`FK_a4904e9c921294c80f75a0c3e02\` FOREIGN KEY (\`client_id\`) REFERENCES \`auth_robots\`(\`id\`) ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_robot_roles\`
+            ADD CONSTRAINT \`FK_21994ec834c710276cce38c779d\` FOREIGN KEY (\`robot_realm_id\`) REFERENCES \`auth_realms\`(\`id\`) ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_robot_permissions\`
+            ADD CONSTRAINT \`FK_5af2884572a617e2532410f8221\` FOREIGN KEY (\`robot_id\`) REFERENCES \`auth_robots\`(\`id\`) ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_robot_permissions\`
+            ADD CONSTRAINT \`FK_d52ab826ee04e008624df74cdc8\` FOREIGN KEY (\`robot_realm_id\`) REFERENCES \`auth_realms\`(\`id\`) ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_robot_permissions\`
+            ADD CONSTRAINT \`FK_b29fe901137f6944ecaf98fcb5a\` FOREIGN KEY (\`permission_id\`) REFERENCES \`auth_permissions\`(\`id\`) ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_robot_permissions\`
+            ADD CONSTRAINT \`FK_1cacb8af1791a5303d30cbf8590\` FOREIGN KEY (\`permission_realm_id\`) REFERENCES \`auth_realms\`(\`id\`) ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_robot_permissions\`
+            ADD CONSTRAINT \`FK_0786e0bee54b581c62d79a8cec7\` FOREIGN KEY (\`policy_id\`) REFERENCES \`auth_policies\`(\`id\`) ON DELETE
+            SET NULL ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_sessions\`
+            ADD \`robot_id\` varchar(255) NULL
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_sessions\`
+            ADD CONSTRAINT \`FK_46b30e5d8e5d5de58d454f53f8c\` FOREIGN KEY (\`robot_id\`) REFERENCES \`auth_robots\`(\`id\`) ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_refresh_tokens\`
+            ADD CONSTRAINT \`FK_6be38b6dbd4ce86ca3d17494ca9\` FOREIGN KEY (\`robot_id\`) REFERENCES \`auth_robots\`(\`id\`) ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE \`auth_authorization_codes\`
+            ADD CONSTRAINT \`FK_32619f36922f433e27affc169e4\` FOREIGN KEY (\`robot_id\`) REFERENCES \`auth_robots\`(\`id\`) ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+	}
+};
+//#endregion
+export { RemoveRobots1784460916000 };
+
+//# sourceMappingURL=1784460916000-RemoveRobots.mjs.map

package/dist/adapters/database/migrations/mysql/1784460916000-RemoveRobots.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"1784460916000-RemoveRobots.mjs","names":["RemoveRobots1784460916000","name","up","queryRunner","query","down"],"sources":["../../../../../src/adapters/database/migrations/mysql/1784460916000-RemoveRobots.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { MigrationInterface, QueryRunner } from 'typeorm';\n\n/**\n * Drops the robot entity: auth_robots, auth_robot_roles,\n * auth_robot_permissions, auth_sessions.robot_id and the dangling robot\n * FKs on the legacy auth_refresh_tokens / auth_authorization_codes\n * tables. Robots are superseded by clients (client_credentials grant);\n * robot rows and their role/permission bindings are NOT migrated onto\n * clients — recreate machine identities as clients by hand.\n *\n * down() recreates the pre-removal schema shape, constraint names\n * included, so the older migrations' down() paths keep working.\n */\nexport class RemoveRobots1784460916000 implements MigrationInterface {\n    name = 'RemoveRobots1784460916000';\n\n    public async up(queryRunner: QueryRunner): Promise<void> {\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_sessions\\` DROP FOREIGN KEY \\`FK_46b30e5d8e5d5de58d454f53f8c\\`\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_sessions\\` DROP COLUMN \\`robot_id\\`\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_refresh_tokens\\` DROP FOREIGN KEY \\`FK_6be38b6dbd4ce86ca3d17494ca9\\`\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_authorization_codes\\` DROP FOREIGN KEY \\`FK_32619f36922f433e27affc169e4\\`\n        `);\n        await queryRunner.query(`\n            DROP TABLE \\`auth_robot_permissions\\`\n        `);\n        await queryRunner.query(`\n            DROP TABLE \\`auth_robot_roles\\`\n        `);\n        await queryRunner.query(`\n            DROP TABLE \\`auth_robots\\`\n        `);\n    }\n\n    public async down(queryRunner: QueryRunner): Promise<void> {\n        await queryRunner.query(`\n            CREATE TABLE \\`auth_robots\\` (\n                \\`id\\` varchar(36) NOT NULL,\n                \\`secret\\` varchar(256) NOT NULL,\n                \\`name\\` varchar(128) NOT NULL,\n                \\`description\\` text NULL,\n                \\`active\\` tinyint NOT NULL DEFAULT 1,\n                \\`created_at\\` datetime(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6),\n                \\`updated_at\\` datetime(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6) ON UPDATE CURRENT_TIMESTAMP(6),\n                \\`user_id\\` varchar(255) NULL,\n                \\`realm_id\\` varchar(255) NOT NULL,\n                \\`display_name\\` varchar(256) NULL,\n                \\`client_id\\` varchar(255) NULL,\n                INDEX \\`IDX_9c99802f3f360718344180c3f6\\` (\\`realm_id\\`),\n                UNIQUE INDEX \\`IDX_f89cc2abf1d7e284a7d6cd59c1\\` (\\`name\\`, \\`realm_id\\`),\n                PRIMARY KEY (\\`id\\`)\n            ) ENGINE = InnoDB\n        `);\n        await queryRunner.query(`\n            CREATE INDEX \\`IDX_91942a5962da3b91175eeaa2db\\` ON \\`auth_robots\\` (\\`client_id\\`)\n        `);\n        await queryRunner.query(`\n            CREATE TABLE \\`auth_robot_roles\\` (\n                \\`id\\` varchar(36) NOT NULL,\n                \\`role_id\\` varchar(255) NOT NULL,\n                \\`role_realm_id\\` varchar(255) NULL,\n                \\`robot_id\\` varchar(255) NOT NULL,\n                \\`robot_realm_id\\` varchar(255) NULL,\n                \\`created_at\\` datetime(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6),\n                \\`updated_at\\` datetime(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6) ON UPDATE CURRENT_TIMESTAMP(6),\n                \\`client_id\\` varchar(36) NULL,\n                UNIQUE INDEX \\`IDX_515b3dc84ba9bec42bd0e92cbd\\` (\\`role_id\\`, \\`robot_id\\`),\n                PRIMARY KEY (\\`id\\`)\n            ) ENGINE = InnoDB\n        `);\n        await queryRunner.query(`\n            CREATE TABLE \\`auth_robot_permissions\\` (\n                \\`id\\` varchar(36) NOT NULL,\n                \\`robot_id\\` varchar(255) NOT NULL,\n                \\`robot_realm_id\\` varchar(255) NULL,\n                \\`permission_id\\` varchar(255) NOT NULL,\n                \\`permission_realm_id\\` varchar(255) NULL,\n                \\`created_at\\` datetime(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6),\n                \\`updated_at\\` datetime(6) NOT NULL DEFAULT CURRENT_TIMESTAMP(6) ON UPDATE CURRENT_TIMESTAMP(6),\n                \\`policy_id\\` varchar(255) NULL,\n                \\`realm_scope\\` varchar(50) NOT NULL DEFAULT 'own',\n                UNIQUE INDEX \\`IDX_0c2284272043ed8aba6689306b\\` (\\`permission_id\\`, \\`robot_id\\`),\n                PRIMARY KEY (\\`id\\`)\n            ) ENGINE = InnoDB\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_robots\\`\n            ADD CONSTRAINT \\`FK_b6d73e3026e15c0af6c41ef8139\\` FOREIGN KEY (\\`user_id\\`) REFERENCES \\`auth_users\\`(\\`id\\`) ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_robots\\`\n            ADD CONSTRAINT \\`FK_9c99802f3f360718344180c3f68\\` FOREIGN KEY (\\`realm_id\\`) REFERENCES \\`auth_realms\\`(\\`id\\`) ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_robots\\`\n            ADD CONSTRAINT \\`FK_91942a5962da3b91175eeaa2db1\\` FOREIGN KEY (\\`client_id\\`) REFERENCES \\`auth_realms\\`(\\`id\\`) ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_robot_roles\\`\n            ADD CONSTRAINT \\`FK_2256b04cbdb1e16e5144e14750b\\` FOREIGN KEY (\\`role_id\\`) REFERENCES \\`auth_roles\\`(\\`id\\`) ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_robot_roles\\`\n            ADD CONSTRAINT \\`FK_28146c7babddcad18116dabfa9e\\` FOREIGN KEY (\\`role_realm_id\\`) REFERENCES \\`auth_realms\\`(\\`id\\`) ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_robot_roles\\`\n            ADD CONSTRAINT \\`FK_a4904e9c921294c80f75a0c3e02\\` FOREIGN KEY (\\`client_id\\`) REFERENCES \\`auth_robots\\`(\\`id\\`) ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_robot_roles\\`\n            ADD CONSTRAINT \\`FK_21994ec834c710276cce38c779d\\` FOREIGN KEY (\\`robot_realm_id\\`) REFERENCES \\`auth_realms\\`(\\`id\\`) ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_robot_permissions\\`\n            ADD CONSTRAINT \\`FK_5af2884572a617e2532410f8221\\` FOREIGN KEY (\\`robot_id\\`) REFERENCES \\`auth_robots\\`(\\`id\\`) ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_robot_permissions\\`\n            ADD CONSTRAINT \\`FK_d52ab826ee04e008624df74cdc8\\` FOREIGN KEY (\\`robot_realm_id\\`) REFERENCES \\`auth_realms\\`(\\`id\\`) ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_robot_permissions\\`\n            ADD CONSTRAINT \\`FK_b29fe901137f6944ecaf98fcb5a\\` FOREIGN KEY (\\`permission_id\\`) REFERENCES \\`auth_permissions\\`(\\`id\\`) ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_robot_permissions\\`\n            ADD CONSTRAINT \\`FK_1cacb8af1791a5303d30cbf8590\\` FOREIGN KEY (\\`permission_realm_id\\`) REFERENCES \\`auth_realms\\`(\\`id\\`) ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_robot_permissions\\`\n            ADD CONSTRAINT \\`FK_0786e0bee54b581c62d79a8cec7\\` FOREIGN KEY (\\`policy_id\\`) REFERENCES \\`auth_policies\\`(\\`id\\`) ON DELETE\n            SET NULL ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_sessions\\`\n            ADD \\`robot_id\\` varchar(255) NULL\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_sessions\\`\n            ADD CONSTRAINT \\`FK_46b30e5d8e5d5de58d454f53f8c\\` FOREIGN KEY (\\`robot_id\\`) REFERENCES \\`auth_robots\\`(\\`id\\`) ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_refresh_tokens\\`\n            ADD CONSTRAINT \\`FK_6be38b6dbd4ce86ca3d17494ca9\\` FOREIGN KEY (\\`robot_id\\`) REFERENCES \\`auth_robots\\`(\\`id\\`) ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \\`auth_authorization_codes\\`\n            ADD CONSTRAINT \\`FK_32619f36922f433e27affc169e4\\` FOREIGN KEY (\\`robot_id\\`) REFERENCES \\`auth_robots\\`(\\`id\\`) ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;GAoBA,IAAaA,4BAAb,MAAaA;CACTC,OAAO;CAEP,MAAaC,GAAGC,aAAyC;EACrD,MAAMA,YAAYC,MAAM;;SAEvB;EACD,MAAMD,YAAYC,MAAM;;SAEvB;EACD,MAAMD,YAAYC,MAAM;;SAEvB;EACD,MAAMD,YAAYC,MAAM;;SAEvB;EACD,MAAMD,YAAYC,MAAM;;SAEvB;EACD,MAAMD,YAAYC,MAAM;;SAEvB;EACD,MAAMD,YAAYC,MAAM;;SAEvB;CACL;CAEA,MAAaC,KAAKF,aAAyC;EACvD,MAAMA,YAAYC,MAAM;;;;;;;;;;;;;;;;;SAiBvB;EACD,MAAMD,YAAYC,MAAM;;SAEvB;EACD,MAAMD,YAAYC,MAAM;;;;;;;;;;;;;SAavB;EACD,MAAMD,YAAYC,MAAM;;;;;;;;;;;;;;SAcvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;;SAIvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;CACL;AACJ"}

