@authup/server-core 1.0.0-beta.56 → 1.0.0-beta.57

package/dist/app/modules/database/repositories/client-role/repository.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"repository.mjs","names":["validateEntityJoinColumns","applyQuery","ClientRoleEntity","translateWhereConditions","ClientRoleRepositoryAdapter","repository","findMany","query","qb","createQueryBuilder","groupBy","pagination","entities","total","getManyAndCount","data","meta","findOneById","id","findOneBy","findOneByName","_name","Promise","resolve","findOneByIdOrName","idOrName","findManyBy","where","findBy","create","merge","entity","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget"],"sources":["../../../../../../src/app/modules/database/repositories/client-role/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { ClientRole } from '@authup/core-kit';\nimport type { IQuery } from '@rapiq/core';\nimport type { Repository } from 'typeorm';\nimport { validateEntityJoinColumns } from 'typeorm-extension';\nimport { applyQuery } from '../query.ts';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IClientRoleRepository } from '../../../../../core/entities/client-role/types.ts';\nimport { ClientRoleEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { translateWhereConditions } from '../helpers.ts';\n\nexport class ClientRoleRepositoryAdapter implements IClientRoleRepository {\n    private readonly repository: Repository<ClientRole>;\n\n    constructor(repository: Repository<ClientRole>) {\n        this.repository = repository;\n    }\n\n    async findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<ClientRole>> {\n        const qb = this.repository.createQueryBuilder('clientRole');\n        qb.groupBy('clientRole.id');\n\n        const { pagination } = applyQuery(qb, query);\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    findOneById(id: string): Promise<ClientRole | null> {\n        return this.findOneBy({ id });\n    }\n\n    findOneByName(_name: string): Promise<ClientRole | null> {\n        return Promise.resolve(null);\n    }\n\n    findOneByIdOrName(idOrName: string): Promise<ClientRole | null> {\n        return this.findOneById(idOrName);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<ClientRole[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<ClientRole | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<ClientRole>): ClientRole {\n        return this.repository.create(data);\n    }\n\n    merge(entity: ClientRole, data: Partial<ClientRole>): ClientRole {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: ClientRole): Promise<ClientRole> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: ClientRole): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<ClientRole>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: ClientRoleEntity,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;AAiBA,IAAaI,8BAAb,MAAaA;CACQC;CAEjB,YAAYA,YAAoC;EAC5C,KAAKA,aAAaA;CACtB;CAEA,MAAMC,SAASC,OAAoE;EAC/E,MAAMC,KAAK,KAAKH,WAAWI,mBAAmB,YAAA;EAC9CD,GAAGE,QAAQ,eAAA;EAEX,MAAM,EAAEC,eAAeV,WAAWO,IAAID,KAAAA;EAEtC,MAAM,CAACK,UAAUC,SAAS,MAAML,GAAGM,gBAAe;EAElD,OAAO;GACHC,MAAMH;GACNI,MAAM;IACFH;IACA,GAAGF;GACP;EACJ;CACJ;CAEAM,YAAYC,IAAwC;EAChD,OAAO,KAAKC,UAAU,EAAED,GAAG,CAAA;CAC/B;CAEAE,cAAcC,OAA2C;EACrD,OAAOC,QAAQC,QAAQ,IAAA;CAC3B;CAEAC,kBAAkBC,UAA8C;EAC5D,OAAO,KAAKR,YAAYQ,QAAAA;CAC5B;CAEA,MAAMC,WAAWC,OAAmD;EAChE,OAAO,KAAKtB,WAAWuB,OAAOzB,yBAAyBwB,KAAAA,CAAAA;CAC3D;CAEA,MAAMR,UAAUQ,OAAwD;EACpE,OAAO,KAAKtB,WAAWc,UAAUhB,yBAAyBwB,KAAAA,CAAAA;CAC9D;CAEAE,OAAOd,MAAuC;EAC1C,OAAO,KAAKV,WAAWwB,OAAOd,IAAAA;CAClC;CAEAe,MAAMC,QAAoBhB,MAAuC;EAC7D,OAAO,KAAKV,WAAWyB,MAAMC,QAAQhB,IAAAA;CACzC;CAEA,MAAMiB,KAAKD,QAAyC;EAChD,OAAO,KAAK1B,WAAW2B,KAAKD,MAAAA;CAChC;CAEA,MAAME,OAAOF,QAAmC;EAC5C,MAAM,KAAK1B,WAAW4B,OAAOF,MAAAA;CACjC;CAEA,MAAMG,oBAAoBnB,MAA0C;EAChE,MAAMf,0BAA0Be,MAAM;GAClCoB,YAAY,KAAK9B,WAAW+B,QAAQC;GACpCC,cAAcpC;EAClB,CAAA;CACJ;AACJ"}
+{"version":3,"file":"repository.mjs","names":["validateEntityJoinColumns","applyQuery","redactFieldConditions","ClientRoleEntity","translateWhereConditions","ClientRoleRepositoryAdapter","repository","findMany","query","qb","createQueryBuilder","groupBy","pagination","entities","total","getManyAndCount","data","meta","findOneById","id","findOneBy","findOneByName","_name","Promise","resolve","findOneByIdOrName","idOrName","findManyBy","where","findBy","create","merge","entity","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget"],"sources":["../../../../../../src/app/modules/database/repositories/client-role/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { ClientRole } from '@authup/core-kit';\nimport type { IQuery } from '@rapiq/core';\nimport type { Repository } from 'typeorm';\nimport { validateEntityJoinColumns } from 'typeorm-extension';\nimport { applyQuery, redactFieldConditions } from '../query.ts';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IClientRoleRepository } from '../../../../../core/entities/client-role/types.ts';\nimport { ClientRoleEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { translateWhereConditions } from '../helpers.ts';\n\nexport class ClientRoleRepositoryAdapter implements IClientRoleRepository {\n    private readonly repository: Repository<ClientRole>;\n\n    constructor(repository: Repository<ClientRole>) {\n        this.repository = repository;\n    }\n\n    async findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<ClientRole>> {\n        const qb = this.repository.createQueryBuilder('clientRole');\n        qb.groupBy('clientRole.id');\n\n        const { pagination } = applyQuery(qb, query);\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: redactFieldConditions(query, entities),\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    findOneById(id: string): Promise<ClientRole | null> {\n        return this.findOneBy({ id });\n    }\n\n    findOneByName(_name: string): Promise<ClientRole | null> {\n        return Promise.resolve(null);\n    }\n\n    findOneByIdOrName(idOrName: string): Promise<ClientRole | null> {\n        return this.findOneById(idOrName);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<ClientRole[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<ClientRole | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<ClientRole>): ClientRole {\n        return this.repository.create(data);\n    }\n\n    merge(entity: ClientRole, data: Partial<ClientRole>): ClientRole {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: ClientRole): Promise<ClientRole> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: