@authup/server-core 1.0.0-beta.53 → 1.0.0-beta.55

package/dist/core/entities/robot/service.mjs

@@ -1,201 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { RobotCredentialsService } from "../../authentication/credential/entities/robot/module.mjs";
-import { ValidatorGroup, isUUID } from "@authup/kit";
-import { PermissionName, RobotValidator } from "@authup/core-kit";
-import { AbstractEntityService } from "@authup/server-kit";
-import { BuiltInPolicyType, definePolicyData } from "@authup/access";
-import { EntityNotFoundError } from "@authup/errors";
-//#region src/core/entities/robot/service.ts
-var RobotService = class extends AbstractEntityService {
-	repository;
-	realmRepository;
-	validator;
-	constructor(ctx) {
-		super();
-		this.repository = ctx.repository;
-		this.realmRepository = ctx.realmRepository;
-		this.validator = new RobotValidator();
-	}
-	async getMany(query, actor) {
-		await actor.permissionEvaluator.preEvaluateOneOf({ name: [
-			PermissionName.ROBOT_READ,
-			PermissionName.ROBOT_UPDATE,
-			PermissionName.ROBOT_DELETE
-		] });
-		const { data: entities, meta } = await this.repository.findMany(query);
-		const data = [];
-		let { total } = meta;
-		for (const entity of entities) {
-			if (actor.identity && actor.identity.type === "robot" && actor.identity.data.id === entity.id) {
-				data.push(entity);
-				continue;
-			}
-			try {
-				await actor.permissionEvaluator.evaluateOneOf({
-					name: [
-						PermissionName.ROBOT_READ,
-						PermissionName.ROBOT_UPDATE,
-						PermissionName.ROBOT_DELETE
-					],
-					data: definePolicyData({
-						[BuiltInPolicyType.ATTRIBUTES]: entity,
-						...this.resourceRealmMatch(entity)
-					})
-				});
-				data.push(entity);
-			} catch {
-				total -= 1;
-			}
-		}
-		return {
-			data,
-			meta: {
-				...meta,
-				total
-			}
-		};
-	}
-	async getOne(idOrName, actor, query, realmId) {
-		const permissionNames = [
-			PermissionName.ROBOT_READ,
-			PermissionName.ROBOT_UPDATE,
-			PermissionName.ROBOT_DELETE
-		];
-		let isMe = !!actor.identity && actor.identity.type === "robot" && (actor.identity.data.id === idOrName || actor.identity.data.name === idOrName);
-		if (!isMe) await actor.permissionEvaluator.preEvaluateOneOf({ name: permissionNames });
-		const entity = await this.repository.findOne(idOrName, query, realmId);
-		if (!entity) throw new EntityNotFoundError();
-		if (isMe && actor.identity.data.id !== entity.id) {
-			isMe = false;
-			await actor.permissionEvaluator.preEvaluateOneOf({ name: permissionNames });
-		}
-		if (!isMe) await actor.permissionEvaluator.evaluateOneOf({
-			name: permissionNames,
-			data: definePolicyData({
-				[BuiltInPolicyType.ATTRIBUTES]: entity,
-				...this.resourceRealmMatch(entity)
-			})
-		});
-		return entity;
-	}
-	async create(data, actor) {
-		const { entity } = await this.save(void 0, data, actor);
-		return entity;
-	}
-	async update(idOrName, data, actor) {
-		const { entity } = await this.save(idOrName, data, actor, { updateOnly: true });
-		return entity;
-	}
-	async save(idOrName, data, actor, options = {}) {
-		let group;
-		const realm = typeof data.realm_id === "string" ? await this.realmRepository.resolve(data.realm_id) : void 0;
-		let entity;
-		if (idOrName) {
-			const where = {};
-			if (isUUID(idOrName)) where.id = idOrName;
-			else where.name = idOrName;
-			if (realm) where.realm_id = realm.id;
-			entity = await this.repository.findOneBy(where);
-			if (!entity && options.updateOnly) throw new EntityNotFoundError();
-		} else if (options.updateOnly) throw new EntityNotFoundError();
-		let isSelfEdit = false;
-		if (entity) {
-			try {
-				await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_UPDATE });
-			} catch (e) {
-				if (!actor.identity || actor.identity.type !== "robot" || actor.identity.data.id !== entity.id) throw e;
-				isSelfEdit = true;
-				await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_SELF_MANAGE });
-			}
-			group = ValidatorGroup.UPDATE;
-		} else {
-			await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_CREATE });
-			group = ValidatorGroup.CREATE;
-		}
-		const validated = await this.validator.run(data, { group });
-		await this.repository.validateJoinColumns(validated);
-		await this.repository.checkUniqueness(validated, entity || void 0);
-		const credentialsService = new RobotCredentialsService();
-		if (entity) {
-			if (isSelfEdit) await actor.permissionEvaluator.evaluate({
-				name: PermissionName.ROBOT_SELF_MANAGE,
-				data: definePolicyData({
-					[BuiltInPolicyType.ATTRIBUTES]: validated,
-					...this.resourceRealmMatch(validated)
-				})
-			});
-			else await actor.permissionEvaluator.evaluate({
-				name: PermissionName.ROBOT_UPDATE,
-				data: definePolicyData({
-					[BuiltInPolicyType.ATTRIBUTES]: {
-						...entity,
-						...validated
-					},
-					[BuiltInPolicyType.REALM_MATCH]: validated.realm_id ?? entity.realm_id ?? null
-				})
-			});
-			entity = this.repository.merge(entity, validated);
-			if (validated.secret) entity.secret = await credentialsService.protect(validated.secret);
-			await this.repository.save(entity);
-			if (validated.secret) entity.secret = validated.secret;
-			return {
-				entity,
-				created: false
-			};
-		}
-		if (!validated.realm_id) {
-			const actorRealmId = this.getActorRealmId(actor);
-			if (actorRealmId) validated.realm_id = actorRealmId;
-		}
-		await actor.permissionEvaluator.evaluate({
-			name: PermissionName.ROBOT_CREATE,
-			data: definePolicyData({
-				[BuiltInPolicyType.ATTRIBUTES]: validated,
-				...this.resourceRealmMatch(validated)
-			})
-		});
-		if (!validated.secret) validated.secret = credentialsService.generateSecret();
-		entity = this.repository.create(validated);
-		entity.secret = await credentialsService.protect(validated.secret);
-		await this.repository.save(entity);
-		entity.secret = validated.secret;
-		return {
-			entity,
-			created: true
-		};
-	}
-	async delete(id, actor) {
-		const entity = await this.repository.findOneBy({ id });
-		if (!entity) throw new EntityNotFoundError();
-		const isOwner = entity.user_id && actor.identity && actor.identity.type === "user" && actor.identity.data.id === entity.user_id;
-		let isSelfDelete = false;
-		try {
-			await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_DELETE });
-		} catch (e) {
-			if (!isOwner) throw e;
-			isSelfDelete = true;
-			await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_SELF_MANAGE });
-		}
-		if (isSelfDelete) await actor.permissionEvaluator.evaluate({
-			name: PermissionName.ROBOT_SELF_MANAGE,
-			data: definePolicyData({ [BuiltInPolicyType.ATTRIBUTES]: {} })
-		});
-		else await actor.permissionEvaluator.evaluate({
-			name: PermissionName.ROBOT_DELETE,
-			data: definePolicyData({
-				[BuiltInPolicyType.ATTRIBUTES]: entity,
-				...this.resourceRealmMatch(entity)
-			})
-		});
-		const { id: entityId } = entity;
-		await this.repository.remove(entity);
-		entity.id = entityId;
-		return entity;
-	}
-};
-//#endregion
-export { RobotService };
-
-//# sourceMappingURL=service.mjs.map