package/dist/adapters/database/migrations/postgres/1779267068441-Default.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"1779267068441-Default.mjs","names":["NAME_COLLISION_CHECKS","table","groupBy","where","NAME_TABLES","map","c","Default1779267068441","name","up","queryRunner","check","join","rows","query","length","Error","down"],"sources":["../../../../../src/adapters/database/migrations/postgres/1779267068441-Default.ts"],"sourcesContent":["import type { MigrationInterface, QueryRunner } from 'typeorm';\n\ntype CollisionCheck = {\n    table: string,\n    groupBy: string[],\n    where?: string,\n};\n\nconst NAME_COLLISION_CHECKS: CollisionCheck[] = [\n    { table: 'auth_clients', groupBy: ['LOWER(TRIM(name))', 'realm_id'] },\n    { table: 'auth_robots', groupBy: ['LOWER(TRIM(name))', 'realm_id'] },\n    { table: 'auth_users', groupBy: ['LOWER(TRIM(name))', 'realm_id'] },\n    { table: 'auth_realms', groupBy: ['LOWER(TRIM(name))'] },\n    {\n        table: 'auth_roles', \n        groupBy: ['LOWER(TRIM(name))', 'client_id', 'realm_id'], \n        where: 'client_id IS NOT NULL AND realm_id IS NOT NULL', \n    },\n    {\n        table: 'auth_scopes', \n        groupBy: ['LOWER(TRIM(name))', 'realm_id'], \n        where: 'realm_id IS NOT NULL', \n    },\n    {\n        table: 'auth_permissions', \n        groupBy: ['LOWER(TRIM(name))', 'client_id', 'realm_id'], \n        where: 'client_id IS NOT NULL AND realm_id IS NOT NULL', \n    },\n    {\n        table: 'auth_policies', \n        groupBy: ['LOWER(TRIM(name))', 'realm_id'], \n        where: 'realm_id IS NOT NULL', \n    },\n    { table: 'auth_identity_providers', groupBy: ['LOWER(TRIM(name))', 'realm_id'] },\n];\n\nconst NAME_TABLES = NAME_COLLISION_CHECKS.map((c) => c.table);\n\nexport class Default1779267068441 implements MigrationInterface {\n    name = 'Default1779267068441';\n\n    public async up(queryRunner: QueryRunner): Promise<void> {\n        for (const check of NAME_COLLISION_CHECKS) {\n            const groupBy = check.groupBy.join(', ');\n            const rows = await queryRunner.query(`\n                SELECT ${groupBy}\n                FROM \"${check.table}\"\n                ${check.where ? `WHERE ${check.where}` : ''}\n                GROUP BY ${groupBy}\n                HAVING COUNT(*) > 1\n            `);\n            if (rows.length > 0) {\n                throw new Error(\n                    `Canonical-name migration aborted: \"${check.table}\" has ${rows.length} collision group(s) on ${groupBy}. ` +\n                    'Merge the conflicting rows manually before re-running.',\n                );\n            }\n        }\n\n        for (const table of NAME_TABLES) {\n            await queryRunner.query(`\n                UPDATE \"${table}\"\n                SET \"name\" = LOWER(TRIM(\"name\"))\n                WHERE \"name\" <> LOWER(TRIM(\"name\"))\n            `);\n        }\n\n        await queryRunner.query(`\n            UPDATE \"auth_users\"\n            SET \"email\" = LOWER(TRIM(\"email\"))\n            WHERE \"email\" IS NOT NULL\n              AND \"email\" <> LOWER(TRIM(\"email\"))\n        `);\n\n        await queryRunner.query(`\n            ALTER TABLE \"auth_users\" DROP CONSTRAINT \"FK_b1797e07106b4af61280b8edac1\"\n        `);\n        await queryRunner.query(`\n            DROP INDEX \"public\".\"IDX_b1797e07106b4af61280b8edac\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_users\" DROP COLUMN \"client_id\"\n        `);\n    }\n    public async down(queryRunner: QueryRunner): Promise<void> {\n        await queryRunner.query(`\n            ALTER TABLE \"auth_users\"\n            ADD \"client_id\" uuid\n        `);\n        await queryRunner.query(`\n            CREATE INDEX \"IDX_b1797e07106b4af61280b8edac\" ON \"auth_users\" (\"client_id\")\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_users\"\n            ADD CONSTRAINT \"FK_b1797e07106b4af61280b8edac1\" FOREIGN KEY (\"client_id\") REFERENCES \"auth_clients\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n    }\n}\n"],"mappings":";;;;AAQA,MAAMA,wBAA0C;CAC5C;EAAEC,OAAO;EAAgBC,SAAS,CAAC,qBAAqB,UAAA;CAAY;CACpE;EAAED,OAAO;EAAeC,SAAS,CAAC,qBAAqB,UAAA;CAAY;CACnE;EAAED,OAAO;EAAcC,SAAS,CAAC,qBAAqB,UAAA;CAAY;CAClE;EAAED,OAAO;EAAeC,SAAS,CAAC,mBAAA;CAAqB;CACvD;EACID,OAAO;EACPC,SAAS;GAAC;GAAqB;GAAa;;EAC5CC,OAAO;CACX;CACA;EACIF,OAAO;EACPC,SAAS,CAAC,qBAAqB,UAAA;EAC/BC,OAAO;CACX;CACA;EACIF,OAAO;EACPC,SAAS;GAAC;GAAqB;GAAa;;EAC5CC,OAAO;CACX;CACA;EACIF,OAAO;EACPC,SAAS,CAAC,qBAAqB,UAAA;EAC/BC,OAAO;CACX;CACA;EAAEF,OAAO;EAA2BC,SAAS,CAAC,qBAAqB,UAAA;CAAY;;AAGnF,MAAME,cAAcJ,sBAAsBK,KAAKC,MAAMA,EAAEL,KAAK;AAE5D,IAAaM,uBAAb,MAAaA;CACTC,OAAO;CAEP,MAAaC,GAAGC,aAAyC;EACrD,KAAK,MAAMC,SAASX,uBAAuB;GACvC,MAAME,UAAUS,MAAMT,QAAQU,KAAK,IAAA;GACnC,MAAMC,OAAO,MAAMH,YAAYI,MAAM;yBACxBZ,QAAQ;wBACTS,MAAMV,MAAM;kBAClBU,MAAMR,QAAQ,SAASQ,MAAMR,UAAU,GAAG;2BACjCD,QAAQ;;aAEtB;GACD,IAAIW,KAAKE,SAAS,GACd,MAAM,IAAIC,MACN,sCAAsCL,MAAMV,MAAM,QAAQY,KAAKE,OAAO,yBAAyBb,QAAQ,yDACvG;EAGZ;EAEA,KAAK,MAAMD,SAASG,aAChB,MAAMM,YAAYI,MAAM;0BACVb,MAAM;;;aAGnB;EAGL,MAAMS,YAAYI,MAAM;;;;;SAKvB;EAED,MAAMJ,YAAYI,MAAM;;SAEvB;EACD,MAAMJ,YAAYI,MAAM;;SAEvB;EACD,MAAMJ,YAAYI,MAAM;;SAEvB;CACL;CACA,MAAaG,KAAKP,aAAyC;EACvD,MAAMA,YAAYI,MAAM;;;SAGvB;EACD,MAAMJ,YAAYI,MAAM;;SAEvB;EACD,MAAMJ,YAAYI,MAAM;;;SAGvB;CACL;AACJ"}
+{"version":3,"file":"1779267068441-Default.mjs","names":["NAME_COLLISION_CHECKS","table","groupBy","where","NAME_TABLES","map","c","Default1779267068441","name","up","queryRunner","check","join","rows","query","length","Error","down"],"sources":["../../../../../src/adapters/database/migrations/postgres/1779267068441-Default.ts"],"sourcesContent":["import type { MigrationInterface, QueryRunner } from 'typeorm';\n\ntype CollisionCheck = {\n    table: string,\n    groupBy: string[],\n    where?: string,\n};\n\nconst NAME_COLLISION_CHECKS: CollisionCheck[] = [\n    { table: 'auth_clients', groupBy: ['LOWER(TRIM(name))', 'realm_id'] },\n    { table: 'auth_robots', groupBy: ['LOWER(TRIM(name))', 'realm_id'] },\n    { table: 'auth_users', groupBy: ['LOWER(TRIM(name))', 'realm_id'] },\n    { table: 'auth_realms', groupBy: ['LOWER(TRIM(name))'] },\n    {\n        table: 'auth_roles', \n        groupBy: ['LOWER(TRIM(name))', 'client_id', 'realm_id'], \n        where: 'client_id IS NOT NULL AND realm_id IS NOT NULL', \n    },\n    {\n        table: 'auth_scopes', \n        groupBy: ['LOWER(TRIM(name))', 'realm_id'], \n        where: 'realm_id IS NOT NULL', \n    },\n    {\n        table: 'auth_permissions', \n        groupBy: ['LOWER(TRIM(name))', 'client_id', 'realm_id'], \n        where: 'client_id IS NOT NULL AND realm_id IS NOT NULL', \n    },\n    {\n        table: 'auth_policies', \n        groupBy: ['LOWER(TRIM(name))', 'realm_id'], \n        where: 'realm_id IS NOT NULL', \n    },\n    { table: 'auth_identity_providers', groupBy: ['LOWER(TRIM(name))', 'realm_id'] },\n];\n\nconst NAME_TABLES = NAME_COLLISION_CHECKS.map((c) => c.table);\n\nexport class Default1779267068441 implements MigrationInterface {\n    name = 'Default1779267068441';\n\n    public async up(queryRunner: QueryRunner): Promise<void> {\n        for (const check of NAME_COLLISION_CHECKS) {\n            const groupBy = check.groupBy.join(', ');\n            const rows = await queryRunner.query(`\n                SELECT ${groupBy}\n                FROM \"${check.table}\"\n                ${check.where ? `WHERE ${check.where}` : ''}\n                GROUP BY ${groupBy}\n                HAVING COUNT(*) > 1\n            `);\n            if (rows.length > 0) {\n                throw new Error(\n                    `Canonical-name migration aborted: \"${check.table}\" has ${rows.length} collision group(s) on ${groupBy}. ` +\n                    'Merge the conflicting rows manually before re-running.',\n                );\n            }\n        }\n\n        for (const table of NAME_TABLES) {\n            await queryRunner.query(`\n                UPDATE \"${table}\"\n                SET \"name\" = LOWER(TRIM(\"name\"))\n                WHERE \"name\" <> LOWER(TRIM(\"name\"))\n            `);\n        }\n\n        await queryRunner.query(`\n            UPDATE \"auth_users\"\n            SET \"email\" = LOWER(TRIM(\"email\"))\n            WHERE \"email\" IS NOT NULL\n              AND \"email\" <> LOWER(TRIM(\"email\"))\n        `);\n\n        await queryRunner.query(`\n            ALTER TABLE \"auth_users\" DROP CONSTRAINT \"FK_b1797e07106b4af61280b8edac1\"\n        `);\n        await queryRunner.query(`\n            DROP INDEX \"public\".\"IDX_b1797e07106b4af61280b8edac\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_users\" DROP COLUMN \"client_id\"\n        `);\n    }\n    public async down(queryRunner: QueryRunner): Promise<void> {\n        await queryRunner.query(`\n            ALTER TABLE \"auth_users\"\n            ADD \"client_id\" uuid\n        `);\n        await queryRunner.query(`\n            CREATE INDEX \"IDX_b1797e07106b4af61280b8edac\" ON \"auth_users\" (\"client_id\")\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_users\"\n            ADD CONSTRAINT \"FK_b1797e07106b4af61280b8edac1\" FOREIGN KEY (\"client_id\") REFERENCES \"auth_clients\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n    }\n}\n"],"mappings":";;;;AAQA,MAAMA,wBAA0C;CAC5C;EAAEC,OAAO;EAAgBC,SAAS,CAAC,qBAAqB,UAAW;CAAC;CACpE;EAAED,OAAO;EAAeC,SAAS,CAAC,qBAAqB,UAAW;CAAC;CACnE;EAAED,OAAO;EAAcC,SAAS,CAAC,qBAAqB,UAAW;CAAC;CAClE;EAAED,OAAO;EAAeC,SAAS,CAAC,mBAAoB;CAAC;CACvD;EACID,OAAO;EACPC,SAAS;GAAC;GAAqB;GAAa;EAAW;EACvDC,OAAO;CACX;CACA;EACIF,OAAO;EACPC,SAAS,CAAC,qBAAqB,UAAW;EAC1CC,OAAO;CACX;CACA;EACIF,OAAO;EACPC,SAAS;GAAC;GAAqB;GAAa;EAAW;EACvDC,OAAO;CACX;CACA;EACIF,OAAO;EACPC,SAAS,CAAC,qBAAqB,UAAW;EAC1CC,OAAO;CACX;CACA;EAAEF,OAAO;EAA2BC,SAAS,CAAC,qBAAqB,UAAW;CAAC;AAClF;AAED,MAAME,cAAcJ,sBAAsBK,KAAKC,MAAMA,EAAEL,KAAK;AAE5D,IAAaM,uBAAb,MAAaA;CACTC,OAAO;CAEP,MAAaC,GAAGC,aAAyC;EACrD,KAAK,MAAMC,SAASX,uBAAuB;GACvC,MAAME,UAAUS,MAAMT,QAAQU,KAAK,IAAA;GACnC,MAAMC,OAAO,MAAMH,YAAYI,MAAM;yBACxBZ,QAAQ;wBACTS,MAAMV,MAAM;kBAClBU,MAAMR,QAAQ,SAASQ,MAAMR,UAAU,GAAG;2BACjCD,QAAQ;;aAEtB;GACD,IAAIW,KAAKE,SAAS,GACd,MAAM,IAAIC,MACN,sCAAsCL,MAAMV,MAAM,QAAQY,KAAKE,OAAO,yBAAyBb,QAAQ,yDACvG;EAGZ;EAEA,KAAK,MAAMD,SAASG,aAChB,MAAMM,YAAYI,MAAM;0BACVb,MAAM;;;aAGnB;EAGL,MAAMS,YAAYI,MAAM;;;;;SAKvB;EAED,MAAMJ,YAAYI,MAAM;;SAEvB;EACD,MAAMJ,YAAYI,MAAM;;SAEvB;EACD,MAAMJ,YAAYI,MAAM;;SAEvB;CACL;CACA,MAAaG,KAAKP,aAAyC;EACvD,MAAMA,YAAYI,MAAM;;;SAGvB;EACD,MAAMJ,YAAYI,MAAM;;SAEvB;EACD,MAAMJ,YAAYI,MAAM;;;SAGvB;CACL;AACJ"}