ClientRole): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<ClientRole>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: ClientRoleEntity,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;AAiBA,IAAaK,8BAAb,MAAaA;CACQC;CAEjB,YAAYA,YAAoC;EAC5C,KAAKA,aAAaA;CACtB;CAEA,MAAMC,SAASC,OAAoE;EAC/E,MAAMC,KAAK,KAAKH,WAAWI,mBAAmB,YAAA;EAC9CD,GAAGE,QAAQ,eAAA;EAEX,MAAM,EAAEC,eAAeX,WAAWQ,IAAID,KAAAA;EAEtC,MAAM,CAACK,UAAUC,SAAS,MAAML,GAAGM,gBAAe;EAElD,OAAO;GACHC,MAAMd,sBAAsBM,OAAOK,QAAAA;GACnCI,MAAM;IACFH;IACA,GAAGF;GACP;EACJ;CACJ;CAEAM,YAAYC,IAAwC;EAChD,OAAO,KAAKC,UAAU,EAAED,GAAG,CAAA;CAC/B;CAEAE,cAAcC,OAA2C;EACrD,OAAOC,QAAQC,QAAQ,IAAA;CAC3B;CAEAC,kBAAkBC,UAA8C;EAC5D,OAAO,KAAKR,YAAYQ,QAAAA;CAC5B;CAEA,MAAMC,WAAWC,OAAmD;EAChE,OAAO,KAAKtB,WAAWuB,OAAOzB,yBAAyBwB,KAAAA,CAAAA;CAC3D;CAEA,MAAMR,UAAUQ,OAAwD;EACpE,OAAO,KAAKtB,WAAWc,UAAUhB,yBAAyBwB,KAAAA,CAAAA;CAC9D;CAEAE,OAAOd,MAAuC;EAC1C,OAAO,KAAKV,WAAWwB,OAAOd,IAAAA;CAClC;CAEAe,MAAMC,QAAoBhB,MAAuC;EAC7D,OAAO,KAAKV,WAAWyB,MAAMC,QAAQhB,IAAAA;CACzC;CAEA,MAAMiB,KAAKD,QAAyC;EAChD,OAAO,KAAK1B,WAAW2B,KAAKD,MAAAA;CAChC;CAEA,MAAME,OAAOF,QAAmC;EAC5C,MAAM,KAAK1B,WAAW4B,OAAOF,MAAAA;CACjC;CAEA,MAAMG,oBAAoBnB,MAA0C;EAChE,MAAMhB,0BAA0BgB,MAAM;GAClCoB,YAAY,KAAK9B,WAAW+B,QAAQC;GACpCC,cAAcpC;EAClB,CAAA;CACJ;AACJ"}

package/dist/app/modules/database/repositories/client-scope/repository.mjs

@@ -3,7 +3,7 @@ import "node:url";
 import.meta.url;
 import { ClientScopeEntity } from "../../../../../adapters/database/domains/client-scope/entity.mjs";
 import "../../../../../adapters/database/domains/index.mjs";
-import { applyQuery } from "../query.mjs";
+import { applyQuery, redactFieldConditions } from "../query.mjs";
 import { translateWhereConditions } from "../helpers.mjs";
 import { validateEntityJoinColumns } from "typeorm-extension";
 //#region src/app/modules/database/repositories/client-scope/repository.ts
@@ -18,7 +18,7 @@ var ClientScopeRepositoryAdapter = class {
 		const { pagination } = applyQuery(qb, query);
 		const [entities, total] = await qb.getManyAndCount();
 		return {
-			data: entities,
+			data: redactFieldConditions(query, entities),
 			meta: {
 				total,
 				...pagination

package/dist/app/modules/database/repositories/client-scope/repository.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"repository.mjs","names":["validateEntityJoinColumns","applyQuery","ClientScopeEntity","translateWhereConditions","ClientScopeRepositoryAdapter","repository","findMany","query","qb","createQueryBuilder","groupBy","pagination","entities","total","getManyAndCount","data","meta","findOneById","id","findOneBy","findOneByName","_name","Promise","resolve","findOneByIdOrName","idOrName","findManyBy","where","findBy","create","merge","entity","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget"],"sources":["../../../../../../src/app/modules/database/repositories/client-scope/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { ClientScope } from '@authup/core-kit';\nimport type { IQuery } from '@rapiq/core';\nimport type { Repository } from 'typeorm';\nimport { validateEntityJoinColumns } from 'typeorm-extension';\nimport { applyQuery } from '../query.ts';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IClientScopeRepository } from '../../../../../core/entities/client-scope/types.ts';\nimport { ClientScopeEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { translateWhereConditions } from '../helpers.ts';\n\nexport class ClientScopeRepositoryAdapter implements IClientScopeRepository {\n    private readonly repository: Repository<ClientScope>;\n\n    constructor(repository: Repository<ClientScope>) {\n        this.repository = repository;\n    }\n\n    async findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<ClientScope>> {\n        const qb = this.repository.createQueryBuilder('clientScope');\n        qb.groupBy('clientScope.id');\n\n        const { pagination } = applyQuery(qb, query);\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    findOneById(id: string): Promise<ClientScope | null> {\n        return this.findOneBy({ id });\n    }\n\n    findOneByName(_name: string): Promise<ClientScope | null> {\n        return Promise.resolve(null);\n    }\n\n    findOneByIdOrName(idOrName: string): Promise<ClientScope | null> {\n        return this.findOneById(idOrName);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<ClientScope[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<ClientScope | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<ClientScope>): ClientScope {\n        return this.repository.create(data);\n    }\n\n    merge(entity: ClientScope, data: Partial<ClientScope>): ClientScope {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: ClientScope): Promise<ClientScope> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: ClientScope): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<ClientScope>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: ClientScopeEntity,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;AAiBA,IAAaI,+BAAb,MAAaA;CACQC;CAEjB,YAAYA,YAAqC;EAC7C,KAAKA,aAAaA;CACtB;CAEA,MAAMC,SAASC,OAAqE;EAChF,MAAMC,KAAK,KAAKH,WAAWI,mBAAmB,aAAA;EAC9CD,GAAGE,QAAQ,gBAAA;EAEX,MAAM,EAAEC,eAAeV,WAAWO,IAAID,KAAAA;EAEtC,MAAM,CAACK,UAAUC,SAAS,MAAML,GAAGM,gBAAe;EAElD,OAAO;GACHC,MAAMH;GACNI,MAAM;IACFH;IACA,GAAGF;GACP;EACJ;CACJ;CAEAM,YAAYC,IAAyC;EACjD,OAAO,KAAKC,UAAU,EAAED,GAAG,CAAA;CAC/B;CAEAE,cAAcC,OAA4C;EACtD,OAAOC,QAAQC,QAAQ,IAAA;CAC3B;CAEAC,kBAAkBC,UAA+C;EAC7D,OAAO,KAAKR,YAAYQ,QAAAA;CAC5B;CAEA,MAAMC,WAAWC,OAAoD;EACjE,OAAO,KAAKtB,WAAWuB,OAAOzB,yBAAyBwB,KAAAA,CAAAA;CAC3D;CAEA,MAAMR,UAAUQ,OAAyD;EACrE,OAAO,KAAKtB,WAAWc,UAAUhB,yBAAyBwB,KAAAA,CAAAA;CAC9D;CAEAE,OAAOd,MAAyC;EAC5C,OAAO,KAAKV,WAAWwB,OAAOd,IAAAA;CAClC;CAEAe,MAAMC,QAAqBhB,MAAyC;EAChE,OAAO,KAAKV,WAAWyB,MAAMC,QAAQhB,IAAAA;CACzC;CAEA,MAAMiB,KAAKD,QAA2C;EAClD,OAAO,KAAK1B,WAAW2B,KAAKD,MAAAA;CAChC;CAEA,MAAME,OAAOF,QAAoC;EAC7C,MAAM,KAAK1B,WAAW4B,OAAOF,MAAAA;CACjC;CAEA,MAAMG,oBAAoBnB,MAA2C;EACjE,MAAMf,0BAA0Be,MAAM;GAClCoB,YAAY,KAAK9B,WAAW+B,QAAQC;GACpCC,cAAcpC;EAClB,CAAA;CACJ;AACJ"}