package/dist/core/entities/robot/service.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"service.mjs","names":["BuiltInPolicyType","definePolicyData","ValidatorGroup","isUUID","EntityNotFoundError","PermissionName","RobotValidator","AbstractEntityService","RobotCredentialsService","RobotService","repository","realmRepository","validator","ctx","getMany","query","actor","permissionEvaluator","preEvaluateOneOf","name","ROBOT_READ","ROBOT_UPDATE","ROBOT_DELETE","data","entities","meta","findMany","total","entity","identity","type","id","push","evaluateOneOf","ATTRIBUTES","resourceRealmMatch","getOne","idOrName","realmId","permissionNames","isMe","findOne","create","save","undefined","update","updateOnly","options","group","realm","realm_id","resolve","where","findOneBy","isSelfEdit","preEvaluate","e","ROBOT_SELF_MANAGE","UPDATE","ROBOT_CREATE","CREATE","validated","run","validateJoinColumns","checkUniqueness","credentialsService","evaluate","REALM_MATCH","merge","secret","protect","created","actorRealmId","getActorRealmId","generateSecret","delete","isOwner","user_id","isSelfDelete","entityId","remove"],"sources":["../../../../src/core/entities/robot/service.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { BuiltInPolicyType, definePolicyData } from '@authup/access';\nimport { ValidatorGroup, isUUID } from '@authup/kit';\nimport { EntityNotFoundError } from '@authup/errors';\nimport {\n    PermissionName,\n    RobotValidator,\n} from '@authup/core-kit';\nimport type { Robot } from '@authup/core-kit';\nimport type { ActorContext, EntityRepositoryFindManyResult  } from '@authup/server-kit';\nimport type { IRealmRepository } from '../realm/types.ts';\nimport { AbstractEntityService } from '@authup/server-kit';\nimport { RobotCredentialsService } from '../../authentication/credential/entities/robot/module.ts';\nimport type { IRobotRepository, IRobotService } from './types.ts';\n\nexport type RobotServiceContext = {\n    repository: IRobotRepository;\n    realmRepository: IRealmRepository;\n};\n\nexport class RobotService extends AbstractEntityService implements IRobotService {\n    protected repository: IRobotRepository;\n\n    protected realmRepository: IRealmRepository;\n\n    protected validator: RobotValidator;\n\n    constructor(ctx: RobotServiceContext) {\n        super();\n        this.repository = ctx.repository;\n        this.realmRepository = ctx.realmRepository;\n        this.validator = new RobotValidator();\n    }\n\n    async getMany(\n        query: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<EntityRepositoryFindManyResult<Robot>> {\n        await actor.permissionEvaluator.preEvaluateOneOf({\n            name: [\n                PermissionName.ROBOT_READ,\n                PermissionName.ROBOT_UPDATE,\n                PermissionName.ROBOT_DELETE,\n            ],\n        });\n\n        const {\n            data: entities, \n            meta, \n        } = await this.repository.findMany(query);\n\n        const data: Robot[] = [];\n        let { total } = meta;\n\n        for (const entity of entities) {\n            if (\n                actor.identity &&\n                actor.identity.type === 'robot' &&\n                actor.identity.data.id === entity.id\n            ) {\n                data.push(entity);\n                continue;\n            }\n\n            try {\n                await actor.permissionEvaluator.evaluateOneOf({\n                    name: [\n                        PermissionName.ROBOT_READ,\n                        PermissionName.ROBOT_UPDATE,\n                        PermissionName.ROBOT_DELETE,\n                    ],\n                    data: definePolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity, ...this.resourceRealmMatch(entity) }),\n                });\n\n                data.push(entity);\n            } catch {\n                total -= 1;\n            }\n        }\n\n        return {\n            data,\n            meta: {\n                ...meta,\n                total, \n            }, \n        };\n    }\n\n    async getOne(\n        idOrName: string,\n        actor: ActorContext,\n        query?: Record<string, any>,\n        realmId?: string,\n    ): Promise<Robot> {\n        const permissionNames = [\n            PermissionName.ROBOT_READ,\n            PermissionName.ROBOT_UPDATE,\n            PermissionName.ROBOT_DELETE,\n        ];\n\n        let isMe = !!actor.identity &&\n            actor.identity.type === 'robot' &&\n            (\n                actor.identity.data.id === idOrName ||\n                actor.identity.data.name === idOrName\n            );\n\n        if (!isMe) {\n            await actor.permissionEvaluator.preEvaluateOneOf({ name: permissionNames });\n        }\n\n        const entity = await this.repository.findOne(idOrName, query, realmId);\n        if (!entity) {\n            throw new EntityNotFoundError();\n        }\n\n        if (isMe && actor.identity!.data.id !== entity.id) {\n            isMe = false;\n            await actor.permissionEvaluator.preEvaluateOneOf({ name: permissionNames });\n        }\n\n        if (!isMe) {\n            await actor.permissionEvaluator.evaluateOneOf({\n                name: permissionNames,\n                data: definePolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity, ...this.resourceRealmMatch(entity) }),\n            });\n        }\n\n        return entity;\n    }\n\n    async create(\n        data: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<Robot> {\n        const { entity } = await this.save(undefined, data, actor);\n        return entity;\n    }\n\n    async update(\n        idOrName: string,\n        data: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<Robot> {\n        const { entity } = await this.save(idOrName, data, actor, { updateOnly: true });\n        return entity;\n    }\n\n    async save(\n        idOrName: string | undefined,\n        data: Record<string, any>,\n        actor: ActorContext,\n        options: { updateOnly?: boolean } = {},\n    ): Promise<{\n        entity: Robot,\n        created: boolean \n    }> {\n        let group: string;\n\n        const realm = typeof data.realm_id === 'string' ?\n            await this.realmRepository.resolve(data.realm_id) :\n            undefined;\n\n        let entity: Robot | null | undefined;\n        if (idOrName) {\n            const where: Record<string, any> = {};\n            if (isUUID(idOrName)) {\n                where.id = idOrName;\n            } else {\n                where.name = idOrName;\n            }\n\n            if (realm) {\n                where.realm_id = realm.id;\n            }\n\n            entity = await this.repository.findOneBy(where);\n            if (!entity && options.updateOnly) {\n                throw new EntityNotFoundError();\n            }\n        } else if (options.updateOnly) {\n            throw new EntityNotFoundError();\n        }\n\n        let isSelfEdit = false;\n        if (entity) {\n            try {\n                await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_UPDATE });\n            } catch (e) {\n                if (\n                    !actor.identity ||\n                    actor.identity.type !== 'robot' ||\n                    actor.identity.data.id !