package/dist/adapters/database/migrations/postgres/1779300000000-Default.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"1779300000000-Default.mjs","names":["JUNCTION_TABLES","SCOPE_BY_POLICY","policy","scope","Default1779300000000","name","up","queryRunner","table","query","down"],"sources":["../../../../../src/adapters/database/migrations/postgres/1779300000000-Default.ts"],"sourcesContent":["import type { MigrationInterface, QueryRunner } from 'typeorm';\n\n/**\n * realm_scope enum on the four permission-junction tables (fail-closed realm scoping).\n *\n * Adds the coarse, actor-relative `realm_scope` column (default 'own') and migrates the\n * realm-scoping that previously lived in policies into the column. The redundant system\n * realm policies (`system.realm-match` child of `system.default`,\n * `system.realm-bound`, `system.realm-or-global`) are deleted here as a deterministic\n * safety net; the provisioner ALSO prunes them on boot (cleanupStaleChildren for the\n * realm-match child + the top-level stale-prune), so a fresh install needs no migration.\n *\n * up() ordering is LOAD-BEARING: schema -> convert-by-policy-name -> lift-admin ->\n * delete policy rows (the policy-name joins must resolve before the rows are deleted).\n *\n * BREAKING (existing data): only admin (-> any, matched by role name) and realm_admin\n * (its realm-or-global / realm-bound junction policies -> ownOrNull / own) are converted.\n * Every OTHER pre-existing grant with no realm policy keeps the 'own' default, so a custom\n * role or a direct identity grant that previously reached global (realm_id = null) building\n * blocks via the old system.realm-match baseline is now fail-closed to its own realm. Those\n * grants must be re-widened to ownOrNull/any by hand: there is deliberately no automatic\n * bump, because a policy-less grant that managed global resources is indistinguishable in\n * the data from one that only ever acted on its own realm (auto-widening would fail open).\n *\n * down() is BEST-EFFORT and NOT a true inverse: it drops the column only. The deleted\n * system policies and the nulled junction policy_id pointers are NOT reconstructed, and\n * boot re-provisioning does NOT repair them either -- the junction synchronizer is\n * create-only (it never rewrites realm_scope/policy_id on an already-existing row). So a\n * revert (or revert + re-run) on a POPULATED database permanently pins realm_admin and any\n * converted grant to the fail-closed 'own' default until fixed by hand; a forward-only\n * upgrade is unaffected.\n */\nconst JUNCTION_TABLES = [\n    'auth_role_permissions',\n    'auth_user_permissions',\n    'auth_client_permissions',\n    'auth_robot_permissions',\n];\n\nconst SCOPE_BY_POLICY: { policy: string, scope: string }[] = [\n    { policy: 'system.realm-or-global', scope: 'ownOrNull' },\n    { policy: 'system.realm-bound', scope: 'own' },\n];\n\nexport class Default1779300000000 implements MigrationInterface {\n    name = 'Default1779300000000';\n\n    public async up(queryRunner: QueryRunner): Promise<void> {\n        // 1. schema\n        for (const table of JUNCTION_TABLES) {\n            await queryRunner.query(`\n                ALTER TABLE \"${table}\"\n                ADD \"realm_scope\" character varying(50) NOT NULL DEFAULT 'own'\n            `);\n        }\n\n        // 2. convert the realm-scoping policies into the enum (clearing only those\n        //    policy_id pointers; non-realm policies are preserved).\n        for (const table of JUNCTION_TABLES) {\n            for (const { policy, scope } of SCOPE_BY_POLICY) {\n                await queryRunner.query(`\n                    UPDATE \"${table}\" rp\n                    SET \"realm_scope\" = '${scope}', \"policy_id\" = NULL\n                    FROM \"auth_policies\" p\n                    WHERE rp.\"policy_id\" = p.\"id\"\n                      AND p.\"name\" = '${policy}'\n                      AND p.\"built_in\" = true\n                      AND p.\"realm_id\" IS NULL\n                `);\n            }\n        }\n\n        // 3. lift admin-role grants to unrestricted (admin grants carry no policy, so\n        //    they are unreachable by the policy join above — join by role name instead).\n        await queryRunner.query(`\n            UPDATE \"auth_role_permissions\" rp\n            SET \"realm_scope\" = 'any'\n            FROM \"auth_roles\" r\n            WHERE rp.\"role_id\" = r.\"id\"\n              AND r.\"name\" = 'admin'\n              AND r.\"built_in\" = true\n        `);\n\n        // 4. delete the three now-redundant system realm policies (by exact name —\n        //    never by type, which would wipe user-defined realm-match policies).\n        //    A cascading closure-tree FK detaches the realm-match child from\n        //    system.default; the provisioner re-prunes idempotently on boot.\n        await queryRunner.query(`\n            DELETE FROM \"auth_policies\"\n            WHERE \"name\" IN ('system.realm-match', 'system.realm-bound', 'system.realm-or-global')\n              AND \"built_in\" = true\n              AND \"realm_id\" IS NULL\n        `);\n    }\n\n    public async down(queryRunner: QueryRunner): Promise<void> {\n        for (const table of JUNCTION_TABLES) {\n            await queryRunner.query(`\n                ALTER TABLE \"${table}\" DROP COLUMN \"realm_scope\"\n            `);\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCA,MAAMA,kBAAkB;CACpB;CACA;CACA;CACA;;AAGJ,MAAMC,kBAAuD,CACzD;CAAEC,QAAQ;CAA0BC,OAAO;AAAY,GACvD;CAAED,QAAQ;CAAsBC,OAAO;AAAM,CAAA;AAGjD,IAAaC,uBAAb,MAAaA;CACTC,OAAO;CAEP,MAAaC,GAAGC,aAAyC;EAErD,KAAK,MAAMC,SAASR,iBAChB,MAAMO,YAAYE,MAAM;+BACLD,MAAM;;aAExB;EAKL,KAAK,MAAMA,SAASR,iBAChB,KAAK,MAAM,EAAEE,QAAQC,WAAWF,iBAC5B,MAAMM,YAAYE,MAAM;8BACVD,MAAM;2CACOL,MAAM;;;wCAGTD,OAAO;;;iBAG9B;EAMT,MAAMK,YAAYE,MAAM;;;;;;;SAOvB;EAMD,MAAMF,YAAYE,MAAM;;;;;SAKvB;CACL;CAEA,MAAaC,KAAKH,aAAyC;EACvD,KAAK,MAAMC,SAASR,iBAChB,MAAMO,YAAYE,MAAM;+BACLD,MAAM;aACxB;CAET;AACJ"}
+{"version":3,"file":"1779300000000-Default.mjs","names":["JUNCTION_TABLES","SCOPE_BY_POLICY","policy","scope","Default1779300000000","name","up","queryRunner","table","query","down"],"sources":["../../../../../src/adapters/database/migrations/postgres/1779300000000-Default.ts"],"sourcesContent":["import type { MigrationInterface, QueryRunner } from 'typeorm';\n\n/**\n * realm_scope enum on the four permission-junction tables (fail-closed realm scoping).\n *\n * Adds the coarse, actor-relative `realm_scope` column (default 'own') and migrates the\n * realm-scoping that previously lived in policies into the column. The redundant system\n * realm policies (`system.realm-match` child of `system.default`,\n * `system.realm-bound`, `system.realm-or-global`) are deleted here as a deterministic\n * safety net; the provisioner ALSO prunes them on boot (cleanupStaleChildren for the\n * realm-match child + the top-level stale-prune), so a fresh install needs no migration.\n *\n * up() ordering is LOAD-BEARING: schema -> convert-by-policy-name -> lift-admin ->\n * delete policy rows (the policy-name joins must resolve before the rows are deleted).\n *\n * BREAKING (existing data): only admin (-> any, matched by role name) and realm_admin\n * (its realm-or-global / realm-bound junction policies -> ownOrNull / own) are converted.\n * Every OTHER pre-existing grant with no realm policy keeps the 'own' default, so a custom\n * role or a direct identity grant that previously reached global (realm_id = null) building\n * blocks via the old system.realm-match baseline is now fail-closed to its own realm. Those\n * grants must be re-widened to ownOrNull/any by hand: there is deliberately no automatic\n * bump, because a policy-less grant that managed global resources is indistinguishable in\n * the data from one that only ever acted on its own realm (auto-widening would fail open).\n *\n * down() is BEST-EFFORT and NOT a true inverse: it drops the column only. The deleted\n * system policies and the nulled junction policy_id pointers are NOT reconstructed, and\n * boot re-provisioning does NOT repair them either -- the junction synchronizer is\n * create-only (it never rewrites realm_scope/policy_id on an already-existing row). So a\n * revert (or revert + re-run) on a POPULATED database permanently pins realm_admin and any\n * converted grant to the fail-closed 'own' default until fixed by hand; a forward-only\n * upgrade is unaffected.\n */\nconst JUNCTION_TABLES = [\n    'auth_role_permissions',\n    'auth_user_permissions',\n    'auth_client_permissions',\n    'auth_robot_permissions',\n];\n\nconst SCOPE_BY_POLICY: { policy: string, scope: string }[] = [\n    { policy: 'system.realm-or-global', scope: 'ownOrNull' },\n    { policy: 'system.realm-bound', scope: 'own' },\n];\n\nexport class Default1779300000000 implements MigrationInterface {\n    name = 'Default1779300000000';\n\n    public async up(queryRunner: QueryRunner): Promise<void> {\n        // 1. schema\n        for (const table of JUNCTION_TABLES) {\n            await queryRunner.query(`\n                ALTER TABLE \"${table}\"\n                ADD \"realm_scope\" character varying(50) NOT NULL DEFAULT 'own'\n            `);\n        }\n\n        // 2. convert the realm-scoping policies into the enum (clearing only those\n        //    policy_id pointers; non-realm policies are preserved).\n        for (const table of JUNCTION_TABLES) {\n            for (const { policy, scope } of SCOPE_BY_POLICY) {\n                await queryRunner.query(`\n                    UPDATE \"${table}\" rp\n                    SET \"realm_scope\" = '${scope}', \"policy_id\" = NULL\n                    FROM \"auth_policies\" p\n                    WHERE rp.\"policy_id\" = p.\"id\"\n                      AND p.\"name\" = '${policy}'\n                      AND p.\"built_in\" = true\n                      AND p.\"realm_id\" IS NULL\n                `);\n            }\n        }\n\n        // 3. lift admin-role grants to unrestricted (admin grants carry no policy, so\n        //    they are unreachable by the policy join above — join by role name instead).\n        await queryRunner.query(`\n            UPDATE \"auth_role_permissions\" rp\n            SET \"realm_scope\" = 'any'\n            FROM \"auth_roles\" r\n            WHERE rp.\"role_id\" = r.\"id\"\n              AND r.\"name\" = 'admin'\n              AND r.\"built_in\" = true\n        `);\n\n        // 4. delete the three now-redundant system realm policies (by exact name —\n        //    never by type, which would wipe user-defined realm-match policies).\n        //    A cascading closure-tree FK detaches the realm-match child from\n        //    system.default; the provisioner re-prunes idempotently on boot.\n        await queryRunner.query(`\n            DELETE FROM \"auth_policies\"\n            WHERE \"name\" IN ('system.realm-match', 'system.realm-bound', 'system.realm-or-global')\n              AND \"built_in\" = true\n              AND \"realm_id\" IS NULL\n        `);\n    }\n\n    public async down(queryRunner: QueryRunner): Promise<void> {\n        for (const table of JUNCTION_TABLES) {\n            await queryRunner.query(`\n                ALTER TABLE \"${table}\" DROP COLUMN \"realm_scope\"\n            `);\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCA,MAAMA,kBAAkB;CACpB;CACA;CACA;CACA;AACH;AAED,MAAMC,kBAAuD,CACzD;CAAEC,QAAQ;CAA0BC,OAAO;AAAY,GACvD;CAAED,QAAQ;CAAsBC,OAAO;AAAM,CAChD;AAED,IAAaC,uBAAb,MAAaA;CACTC,OAAO;CAEP,MAAaC,GAAGC,aAAyC;EAErD,KAAK,MAAMC,SAASR,iBAChB,MAAMO,YAAYE,MAAM;+BACLD,MAAM;;aAExB;EAKL,KAAK,MAAMA,SAASR,iBAChB,KAAK,MAAM,EAAEE,QAAQC,WAAWF,iBAC5B,MAAMM,YAAYE,MAAM;8BACVD,MAAM;2CACOL,MAAM;;;wCAGTD,OAAO;;;iBAG9B;EAMT,MAAMK,YAAYE,MAAM;;;;;;;SAOvB;EAMD,MAAMF,YAAYE,MAAM;;;;;SAKvB;CACL;CAEA,MAAaC,KAAKH,aAAyC;EACvD,KAAK,MAAMC,SAASR,iBAChB,MAAMO,YAAYE,MAAM;+BACLD,MAAM;aACxB;CAET;AACJ"}