+{"version":3,"file":"repository.mjs","names":["validateEntityJoinColumns","applyQuery","redactFieldConditions","ClientScopeEntity","translateWhereConditions","ClientScopeRepositoryAdapter","repository","findMany","query","qb","createQueryBuilder","groupBy","pagination","entities","total","getManyAndCount","data","meta","findOneById","id","findOneBy","findOneByName","_name","Promise","resolve","findOneByIdOrName","idOrName","findManyBy","where","findBy","create","merge","entity","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget"],"sources":["../../../../../../src/app/modules/database/repositories/client-scope/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { ClientScope } from '@authup/core-kit';\nimport type { IQuery } from '@rapiq/core';\nimport type { Repository } from 'typeorm';\nimport { validateEntityJoinColumns } from 'typeorm-extension';\nimport { applyQuery, redactFieldConditions } from '../query.ts';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IClientScopeRepository } from '../../../../../core/entities/client-scope/types.ts';\nimport { ClientScopeEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { translateWhereConditions } from '../helpers.ts';\n\nexport class ClientScopeRepositoryAdapter implements IClientScopeRepository {\n    private readonly repository: Repository<ClientScope>;\n\n    constructor(repository: Repository<ClientScope>) {\n        this.repository = repository;\n    }\n\n    async findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<ClientScope>> {\n        const qb = this.repository.createQueryBuilder('clientScope');\n        qb.groupBy('clientScope.id');\n\n        const { pagination } = applyQuery(qb, query);\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: redactFieldConditions(query, entities),\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    findOneById(id: string): Promise<ClientScope | null> {\n        return this.findOneBy({ id });\n    }\n\n    findOneByName(_name: string): Promise<ClientScope | null> {\n        return Promise.resolve(null);\n    }\n\n    findOneByIdOrName(idOrName: string): Promise<ClientScope | null> {\n        return this.findOneById(idOrName);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<ClientScope[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<ClientScope | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<ClientScope>): ClientScope {\n        return this.repository.create(data);\n    }\n\n    merge(entity: ClientScope, data: Partial<ClientScope>): ClientScope {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: ClientScope): Promise<ClientScope> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: ClientScope): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<ClientScope>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: ClientScopeEntity,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;AAiBA,IAAaK,+BAAb,MAAaA;CACQC;CAEjB,YAAYA,YAAqC;EAC7C,KAAKA,aAAaA;CACtB;CAEA,MAAMC,SAASC,OAAqE;EAChF,MAAMC,KAAK,KAAKH,WAAWI,mBAAmB,aAAA;EAC9CD,GAAGE,QAAQ,gBAAA;EAEX,MAAM,EAAEC,eAAeX,WAAWQ,IAAID,KAAAA;EAEtC,MAAM,CAACK,UAAUC,SAAS,MAAML,GAAGM,gBAAe;EAElD,OAAO;GACHC,MAAMd,sBAAsBM,OAAOK,QAAAA;GACnCI,MAAM;IACFH;IACA,GAAGF;GACP;EACJ;CACJ;CAEAM,YAAYC,IAAyC;EACjD,OAAO,KAAKC,UAAU,EAAED,GAAG,CAAA;CAC/B;CAEAE,cAAcC,OAA4C;EACtD,OAAOC,QAAQC,QAAQ,IAAA;CAC3B;CAEAC,kBAAkBC,UAA+C;EAC7D,OAAO,KAAKR,YAAYQ,QAAAA;CAC5B;CAEA,MAAMC,WAAWC,OAAoD;EACjE,OAAO,KAAKtB,WAAWuB,OAAOzB,yBAAyBwB,KAAAA,CAAAA;CAC3D;CAEA,MAAMR,UAAUQ,OAAyD;EACrE,OAAO,KAAKtB,WAAWc,UAAUhB,yBAAyBwB,KAAAA,CAAAA;CAC9D;CAEAE,OAAOd,MAAyC;EAC5C,OAAO,KAAKV,WAAWwB,OAAOd,IAAAA;CAClC;CAEAe,MAAMC,QAAqBhB,MAAyC;EAChE,OAAO,KAAKV,WAAWyB,MAAMC,QAAQhB,IAAAA;CACzC;CAEA,MAAMiB,KAAKD,QAA2C;EAClD,OAAO,KAAK1B,WAAW2B,KAAKD,MAAAA;CAChC;CAEA,MAAME,OAAOF,QAAoC;EAC7C,MAAM,KAAK1B,WAAW4B,OAAOF,MAAAA;CACjC;CAEA,MAAMG,oBAAoBnB,MAA2C;EACjE,MAAMhB,0BAA0BgB,MAAM;GAClCoB,YAAY,KAAK9B,WAAW+B,QAAQC;GACpCC,cAAcpC;EAClB,CAAA;CACJ;AACJ"}

package/dist/app/modules/database/repositories/event/repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/event/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAG1C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EACR,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,EACnB,MAAM,8BAA8B,CAAC;AAGtC,qBAAa,sBAAuB,YAAW,gBAAgB;IAC3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;gBAEnC,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC;IAIzC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK;IAI7B,IAAI,CAAC,MAAM,EAAE,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAInC,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAI9C,QAAQ,CACV,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,oBAAyB,GACnC,OAAO,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC;IAoD3C,WAAW,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC;IAwB5D,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAQpD"}
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/database/repositories/event/repository.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAG1C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EACR,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,EACnB,MAAM,8BAA8B,CAAC;AAGtC,qBAAa,sBAAuB,YAAW,gBAAgB;IAC3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;gBAEnC,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC;IAIzC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK;IAI7B,IAAI,CAAC,MAAM,EAAE,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAInC,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;IAI9C,QAAQ,CACV,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,oBAAyB,GACnC,OAAO,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC;IAoD3C,WAAW,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC;IAmC5D,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAQpD"}

package/dist/app/modules/database/repositories/event/repository.mjs

@@ -1,7 +1,7 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-import { applyQuery } from "../query.mjs";
+import { applyQuery, redactFieldConditions } from "../query.mjs";
 import { applyRealmScopeSelect } from "../helpers.mjs";
 import { LessThan } from "typeorm";
 //#region src/app/modules/database/repositories/event/repository.ts
@@ -46,7 +46,7 @@ var EventRepositoryAdapter = class {
 		}
 		const [entities, total] = await qb.getManyAndCount();
 		return {
-			data: entities,
+			data: redactFieldConditions(query, entities),
 			meta: {
 				total,
 				...pagination
@@ -54,7 +54,8 @@ var EventRepositoryAdapter = class {
 		};
 	}
 	async countRecent(filter) {
-		const qb = this.repository.createQueryBuilder("event").where("event.name = :name", { name: filter.name }).andWhere("event.createdAt > :since", { since: new Date(filter.since) });
+		const since = new Date(filter.since).toISOString().replace("T", " ").replace("Z", "");
+		const qb = this.repository.createQueryBuilder("event").where("event.name = :name", { name: filter.name }).andWhere("event.createdAt > :since", { since });
 		if (filter.actorName) qb.andWhere("event.actorName = :actorName", { actorName: filter.actorName });