== entity.id\n                ) {\n                    throw e;\n                }\n                isSelfEdit = true;\n                await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_SELF_MANAGE });\n            }\n            group = ValidatorGroup.UPDATE;\n        } else {\n            await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_CREATE });\n            group = ValidatorGroup.CREATE;\n        }\n\n        const validated = await this.validator.run(data, { group });\n\n        await this.repository.validateJoinColumns(validated);\n\n        await this.repository.checkUniqueness(validated, entity || undefined);\n\n        const credentialsService = new RobotCredentialsService();\n\n        if (entity) {\n            if (isSelfEdit) {\n                await actor.permissionEvaluator.evaluate({\n                    name: PermissionName.ROBOT_SELF_MANAGE,\n                    data: definePolicyData({ [BuiltInPolicyType.ATTRIBUTES]: validated, ...this.resourceRealmMatch(validated) }),\n                });\n            } else {\n                await actor.permissionEvaluator.evaluate({\n                    name: PermissionName.ROBOT_UPDATE,\n                    data: definePolicyData({\n                        [BuiltInPolicyType.ATTRIBUTES]: {\n                            ...entity,\n                            ...validated,\n                        },\n                        [BuiltInPolicyType.REALM_MATCH]: validated.realm_id ?? entity.realm_id ?? null,\n                    }),\n                });\n            }\n\n            entity = this.repository.merge(entity, validated);\n            if (validated.secret) {\n                entity.secret = await credentialsService.protect(validated.secret);\n            }\n\n            await this.repository.save(entity);\n\n            if (validated.secret) {\n                entity.secret = validated.secret;\n            }\n\n            return {\n                entity,\n                created: false, \n            };\n        }\n\n        if (!validated.realm_id) {\n            const actorRealmId = this.getActorRealmId(actor);\n            if (actorRealmId) {\n                validated.realm_id = actorRealmId;\n            }\n        }\n\n        await actor.permissionEvaluator.evaluate({\n            name: PermissionName.ROBOT_CREATE,\n            data: definePolicyData({ [BuiltInPolicyType.ATTRIBUTES]: validated, ...this.resourceRealmMatch(validated) }),\n        });\n\n        if (!validated.secret) {\n            validated.secret = credentialsService.generateSecret();\n        }\n\n        entity = this.repository.create(validated);\n        entity.secret = await credentialsService.protect(validated.secret);\n        await this.repository.save(entity);\n        entity.secret = validated.secret;\n\n        return {\n            entity,\n            created: true, \n        };\n    }\n\n    async delete(\n        id: string,\n        actor: ActorContext,\n    ): Promise<Robot> {\n        const entity = await this.repository.findOneBy({ id });\n        if (!entity) {\n            throw new EntityNotFoundError();\n        }\n\n        const isOwner = entity.user_id &&\n            actor.identity &&\n            actor.identity.type === 'user' &&\n            actor.identity.data.id === entity.user_id;\n\n        let isSelfDelete = false;\n        try {\n            await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_DELETE });\n        } catch (e) {\n            if (!isOwner) {\n                throw e;\n            }\n            isSelfDelete = true;\n            await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_SELF_MANAGE });\n        }\n\n        if (isSelfDelete) {\n            // Delete carries no attributes to validate; pass an empty input so\n            // the ATTRIBUTE_NAMES denylist has no keys to reject.\n            await actor.permissionEvaluator.evaluate({\n                name: PermissionName.ROBOT_SELF_MANAGE,\n                data: definePolicyData({ [BuiltInPolicyType.ATTRIBUTES]: {} }),\n            });\n        } else {\n            await actor.permissionEvaluator.evaluate({\n                name: PermissionName.ROBOT_DELETE,\n                data: definePolicyData({ [BuiltInPolicyType.ATTRIBUTES]: entity, ...this.resourceRealmMatch(entity) }),\n            });\n        }\n\n        const { id: entityId } = entity;\n        await this.repository.remove(entity);\n        entity.id = entityId;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;;AA0BA,IAAaS,eAAb,cAAkCF,sBAAAA;CACpBG;CAEAC;CAEAC;CAEV,YAAYC,KAA0B;EAClC,MAAK;EACL,KAAKH,aAAaG,IAAIH;EACtB,KAAKC,kBAAkBE,IAAIF;EAC3B,KAAKC,YAAY,IAAIN,eAAAA;CACzB;CAEA,MAAMQ,QACFC,OACAC,OAC8C;EAC9C,MAAMA,MAAMC,oBAAoBC,iBAAiB,EAC7CC,MAAM;GACFd,eAAee;GACff,eAAegB;GACfhB,eAAeiB;IAEvB,CAAA;EAEA,MAAM,EACFC,MAAMC,UACNC,SACA,MAAM,KAAKf,WAAWgB,SAASX,KAAAA;EAEnC,MAAMQ,OAAgB,CAAA;EACtB,IAAI,EAAEI,UAAUF;EAEhB,KAAK,MAAMG,UAAUJ,UAAU;GAC3B,IACIR,MAAMa,YACNb,MAAMa,SAASC,SAAS,WACxBd,MAAMa,SAASN,KAAKQ,OAAOH,OAAOG,IACpC;IACER,KAAKS,KAAKJ,MAAAA;IACV;GACJ;GAEA,IAAI;IACA,MAAMZ,MAAMC,oBAAoBgB,cAAc;KAC1Cd,MAAM;MACFd,eAAee;MACff,eAAegB;MACfhB,eAAeiB;;KAEnBC,MAAMtB,iBAAiB;OAAGD,kBAAkBkC,aAAaN;MAAQ,GAAG,KAAKO,mBAAmBP,MAAAA;KAAQ,CAAA;IACxG,CAAA;IAEAL,KAAKS,KAAKJ,MAAAA;GACd,QAAQ;IACJD,SAAS;GACb;EACJ;EAEA,OAAO;GACHJ;GACAE,MAAM;IACF,GAAGA;IACHE;GACJ;EACJ;CACJ;CAEA,MAAMS,OACFC,UACArB,OACAD,OACAuB,SACc;EACd,MAAMC,kBAAkB;GACpBlC,eAAee;GACff,eAAegB;GACfhB,eAAeiB;;EAGnB,IAAIkB,OAAO,CAAC,CAACxB,MAAMa,YACfb,MAAMa,SAASC,SAAS,YAEpBd,MAAMa,SAASN,KAAKQ,OAAOM,YAC3BrB,MAAMa,SAASN,KAAKJ,SAASkB;EAGrC,IAAI,CAACG,MACD,MAAMxB,MAAMC,oBAAoBC,iBAAiB,EAAEC,MAAMoB,gBAAgB,CAAA;EAG7E,MAAMX,SAAS,MAAM,KAAKlB,WAAW+B,QAAQJ,UAAUtB,OAAOuB,OAAAA;EAC9D,IAAI,CAACV,QACD,MAAM,IAAIxB,oBAAAA;EAGd,IAAIoC,QAAQxB,MAAMa,SAAUN,KAAKQ,OAAOH,OAAOG,IAAI;GAC/CS,OAAO;GACP,MAAMxB,MAAMC,oBAAoBC,iBAAiB,EAAEC,MAAMoB,gBAAgB,CAAA;EAC7E;EAEA,IAAI,CAACC,MACD,MAAMxB,MAAMC,oBAAoBgB,cAAc;GAC1Cd,MAAMoB;GACNhB,MAAMtB,iBAAiB;KAAGD,kBAAkBkC,aAAaN;IAAQ,GAAG,KAAKO,mBAAmBP,MAAAA;GAAQ,CAAA;EACxG,CAAA;EAGJ,OAAOA;CACX;CAEA,MAAMc,OACFnB,MACAP,OACc;EACd,MAAM,EAAEY,WAAW,MAAM,KAAKe,KAAKC,KAAAA,GAAWrB,MAAMP,KAAAA;EACpD,OAAOY;CACX;CAEA,MAAMiB,OACFR,UACAd,MACAP,OACc;EACd,MAAM,EAAEY,WAAW,MAAM,KAAKe,KAAKN,UAAUd,MAAMP,OAAO,EAAE8B,YAAY,KAAK,CAAA;EAC7E,OAAOlB;CACX;CAEA,MAAMe,KACFN,UACAd,MACAP,OACA+B,UAAoC,CAAC,GAItC;EACC,IAAIC;EAEJ,MAAMC,QAAQ,OAAO1B,KAAK2B,aAAa,WACnC,MAAM,KAAKvC,gBAAgBwC,QAAQ5B,KAAK2B,QAAQ,IAChDN,KAAAA;EAEJ,IAAIhB;EACJ,IAAIS,UAAU;GACV,MAAMe,QAA6B,CAAC;GACpC,IAAIjD,OAAOkC,QAAAA,GACPe,MAAMrB,KAAKM;QAEXe,MAAMjC,OAAOkB;GAGjB,IAAIY,OACAG,MAAMF,WAAWD,MAAMlB;GAG3BH,SAAS,MAAM,KAAKlB,WAAW2C,UAAUD,KAAAA;GACzC,IAAI,CAACxB,UAAUmB,QAAQD,YACnB,MAAM,IAAI1C,oBAAAA;EAElB,OAAO,IAAI2C,QAAQD,YACf,MAAM,IAAI1C,oBAAAA;EAGd,IAAIkD,aAAa;EACjB,IAAI1B,QAAQ;GACR,IAAI;IACA,MAAMZ,MAAMC,oBAAoBsC,YAAY,EAAEpC,MAAMd,eAAegB,aAAa,CAAA;GACpF,SAASmC,GAAG;IACR,IACI,CAACxC,MAAMa,YACPb,MAAMa,SAASC,SAAS,WACxBd,MAAMa,SAASN,KAAKQ,OAAOH,OAAOG,IAElC,MAAMyB;IAEVF,aAAa;IACb,MAAMtC,MAAMC,oBAAoBsC,YAAY,EAAEpC,MAAMd,eAAeoD,kBAAkB,CAAA;GACzF;GACAT,QAAQ9C,eAAewD;EAC3B,OAAO;GACH,MAAM1C,MAAMC,oBAAoBsC,YAAY,EAAEpC,MAAMd,eAAesD,aAAa,CAAA;GAChFX,QAAQ9C,eAAe0D;EAC3B;EAEA,MAAMC,YAAY,MAAM,KAAKjD,UAAUkD,IAAIvC,MAAM,EAAEyB,MAAM,CAAA;EAEzD,MAAM,KAAKtC,WAAWqD,oBAAoBF,SAAAA;EAE1C,MAAM,KAAKnD,WAAWsD,gBAAgBH,WAAWjC,UAAUgB,KAAAA,CAAAA;EAE3D,MAAMqB,qBAAqB,IAAIzD,wBAAAA;EAE/B,IAAIoB,QAAQ;GACR,IAAI0B,YACA,MAAMtC,MAAMC,oBAAoBiD,SAAS;IACrC/C,MAAMd,eAAeoD;IACrBlC,MAAMtB,iBAAiB;MAAGD,kBAAkBkC,aAAa2B;KAAW,GAAG,KAAK1B,mBAAmB0B,SAAAA;IAAW,CAAA;GAC9G,CAAA;QAEA,MAAM7C,MAAMC,oBAAoBiD,SAAS;IACrC/C,MAAMd,eAAegB;IACrBE,MAAMtB,iBAAiB;MAClBD,kBAAkBkC,aAAa;MAC5B,GAAGN;MACH,GAAGiC;KACP;MACC7D,kBAAkBmE,cAAcN,UAAUX,YAAYtB,OAAOsB,YAAY;IAC9E,CAAA;GACJ,CAAA;GAGJtB,SAAS,KAAKlB,WAAW0D,MAAMxC,QAAQiC,SAAAA;GACvC,IAAIA,UAAUQ,QACVzC,OAAOyC,SAAS,MAAMJ,mBAAmBK,QAAQT,UAAUQ,MAAM;GAGrE,MAAM,KAAK3D,WAAWiC,KAAKf,MAAAA;GAE3B,IAAIiC,UAAUQ,QACVzC,OAAOyC,SAASR,UAAUQ;GAG9B,OAAO;IACHzC;IACA2C,SAAS;GACb;EACJ;EAEA,IAAI,CAACV,UAAUX,UAAU;GACrB,MAAMsB,eAAe,KAAKC,gBAAgBzD,KAAAA;GAC1C,IAAIwD,cACAX,UAAUX,WAAWsB;EAE7B;EAEA,MAAMxD,MAAMC,oBAAoBiD,SAAS;GACrC/C,MAAMd,eAAesD;GACrBpC,MAAMtB,iBAAiB;KAAGD,kBAAkBkC,aAAa2B;IAAW,GAAG,KAAK1B,mBAAmB0B,SAAAA;GAAW,CAAA;EAC9G,CAAA;EAEA,IAAI,CAACA,UAAUQ,QACXR,UAAUQ,SAASJ,mBAAmBS,eAAc;EAGxD9C,SAAS,KAAKlB,WAAWgC,OAAOmB,SAAAA;EAChCjC,OAAOyC,SAAS,MAAMJ,mBAAmBK,QAAQT,UAAUQ,MAAM;EACjE,MAAM,KAAK3D,WAAWiC,KAAKf,MAAAA;EAC3BA,OAAOyC,SAASR,UAAUQ;EAE1B,OAAO;GACHzC;GACA2C,SAAS;EACb;CACJ;CAEA,MAAMI,OACF5C,IACAf,OACc;EACd,MAAMY,SAAS,MAAM,KAAKlB,WAAW2C,UAAU,EAAEtB,GAAG,CAAA;EACpD,IAAI,CAACH,QACD,MAAM,IAAIxB,oBAAAA;EAGd,MAAMwE,UAAUhD,OAAOiD,WACnB7D,MAAMa,YACNb,MAAMa,SAASC,SAAS,UACxBd,MAAMa,SAASN,KAAKQ,OAAOH,OAAOiD;EAEtC,IAAIC,eAAe;EACnB,IAAI;GACA,MAAM9D,MAAMC,oBAAoBsC,YAAY,EAAEpC,MAAMd,eAAeiB,aAAa,CAAA;EACpF,SAASkC,GAAG;GACR,IAAI,CAACoB,SACD,MAAMpB;GAEVsB,eAAe;GACf,MAAM9D,MAAMC,oBAAoBsC,YAAY,EAAEpC,MAAMd,eAAeoD,kBAAkB,CAAA;EACzF;EAEA,IAAIqB,cAGA,MAAM9D,MAAMC,oBAAoBiD,SAAS;GACrC/C,MAAMd,eAAeoD;GACrBlC,MAAMtB,iBAAiB,GAAGD,kBAAkBkC,aAAa,CAAC,EAAE,CAAA;EAChE,CAAA;OAEA,MAAMlB,MAAMC,oBAAoBiD,SAAS;GACrC/C,MAAMd,eAAeiB;GACrBC,MAAMtB,iBAAiB;KAAGD,kBAAkBkC,aAAaN;IAAQ,GAAG,KAAKO,mBAAmBP,MAAAA;GAAQ,CAAA;EACxG,CAAA;EAGJ,MAAM,EAAEG,IAAIgD,aAAanD;EACzB,MAAM,KAAKlB,WAAWsE,OAAOpD,MAAAA;EAC7BA,OAAOG,KAAKgD;EAEZ,OAAOnD;CACX;AACJ"}