package/dist/adapters/database/migrations/postgres/1784289540000-CamelCaseAttributes.d.ts

@@ -0,0 +1,12 @@
+import type { MigrationInterface, QueryRunner } from 'typeorm';
+/**
+ * Plan 073 data migration. Database identifiers remain snake_case; values which
+ * encode management/entity property names move to camelCase. Built-in policy
+ * data is intentionally excluded — the provisioner overwrites it on every boot.
+ */
+export declare class CamelCaseAttributes1784289540000 implements MigrationInterface {
+    name: string;
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}
+//# sourceMappingURL=1784289540000-CamelCaseAttributes.d.ts.map

package/dist/adapters/database/migrations/postgres/1784289540000-CamelCaseAttributes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"1784289540000-CamelCaseAttributes.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/migrations/postgres/1784289540000-CamelCaseAttributes.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAyC/D;;;;GAIG;AACH,qBAAa,gCAAiC,YAAW,kBAAkB;IACvE,IAAI,SAAsC;IAE7B,EAAE,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAM3C,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAK7D"}

package/dist/adapters/database/migrations/postgres/1784289540000-CamelCaseAttributes.mjs

@@ -0,0 +1,42 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { camelCase, snakeCase } from "change-case";
+//#region src/adapters/database/migrations/postgres/1784289540000-CamelCaseAttributes.ts
+/**
+* Rewrite every distinct property-name key in `valueColumn` through `transform`.
+* These columns hold entity property names set by authup (identity-provider
+* attribute keys / targets, user-attribute names), so a blanket transform is
+* correct. The unique `(owner, value)` index means a rename can collide with an
+* already-migrated row; the source duplicate is removed first to keep the
+* update constraint-safe.
+*/ async function renameKeys(queryRunner, table, ownerColumn, valueColumn, transform) {
+	const rows = await queryRunner.query(`SELECT DISTINCT "${valueColumn}" AS "value" FROM "${table}" WHERE "${valueColumn}" IS NOT NULL`);
+	for (const { value } of rows) {
+		const next = transform(value);
+		if (next === value) continue;
+		await queryRunner.query(`DELETE FROM "${table}" AS "source" USING "${table}" AS "target" WHERE "source"."${ownerColumn}" = "target"."${ownerColumn}" AND "source"."${valueColumn}" = $1 AND "target"."${valueColumn}" = $2`, [value, next]);
+		await queryRunner.query(`UPDATE "${table}" SET "${valueColumn}" = $1 WHERE "${valueColumn}" = $2`, [next, value]);
+	}
+}
+/**
+* Plan 073 data migration. Database identifiers remain snake_case; values which
+* encode management/entity property names move to camelCase. Built-in policy
+* data is intentionally excluded — the provisioner overwrites it on every boot.
+*/ var CamelCaseAttributes1784289540000 = class {
+	name = "CamelCaseAttributes1784289540000";
+	async up(queryRunner) {
+		await renameKeys(queryRunner, "auth_identity_provider_attributes", "provider_id", "name", camelCase);
+		await renameKeys(queryRunner, "auth_identity_provider_attribute_mappings", "provider_id", "target_name", camelCase);
+		await renameKeys(queryRunner, "auth_user_attributes", "user_id", "name", camelCase);
+	}
+	async down(queryRunner) {
+		await renameKeys(queryRunner, "auth_user_attributes", "user_id", "name", snakeCase);
+		await renameKeys(queryRunner, "auth_identity_provider_attribute_mappings", "provider_id", "target_name", snakeCase);
+		await renameKeys(queryRunner, "auth_identity_provider_attributes", "provider_id", "name", snakeCase);
+	}
+};
+//#endregion
+export { CamelCaseAttributes1784289540000 };
+
+//# sourceMappingURL=1784289540000-CamelCaseAttributes.mjs.map