 		if (filter.requestIpAddress) qb.andWhere("event.requestIpAddress = :requestIpAddress", { requestIpAddress: filter.requestIpAddress });
 		if (typeof filter.realmId !== "undefined") if (filter.realmId === null) qb.andWhere("event.realmId IS NULL");

package/dist/app/modules/database/repositories/event/repository.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"repository.mjs","names":["LessThan","applyQuery","applyRealmScopeSelect","EventRepositoryAdapter","repository","create","data","save","entity","findOneById","id","findOneBy","findMany","query","options","qb","createQueryBuilder","pagination","owner","andWhere","ownerActorId","actorId","ownerActorType","actorType","realmId","routeRealmId","visibility","constraints","parameters","realmIds","filter","length","push","visibleRealmIds","includes","visibleActorId","visibleActorType","join","entities","total","getManyAndCount","meta","countRecent","where","name","since","Date","actorName","requestIpAddress","getCount","deleteExpired","now","result","delete","expiring","expiresAt","affected"],"sources":["../../../../../../src/app/modules/database/repositories/event/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Event } from '@authup/core-kit';\nimport type { IQuery } from '@rapiq/core';\nimport type { Repository } from 'typeorm';\nimport { LessThan } from 'typeorm';\nimport { applyQuery } from '../query.ts';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type {\n    EventCountRecentFilter,\n    EventFindManyOptions,\n    IEventRepository,\n} from '../../../../../core/index.ts';\nimport { applyRealmScopeSelect } from '../helpers.ts';\n\nexport class EventRepositoryAdapter implements IEventRepository {\n    private readonly repository: Repository<Event>;\n\n    constructor(repository: Repository<Event>) {\n        this.repository = repository;\n    }\n\n    create(data: Partial<Event>): Event {\n        return this.repository.create(data);\n    }\n\n    async save(entity: Event): Promise<Event> {\n        return this.repository.save(entity);\n    }\n\n    async findOneById(id: string): Promise<Event | null> {\n        return this.repository.findOneBy({ id });\n    }\n\n    async findMany(\n        query: IQuery,\n        options: EventFindManyOptions = {},\n    ): Promise<EntityRepositoryFindManyResult<Event>> {\n        const qb = this.repository.createQueryBuilder('event');\n\n        const { pagination } = applyQuery(qb, query);\n\n        applyRealmScopeSelect(qb, 'event', ['actorId', 'actorType']);\n\n        if (options.owner) {\n            // mandatory constraint — not overridable by a rapiq filter\n            qb.andWhere('event.actorId = :ownerActorId AND event.actorType = :ownerActorType', {\n                ownerActorId: options.owner.actorId,\n                ownerActorType: options.owner.actorType,\n            });\n        }\n\n        if (options.realmId) {\n            qb.andWhere('event.realmId = :routeRealmId', { routeRealmId: options.realmId });\n        }\n\n        if (options.visibility) {\n            const constraints: string[] = [];\n            const parameters: Record<string, unknown> = {};\n            const realmIds = options.visibility.realmIds\n                .filter((realmId): realmId is string => realmId !== null);\n\n            if (realmIds.length > 0) {\n                constraints.push('event.realmId IN (:...visibleRealmIds)');\n                parameters.visibleRealmIds = realmIds;\n            }\n            if (options.visibility.realmIds.includes(null)) {\n                constraints.push('event.realmId IS NULL');\n            }\n            if (options.visibility.owner) {\n                constraints.push('(event.actorId = :visibleActorId AND event.actorType = :visibleActorType)');\n                parameters.visibleActorId = options.visibility.owner.actorId;\n                parameters.visibleActorType = options.visibility.owner.actorType;\n            }\n\n            qb.andWhere(`(${constraints.length > 0 ? constraints.join(' OR ') : '1 = 0'})`, parameters);\n        }\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    async countRecent(filter: EventCountRecentFilter): Promise<number> {\n        const qb = this.repository.createQueryBuilder('event')\n            .where('event.name = :name', { name: filter.name })\n            .andWhere('event.createdAt > :since', { since: new Date(filter.since) });\n\n        if (filter.actorName) {\n            qb.andWhere('event.actorName = :actorName', { actorName: filter.actorName });\n        }\n\n        if (filter.requestIpAddress) {\n            qb.andWhere('event.requestIpAddress = :requestIpAddress', { requestIpAddress: filter.requestIpAddress });\n        }\n\n        if (typeof filter.realmId !== 'undefined') {\n            if (filter.realmId === null) {\n                qb.andWhere('event.realmId IS NULL');\n            } else {\n                qb.andWhere('event.realmId = :realmId', { realmId: filter.realmId });\n            }\n        }\n\n        return qb.getCount();\n    }\n\n    async deleteExpired(now: string): Promise<number> {\n        const result = await this.repository.delete({\n            expiring: true,\n            expiresAt: LessThan(now),\n        });\n\n        return result.affected ?? 0;\n    }\n}\n"],"mappings":";;;;;;;AAoBA,IAAaG,yBAAb,MAAaA;CACQC;CAEjB,YAAYA,YAA+B;EACvC,KAAKA,aAAaA;CACtB;CAEAC,OAAOC,MAA6B;EAChC,OAAO,KAAKF,WAAWC,OAAOC,IAAAA;CAClC;CAEA,MAAMC,KAAKC,QAA+B;EACtC,OAAO,KAAKJ,WAAWG,KAAKC,MAAAA;CAChC;CAEA,MAAMC,YAAYC,IAAmC;EACjD,OAAO,KAAKN,WAAWO,UAAU,EAAED,GAAG,CAAA;CAC1C;CAEA,MAAME,SACFC,OACAC,UAAgC,CAAC,GACa;EAC9C,MAAMC,KAAK,KAAKX,WAAWY,mBAAmB,OAAA;EAE9C,MAAM,EAAEC,eAAehB,WAAWc,IAAIF,KAAAA;EAEtCX,sBAAsBa,IAAI,SAAS,CAAC,WAAW,WAAY,CAAA;EAE3D,IAAID,QAAQI,OAERH,GAAGI,SAAS,uEAAuE;GAC/EC,cAAcN,QAAQI,MAAMG;GAC5BC,gBAAgBR,QAAQI,MAAMK;EAClC,CAAA;EAGJ,IAAIT,QAAQU,SACRT,GAAGI,SAAS,iCAAiC,EAAEM,cAAcX,QAAQU,QAAQ,CAAA;EAGjF,IAAIV,QAAQY,YAAY;GACpB,MAAMC,cAAwB,CAAA;GAC9B,MAAMC,aAAsC,CAAC;GAC7C,MAAMC,WAAWf,QAAQY,WAAWG,SAC/BC,QAAQN,YAA+BA,YAAY,IAAA;GAExD,IAAIK,SAASE,SAAS,GAAG;IACrBJ,YAAYK,KAAK,wCAAA;IACjBJ,WAAWK,kBAAkBJ;GACjC;GACA,IAAIf,QAAQY,WAAWG,SAASK,SAAS,IAAA,GACrCP,YAAYK,KAAK,uBAAA;GAErB,IAAIlB,QAAQY,WAAWR,OAAO;IAC1BS,YAAYK,KAAK,2EAAA;IACjBJ,WAAWO,iBAAiBrB,QAAQY,WAAWR,MAAMG;IACrDO,WAAWQ,mBAAmBtB,QAAQY,WAAWR,MAAMK;GAC3D;GAEAR,GAAGI,SAAS,IAAIQ,YAAYI,SAAS,IAAIJ,YAAYU,KAAK,MAAA,IAAU,QAAQ,IAAIT,UAAAA;EACpF;EAEA,MAAM,CAACU,UAAUC,SAAS,MAAMxB,GAAGyB,gBAAe;EAElD,OAAO;GACHlC,MAAMgC;GACNG,MAAM;IACFF;IACA,GAAGtB;GACP;EACJ;CACJ;CAEA,MAAMyB,YAAYZ,QAAiD;EAC/D,MAAMf,KAAK,KAAKX,WAAWY,mBAAmB,OAAA,CAAA,CACzC2B,MAAM,sBAAsB,EAAEC,MAAMd,OAAOc,KAAK,CAAA,CAAA,CAChDzB,SAAS,4BAA4B,EAAE0B,OAAO,IAAIC,KAAKhB,OAAOe,KAAK,EAAE,CAAA;EAE1E,IAAIf,OAAOiB,WACPhC,GAAGI,SAAS,gCAAgC,EAAE4B,WAAWjB,OAAOiB,UAAU,CAAA;EAG9E,IAAIjB,OAAOkB,kBACPjC,GAAGI,SAAS,8CAA8C,EAAE6B,kBAAkBlB,OAAOkB,iBAAiB,CAAA;EAG1G,IAAI,OAAOlB,OAAON,YAAY,aAC1B,IAAIM,OAAON,YAAY,MACnBT,GAAGI,SAAS,uBAAA;OAEZJ,GAAGI,SAAS,4BAA4B,EAAEK,SAASM,OAAON,QAAQ,CAAA;EAI1E,OAAOT,GAAGkC,SAAQ;CACtB;CAEA,MAAMC,cAAcC,KAA8B;EAM9C,QAAOC,MALc,KAAKhD,WAAWiD,OAAO;GACxCC,UAAU;GACVC,WAAWvD,SAASmD,GAAAA;EACxB,CAAA,EAAA,CAEcK,YAAY;CAC9B;AACJ"}