package/dist/core/entities/robot/types.d.ts

@@ -1,24 +0,0 @@
-import type { Robot, Role } from '@authup/core-kit';
-import type { PermissionPolicyBinding } from '@authup/access';
-import type { ActorContext, EntityRepositoryFindManyResult, IEntityRepository } from '@authup/server-kit';
-export interface IRobotRepository extends IEntityRepository<Robot> {
-    checkUniqueness(data: Partial<Robot>, existing?: Robot): Promise<void>;
-    findOne(id: string, query?: Record<string, any>, realm?: string): Promise<Robot | null>;
-    findOneWithSecret(where: Record<string, any>): Promise<Robot | null>;
-    getBoundRoles(entity: string | Robot): Promise<Role[]>;
-    getBoundPermissions(entity: string | Robot): Promise<PermissionPolicyBinding[]>;
-}
-export interface IRobotService {
-    getMany(query: Record<string, any>, actor: ActorContext): Promise<EntityRepositoryFindManyResult<Robot>>;
-    getOne(idOrName: string, actor: ActorContext, query?: Record<string, any>, realmId?: string): Promise<Robot>;
-    create(data: Record<string, any>, actor: ActorContext): Promise<Robot>;
-    update(idOrName: string, data: Record<string, any>, actor: ActorContext): Promise<Robot>;
-    save(idOrName: string | undefined, data: Record<string, any>, actor: ActorContext, options?: {
-        updateOnly?: boolean;
-    }): Promise<{
-        entity: Robot;
-        created: boolean;
-    }>;
-    delete(id: string, actor: ActorContext): Promise<Robot>;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/core/entities/robot/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/robot/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,8BAA8B,EAAE,iBAAiB,EAAG,MAAM,oBAAoB,CAAC;AAE3G,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB,CAAC,KAAK,CAAC;IAC9D,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAExF,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAErE,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAEvD,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAC;CACnF;AAED,MAAM,WAAW,aAAa;IAC1B,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC,CAAC;IACzG,MAAM,CACF,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,YAAY,EACnB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC3B,OAAO,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,KAAK,CAAC,CAAC;IAClB,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACzF,IAAI,CACA,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,EACnB,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GACnC,OAAO,CAAC;QACP,MAAM,EAAE,KAAK,CAAC;QACd,OAAO,EAAE,OAAO,CAAA;KACnB,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;CAC3D"}

package/dist/core/entities/robot/types.mjs

@@ -1,4 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-export {};

package/dist/core/entities/robot-permission/index.d.ts

@@ -1,3 +0,0 @@
-export * from './service.ts';
-export * from './types.ts';
-//# sourceMappingURL=index.d.ts.map

package/dist/core/entities/robot-permission/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/robot-permission/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}

package/dist/core/entities/robot-permission/index.mjs

@@ -1,5 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { RobotPermissionService } from "./service.mjs";
-export { RobotPermissionService };

package/dist/core/entities/robot-permission/service.d.ts

@@ -1,25 +0,0 @@
-import { RobotPermissionValidator } from '@authup/core-kit';
-import type { Permission, RobotPermission } from '@authup/core-kit';
-import type { IIdentityPermissionProvider } from '../../identity/permission/types.ts';
-import type { ActorContext, EntityRepositoryFindManyResult, IEntityRepository } from '@authup/server-kit';
-import { JunctionEntityService } from '@authup/server-kit';
-import type { IRobotPermissionRepository, IRobotPermissionService } from './types.ts';
-export type RobotPermissionServiceContext = {
-    repository: IRobotPermissionRepository;
-    permissionRepository: IEntityRepository<Permission>;
-    identityPermissionProvider: IIdentityPermissionProvider;
-};
-export declare class RobotPermissionService extends JunctionEntityService implements IRobotPermissionService {
-    protected readonly ownerRealmKey = "robot_realm_id";
-    protected repository: IRobotPermissionRepository;
-    protected permissionRepository: IEntityRepository<Permission>;
-    protected identityPermissionProvider: IIdentityPermissionProvider;
-    protected validator: RobotPermissionValidator;
-    constructor(ctx: RobotPermissionServiceContext);
-    getMany(query: Record<string, any>, actor: ActorContext): Promise<EntityRepositoryFindManyResult<RobotPermission>>;
-    getOne(id: string, actor: ActorContext): Promise<RobotPermission>;
-    create(data: Record<string, any>, actor: ActorContext): Promise<RobotPermission>;
-    update(id: string, data: Record<string, any>, actor: ActorContext): Promise<RobotPermission>;
-    delete(id: string, actor: ActorContext): Promise<RobotPermission>;
-}
-//# sourceMappingURL=service.d.ts.map