package/dist/adapters/database/migrations/postgres/1784289540000-CamelCaseAttributes.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"1784289540000-CamelCaseAttributes.mjs","names":["camelCase","snakeCase","renameKeys","queryRunner","table","ownerColumn","valueColumn","transform","rows","query","value","next","CamelCaseAttributes1784289540000","name","up","down"],"sources":["../../../../../src/adapters/database/migrations/postgres/1784289540000-CamelCaseAttributes.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { camelCase, snakeCase } from 'change-case';\nimport type { MigrationInterface, QueryRunner } from 'typeorm';\n\n/**\n * Rewrite every distinct property-name key in `valueColumn` through `transform`.\n * These columns hold entity property names set by authup (identity-provider\n * attribute keys / targets, user-attribute names), so a blanket transform is\n * correct. The unique `(owner, value)` index means a rename can collide with an\n * already-migrated row; the source duplicate is removed first to keep the\n * update constraint-safe.\n */\nasync function renameKeys(\n    queryRunner: QueryRunner,\n    table: string,\n    ownerColumn: string,\n    valueColumn: string,\n    transform: (value: string) => string,\n): Promise<void> {\n    const rows: { value: string }[] = await queryRunner.query(\n        `SELECT DISTINCT \"${valueColumn}\" AS \"value\" FROM \"${table}\" WHERE \"${valueColumn}\" IS NOT NULL`,\n    );\n\n    for (const { value } of rows) {\n        const next = transform(value);\n        if (next === value) {\n            continue;\n        }\n\n        await queryRunner.query(\n            `DELETE FROM \"${table}\" AS \"source\" USING \"${table}\" AS \"target\" ` +\n            `WHERE \"source\".\"${ownerColumn}\" = \"target\".\"${ownerColumn}\" ` +\n            `AND \"source\".\"${valueColumn}\" = $1 AND \"target\".\"${valueColumn}\" = $2`,\n            [value, next],\n        );\n\n        await queryRunner.query(\n            `UPDATE \"${table}\" SET \"${valueColumn}\" = $1 WHERE \"${valueColumn}\" = $2`,\n            [next, value],\n        );\n    }\n}\n\n/**\n * Plan 073 data migration. Database identifiers remain snake_case; values which\n * encode management/entity property names move to camelCase. Built-in policy\n * data is intentionally excluded — the provisioner overwrites it on every boot.\n */\nexport class CamelCaseAttributes1784289540000 implements MigrationInterface {\n    name = 'CamelCaseAttributes1784289540000';\n\n    public async up(queryRunner: QueryRunner): Promise<void> {\n        await renameKeys(queryRunner, 'auth_identity_provider_attributes', 'provider_id', 'name', camelCase);\n        await renameKeys(queryRunner, 'auth_identity_provider_attribute_mappings', 'provider_id', 'target_name', camelCase);\n        await renameKeys(queryRunner, 'auth_user_attributes', 'user_id', 'name', camelCase);\n    }\n\n    public async down(queryRunner: QueryRunner): Promise<void> {\n        await renameKeys(queryRunner, 'auth_user_attributes', 'user_id', 'name', snakeCase);\n        await renameKeys(queryRunner, 'auth_identity_provider_attribute_mappings', 'provider_id', 'target_name', snakeCase);\n        await renameKeys(queryRunner, 'auth_identity_provider_attributes', 'provider_id', 'name', snakeCase);\n    }\n}\n"],"mappings":";;;;;;;;;;;;GAkBA,eAAeE,WACXC,aACAC,OACAC,aACAC,aACAC,WAAoC;CAEpC,MAAMC,OAA4B,MAAML,YAAYM,MAChD,oBAAoBH,YAAY,qBAAqBF,MAAM,WAAWE,YAAY,cAAc;CAGpG,KAAK,MAAM,EAAEI,WAAWF,MAAM;EAC1B,MAAMG,OAAOJ,UAAUG,KAAAA;EACvB,IAAIC,SAASD,OACT;EAGJ,MAAMP,YAAYM,MACd,gBAAgBL,MAAM,uBAAuBA,MAAM,gCAChCC,YAAY,gBAAgBA,YAAY,kBAC1CC,YAAY,uBAAuBA,YAAY,SAChE,CAACI,OAAOC,IAAK,CAAA;EAGjB,MAAMR,YAAYM,MACd,WAAWL,MAAM,SAASE,YAAY,gBAAgBA,YAAY,SAClE,CAACK,MAAMD,KAAM,CAAA;CAErB;AACJ;;;;;GAOA,IAAaE,mCAAb,MAAaA;CACTC,OAAO;CAEP,MAAaC,GAAGX,aAAyC;EACrD,MAAMD,WAAWC,aAAa,qCAAqC,eAAe,QAAQH,SAAAA;EAC1F,MAAME,WAAWC,aAAa,6CAA6C,eAAe,eAAeH,SAAAA;EACzG,MAAME,WAAWC,aAAa,wBAAwB,WAAW,QAAQH,SAAAA;CAC7E;CAEA,MAAae,KAAKZ,aAAyC;EACvD,MAAMD,WAAWC,aAAa,wBAAwB,WAAW,QAAQF,SAAAA;EACzE,MAAMC,WAAWC,aAAa,6CAA6C,eAAe,eAAeF,SAAAA;EACzG,MAAMC,WAAWC,aAAa,qCAAqC,eAAe,QAAQF,SAAAA;CAC9F;AACJ"}

package/dist/adapters/database/migrations/postgres/1784460916000-RemoveRobots.d.ts

@@ -0,0 +1,18 @@
+import type { MigrationInterface, QueryRunner } from 'typeorm';
+/**
+ * Drops the robot entity: auth_robots, auth_robot_roles,
+ * auth_robot_permissions, auth_sessions.robot_id and the dangling robot
+ * FKs on the legacy auth_refresh_tokens / auth_authorization_codes
+ * tables. Robots are superseded by clients (client_credentials grant);
+ * robot rows and their role/permission bindings are NOT migrated onto
+ * clients — recreate machine identities as clients by hand.
+ *
+ * down() recreates the pre-removal schema shape, constraint names
+ * included, so the older migrations' down() paths keep working.
+ */
+export declare class RemoveRobots1784460916000 implements MigrationInterface {
+    name: string;
+    up(queryRunner: QueryRunner): Promise<void>;
+    down(queryRunner: QueryRunner): Promise<void>;
+}
+//# sourceMappingURL=1784460916000-RemoveRobots.d.ts.map

package/dist/adapters/database/migrations/postgres/1784460916000-RemoveRobots.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"1784460916000-RemoveRobots.d.ts","sourceRoot":"","sources":["../../../../../src/adapters/database/migrations/postgres/1784460916000-RemoveRobots.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE/D;;;;;;;;;;GAUG;AACH,qBAAa,yBAA0B,YAAW,kBAAkB;IAChE,IAAI,SAA+B;IAEtB,EAAE,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAwB3C,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CA2H7D"}

package/dist/adapters/database/migrations/postgres/1784460916000-RemoveRobots.mjs