+{"version":3,"file":"repository.mjs","names":["LessThan","applyQuery","redactFieldConditions","applyRealmScopeSelect","EventRepositoryAdapter","repository","create","data","save","entity","findOneById","id","findOneBy","findMany","query","options","qb","createQueryBuilder","pagination","owner","andWhere","ownerActorId","actorId","ownerActorType","actorType","realmId","routeRealmId","visibility","constraints","parameters","realmIds","filter","length","push","visibleRealmIds","includes","visibleActorId","visibleActorType","join","entities","total","getManyAndCount","meta","countRecent","since","Date","toISOString","replace","where","name","actorName","requestIpAddress","getCount","deleteExpired","now","result","delete","expiring","expiresAt","affected"],"sources":["../../../../../../src/app/modules/database/repositories/event/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Event } from '@authup/core-kit';\nimport type { IQuery } from '@rapiq/core';\nimport type { Repository } from 'typeorm';\nimport { LessThan } from 'typeorm';\nimport { applyQuery, redactFieldConditions } from '../query.ts';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type {\n    EventCountRecentFilter,\n    EventFindManyOptions,\n    IEventRepository,\n} from '../../../../../core/index.ts';\nimport { applyRealmScopeSelect } from '../helpers.ts';\n\nexport class EventRepositoryAdapter implements IEventRepository {\n    private readonly repository: Repository<Event>;\n\n    constructor(repository: Repository<Event>) {\n        this.repository = repository;\n    }\n\n    create(data: Partial<Event>): Event {\n        return this.repository.create(data);\n    }\n\n    async save(entity: Event): Promise<Event> {\n        return this.repository.save(entity);\n    }\n\n    async findOneById(id: string): Promise<Event | null> {\n        return this.repository.findOneBy({ id });\n    }\n\n    async findMany(\n        query: IQuery,\n        options: EventFindManyOptions = {},\n    ): Promise<EntityRepositoryFindManyResult<Event>> {\n        const qb = this.repository.createQueryBuilder('event');\n\n        const { pagination } = applyQuery(qb, query);\n\n        applyRealmScopeSelect(qb, 'event', ['actorId', 'actorType']);\n\n        if (options.owner) {\n            // mandatory constraint — not overridable by a rapiq filter\n            qb.andWhere('event.actorId = :ownerActorId AND event.actorType = :ownerActorType', {\n                ownerActorId: options.owner.actorId,\n                ownerActorType: options.owner.actorType,\n            });\n        }\n\n        if (options.realmId) {\n            qb.andWhere('event.realmId = :routeRealmId', { routeRealmId: options.realmId });\n        }\n\n        if (options.visibility) {\n            const constraints: string[] = [];\n            const parameters: Record<string, unknown> = {};\n            const realmIds = options.visibility.realmIds\n                .filter((realmId): realmId is string => realmId !== null);\n\n            if (realmIds.length > 0) {\n                constraints.push('event.realmId IN (:...visibleRealmIds)');\n                parameters.visibleRealmIds = realmIds;\n            }\n            if (options.visibility.realmIds.includes(null)) {\n                constraints.push('event.realmId IS NULL');\n            }\n            if (options.visibility.owner) {\n                constraints.push('(event.actorId = :visibleActorId AND event.actorType = :visibleActorType)');\n                parameters.visibleActorId = options.visibility.owner.actorId;\n                parameters.visibleActorType = options.visibility.owner.actorType;\n            }\n\n            qb.andWhere(`(${constraints.length > 0 ? constraints.join(' OR ') : '1 = 0'})`, parameters);\n        }\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: redactFieldConditions(query, entities),\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    async countRecent(filter: EventCountRecentFilter): Promise<number> {\n        // created_at is stamped by the DATABASE server's clock (assumed UTC —\n        // the shipped compose files and deployment posture; a non-UTC DB\n        // server shifts the window regardless of what we bind), while a bound\n        // Date object is serialized by the pg/mysql drivers in the HOST's\n        // local timezone — on a non-UTC host that shifts the window by the\n        // UTC offset (postgres: `timestamp without time zone` discards the\n        // offset marker entirely). Bind a UTC wall-clock literal instead:\n        // pg/mysql cast it as a wall-clock timestamp, sqlite compares it\n        // lexicographically against the same format `datetime('now')` stores.\n        const since = new Date(filter.since).toISOString().replace('T', ' ').replace('Z', '');\n\n        const qb = this.repository.createQueryBuilder('event')\n            .where('event.name = :name', { name: filter.name })\n            .andWhere('event.createdAt > :since', { since });\n\n        if (filter.actorName) {\n            qb.andWhere('event.actorName = :actorName', { actorName: filter.actorName });\n        }\n\n        if (filter.requestIpAddress) {\n            qb.andWhere('event.requestIpAddress = :requestIpAddress', { requestIpAddress: filter.requestIpAddress });\n        }\n\n        if (typeof filter.realmId !== 'undefined') {\n            if (filter.realmId === null) {\n                qb.andWhere('event.realmId IS NULL');\n            } else {\n                qb.andWhere('event.realmId = :realmId', { realmId: filter.realmId });\n            }\n        }\n\n        return qb.getCount();\n    }\n\n    async deleteExpired(now: string): Promise<number> {\n        const result = await this.repository.delete({\n            expiring: true,\n            expiresAt: LessThan(now),\n        });\n\n        return result.affected ?? 