package/dist/core/entities/robot-permission/service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/robot-permission/service.ts"],"names":[],"mappings":"AAcA,OAAO,EAAkB,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AAEtF,OAAO,KAAK,EAAE,YAAY,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC1G,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAEtF,MAAM,MAAM,6BAA6B,GAAG;IACxC,UAAU,EAAE,0BAA0B,CAAC;IACvC,oBAAoB,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACpD,0BAA0B,EAAE,2BAA2B,CAAC;CAC3D,CAAC;AAEF,qBAAa,sBAAuB,SAAQ,qBAAsB,YAAW,uBAAuB;IAChG,SAAS,CAAC,QAAQ,CAAC,aAAa,oBAAoB;IAEpD,SAAS,CAAC,UAAU,EAAE,0BAA0B,CAAC;IAEjD,SAAS,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAE9D,SAAS,CAAC,0BAA0B,EAAE,2BAA2B,CAAC;IAElE,SAAS,CAAC,SAAS,EAAE,wBAAwB,CAAC;gBAElC,GAAG,EAAE,6BAA6B;IAQxC,OAAO,CACT,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,8BAA8B,CAAC,eAAe,CAAC,CAAC;IAWrD,MAAM,CACR,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,eAAe,CAAC;IAgBrB,MAAM,CACR,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,eAAe,CAAC;IA4DrB,MAAM,CACR,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,eAAe,CAAC;IAgErB,MAAM,CACR,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,eAAe,CAAC;CAsB9B"}

package/dist/core/entities/robot-permission/service.mjs

@@ -1,137 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { applyJunctionCreateGrant, buildJunctionUpdateData } from "../../identity/permission/junction-grant.mjs";
-import { ValidatorGroup } from "@authup/kit";
-import { PermissionName, RobotPermissionValidator } from "@authup/core-kit";
-import { JunctionEntityService } from "@authup/server-kit";
-import { BuiltInPolicyType, RealmScope, definePolicyData } from "@authup/access";
-import { EntityConflictError, EntityNotFoundError } from "@authup/errors";
-//#region src/core/entities/robot-permission/service.ts
-var RobotPermissionService = class extends JunctionEntityService {
-	ownerRealmKey = "robot_realm_id";
-	repository;
-	permissionRepository;
-	identityPermissionProvider;
-	validator;
-	constructor(ctx) {
-		super();
-		this.repository = ctx.repository;
-		this.permissionRepository = ctx.permissionRepository;
-		this.identityPermissionProvider = ctx.identityPermissionProvider;
-		this.validator = new RobotPermissionValidator();
-	}
-	async getMany(query, actor) {
-		await actor.permissionEvaluator.preEvaluateOneOf({ name: [PermissionName.ROBOT_PERMISSION_CREATE, PermissionName.ROBOT_PERMISSION_DELETE] });
-		return this.repository.findMany(query);
-	}
-	async getOne(id, actor) {
-		await actor.permissionEvaluator.preEvaluateOneOf({ name: [PermissionName.ROBOT_PERMISSION_CREATE, PermissionName.ROBOT_PERMISSION_DELETE] });
-		const entity = await this.repository.findOneBy({ id });
-		if (!entity) throw new EntityNotFoundError();
-		return entity;
-	}
-	async create(data, actor) {
-		await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_PERMISSION_CREATE });
-		const validated = await this.validator.run(data, { group: ValidatorGroup.CREATE });
-		await this.repository.validateJoinColumns(validated);
-		if (await this.repository.findOneBy({
-			permission_id: validated.permission_id,
-			robot_id: validated.robot_id
-		})) throw new EntityConflictError({ entity: "robot-permission" });
-		if (validated.permission) {
-			validated.permission_realm_id = validated.permission.realm_id;
-			await actor.permissionEvaluator.preEvaluate({
-				name: validated.permission.name,
-				realmId: validated.permission.realm_id,
-				clientId: validated.permission.client_id
-			});
-		}
-		if (validated.robot) validated.robot_realm_id = validated.robot.realm_id;
-		if (validated.permission && actor.identity) applyJunctionCreateGrant(validated, await this.identityPermissionProvider.resolveJunctionGrant({
-			type: actor.identity.type,
-			id: actor.identity.data.id
-		}, {
-			name: validated.permission.name,
-			realmId: validated.permission.realm_id,
-			clientId: validated.permission.client_id,
-			realmScope: validated.realm_scope ?? RealmScope.OWN
-		}));
-		await actor.permissionEvaluator.evaluate({
-			name: PermissionName.ROBOT_PERMISSION_CREATE,
-			data: definePolicyData({
-				[BuiltInPolicyType.ATTRIBUTES]: this.junctionAttributes(validated),
-				[BuiltInPolicyType.REALM_MATCH]: this.junctionResourceRealm(validated)
-			})
-		});
-		let entity = this.repository.create(validated);
-		entity = await this.repository.save(entity);
-		return entity;
-	}
-	async update(id, data, actor) {
-		await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_PERMISSION_UPDATE });
-		const entity = await this.repository.findOneBy({ id });
-		if (!entity) throw new EntityNotFoundError();
-		const validated = await this.validator.run(data, { group: ValidatorGroup.UPDATE });
-		const permission = await this.permissionRepository.findOneById(entity.permission_id);
-		if (permission) await actor.permissionEvaluator.preEvaluate({
-			name: permission.name,
-			realmId: permission.realm_id,
-			clientId: permission.client_id
-		});
-		let actorScope = RealmScope.ANY;
-		let actorPolicyFree = true;
-		let actorPolicyId = null;
-		if (actor.identity && permission) {
-			const grant = await this.identityPermissionProvider.resolveJunctionGrant({
-				type: actor.identity.type,
-				id: actor.identity.data.id
-			}, {
-				name: permission.name,
-				realmId: permission.realm_id,
-				clientId: permission.client_id,
-				realmScope: validated.realm_scope ?? entity.realm_scope
-			});
-			actorScope = grant.realmScope;
-			actorPolicyFree = !grant.policy;
-			actorPolicyId = grant.policy ? grant.policy.id : null;
-		} else if (actor.identity) actorScope = RealmScope.OWN;
-		const updateData = buildJunctionUpdateData({
-			data: validated,
-			existingScope: entity.realm_scope,
-			actorScope,
-			actorPolicyFree,
-			actorPolicyId
-		});
-		await this.repository.validateJoinColumns(updateData);
-		const merged = this.repository.merge(entity, updateData);
-		await actor.permissionEvaluator.evaluate({
-			name: PermissionName.ROBOT_PERMISSION_UPDATE,
-			data: definePolicyData({
-				[BuiltInPolicyType.ATTRIBUTES]: this.junctionAttributes(merged),
-				[BuiltInPolicyType.REALM_MATCH]: this.junctionResourceRealm(merged)
-			})
-		});
-		return this.repository.save(merged);
-	}
-	async delete(id, actor) {
-		await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_PERMISSION_DELETE });
-		const entity = await this.repository.findOneBy({ id });
-		if (!entity) throw new EntityNotFoundError();
-		await actor.permissionEvaluator.evaluate({
-			name: PermissionName.ROBOT_PERMISSION_DELETE,
-			data: definePolicyData({
-				[BuiltInPolicyType.ATTRIBUTES]: this.junctionAttributes(entity),
-				[BuiltInPolicyType.REALM_MATCH]: this.junctionResourceRealm(entity)
-			})
-		});
-		const { id: entityId } = entity;
-		await this.repository.remove(entity);
-		entity.id = entityId;
-		return entity;
-	}
-};
-//#endregion
-export { RobotPermissionService };
-
-//# sourceMappingURL=service.mjs.map