@@ -0,0 +1,167 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+//#region src/adapters/database/migrations/postgres/1784460916000-RemoveRobots.ts
+/**
+* Drops the robot entity: auth_robots, auth_robot_roles,
+* auth_robot_permissions, auth_sessions.robot_id and the dangling robot
+* FKs on the legacy auth_refresh_tokens / auth_authorization_codes
+* tables. Robots are superseded by clients (client_credentials grant);
+* robot rows and their role/permission bindings are NOT migrated onto
+* clients — recreate machine identities as clients by hand.
+*
+* down() recreates the pre-removal schema shape, constraint names
+* included, so the older migrations' down() paths keep working.
+*/ var RemoveRobots1784460916000 = class {
+	name = "RemoveRobots1784460916000";
+	async up(queryRunner) {
+		await queryRunner.query(`
+            ALTER TABLE "auth_sessions" DROP CONSTRAINT "FK_46b30e5d8e5d5de58d454f53f8c"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_sessions" DROP COLUMN "robot_id"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_refresh_tokens" DROP CONSTRAINT "FK_6be38b6dbd4ce86ca3d17494ca9"
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_authorization_codes" DROP CONSTRAINT "FK_32619f36922f433e27affc169e4"
+        `);
+		await queryRunner.query(`
+            DROP TABLE "auth_robot_permissions"
+        `);
+		await queryRunner.query(`
+            DROP TABLE "auth_robot_roles"
+        `);
+		await queryRunner.query(`
+            DROP TABLE "auth_robots"
+        `);
+	}
+	async down(queryRunner) {
+		await queryRunner.query(`
+            CREATE TABLE "auth_robots" (
+                "id" uuid NOT NULL DEFAULT uuid_generate_v4(),
+                "secret" character varying(256) NOT NULL,
+                "name" character varying(128) NOT NULL,
+                "description" text,
+                "active" boolean NOT NULL DEFAULT true,
+                "created_at" TIMESTAMP NOT NULL DEFAULT now(),
+                "updated_at" TIMESTAMP NOT NULL DEFAULT now(),
+                "user_id" uuid,
+                "realm_id" uuid NOT NULL,
+                "display_name" character varying(256),
+                "client_id" uuid,
+                CONSTRAINT "UQ_f89cc2abf1d7e284a7d6cd59c12" UNIQUE ("name", "realm_id"),
+                CONSTRAINT "PK_0417c432636b2b07e36aedd9804" PRIMARY KEY ("id")
+            )
+        `);
+		await queryRunner.query(`
+            CREATE INDEX "IDX_9c99802f3f360718344180c3f6" ON "auth_robots" ("realm_id")
+        `);
+		await queryRunner.query(`
+            CREATE INDEX "IDX_91942a5962da3b91175eeaa2db" ON "auth_robots" ("client_id")
+        `);
+		await queryRunner.query(`
+            CREATE TABLE "auth_robot_roles" (
+                "id" uuid NOT NULL DEFAULT uuid_generate_v4(),
+                "role_id" uuid NOT NULL,
+                "role_realm_id" uuid,
+                "robot_id" character varying NOT NULL,
+                "robot_realm_id" uuid,
+                "created_at" TIMESTAMP NOT NULL DEFAULT now(),
+                "updated_at" TIMESTAMP NOT NULL DEFAULT now(),
+                "client_id" uuid,
+                CONSTRAINT "PK_6d175a60a9ac83747b28fa8bc6f" PRIMARY KEY ("id")
+            )
+        `);
+		await queryRunner.query(`
+            CREATE UNIQUE INDEX "IDX_515b3dc84ba9bec42bd0e92cbd" ON "auth_robot_roles" ("role_id", "robot_id")
+        `);
+		await queryRunner.query(`
+            CREATE TABLE "auth_robot_permissions" (
+                "id" uuid NOT NULL DEFAULT uuid_generate_v4(),
+                "robot_id" uuid NOT NULL,
+                "robot_realm_id" uuid,
+                "permission_id" uuid NOT NULL,
+                "permission_realm_id" uuid,
+                "created_at" TIMESTAMP NOT NULL DEFAULT now(),
+                "updated_at" TIMESTAMP NOT NULL DEFAULT now(),
+                "policy_id" uuid,
+                "realm_scope" character varying(50) NOT NULL DEFAULT 'own',
+                CONSTRAINT "PK_df48d512c182954136955472327" PRIMARY KEY ("id")
+            )
+        `);
+		await queryRunner.query(`
+            CREATE UNIQUE INDEX "IDX_0c2284272043ed8aba6689306b" ON "auth_robot_permissions" ("permission_id", "robot_id")
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_robots"
+            ADD CONSTRAINT "FK_b6d73e3026e15c0af6c41ef8139" FOREIGN KEY ("user_id") REFERENCES "auth_users"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_robots"
+            ADD CONSTRAINT "FK_9c99802f3f360718344180c3f68" FOREIGN KEY ("realm_id") REFERENCES "auth_realms"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_robots"
+            ADD CONSTRAINT "FK_91942a5962da3b91175eeaa2db1" FOREIGN KEY ("client_id") REFERENCES "auth_realms"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_robot_roles"
+            ADD CONSTRAINT "FK_2256b04cbdb1e16e5144e14750b" FOREIGN KEY ("role_id") REFERENCES "auth_roles"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_robot_roles"
+            ADD CONSTRAINT "FK_28146c7babddcad18116dabfa9e" FOREIGN KEY ("role_realm_id") REFERENCES "auth_realms"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_robot_roles"
+            ADD CONSTRAINT "FK_a4904e9c921294c80f75a0c3e02" FOREIGN KEY ("client_id") REFERENCES "auth_robots"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_robot_roles"
+            ADD CONSTRAINT "FK_21994ec834c710276cce38c779d" FOREIGN KEY ("robot_realm_id") REFERENCES "auth_realms"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_robot_permissions"
+            ADD CONSTRAINT "FK_5af2884572a617e2532410f8221" FOREIGN KEY ("robot_id") REFERENCES "auth_robots"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_robot_permissions"
+            ADD CONSTRAINT "FK_d52ab826ee04e008624df74cdc8" FOREIGN KEY ("robot_realm_id") REFERENCES "auth_realms"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_robot_permissions"
+            ADD CONSTRAINT "FK_b29fe901137f6944ecaf98fcb5a" FOREIGN KEY ("permission_id") REFERENCES "auth_permissions"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_robot_permissions"
+            ADD CONSTRAINT "FK_1cacb8af1791a5303d30cbf8590" FOREIGN KEY ("permission_realm_id") REFERENCES "auth_realms"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_robot_permissions"
+            ADD CONSTRAINT "FK_0786e0bee54b581c62d79a8cec7" FOREIGN KEY ("policy_id") REFERENCES "auth_policies"("id") ON DELETE
+            SET NULL ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_sessions"
+            ADD "robot_id" uuid
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_sessions"
+            ADD CONSTRAINT "FK_46b30e5d8e5d5de58d454f53f8c" FOREIGN KEY ("robot_id") REFERENCES "auth_robots"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_refresh_tokens"
+            ADD CONSTRAINT "FK_6be38b6dbd4ce86ca3d17494ca9" FOREIGN KEY ("robot_id") REFERENCES "auth_robots"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+		await queryRunner.query(`
+            ALTER TABLE "auth_authorization_codes"
+            ADD CONSTRAINT "FK_32619f36922f433e27affc169e4" FOREIGN KEY ("robot_id") REFERENCES "auth_robots"("id") ON DELETE CASCADE ON UPDATE NO ACTION
+        `);
+	}
+};
+//#endregion
+export { RemoveRobots1784460916000 };
+
+//# sourceMappingURL=1784460916000-RemoveRobots.mjs.map

package/dist/adapters/database/migrations/postgres/1784460916000-RemoveRobots.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"1784460916000-RemoveRobots.mjs","names":["RemoveRobots1784460916000","name","up","queryRunner","query","down"],"sources":["../../../../../src/adapters/database/migrations/postgres/1784460916000-RemoveRobots.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { MigrationInterface, QueryRunner } from 'typeorm';\n\n/**\n * Drops the robot entity: auth_robots, auth_robot_roles,\n * auth_robot_permissions, auth_sessions.robot_id and the dangling robot\n * FKs on the legacy auth_refresh_tokens / auth_authorization_codes\n * tables. Robots are superseded by clients (client_credentials grant);\n * robot rows and their role/permission bindings are NOT migrated onto\n * clients — recreate machine identities as clients by hand.\n *\n * down() recreates the pre-removal schema shape, constraint names\n * included, so the older migrations' down() paths keep working.\n */\nexport class RemoveRobots1784460916000 implements MigrationInterface {\n    name = 'RemoveRobots1784460916000';\n\n    public async up(queryRunner: QueryRunner): Promise<void> {\n        await queryRunner.query(`\n            ALTER TABLE \"auth_sessions\" DROP CONSTRAINT \"FK_46b30e5d8e5d5de58d454f53f8c\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_sessions\" DROP COLUMN \"robot_id\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_refresh_tokens\" DROP CONSTRAINT \"FK_6be38b6dbd4ce86ca3d17494ca9\"\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_authorization_codes\" DROP CONSTRAINT \"FK_32619f36922f433e27affc169e4\"\n        `);\n        await queryRunner.query(`\n            DROP TABLE \"auth_robot_permissions\"\n        `);\n        await queryRunner.query(`\n            DROP TABLE \"auth_robot_roles\"\n        `);\n        await queryRunner.query(`\n            DROP TABLE \"auth_robots\"\n        `);\n    }\n\n    public async down(queryRunner: QueryRunner): Promise<void> {\n        await queryRunner.query(`\n            CREATE TABLE \"auth_robots\" (\n                \"id\" uuid NOT NULL DEFAULT uuid_generate_v4(),\n                \"secret\" character varying(256) NOT NULL,\n                \"name\" character varying(128) NOT NULL,\n                \"description\" text,\n                \"active\" boolean NOT NULL DEFAULT true,\n                \"created_at\" TIMESTAMP NOT NULL DEFAULT now(),\n                \"updated_at\" TIMESTAMP NOT NULL DEFAULT now(),\n                \"user_id\" uuid,\n                \"realm_id\" uuid NOT NULL,\n                \"display_name\" character varying(256),\n                \"client_id\" uuid,\n                CONSTRAINT \"UQ_f89cc2abf1d7e284a7d6cd59c12\" UNIQUE (\"name\", \"realm_id\"),\n                CONSTRAINT \"PK_0417c432636b2b07e36aedd9804\" PRIMARY KEY (\"id\")\n            )\n        `);\n        await queryRunner.query(`\n            CREATE INDEX \"IDX_9c99802f3f360718344180c3f6\" ON \"auth_robots\" (\"realm_id\")\n        `);\n        await queryRunner.query(`\n            CREATE INDEX \"IDX_91942a5962da3b91175eeaa2db\" ON \"auth_robots\" (\"client_id\")\n        `);\n        await queryRunner.query(`\n            CREATE TABLE \"auth_robot_roles\" (\n                \"id\" uuid NOT NULL DEFAULT uuid_generate_v4(),\n                \"role_id\" uuid NOT NULL,\n                \"role_realm_id\" uuid,\n                \"robot_id\" character varying NOT NULL,\n                \"robot_realm_id\" uuid,\n                \"created_at\" TIMESTAMP NOT NULL DEFAULT now(),\n                \"updated_at\" TIMESTAMP NOT NULL DEFAULT now(),\n                \"client_id\" uuid,\n                CONSTRAINT \"PK_6d175a60a9ac83747b28fa8bc6f\" PRIMARY KEY (\"id\")\n            )\n        `);\n        await queryRunner.query(`\n            CREATE UNIQUE INDEX \"IDX_515b3dc84ba9bec42bd0e92cbd\" ON \"auth_robot_roles\" (\"role_id\", \"robot_id\")\n        `);\n        await queryRunner.query(`\n            CREATE TABLE \"auth_robot_permissions\" (\n                \"id\" uuid NOT NULL DEFAULT uuid_generate_v4(),\n                \"robot_id\" uuid NOT NULL,\n                \"robot_realm_id\" uuid,\n                \"permission_id\" uuid NOT NULL,\n                \"permission_realm_id\" uuid,\n                \"created_at\" TIMESTAMP NOT NULL DEFAULT now(),\n                \"updated_at\" TIMESTAMP NOT NULL DEFAULT now(),\n                \"policy_id\" uuid,\n                \"realm_scope\" character varying(50) NOT NULL DEFAULT 'own',\n                CONSTRAINT \"PK_df48d512c182954136955472327\" PRIMARY KEY (\"id\")\n            )\n        `);\n        await queryRunner.query(`\n            CREATE UNIQUE INDEX \"IDX_0c2284272043ed8aba6689306b\" ON \"auth_robot_permissions\" (\"permission_id\", \"robot_id\")\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_robots\"\n            ADD CONSTRAINT \"FK_b6d73e3026e15c0af6c41ef8139\" FOREIGN KEY (\"user_id\") REFERENCES \"auth_users\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_robots\"\n            ADD CONSTRAINT \"FK_9c99802f3f360718344180c3f68\" FOREIGN KEY (\"realm_id\") REFERENCES \"auth_realms\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_robots\"\n            ADD CONSTRAINT \"FK_91942a5962da3b91175eeaa2db1\" FOREIGN KEY (\"client_id\") REFERENCES \"auth_realms\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_robot_roles\"\n            ADD CONSTRAINT \"FK_2256b04cbdb1e16e5144e14750b\" FOREIGN KEY (\"role_id\") REFERENCES \"auth_roles\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_robot_roles\"\n            ADD CONSTRAINT \"FK_28146c7babddcad18116dabfa9e\" FOREIGN KEY (\"role_realm_id\") REFERENCES \"auth_realms\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_robot_roles\"\n            ADD CONSTRAINT \"FK_a4904e9c921294c80f75a0c3e02\" FOREIGN KEY (\"client_id\") REFERENCES \"auth_robots\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_robot_roles\"\n            ADD CONSTRAINT \"FK_21994ec834c710276cce38c779d\" FOREIGN KEY (\"robot_realm_id\") REFERENCES \"auth_realms\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_robot_permissions\"\n            ADD CONSTRAINT \"FK_5af2884572a617e2532410f8221\" FOREIGN KEY (\"robot_id\") REFERENCES \"auth_robots\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_robot_permissions\"\n            ADD CONSTRAINT \"FK_d52ab826ee04e008624df74cdc8\" FOREIGN KEY (\"robot_realm_id\") REFERENCES \"auth_realms\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_robot_permissions\"\n            ADD CONSTRAINT \"FK_b29fe901137f6944ecaf98fcb5a\" FOREIGN KEY (\"permission_id\") REFERENCES \"auth_permissions\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_robot_permissions\"\n            ADD CONSTRAINT \"FK_1cacb8af1791a5303d30cbf8590\" FOREIGN KEY (\"permission_realm_id\") REFERENCES \"auth_realms\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_robot_permissions\"\n            ADD CONSTRAINT \"FK_0786e0bee54b581c62d79a8cec7\" FOREIGN KEY (\"policy_id\") REFERENCES \"auth_policies\"(\"id\") ON DELETE\n            SET NULL ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_sessions\"\n            ADD \"robot_id\" uuid\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_sessions\"\n            ADD CONSTRAINT \"FK_46b30e5d8e5d5de58d454f53f8c\" FOREIGN KEY (\"robot_id\") REFERENCES \"auth_robots\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_refresh_tokens\"\n            ADD CONSTRAINT \"FK_6be38b6dbd4ce86ca3d17494ca9\" FOREIGN KEY (\"robot_id\") REFERENCES \"auth_robots\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n        await queryRunner.query(`\n            ALTER TABLE \"auth_authorization_codes\"\n            ADD CONSTRAINT \"FK_32619f36922f433e27affc169e4\" FOREIGN KEY (\"robot_id\") REFERENCES \"auth_robots\"(\"id\") ON DELETE CASCADE ON UPDATE NO ACTION\n        `);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;GAoBA,IAAaA,4BAAb,MAAaA;CACTC,OAAO;CAEP,MAAaC,GAAGC,aAAyC;EACrD,MAAMA,YAAYC,MAAM;;SAEvB;EACD,MAAMD,YAAYC,MAAM;;SAEvB;EACD,MAAMD,YAAYC,MAAM;;SAEvB;EACD,MAAMD,YAAYC,MAAM;;SAEvB;EACD,MAAMD,YAAYC,MAAM;;SAEvB;EACD,MAAMD,YAAYC,MAAM;;SAEvB;EACD,MAAMD,YAAYC,MAAM;;SAEvB;CACL;CAEA,MAAaC,KAAKF,aAAyC;EACvD,MAAMA,YAAYC,MAAM;;;;;;;;;;;;;;;;SAgBvB;EACD,MAAMD,YAAYC,MAAM;;SAEvB;EACD,MAAMD,YAAYC,MAAM;;SAEvB;EACD,MAAMD,YAAYC,MAAM;;;;;;;;;;;;SAYvB;EACD,MAAMD,YAAYC,MAAM;;SAEvB;EACD,MAAMD,YAAYC,MAAM;;;;;;;;;;;;;SAavB;EACD,MAAMD,YAAYC,MAAM;;SAEvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;;SAIvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;EACD,MAAMD,YAAYC,MAAM;;;SAGvB;CACL;AACJ"}