0;\n    }\n}\n"],"mappings":";;;;;;;AAoBA,IAAaI,yBAAb,MAAaA;CACQC;CAEjB,YAAYA,YAA+B;EACvC,KAAKA,aAAaA;CACtB;CAEAC,OAAOC,MAA6B;EAChC,OAAO,KAAKF,WAAWC,OAAOC,IAAAA;CAClC;CAEA,MAAMC,KAAKC,QAA+B;EACtC,OAAO,KAAKJ,WAAWG,KAAKC,MAAAA;CAChC;CAEA,MAAMC,YAAYC,IAAmC;EACjD,OAAO,KAAKN,WAAWO,UAAU,EAAED,GAAG,CAAA;CAC1C;CAEA,MAAME,SACFC,OACAC,UAAgC,CAAC,GACa;EAC9C,MAAMC,KAAK,KAAKX,WAAWY,mBAAmB,OAAA;EAE9C,MAAM,EAAEC,eAAejB,WAAWe,IAAIF,KAAAA;EAEtCX,sBAAsBa,IAAI,SAAS,CAAC,WAAW,WAAY,CAAA;EAE3D,IAAID,QAAQI,OAERH,GAAGI,SAAS,uEAAuE;GAC/EC,cAAcN,QAAQI,MAAMG;GAC5BC,gBAAgBR,QAAQI,MAAMK;EAClC,CAAA;EAGJ,IAAIT,QAAQU,SACRT,GAAGI,SAAS,iCAAiC,EAAEM,cAAcX,QAAQU,QAAQ,CAAA;EAGjF,IAAIV,QAAQY,YAAY;GACpB,MAAMC,cAAwB,CAAA;GAC9B,MAAMC,aAAsC,CAAC;GAC7C,MAAMC,WAAWf,QAAQY,WAAWG,SAC/BC,QAAQN,YAA+BA,YAAY,IAAA;GAExD,IAAIK,SAASE,SAAS,GAAG;IACrBJ,YAAYK,KAAK,wCAAA;IACjBJ,WAAWK,kBAAkBJ;GACjC;GACA,IAAIf,QAAQY,WAAWG,SAASK,SAAS,IAAA,GACrCP,YAAYK,KAAK,uBAAA;GAErB,IAAIlB,QAAQY,WAAWR,OAAO;IAC1BS,YAAYK,KAAK,2EAAA;IACjBJ,WAAWO,iBAAiBrB,QAAQY,WAAWR,MAAMG;IACrDO,WAAWQ,mBAAmBtB,QAAQY,WAAWR,MAAMK;GAC3D;GAEAR,GAAGI,SAAS,IAAIQ,YAAYI,SAAS,IAAIJ,YAAYU,KAAK,MAAA,IAAU,QAAQ,IAAIT,UAAAA;EACpF;EAEA,MAAM,CAACU,UAAUC,SAAS,MAAMxB,GAAGyB,gBAAe;EAElD,OAAO;GACHlC,MAAML,sBAAsBY,OAAOyB,QAAAA;GACnCG,MAAM;IACFF;IACA,GAAGtB;GACP;EACJ;CACJ;CAEA,MAAMyB,YAAYZ,QAAiD;EAU/D,MAAMa,QAAQ,IAAIC,KAAKd,OAAOa,KAAK,CAAA,CAAEE,YAAW,CAAA,CAAGC,QAAQ,KAAK,GAAA,CAAA,CAAKA,QAAQ,KAAK,EAAA;EAElF,MAAM/B,KAAK,KAAKX,WAAWY,mBAAmB,OAAA,CAAA,CACzC+B,MAAM,sBAAsB,EAAEC,MAAMlB,OAAOkB,KAAK,CAAA,CAAA,CAChD7B,SAAS,4BAA4B,EAAEwB,MAAM,CAAA;EAElD,IAAIb,OAAOmB,WACPlC,GAAGI,SAAS,gCAAgC,EAAE8B,WAAWnB,OAAOmB,UAAU,CAAA;EAG9E,IAAInB,OAAOoB,kBACPnC,GAAGI,SAAS,8CAA8C,EAAE+B,kBAAkBpB,OAAOoB,iBAAiB,CAAA;EAG1G,IAAI,OAAOpB,OAAON,YAAY,aAC1B,IAAIM,OAAON,YAAY,MACnBT,GAAGI,SAAS,uBAAA;OAEZJ,GAAGI,SAAS,4BAA4B,EAAEK,SAASM,OAAON,QAAQ,CAAA;EAI1E,OAAOT,GAAGoC,SAAQ;CACtB;CAEA,MAAMC,cAAcC,KAA8B;EAM9C,QAAOC,MALc,KAAKlD,WAAWmD,OAAO;GACxCC,UAAU;GACVC,WAAW1D,SAASsD,GAAAA;EACxB,CAAA,EAAA,CAEcK,YAAY;CAC9B;AACJ"}

package/dist/app/modules/database/repositories/identity-provider/repository.mjs

@@ -3,7 +3,7 @@ import "node:url";
 import.meta.url;
 import { IdentityProviderEntity } from "../../../../../adapters/database/domains/identity-provider/entity.mjs";
 import "../../../../../adapters/database/domains/index.mjs";
-import { applyQuery } from "../query.mjs";
+import { applyQuery, redactFieldConditions } from "../query.mjs";
 import { isEntityUnique, translateWhereConditions } from "../helpers.mjs";
 import { DatabaseConflictError } from "../../../../../adapters/database/errors/conflict.mjs";
 import "../../../../../adapters/database/index.mjs";
@@ -24,7 +24,7 @@ var IdentityProviderRepositoryAdapter = class {
 		const { pagination } = applyQuery(qb, query);
 		const [entities, total] = await qb.getManyAndCount();
 		return {
-			data: entities,
+			data: redactFieldConditions(query, entities),
 			meta: {
 				total,
 				...pagination

package/dist/app/modules/database/repositories/identity-provider/repository.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"repository.mjs","names":["isUUID","validateEntityJoinColumns","applyQuery","DatabaseConflictError","IdentityProviderEntity","isEntityUnique","translateWhereConditions","RealmRepositoryAdapter","IdentityProviderRepositoryAdapter","repository","realmRepository","ctx","findMany","query","qb","createQueryBuilder","groupBy","pagination","entities","total","getManyAndCount","data","meta","findOneById","id","entity","findOneBy","extendOneWithEA","findOneByName","name","realmKey","where","realmId","resolveId","andWhere","getOne","findOneByIdOrName","idOrName","realm","findManyBy","findBy","create","merge","save","saveWithEA","attributes","saveOneWithEA","remove","validateJoinColumns","dataSource","manager","connection","entityTarget","checkUniqueness","existing","isUnique","entityExisting","findByProtocol","protocol","getMany","extendManyWithEA"],"sources":["../../../../../../src/app/modules/database/repositories/identity-provider/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProvider, IdentityProviderProtocol, Realm } from '@authup/core-kit';\nimport type { IQuery } from '@rapiq/core';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport { validateEntityJoinColumns } from 'typeorm-extension';\nimport { applyQuery } from '../query.ts';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IIdentityProviderRepository, IRealmRepository } from '../../../../../core/index.ts';\nimport { DatabaseConflictError } from '../../../../../adapters/database/index.ts';\nimport type { IdentityProviderRepository } from '../../../../../adapters/database/domains/index.ts';\nimport { IdentityProviderEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { isEntityUnique, translateWhereConditions } from '../helpers.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type IdentityProviderRepositoryAdapterContext = {\n    repository: IdentityProviderRepository,\n    realmRepository: Repository<Realm>,\n};\n\nexport class IdentityProviderRepositoryAdapter implements IIdentityProviderRepository {\n    private readonly repository: IdentityProviderRepository;\n\n    private readonly realmRepository: IRealmRepository;\n\n    constructor(ctx: IdentityProviderRepositoryAdapterContext) {\n        this.repository = ctx.repository;\n        this.realmRepository = new RealmRepositoryAdapter(ctx.realmRepository);\n    }\n\n    async findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<IdentityProvider>> {\n        const qb = this.repository.createQueryBuilder('provider');\n        qb.groupBy('provider.id');\n\n        const { pagination } = applyQuery(qb, query);\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    async findOneById(id: string): Promise<IdentityProvider | null> {\n        const entity = await this.findOneBy({ id });\n        if (entity) {\n            await this.repository.extendOneWithEA(entity);\n        }\n        return entity;\n    }\n\n    async findOneByName(name: string, realmKey?: string): Promise<IdentityProvider | null> {\n        const qb = this.repository.createQueryBuilder('provider');\n        qb.where('provider.name = :name', { name });\n\n        if (realmKey) {\n            const realmId = await this.realmRepository.resolveId(realmKey);\n            if (!realmId) {\n                return null;\n            }\n            qb.andWhere('provider.realmId = :realmId', { realmId });\n        }\n\n        const entity = await qb.getOne();\n        if (entity) {\n            await this.repository.extendOneWithEA(entity);\n        }\n        return entity;\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<IdentityProvider | null> {\n        return isUUID(idOrName) ?