package/dist/core/entities/robot-permission/service.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"service.mjs","names":["BuiltInPolicyType","RealmScope","definePolicyData","EntityConflictError","EntityNotFoundError","ValidatorGroup","PermissionName","RobotPermissionValidator","applyJunctionCreateGrant","buildJunctionUpdateData","JunctionEntityService","RobotPermissionService","ownerRealmKey","repository","permissionRepository","identityPermissionProvider","validator","ctx","getMany","query","actor","permissionEvaluator","preEvaluateOneOf","name","ROBOT_PERMISSION_CREATE","ROBOT_PERMISSION_DELETE","findMany","getOne","id","entity","findOneBy","create","data","preEvaluate","validated","run","group","CREATE","validateJoinColumns","existing","permission_id","robot_id","permission","permission_realm_id","realm_id","realmId","clientId","client_id","robot","robot_realm_id","identity","grant","resolveJunctionGrant","type","realmScope","realm_scope","OWN","evaluate","ATTRIBUTES","junctionAttributes","REALM_MATCH","junctionResourceRealm","save","update","ROBOT_PERMISSION_UPDATE","UPDATE","findOneById","actorScope","ANY","actorPolicyFree","actorPolicyId","policy","updateData","existingScope","merged","merge","delete","entityId","remove"],"sources":["../../../../src/core/entities/robot-permission/service.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport {\n    BuiltInPolicyType,\n    RealmScope,\n    definePolicyData,\n} from '@authup/access';\nimport { EntityConflictError, EntityNotFoundError } from '@authup/errors';\nimport { ValidatorGroup } from '@authup/kit';\nimport { PermissionName, RobotPermissionValidator } from '@authup/core-kit';\nimport type { Permission, RobotPermission } from '@authup/core-kit';\nimport type { IIdentityPermissionProvider } from '../../identity/permission/types.ts';\nimport { applyJunctionCreateGrant, buildJunctionUpdateData } from '../../identity/permission/junction-grant.ts';\nimport type { ActorContext, EntityRepositoryFindManyResult, IEntityRepository } from '@authup/server-kit';\nimport { JunctionEntityService } from '@authup/server-kit';\nimport type { IRobotPermissionRepository, IRobotPermissionService } from './types.ts';\n\nexport type RobotPermissionServiceContext = {\n    repository: IRobotPermissionRepository;\n    permissionRepository: IEntityRepository<Permission>;\n    identityPermissionProvider: IIdentityPermissionProvider;\n};\n\nexport class RobotPermissionService extends JunctionEntityService implements IRobotPermissionService {\n    protected readonly ownerRealmKey = 'robot_realm_id';\n\n    protected repository: IRobotPermissionRepository;\n\n    protected permissionRepository: IEntityRepository<Permission>;\n\n    protected identityPermissionProvider: IIdentityPermissionProvider;\n\n    protected validator: RobotPermissionValidator;\n\n    constructor(ctx: RobotPermissionServiceContext) {\n        super();\n        this.repository = ctx.repository;\n        this.permissionRepository = ctx.permissionRepository;\n        this.identityPermissionProvider = ctx.identityPermissionProvider;\n        this.validator = new RobotPermissionValidator();\n    }\n\n    async getMany(\n        query: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<EntityRepositoryFindManyResult<RobotPermission>> {\n        await actor.permissionEvaluator.preEvaluateOneOf({\n            name: [\n                PermissionName.ROBOT_PERMISSION_CREATE,\n                PermissionName.ROBOT_PERMISSION_DELETE,\n            ],\n        });\n\n        return this.repository.findMany(query);\n    }\n\n    async getOne(\n        id: string,\n        actor: ActorContext,\n    ): Promise<RobotPermission> {\n        await actor.permissionEvaluator.preEvaluateOneOf({\n            name: [\n                PermissionName.ROBOT_PERMISSION_CREATE,\n                PermissionName.ROBOT_PERMISSION_DELETE,\n            ],\n        });\n\n        const entity = await this.repository.findOneBy({ id });\n        if (!entity) {\n            throw new EntityNotFoundError();\n        }\n\n        return entity;\n    }\n\n    async create(\n        data: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<RobotPermission> {\n        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_PERMISSION_CREATE });\n\n        const validated = await this.validator.run(data, { group: ValidatorGroup.CREATE });\n\n        await this.repository.validateJoinColumns(validated);\n\n        const existing = await this.repository.findOneBy({\n            permission_id: validated.permission_id,\n            robot_id: validated.robot_id,\n        });\n        if (existing) {\n            throw new EntityConflictError({ entity: 'robot-permission' });\n        }\n\n        if (validated.permission) {\n            validated.permission_realm_id = validated.permission.realm_id;\n\n            await actor.permissionEvaluator.preEvaluate({\n                name: validated.permission.name,\n                realmId: validated.permission.realm_id,\n                clientId: validated.permission.client_id,\n            });\n        }\n\n        if (validated.robot) {\n            validated.robot_realm_id = validated.robot.realm_id;\n        }\n\n        if (validated.permission && actor.identity) {\n            const grant = await this.identityPermissionProvider.resolveJunctionGrant(\n                {\n                    type: actor.identity.type,\n                    id: actor.identity.data.id,\n                },\n                {\n                    name: validated.permission.name,\n                    realmId: validated.permission.realm_id,\n                    clientId: validated.permission.client_id,\n                    realmScope: validated.realm_scope ?? RealmScope.OWN,\n                },\n            );\n\n            applyJunctionCreateGrant(validated, grant);\n        }\n\n        await actor.permissionEvaluator.evaluate({\n            name: PermissionName.ROBOT_PERMISSION_CREATE,\n            data: definePolicyData({\n                [BuiltInPolicyType.ATTRIBUTES]: this.junctionAttributes(validated),\n                [BuiltInPolicyType.REALM_MATCH]: this.junctionResourceRealm(validated),\n            }),\n        });\n\n        let entity = this.repository.create(validated);\n        entity = await this.repository.save(entity);\n\n        return entity;\n    }\n\n    async update(\n        id: string,\n        data: Record<string, any>,\n        actor: ActorContext,\n    ): Promise<RobotPermission> {\n        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_PERMISSION_UPDATE });\n\n        const entity = await this.repository.findOneBy({ id });\n        if (!entity) {\n            throw new EntityNotFoundError();\n        }\n\n        const validated = await this.validator.run(data, { group: ValidatorGroup.UPDATE });\n\n        const permission = await this.permissionRepository.findOneById(entity.permission_id);\n        if (permission) {\n            // Member-permission gate: an actor may only modify a binding for a permission it\n            // holds (mirrors create()).