package/dist/adapters/database/subscriber/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["EntityDefaultEventName","buildEntityChannelName","buildEntityNamespaceName","buildEntityDestinations","type","realmIds","data","destinations","channel","id","items","seen","Set","realmId","has","add","push","namespace","EntitySubscriber","ctx","publisher","setPublisher","listenTo","target","afterInsert","event","entity","cache","onInsert","dropCacheKeys","connection","publish","CREATED","afterUpdate","UPDATED","databaseEntity","afterRemove","DELETED","queryResultCache","remove","keys","dataPrevious","safePublish","content"],"sources":["../../../../src/adapters/database/subscriber/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { EntityType } from '@authup/core-kit';\nimport {\n    EntityDefaultEventName,\n    buildEntityChannelName,\n    buildEntityNamespaceName,\n} from '@authup/core-kit';\nimport type { DomainEventDestinations, IDomainEventPublisher } from '@authup/server-kit';\nimport type {\n    DataSource,\n    EntitySubscriberInterface,\n    InsertEvent,\n    ObjectLiteral,\n    RemoveEvent,\n    UpdateEvent,\n} from 'typeorm';\nimport type { EntitySubscriberContext } from './types.ts';\n\nexport function buildEntityDestinations<T extends ObjectLiteral>(\n    type: `${EntityType}`,\n    realmIds?: (data: T) => (string | null | undefined)[],\n) : (data: T) => DomainEventDestinations {\n    return (data) => {\n        const destinations : DomainEventDestinations = [\n            { channel: (id) => buildEntityChannelName(type, id) },\n        ];\n\n        if (realmIds) {\n            const items = realmIds(data);\n            const seen = new Set<string>();\n            for (const realmId of items) {\n                if (realmId && !seen.has(realmId)) {\n                    seen.add(realmId);\n                    destinations.push({\n                        channel: (id) => buildEntityChannelName(type, id),\n                        namespace: buildEntityNamespaceName(realmId),\n                    });\n                }\n            }\n        }\n\n        return destinations;\n    };\n}\n\nexport class EntitySubscriber<T extends ObjectLiteral> implements EntitySubscriberInterface<T> {\n    protected ctx : EntitySubscriberContext<T>;\n\n    protected publisher? : IDomainEventPublisher;\n\n    constructor(ctx: EntitySubscriberContext<T>) {\n        this.ctx = ctx;\n        this.publisher = ctx.publisher;\n    }\n\n    setPublisher(publisher: IDomainEventPublisher) : void {\n        this.publisher = publisher;\n    }\n\n    // eslint-disable-next-line @typescript-eslint/no-unsafe-function-type\n    listenTo() : Function | string {\n        return this.ctx.target;\n    }\n\n    async afterInsert(event: InsertEvent<T>): Promise<any> {\n        if (!event.entity) {\n            return;\n        }\n\n        if (this.ctx.cache && this.ctx.cache.onInsert) {\n            await this.dropCacheKeys(event.connection, event.entity);\n        }\n\n        await this.publish(EntityDefaultEventName.CREATED, event.entity);\n    }\n\n    async afterUpdate(event: UpdateEvent<T>): Promise<any> {\n        if (!event.entity) {\n            return;\n        }\n\n        await this.dropCacheKeys(event.connection, event.entity as T);\n\n        await this.publish(EntityDefaultEventName.UPDATED, event.entity as T, event.databaseEntity);\n    }\n\n    async afterRemove(event: RemoveEvent<T>): Promise<any> {\n        // remove() strips the primary key from event.entity before the\n        // subscriber runs — databaseEntity is the pre-removal row and keeps\n        // the id-keyed cache invalidation (and the DELETED payload) intact.\n        const entity = event.databaseEntity ?? event.entity;\n        if (!entity) {\n            return;\n        }\n\n        await this.dropCacheKeys(event.connection, entity);\n\n        await this.publish(EntityDefaultEventName.DELETED, entity);\n    }\n\n    protected async dropCacheKeys(connection: DataSource, data: T) : Promise<void> {\n        if (!this.ctx.cache || !connection.queryResultCache) {\n            return;\n        }\n\n        await connection.queryResultCache.remove(this.ctx.cache.keys(data));\n    }\n\n    protected async publish(\n        event: `${EntityDefaultEventName}`,\n        data: T,\n        dataPrevious?: T,\n    ) : Promise<void> {\n        if (!this.publisher) {\n            return;\n        }\n\n        await this.publisher.safePublish({\n            content: {\n                type: this.ctx.type,\n                event,\n                data,\n            },\n            destinations: this.ctx.destinations(data),\n            ...(dataPrevious ? { dataPrevious } : {}),\n        });\n    }\n}\n"],"mappings":";;;;;AAwBA,SAAgBG,wBACZC,MACAC,UAAqD;CAErD,QAAQC,SAAAA;EACJ,MAAMC,eAAyC,CAC3C,EAAEC,UAAUC,OAAOR,uBAAuBG,MAAMK,EAAAA,EAAI,CAAA;EAGxD,IAAIJ,UAAU;GACV,MAAMK,QAAQL,SAASC,IAAAA;GACvB,MAAMK,uBAAO,IAAIC,IAAAA;GACjB,KAAK,MAAMC,WAAWH,OAClB,IAAIG,WAAW,CAACF,KAAKG,IAAID,OAAAA,GAAU;IAC/BF,KAAKI,IAAIF,OAAAA;IACTN,aAAaS,KAAK;KACdR,UAAUC,OAAOR,uBAAuBG,MAAMK,EAAAA;KAC9CQ,WAAWf,yBAAyBW,OAAAA;IACxC,CAAA;GACJ;EAER;EAEA,OAAON;CACX;AACJ;AAEA,IAAaW,mBAAb,MAAaA;CACCC;CAEAC;CAEV,YAAYD,KAAiC;EACzC,KAAKA,MAAMA;EACX,KAAKC,YAAYD,IAAIC;CACzB;CAEAC,aAAaD,WAAyC;EAClD,KAAKA,YAAYA;CACrB;CAGAE,WAA+B;EAC3B,OAAO,KAAKH,IAAII;CACpB;CAEA,MAAMC,YAAYC,OAAqC;EACnD,IAAI,CAACA,MAAMC,QACP;EAGJ,IAAI,KAAKP,IAAIQ,SAAS,KAAKR,IAAIQ,MAAMC,UACjC,MAAM,KAAKC,cAAcJ,MAAMK,YAAYL,MAAMC,MAAM;EAG3D,MAAM,KAAKK,QAAQ/B,uBAAuBgC,SAASP,MAAMC,MAAM;CACnE;CAEA,MAAMO,YAAYR,OAAqC;EACnD,IAAI,CAACA,MAAMC,QACP;EAGJ,MAAM,KAAKG,cAAcJ,MAAMK,YAAYL,MAAMC,MAAM;EAEvD,MAAM,KAAKK,QAAQ/B,uBAAuBkC,SAAST,MAAMC,QAAaD,MAAMU,cAAc;CAC9F;CAEA,MAAMC,YAAYX,OAAqC;EAInD,MAAMC,SAASD,MAAMU,kBAAkBV,MAAMC;EAC7C,IAAI,CAACA,QACD;EAGJ,MAAM,KAAKG,cAAcJ,MAAMK,YAAYJ,MAAAA;EAE3C,MAAM,KAAKK,QAAQ/B,uBAAuBqC,SAASX,MAAAA;CACvD;CAEA,MAAgBG,cAAcC,YAAwBxB,MAAyB;EAC3E,IAAI,CAAC,KAAKa,IAAIQ,SAAS,CAACG,WAAWQ,kBAC/B;EAGJ,MAAMR,WAAWQ,iBAAiBC,OAAO,KAAKpB,IAAIQ,MAAMa,KAAKlC,IAAAA,CAAAA;CACjE;CAEA,MAAgByB,QACZN,OACAnB,MACAmC,cACc;EACd,IAAI,CAAC,KAAKrB,WACN;EAGJ,MAAM,KAAKA,UAAUsB,YAAY;GAC7BC,SAAS;IACLvC,MAAM,KAAKe,IAAIf;IACfqB;IACAnB;GACJ;GACAC,cAAc,KAAKY,IAAIZ,aAAaD,IAAAA;GACpC,GAAImC,eAAe,EAAEA,aAAa,IAAI,CAAC;EAC3C,CAAA;CACJ;AACJ"}
+{"version":3,"file":"module.mjs","names":["EntityDefaultEventName","buildEntityChannelName","buildEntityNamespaceName","buildEntityDestinations","type","realmIds","data","destinations","channel","id","items","seen","Set","realmId","has","add","push","namespace","EntitySubscriber","ctx","publisher","setPublisher","listenTo","target","afterInsert","event","entity","cache","onInsert","dropCacheKeys","connection","publish","CREATED","afterUpdate","UPDATED","databaseEntity","afterRemove","DELETED","queryResultCache","remove","keys","dataPrevious","safePublish","content"],"sources":["../../../../src/adapters/database/subscriber/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { EntityType } from '@authup/core-kit';\nimport {\n    EntityDefaultEventName,\n    buildEntityChannelName,\n    buildEntityNamespaceName,\n} from '@authup/core-kit';\nimport type { DomainEventDestinations, IDomainEventPublisher } from '@authup/server-kit';\nimport type {\n    DataSource,\n    EntitySubscriberInterface,\n    InsertEvent,\n    ObjectLiteral,\n    RemoveEvent,\n    UpdateEvent,\n} from 'typeorm';\nimport type { EntitySubscriberContext } from './types.ts';\n\nexport function buildEntityDestinations<T extends ObjectLiteral>(\n    type: `${EntityType}`,\n    realmIds?: (data: T) => (string | null | undefined)[],\n) : (data: T) => DomainEventDestinations {\n    return (data) => {\n        const destinations : DomainEventDestinations = [\n            { channel: (id) => buildEntityChannelName(type, id) },\n        ];\n\n        if (realmIds) {\n            const items = realmIds(data);\n            const seen = new Set<string>();\n            for (const realmId of items) {\n                if (realmId && !seen.has(realmId)) {\n                    seen.add(realmId);\n                    destinations.push({\n                        channel: (id) => buildEntityChannelName(type, id),\n                        namespace: buildEntityNamespaceName(realmId),\n                    });\n                }\n            }\n        }\n\n        return destinations;\n    };\n}\n\nexport class EntitySubscriber<T extends ObjectLiteral> implements EntitySubscriberInterface<T> {\n    protected ctx : EntitySubscriberContext<T>;\n\n    protected publisher? : IDomainEventPublisher;\n\n    constructor(ctx: EntitySubscriberContext<T>) {\n        this.ctx = ctx;\n        this.publisher = ctx.publisher;\n    }\n\n    setPublisher(publisher: IDomainEventPublisher) : void {\n        this.publisher = publisher;\n    }\n\n    // eslint-disable-next-line @typescript-eslint/no-unsafe-function-type\n    listenTo() : Function | string {\n        return this.ctx.target;\n    }\n\n    async afterInsert(event: InsertEvent<T>): Promise<any> {\n        if (!event.entity) {\n            return;\n        }\n\n        if (this.ctx.cache && this.ctx.cache.onInsert) {\n            await this.dropCacheKeys(event.connection, event.entity);\n        }\n\n        await this.publish(EntityDefaultEventName.CREATED, event.entity);\n    }\n\n    async afterUpdate(event: UpdateEvent<T>): Promise<any> {\n        if (!event.entity) {\n            return;\n        }\n\n        await this.dropCacheKeys(event.connection, event.entity as T);\n\n        await this.publish(EntityDefaultEventName.UPDATED, event.entity as T, event.databaseEntity);\n    }\n\n    async afterRemove(event: RemoveEvent<T>): Promise<any> {\n        // remove() strips the primary key from event.entity before the\n        // subscriber runs — databaseEntity is the pre-removal row and keeps\n        // the id-keyed cache invalidation (and the DELETED payload) intact.\n        const entity = event.databaseEntity ?? event.entity;\n        if (!entity) {\n            return;\n        }\n\n        await this.dropCacheKeys(event.connection, entity);\n\n        await this.publish(EntityDefaultEventName.DELETED, entity);\n    }\n\n    protected async dropCacheKeys(connection: DataSource, data: T) : Promise<void> {\n        if (!this.ctx.cache || !connection.queryResultCache) {\n            return;\n        }\n\n        await connection.queryResultCache.remove(this.ctx.cache.keys(data));\n    }\n\n    protected async publish(\n        event: `${EntityDefaultEventName}`,\n        data: T,\n        dataPrevious?: T,\n    ) : Promise<void> {\n        if (!this.publisher) {\n            return;\n        }\n\n        await this.publisher.safePublish({\n            content: {\n                type: this.ctx.type,\n                event,\n                data,\n            },\n            destinations: this.ctx.destinations(data),\n            ...(dataPrevious ? { dataPrevious } : {}),\n        });\n    }\n}\n"],"mappings":";;;;;AAwBA,SAAgBG,wBACZC,MACAC,UAAqD;CAErD,QAAQC,SAAAA;EACJ,MAAMC,eAAyC,CAC3C,EAAEC,UAAUC,OAAOR,uBAAuBG,MAAMK,EAAAA,EAAI,CACvD;EAED,IAAIJ,UAAU;GACV,MAAMK,QAAQL,SAASC,IAAAA;GACvB,MAAMK,uBAAO,IAAIC,IAAAA;GACjB,KAAK,MAAMC,WAAWH,OAClB,IAAIG,WAAW,CAACF,KAAKG,IAAID,OAAAA,GAAU;IAC/BF,KAAKI,IAAIF,OAAAA;IACTN,aAAaS,KAAK;KACdR,UAAUC,OAAOR,uBAAuBG,MAAMK,EAAAA;KAC9CQ,WAAWf,yBAAyBW,OAAAA;IACxC,CAAA;GACJ;EAER;EAEA,OAAON;CACX;AACJ;AAEA,IAAaW,mBAAb,MAAaA;CACCC;CAEAC;CAEV,YAAYD,KAAiC;EACzC,KAAKA,MAAMA;EACX,KAAKC,YAAYD,IAAIC;CACzB;CAEAC,aAAaD,WAAyC;EAClD,KAAKA,YAAYA;CACrB;CAGAE,WAA+B;EAC3B,OAAO,KAAKH,IAAII;CACpB;CAEA,MAAMC,YAAYC,OAAqC;EACnD,IAAI,CAACA,MAAMC,QACP;EAGJ,IAAI,KAAKP,IAAIQ,SAAS,KAAKR,IAAIQ,MAAMC,UACjC,MAAM,KAAKC,cAAcJ,MAAMK,YAAYL,MAAMC,MAAM;EAG3D,MAAM,KAAKK,QAAQ/B,uBAAuBgC,SAASP,MAAMC,MAAM;CACnE;CAEA,MAAMO,YAAYR,OAAqC;EACnD,IAAI,CAACA,MAAMC,QACP;EAGJ,MAAM,KAAKG,cAAcJ,MAAMK,YAAYL,MAAMC,MAAM;EAEvD,MAAM,KAAKK,QAAQ/B,uBAAuBkC,SAAST,MAAMC,QAAaD,MAAMU,cAAc;CAC9F;CAEA,MAAMC,YAAYX,OAAqC;EAInD,MAAMC,SAASD,MAAMU,kBAAkBV,MAAMC;EAC7C,IAAI,CAACA,QACD;EAGJ,MAAM,KAAKG,cAAcJ,MAAMK,YAAYJ,MAAAA;EAE3C,MAAM,KAAKK,QAAQ/B,uBAAuBqC,SAASX,MAAAA;CACvD;CAEA,MAAgBG,cAAcC,YAAwBxB,MAAyB;EAC3E,IAAI,CAAC,KAAKa,IAAIQ,SAAS,CAACG,WAAWQ,kBAC/B;EAGJ,MAAMR,WAAWQ,iBAAiBC,OAAO,KAAKpB,IAAIQ,MAAMa,KAAKlC,IAAAA,CAAAA;CACjE;CAEA,MAAgByB,QACZN,OACAnB,MACAmC,cACc;EACd,IAAI,CAAC,KAAKrB,WACN;EAGJ,MAAM,KAAKA,UAAUsB,YAAY;GAC7BC,SAAS;IACLvC,MAAM,KAAKe,IAAIf;IACfqB;IACAnB;GACJ;GACAC,cAAc,KAAKY,IAAIZ,aAAaD,IAAAA;GACpC,GAAImC,eAAe,EAAEA,aAAa,IAAI,CAAC;EAC3C,CAAA;CACJ;AACJ"}