\n            this.findOneById(idOrName) :\n            this.findOneByName(idOrName, realm);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<IdentityProvider[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<IdentityProvider | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<IdentityProvider>): IdentityProvider {\n        return this.repository.create(data);\n    }\n\n    merge(entity: IdentityProvider, data: Partial<IdentityProvider>): IdentityProvider {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: IdentityProvider): Promise<IdentityProvider> {\n        return this.repository.save(entity);\n    }\n\n    async saveWithEA(entity: IdentityProvider, attributes?: Record<string, any>): Promise<IdentityProvider> {\n        await this.repository.saveOneWithEA(entity, attributes);\n        return entity;\n    }\n\n    async extendOneWithEA(entity: IdentityProvider): Promise<void> {\n        await this.repository.extendOneWithEA(entity);\n    }\n\n    async remove(entity: IdentityProvider): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<IdentityProvider>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: IdentityProviderEntity,\n        });\n    }\n\n    async checkUniqueness(data: Partial<IdentityProvider>, existing?: IdentityProvider): Promise<void> {\n        const isUnique = await isEntityUnique({\n            dataSource: this.repository.manager.connection,\n            entityTarget: IdentityProviderEntity,\n            entity: data,\n            entityExisting: existing,\n        });\n\n        if (!isUnique) {\n            throw new DatabaseConflictError();\n        }\n    }\n\n    async findByProtocol(protocol: IdentityProviderProtocol, realmKey?: string): Promise<IdentityProvider[]> {\n        const qb = this.repository.createQueryBuilder('provider');\n        qb.where('provider.protocol = :protocol', { protocol });\n\n        if (realmKey) {\n            const realmId = await this.realmRepository.resolveId(realmKey);\n            if (!realmId) {\n                return [];\n            }\n            qb.andWhere('provider.realmId = :realmId', { realmId });\n        }\n\n        const entities = await qb.getMany();\n        await this.repository.extendManyWithEA(entities);\n        return entities;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;AA0BA,IAAaQ,oCAAb,MAAaA;CACQC;CAEAC;CAEjB,YAAYC,KAA+C;EACvD,KAAKF,aAAaE,IAAIF;EACtB,KAAKC,kBAAkB,IAAIH,uBAAuBI,IAAID,eAAe;CACzE;CAEA,MAAME,SAASC,OAA0E;EACrF,MAAMC,KAAK,KAAKL,WAAWM,mBAAmB,UAAA;EAC9CD,GAAGE,QAAQ,aAAA;EAEX,MAAM,EAAEC,eAAef,WAAWY,IAAID,KAAAA;EAEtC,MAAM,CAACK,UAAUC,SAAS,MAAML,GAAGM,gBAAe;EAElD,OAAO;GACHC,MAAMH;GACNI,MAAM;IACFH;IACA,GAAGF;GACP;EACJ;CACJ;CAEA,MAAMM,YAAYC,IAA8C;EAC5D,MAAMC,SAAS,MAAM,KAAKC,UAAU,EAAEF,GAAG,CAAA;EACzC,IAAIC,QACA,MAAM,KAAKhB,WAAWkB,gBAAgBF,MAAAA;EAE1C,OAAOA;CACX;CAEA,MAAMG,cAAcC,MAAcC,UAAqD;EACnF,MAAMhB,KAAK,KAAKL,WAAWM,mBAAmB,UAAA;EAC9CD,GAAGiB,MAAM,yBAAyB,EAAEF,KAAK,CAAA;EAEzC,IAAIC,UAAU;GACV,MAAME,UAAU,MAAM,KAAKtB,gBAAgBuB,UAAUH,QAAAA;GACrD,IAAI,CAACE,SACD,OAAO;GAEXlB,GAAGoB,SAAS,+BAA+B,EAAEF,QAAQ,CAAA;EACzD;EAEA,MAAMP,SAAS,MAAMX,GAAGqB,OAAM;EAC9B,IAAIV,QACA,MAAM,KAAKhB,WAAWkB,gBAAgBF,MAAAA;EAE1C,OAAOA;CACX;CAEA,MAAMW,kBAAkBC,UAAkBC,OAAkD;EACxF,OAAOtC,OAAOqC,QAAAA,IACV,KAAKd,YAAYc,QAAAA,IACjB,KAAKT,cAAcS,UAAUC,KAAAA;CACrC;CAEA,MAAMC,WAAWR,OAAyD;EACtE,OAAO,KAAKtB,WAAW+B,OAAOlC,yBAAyByB,KAAAA,CAAAA;CAC3D;CAEA,MAAML,UAAUK,OAA8D;EAC1E,OAAO,KAAKtB,WAAWiB,UAAUpB,yBAAyByB,KAAAA,CAAAA;CAC9D;CAEAU,OAAOpB,MAAmD;EACtD,OAAO,KAAKZ,WAAWgC,OAAOpB,IAAAA;CAClC;CAEAqB,MAAMjB,QAA0BJ,MAAmD;EAC/E,OAAO,KAAKZ,WAAWiC,MAAMjB,QAAQJ,IAAAA;CACzC;CAEA,MAAMsB,KAAKlB,QAAqD;EAC5D,OAAO,KAAKhB,WAAWkC,KAAKlB,MAAAA;CAChC;CAEA,MAAMmB,WAAWnB,QAA0BoB,YAA6D;EACpG,MAAM,KAAKpC,WAAWqC,cAAcrB,QAAQoB,UAAAA;EAC5C,OAAOpB;CACX;CAEA,MAAME,gBAAgBF,QAAyC;EAC3D,MAAM,KAAKhB,WAAWkB,gBAAgBF,MAAAA;CAC1C;CAEA,MAAMsB,OAAOtB,QAAyC;EAClD,MAAM,KAAKhB,WAAWsC,OAAOtB,MAAAA;CACjC;CAEA,MAAMuB,oBAAoB3B,MAAgD;EACtE,MAAMpB,0BAA0BoB,MAAM;GAClC4B,YAAY,KAAKxC,WAAWyC,QAAQC;GACpCC,cAAchD;EAClB,CAAA;CACJ;CAEA,MAAMiD,gBAAgBhC,MAAiCiC,UAA4C;EAQ/F,IAAI,CAACC,MAPkBlD,eAAe;GAClC4C,YAAY,KAAKxC,WAAWyC,QAAQC;GACpCC,cAAchD;GACdqB,QAAQJ;GACRmC,gBAAgBF;EACpB,CAAA,GAGI,MAAM,IAAInD,sBAAAA;CAElB;CAEA,MAAMsD,eAAeC,UAAoC5B,UAAgD;EACrG,MAAMhB,KAAK,KAAKL,WAAWM,mBAAmB,UAAA;EAC9CD,GAAGiB,MAAM,iCAAiC,EAAE2B,SAAS,CAAA;EAErD,IAAI5B,UAAU;GACV,MAAME,UAAU,MAAM,KAAKtB,gBAAgBuB,UAAUH,QAAAA;GACrD,IAAI,CAACE,SACD,OAAO,CAAA;GAEXlB,GAAGoB,SAAS,+BAA+B,EAAEF,QAAQ,CAAA;EACzD;EAEA,MAAMd,WAAW,MAAMJ,GAAG6C,QAAO;EACjC,MAAM,KAAKlD,WAAWmD,iBAAiB1C,QAAAA;EACvC,OAAOA;CACX;AACJ"}
+{"version":3,"file":"repository.mjs","names":["isUUID","validateEntityJoinColumns","applyQuery","redactFieldConditions","DatabaseConflictError","IdentityProviderEntity","isEntityUnique","translateWhereConditions","RealmRepositoryAdapter","IdentityProviderRepositoryAdapter","repository","realmRepository","ctx","findMany","query","qb","createQueryBuilder","groupBy","pagination","entities","total","getManyAndCount","data","meta","findOneById","id","entity","findOneBy","extendOneWithEA","findOneByName","name","realmKey","where","realmId","resolveId","andWhere","getOne","findOneByIdOrName","idOrName","realm","findManyBy","findBy","create","merge","save","saveWithEA","attributes","saveOneWithEA","remove","validateJoinColumns","dataSource","manager","connection","entityTarget","checkUniqueness","existing","isUnique","entityExisting","findByProtocol","protocol","getMany","extendManyWithEA"],"sources":["../../../../../../src/app/modules/database/repositories/identity-provider/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProvider, IdentityProviderProtocol, Realm } from '@authup/core-kit';\nimport type { IQuery } from '@rapiq/core';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport { validateEntityJoinColumns } from 'typeorm-extension';\nimport { applyQuery, redactFieldConditions } from '../query.ts';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IIdentityProviderRepository, IRealmRepository } from '../../../../../core/index.ts';\nimport { DatabaseConflictError } from '../../../../../adapters/database/index.ts';\nimport type { IdentityProviderRepository } from '../../../../../adapters/database/domains/index.ts';\nimport { IdentityProviderEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { isEntityUnique, translateWhereConditions } from '../helpers.