\n            await actor.permissionEvaluator.preEvaluate({\n                name: permission.name,\n                realmId: permission.realm_id,\n                clientId: permission.client_id,\n            });\n        }\n\n        let actorScope: `${RealmScope}` = RealmScope.ANY;\n        let actorPolicyFree = true;\n        let actorPolicyId: string | null = null;\n        if (actor.identity && permission) {\n            const grant = await this.identityPermissionProvider.resolveJunctionGrant(\n                { type: actor.identity.type, id: actor.identity.data.id },\n                {\n                    name: permission.name,\n                    realmId: permission.realm_id,\n                    clientId: permission.client_id,\n                    realmScope: validated.realm_scope ?? entity.realm_scope,\n                },\n            );\n            actorScope = grant.realmScope;\n            actorPolicyFree = !grant.policy;\n            actorPolicyId = grant.policy ? grant.policy.id : null;\n        } else if (actor.identity) {\n            actorScope = RealmScope.OWN;\n        }\n\n        const updateData = buildJunctionUpdateData({\n            data: validated,\n            existingScope: entity.realm_scope,\n            actorScope,\n            actorPolicyFree,\n            actorPolicyId,\n        });\n\n        await this.repository.validateJoinColumns(updateData);\n\n        const merged = this.repository.merge(entity, updateData);\n\n        await actor.permissionEvaluator.evaluate({\n            name: PermissionName.ROBOT_PERMISSION_UPDATE,\n            data: definePolicyData({\n                [BuiltInPolicyType.ATTRIBUTES]: this.junctionAttributes(merged),\n                [BuiltInPolicyType.REALM_MATCH]: this.junctionResourceRealm(merged),\n            }),\n        });\n\n        return this.repository.save(merged);\n    }\n\n    async delete(\n        id: string,\n        actor: ActorContext,\n    ): Promise<RobotPermission> {\n        await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_PERMISSION_DELETE });\n\n        const entity = await this.repository.findOneBy({ id });\n        if (!entity) {\n            throw new EntityNotFoundError();\n        }\n\n        await actor.permissionEvaluator.evaluate({\n            name: PermissionName.ROBOT_PERMISSION_DELETE,\n            data: definePolicyData({\n                [BuiltInPolicyType.ATTRIBUTES]: this.junctionAttributes(entity),\n                [BuiltInPolicyType.REALM_MATCH]: this.junctionResourceRealm(entity),\n            }),\n        });\n\n        const { id: entityId } = entity;\n        await this.repository.remove(entity);\n        entity.id = entityId;\n\n        return entity;\n    }\n}\n"],"mappings":";;;;;;;;;;AA4BA,IAAaW,yBAAb,cAA4CD,sBAAAA;CACrBE,gBAAgB;CAEzBC;CAEAC;CAEAC;CAEAC;CAEV,YAAYC,KAAoC;EAC5C,MAAK;EACL,KAAKJ,aAAaI,IAAIJ;EACtB,KAAKC,uBAAuBG,IAAIH;EAChC,KAAKC,6BAA6BE,IAAIF;EACtC,KAAKC,YAAY,IAAIT,yBAAAA;CACzB;CAEA,MAAMW,QACFC,OACAC,OACwD;EACxD,MAAMA,MAAMC,oBAAoBC,iBAAiB,EAC7CC,MAAM,CACFjB,eAAekB,yBACflB,eAAemB,uBAAAA,EAEvB,CAAA;EAEA,OAAO,KAAKZ,WAAWa,SAASP,KAAAA;CACpC;CAEA,MAAMQ,OACFC,IACAR,OACwB;EACxB,MAAMA,MAAMC,oBAAoBC,iBAAiB,EAC7CC,MAAM,CACFjB,eAAekB,yBACflB,eAAemB,uBAAAA,EAEvB,CAAA;EAEA,MAAMI,SAAS,MAAM,KAAKhB,WAAWiB,UAAU,EAAEF,GAAG,CAAA;EACpD,IAAI,CAACC,QACD,MAAM,IAAIzB,oBAAAA;EAGd,OAAOyB;CACX;CAEA,MAAME,OACFC,MACAZ,OACwB;EACxB,MAAMA,MAAMC,oBAAoBY,YAAY,EAAEV,MAAMjB,eAAekB,wBAAwB,CAAA;EAE3F,MAAMU,YAAY,MAAM,KAAKlB,UAAUmB,IAAIH,MAAM,EAAEI,OAAO/B,eAAegC,OAAO,CAAA;EAEhF,MAAM,KAAKxB,WAAWyB,oBAAoBJ,SAAAA;EAM1C,IAAIK,MAJmB,KAAK1B,WAAWiB,UAAU;GAC7CU,eAAeN,UAAUM;GACzBC,UAAUP,UAAUO;EACxB,CAAA,GAEI,MAAM,IAAItC,oBAAoB,EAAE0B,QAAQ,mBAAmB,CAAA;EAG/D,IAAIK,UAAUQ,YAAY;GACtBR,UAAUS,sBAAsBT,UAAUQ,WAAWE;GAErD,MAAMxB,MAAMC,oBAAoBY,YAAY;IACxCV,MAAMW,UAAUQ,WAAWnB;IAC3BsB,SAASX,UAAUQ,WAAWE;IAC9BE,UAAUZ,UAAUQ,WAAWK;GACnC,CAAA;EACJ;EAEA,IAAIb,UAAUc,OACVd,UAAUe,iBAAiBf,UAAUc,MAAMJ;EAG/C,IAAIV,UAAUQ,cAActB,MAAM8B,UAc9B1C,yBAAyB0B,WAAWiB,MAbhB,KAAKpC,2BAA2BqC,qBAChD;GACIC,MAAMjC,MAAM8B,SAASG;GACrBzB,IAAIR,MAAM8B,SAASlB,KAAKJ;EAC5B,GACA;GACIL,MAAMW,UAAUQ,WAAWnB;GAC3BsB,SAASX,UAAUQ,WAAWE;GAC9BE,UAAUZ,UAAUQ,WAAWK;GAC/BO,YAAYpB,UAAUqB,eAAetD,WAAWuD;EACpD,CAAA,CAGgCL;EAGxC,MAAM/B,MAAMC,oBAAoBoC,SAAS;GACrClC,MAAMjB,eAAekB;GACrBQ,MAAM9B,iBAAiB;KAClBF,kBAAkB0D,aAAa,KAAKC,mBAAmBzB,SAAAA;KACvDlC,kBAAkB4D,cAAc,KAAKC,sBAAsB3B,SAAAA;GAChE,CAAA;EACJ,CAAA;EAEA,IAAIL,SAAS,KAAKhB,WAAWkB,OAAOG,SAAAA;EACpCL,SAAS,MAAM,KAAKhB,WAAWiD,KAAKjC,MAAAA;EAEpC,OAAOA;CACX;CAEA,MAAMkC,OACFnC,IACAI,MACAZ,OACwB;EACxB,MAAMA,MAAMC,oBAAoBY,YAAY,EAAEV,MAAMjB,eAAe0D,wBAAwB,CAAA;EAE3F,MAAMnC,SAAS,MAAM,KAAKhB,WAAWiB,UAAU,EAAEF,GAAG,CAAA;EACpD,IAAI,CAACC,QACD,MAAM,IAAIzB,oBAAAA;EAGd,MAAM8B,YAAY,MAAM,KAAKlB,UAAUmB,IAAIH,MAAM,EAAEI,OAAO/B,eAAe4D,OAAO,CAAA;EAEhF,MAAMvB,aAAa,MAAM,KAAK5B,qBAAqBoD,YAAYrC,OAAOW,aAAa;EACnF,IAAIE,YAGA,MAAMtB,MAAMC,oBAAoBY,YAAY;GACxCV,MAAMmB,WAAWnB;GACjBsB,SAASH,WAAWE;GACpBE,UAAUJ,WAAWK;EACzB,CAAA;EAGJ,IAAIoB,aAA8BlE,WAAWmE;EAC7C,IAAIC,kBAAkB;EACtB,IAAIC,gBAA+B;EACnC,IAAIlD,MAAM8B,YAAYR,YAAY;GAC9B,MAAMS,QAAQ,MAAM,KAAKpC,2BAA2BqC,qBAChD;IAAEC,MAAMjC,MAAM8B,SAASG;IAAMzB,IAAIR,MAAM8B,SAASlB,KAAKJ;GAAG,GACxD;IACIL,MAAMmB,WAAWnB;IACjBsB,SAASH,WAAWE;IACpBE,UAAUJ,WAAWK;IACrBO,YAAYpB,UAAUqB,eAAe1B,OAAO0B;GAChD,CAAA;GAEJY,aAAahB,MAAMG;GACnBe,kBAAkB,CAAClB,MAAMoB;GACzBD,gBAAgBnB,MAAMoB,SAASpB,MAAMoB,OAAO3C,KAAK;EACrD,OAAO,IAAIR,MAAM8B,UACbiB,aAAalE,WAAWuD;EAG5B,MAAMgB,aAAa/D,wBAAwB;GACvCuB,MAAME;GACNuC,eAAe5C,OAAO0B;GACtBY;GACAE;GACAC;EACJ,CAAA;EAEA,MAAM,KAAKzD,WAAWyB,oBAAoBkC,UAAAA;EAE1C,MAAME,SAAS,KAAK7D,WAAW8D,MAAM9C,QAAQ2C,UAAAA;EAE7C,MAAMpD,MAAMC,oBAAoBoC,SAAS;GACrClC,MAAMjB,eAAe0D;GACrBhC,MAAM9B,iBAAiB;KAClBF,kBAAkB0D,aAAa,KAAKC,mBAAmBe,MAAAA;KACvD1E,kBAAkB4D,cAAc,KAAKC,sBAAsBa,MAAAA;GAChE,CAAA;EACJ,CAAA;EAEA,OAAO,KAAK7D,WAAWiD,KAAKY,MAAAA;CAChC;CAEA,MAAME,OACFhD,IACAR,OACwB;EACxB,MAAMA,MAAMC,oBAAoBY,YAAY,EAAEV,MAAMjB,eAAemB,wBAAwB,CAAA;EAE3F,MAAMI,SAAS,MAAM,KAAKhB,WAAWiB,UAAU,EAAEF,GAAG,CAAA;EACpD,IAAI,CAACC,QACD,MAAM,IAAIzB,oBAAAA;EAGd,MAAMgB,MAAMC,oBAAoBoC,SAAS;GACrClC,MAAMjB,eAAemB;GACrBO,MAAM9B,iBAAiB;KAClBF,kBAAkB0D,aAAa,KAAKC,mBAAmB9B,MAAAA;KACvD7B,kBAAkB4D,cAAc,KAAKC,sBAAsBhC,MAAAA;GAChE,CAAA;EACJ,CAAA;EAEA,MAAM,EAAED,IAAIiD,aAAahD;EACzB,MAAM,KAAKhB,WAAWiE,OAAOjD,MAAAA;EAC7BA,OAAOD,KAAKiD;EAEZ,OAAOhD;CACX;AACJ"}