package/dist/adapters/http/adapters/index.mjs

@@ -11,6 +11,5 @@ import { HTTPClientCredentialsGrant } from "./oauth2/grant-types/client-credenti
 import { HTTPOAuth2IdentityGrantType } from "./oauth2/grant-types/identity.mjs";
 import { HTTPPasswordGrant } from "./oauth2/grant-types/password.mjs";
 import { HTTPOAuth2RefreshTokenGrant } from "./oauth2/grant-types/refresh_token.mjs";
-import { HTTPRobotCredentialsGrant } from "./oauth2/grant-types/robot-credentials.mjs";
 import "./oauth2/index.mjs";
-export { HTTPClientCredentialsGrant, HTTPOAuth2AuthorizeGrant, HTTPOAuth2Authorizer, HTTPOAuth2IdentityGrantType, HTTPOAuth2RefreshTokenGrant, HTTPPasswordGrant, HTTPRobotCredentialsGrant, extractClientCredentialsFromRequest, extractOAuth2ClientCertificateEvidence, guessOauth2GrantTypeByRequest, readRealmHint, readStringField };
+export { HTTPClientCredentialsGrant, HTTPOAuth2AuthorizeGrant, HTTPOAuth2Authorizer, HTTPOAuth2IdentityGrantType, HTTPOAuth2RefreshTokenGrant, HTTPPasswordGrant, extractClientCredentialsFromRequest, extractOAuth2ClientCertificateEvidence, guessOauth2GrantTypeByRequest, readRealmHint, readStringField };

package/dist/adapters/http/adapters/oauth2/authorization/module.mjs

@@ -30,10 +30,10 @@ var HTTPOAuth2Authorizer = class extends OAuth2Authorization {
 			client,
 			redirectUriVerified
 		});
-		if (this.consentService && client && !client.built_in) try {
+		if (this.consentService && client && !client.builtIn) try {
 			await this.consentService.record({
 				clientId: client.id,
-				realmId: client.realm_id,
+				realmId: client.realmId,
 				owner: {
 					sub: identity.raw.data.id,
 					subKind: identity.raw.type