package/dist/core/entities/robot-permission/types.d.ts

@@ -1,12 +0,0 @@
-import type { RobotPermission } from '@authup/core-kit';
-import type { ActorContext, EntityRepositoryFindManyResult, IEntityRepository } from '@authup/server-kit';
-export interface IRobotPermissionRepository extends IEntityRepository<RobotPermission> {
-}
-export interface IRobotPermissionService {
-    getMany(query: Record<string, any>, actor: ActorContext): Promise<EntityRepositoryFindManyResult<RobotPermission>>;
-    getOne(id: string, actor: ActorContext): Promise<RobotPermission>;
-    create(data: Record<string, any>, actor: ActorContext): Promise<RobotPermission>;
-    update(id: string, data: Record<string, any>, actor: ActorContext): Promise<RobotPermission>;
-    delete(id: string, actor: ActorContext): Promise<RobotPermission>;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/core/entities/robot-permission/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/robot-permission/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,8BAA8B,EAAE,iBAAiB,EAAG,MAAM,oBAAoB,CAAC;AAE3G,MAAM,WAAW,0BAA2B,SAAQ,iBAAiB,CAAC,eAAe,CAAC;CACrF;AAED,MAAM,WAAW,uBAAuB;IACpC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,8BAA8B,CAAC,eAAe,CAAC,CAAC,CAAC;IACnH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAClE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACjF,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC7F,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CACrE"}

package/dist/core/entities/robot-role/index.d.ts

@@ -1,3 +0,0 @@
-export * from './service.ts';
-export * from './types.ts';
-//# sourceMappingURL=index.d.ts.map

package/dist/core/entities/robot-role/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/robot-role/index.ts"],"names":[],"mappings":"AAOA,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}

package/dist/core/entities/robot-role/index.mjs

@@ -1,5 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { RobotRoleService } from "./service.mjs";
-export { RobotRoleService };

package/dist/core/entities/robot-role/service.d.ts

@@ -1,22 +0,0 @@
-import { RobotRoleValidator } from '@authup/core-kit';
-import type { RobotRole } from '@authup/core-kit';
-import type { ActorContext, EntityRepositoryFindManyResult } from '@authup/server-kit';
-import { JunctionEntityService } from '@authup/server-kit';
-import type { IIdentityPermissionProvider } from '../../identity/permission/types.ts';
-import type { IRobotRoleRepository, IRobotRoleService } from './types.ts';
-export type RobotRoleServiceContext = {
-    repository: IRobotRoleRepository;
-    identityPermissionProvider: IIdentityPermissionProvider;
-};
-export declare class RobotRoleService extends JunctionEntityService implements IRobotRoleService {
-    protected readonly ownerRealmKey = "robot_realm_id";
-    protected repository: IRobotRoleRepository;
-    protected identityPermissionProvider: IIdentityPermissionProvider;
-    protected validator: RobotRoleValidator;
-    constructor(ctx: RobotRoleServiceContext);
-    getMany(query: Record<string, any>, actor: ActorContext): Promise<EntityRepositoryFindManyResult<RobotRole>>;
-    getOne(id: string, actor: ActorContext): Promise<RobotRole>;
-    create(data: Record<string, any>, actor: ActorContext): Promise<RobotRole>;
-    delete(id: string, actor: ActorContext): Promise<RobotRole>;
-}
-//# sourceMappingURL=service.d.ts.map

package/dist/core/entities/robot-role/service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/robot-role/service.ts"],"names":[],"mappings":"AAUA,OAAO,EAAkB,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,8BAA8B,EAAG,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE1E,MAAM,MAAM,uBAAuB,GAAG;IAClC,UAAU,EAAE,oBAAoB,CAAC;IACjC,0BAA0B,EAAE,2BAA2B,CAAC;CAC3D,CAAC;AAEF,qBAAa,gBAAiB,SAAQ,qBAAsB,YAAW,iBAAiB;IACpF,SAAS,CAAC,QAAQ,CAAC,aAAa,oBAAoB;IAEpD,SAAS,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAE3C,SAAS,CAAC,0BAA0B,EAAE,2BAA2B,CAAC;IAElE,SAAS,CAAC,SAAS,EAAE,kBAAkB,CAAC;gBAE5B,GAAG,EAAE,uBAAuB;IAOlC,OAAO,CACT,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,8BAA8B,CAAC,SAAS,CAAC,CAAC;IAY/C,MAAM,CACR,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,SAAS,CAAC;IAiBf,MAAM,CACR,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EACzB,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,SAAS,CAAC;IAuDf,MAAM,CACR,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,YAAY,GACpB,OAAO,CAAC,SAAS,CAAC;CAuBxB"}

package/dist/core/entities/robot-role/service.mjs

@@ -1,90 +0,0 @@
-import "node:path";
-import "node:url";
-import.meta.url;
-import { ValidatorGroup } from "@authup/kit";
-import { PermissionName, RobotRoleValidator } from "@authup/core-kit";
-import { JunctionEntityService } from "@authup/server-kit";
-import { BuiltInPolicyType, PermissionError, definePolicyData } from "@authup/access";
-import { EntityConflictError, EntityNotFoundError } from "@authup/errors";
-//#region src/core/entities/robot-role/service.ts
-var RobotRoleService = class extends JunctionEntityService {
-	ownerRealmKey = "robot_realm_id";
-	repository;
-	identityPermissionProvider;
-	validator;
-	constructor(ctx) {
-		super();
-		this.repository = ctx.repository;
-		this.identityPermissionProvider = ctx.identityPermissionProvider;
-		this.validator = new RobotRoleValidator();
-	}
-	async getMany(query, actor) {
-		await actor.permissionEvaluator.preEvaluateOneOf({ name: [
-			PermissionName.ROBOT_ROLE_READ,
-			PermissionName.ROBOT_ROLE_UPDATE,
-			PermissionName.ROBOT_ROLE_DELETE
-		] });
-		return this.repository.findMany(query);
-	}
-	async getOne(id, actor) {
-		await actor.permissionEvaluator.preEvaluateOneOf({ name: [
-			PermissionName.ROBOT_ROLE_READ,
-			PermissionName.ROBOT_ROLE_UPDATE,
-			PermissionName.ROBOT_ROLE_DELETE
-		] });
-		const entity = await this.repository.findOneBy({ id });
-		if (!entity) throw new EntityNotFoundError();
-		return entity;
-	}
-	async create(data, actor) {
-		await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_ROLE_CREATE });
-		const validated = await this.validator.run(data, { group: ValidatorGroup.CREATE });
-		await this.repository.validateJoinColumns(validated);
-		if (await this.repository.findOneBy({
-			role_id: validated.role_id,
-			robot_id: validated.robot_id
-		})) throw new EntityConflictError({ entity: "robot-role" });
-		if (validated.role) validated.role_realm_id = validated.role.realm_id;
-		if (validated.robot) validated.robot_realm_id = validated.robot.realm_id;
-		if (validated.role && actor.identity) {
-			if (!await this.identityPermissionProvider.isSuperset({
-				type: actor.identity.type,
-				id: actor.identity.data.id
-			}, {
-				type: "role",
-				id: validated.role_id,
-				clientId: validated.role.client_id
-			})) throw new PermissionError({ message: "You don't own the required permissions." });
-		}
-		await actor.permissionEvaluator.evaluate({
-			name: PermissionName.ROBOT_ROLE_CREATE,
-			data: definePolicyData({
-				[BuiltInPolicyType.ATTRIBUTES]: this.junctionAttributes(validated),
-				[BuiltInPolicyType.REALM_MATCH]: this.junctionResourceRealm(validated)
-			})
-		});
-		let entity = this.repository.create(validated);
-		entity = await this.repository.save(entity);
-		return entity;
-	}
-	async delete(id, actor) {
-		await actor.permissionEvaluator.preEvaluate({ name: PermissionName.ROBOT_ROLE_DELETE });
-		const entity = await this.repository.findOneBy({ id });
-		if (!entity) throw new EntityNotFoundError();
-		await actor.permissionEvaluator.evaluate({
-			name: PermissionName.ROBOT_ROLE_DELETE,
-			data: definePolicyData({
-				[BuiltInPolicyType.ATTRIBUTES]: this.junctionAttributes(entity),
-				[BuiltInPolicyType.REALM_MATCH]: this.junctionResourceRealm(entity)
-			})
-		});
-		const { id: entityId } = entity;
-		await this.repository.remove(entity);
-		entity.id = entityId;
-		return entity;
-	}
-};
-//#endregion
-export { RobotRoleService };
-
-//# sourceMappingURL=service.mjs.map