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type IdentityProviderRepositoryAdapterContext = {\n    repository: IdentityProviderRepository,\n    realmRepository: Repository<Realm>,\n};\n\nexport class IdentityProviderRepositoryAdapter implements IIdentityProviderRepository {\n    private readonly repository: IdentityProviderRepository;\n\n    private readonly realmRepository: IRealmRepository;\n\n    constructor(ctx: IdentityProviderRepositoryAdapterContext) {\n        this.repository = ctx.repository;\n        this.realmRepository = new RealmRepositoryAdapter(ctx.realmRepository);\n    }\n\n    async findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<IdentityProvider>> {\n        const qb = this.repository.createQueryBuilder('provider');\n        qb.groupBy('provider.id');\n\n        const { pagination } = applyQuery(qb, query);\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: redactFieldConditions(query, entities),\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    async findOneById(id: string): Promise<IdentityProvider | null> {\n        const entity = await this.findOneBy({ id });\n        if (entity) {\n            await this.repository.extendOneWithEA(entity);\n        }\n        return entity;\n    }\n\n    async findOneByName(name: string, realmKey?: string): Promise<IdentityProvider | null> {\n        const qb = this.repository.createQueryBuilder('provider');\n        qb.where('provider.name = :name', { name });\n\n        if (realmKey) {\n            const realmId = await this.realmRepository.resolveId(realmKey);\n            if (!realmId) {\n                return null;\n            }\n            qb.andWhere('provider.realmId = :realmId', { realmId });\n        }\n\n        const entity = await qb.getOne();\n        if (entity) {\n            await this.repository.extendOneWithEA(entity);\n        }\n        return entity;\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<IdentityProvider | null> {\n        return isUUID(idOrName) ?\n            this.findOneById(idOrName) :\n            this.findOneByName(idOrName, realm);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<IdentityProvider[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<IdentityProvider | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<IdentityProvider>): IdentityProvider {\n        return this.repository.create(data);\n    }\n\n    merge(entity: IdentityProvider, data: Partial<IdentityProvider>): IdentityProvider {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: IdentityProvider): Promise<IdentityProvider> {\n        return this.repository.save(entity);\n    }\n\n    async saveWithEA(entity: IdentityProvider, attributes?: Record<string, any>): Promise<IdentityProvider> {\n        await this.repository.saveOneWithEA(entity, attributes);\n        return entity;\n    }\n\n    async extendOneWithEA(entity: IdentityProvider): Promise<void> {\n        await this.repository.extendOneWithEA(entity);\n    }\n\n    async remove(entity: IdentityProvider): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<IdentityProvider>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: IdentityProviderEntity,\n        });\n    }\n\n    async checkUniqueness(data: Partial<IdentityProvider>, existing?: IdentityProvider): Promise<void> {\n        const isUnique = await isEntityUnique({\n            dataSource: this.repository.manager.connection,\n            entityTarget: IdentityProviderEntity,\n            entity: data,\n            entityExisting: existing,\n        });\n\n        if (!isUnique) {\n            throw new DatabaseConflictError();\n        }\n    }\n\n    async findByProtocol(protocol: IdentityProviderProtocol, realmKey?: string): Promise<IdentityProvider[]> {\n        const qb = this.repository.createQueryBuilder('provider');\n        qb.where('provider.protocol = :protocol', { protocol });\n\n        if (realmKey) {\n            const realmId = await this.realmRepository.resolveId(realmKey);\n            if (!realmId) {\n                return [];\n            }\n            qb.andWhere('provider.realmId = :realmId', { realmId });\n        }\n\n        const entities = await qb.getMany();\n        await this.repository.extendManyWithEA(entities);\n        return entities;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;AA0BA,IAAaS,oCAAb,MAAaA;CACQC;CAEAC;CAEjB,YAAYC,KAA+C;EACvD,KAAKF,aAAaE,IAAIF;EACtB,KAAKC,kBAAkB,IAAIH,uBAAuBI,IAAID,eAAe;CACzE;CAEA,MAAME,SAASC,OAA0E;EACrF,MAAMC,KAAK,KAAKL,WAAWM,mBAAmB,UAAA;EAC9CD,GAAGE,QAAQ,aAAA;EAEX,MAAM,EAAEC,eAAehB,WAAWa,IAAID,KAAAA;EAEtC,MAAM,CAACK,UAAUC,SAAS,MAAML,GAAGM,gBAAe;EAElD,OAAO;GACHC,MAAMnB,sBAAsBW,OAAOK,QAAAA;GACnCI,MAAM;IACFH;IACA,GAAGF;GACP;EACJ;CACJ;CAEA,MAAMM,YAAYC,IAA8C;EAC5D,MAAMC,SAAS,MAAM,KAAKC,UAAU,EAAEF,GAAG,CAAA;EACzC,IAAIC,QACA,MAAM,KAAKhB,WAAWkB,gBAAgBF,MAAAA;EAE1C,OAAOA;CACX;CAEA,MAAMG,cAAcC,MAAcC,UAAqD;EACnF,MAAMhB,KAAK,KAAKL,WAAWM,mBAAmB,UAAA;EAC9CD,GAAGiB,MAAM,yBAAyB,EAAEF,KAAK,CAAA;EAEzC,IAAIC,UAAU;GACV,MAAME,UAAU,MAAM,KAAKtB,gBAAgBuB,UAAUH,QAAAA;GACrD,IAAI,CAACE,SACD,OAAO;GAEXlB,GAAGoB,SAAS,+BAA+B,EAAEF,QAAQ,CAAA;EACzD;EAEA,MAAMP,SAAS,MAAMX,GAAGqB,OAAM;EAC9B,IAAIV,QACA,MAAM,KAAKhB,WAAWkB,gBAAgBF,MAAAA;EAE1C,OAAOA;CACX;CAEA,MAAMW,kBAAkBC,UAAkBC,OAAkD;EACxF,OAAOvC,OAAOsC,QAAAA,IACV,KAAKd,YAAYc,QAAAA,IACjB,KAAKT,cAAcS,UAAUC,KAAAA;CACrC;CAEA,MAAMC,WAAWR,OAAyD;EACtE,OAAO,KAAKtB,WAAW+B,OAAOlC,yBAAyByB,KAAAA,CAAAA;CAC3D;CAEA,MAAML,UAAUK,OAA8D;EAC1E,OAAO,KAAKtB,WAAWiB,UAAUpB,yBAAyByB,KAAAA,CAAAA;CAC9D;CAEAU,OAAOpB,MAAmD;EACtD,OAAO,KAAKZ,WAAWgC,OAAOpB,IAAAA;CAClC;CAEAqB,MAAMjB,QAA0BJ,MAAmD;EAC/E,OAAO,KAAKZ,WAAWiC,MAAMjB,QAAQJ,IAAAA;CACzC;CAEA,MAAMsB,KAAKlB,QAAqD;EAC5D,OAAO,KAAKhB,WAAWkC,KAAKlB,MAAAA;CAChC;CAEA,MAAMmB,WAAWnB,QAA0BoB,YAA6D;EACpG,MAAM,KAAKpC,WAAWqC,cAAcrB,QAAQoB,UAAAA;EAC5C,OAAOpB;CACX;CAEA,MAAME,gBAAgBF,QAAyC;EAC3D,MAAM,KAAKhB,WAAWkB,gBAAgBF,MAAAA;CAC1C;CAEA,MAAMsB,OAAOtB,QAAyC;EAClD,MAAM,KAAKhB,WAAWsC,OAAOtB,MAAAA;CACjC;CAEA,MAAMuB,oBAAoB3B,MAAgD;EACtE,MAAMrB,0BAA0BqB,MAAM;GAClC4B,YAAY,KAAKxC,WAAWyC,QAAQC;GACpCC,cAAchD;EAClB,CAAA;CACJ;CAEA,MAAMiD,gBAAgBhC,MAAiCiC,UAA4C;EAQ/F,IAAI,CAACC,MAPkBlD,eAAe;GAClC4C,YAAY,KAAKxC,WAAWyC,QAAQC;GACpCC,cAAchD;GACdqB,QAAQJ;GACRmC,gBAAgBF;EACpB,CAAA,GAGI,MAAM,IAAInD,sBAAAA;CAElB;CAEA,MAAMsD,eAAeC,UAAoC5B,UAAgD;EACrG,MAAMhB,KAAK,KAAKL,WAAWM,mBAAmB,UAAA;EAC9CD,GAAGiB,MAAM,iCAAiC,EAAE2B,SAAS,CAAA;EAErD,IAAI5B,UAAU;GACV,MAAME,UAAU,MAAM,KAAKtB,gBAAgBuB,UAAUH,QAAAA;GACrD,IAAI,CAACE,SACD,OAAO,CAAA;GAEXlB,GAAGoB,SAAS,+BAA+B,EAAEF,QAAQ,CAAA;EACzD;EAEA,MAAMd,WAAW,MAAMJ,GAAG6C,QAAO;EACjC,MAAM,KAAKlD,WAAWmD,iBAAiB1C,QAAAA;EACvC,OAAOA;CACX;AACJ"}

package/dist/app/modules/database/repositories/identity-provider-role-mapping/repository.mjs

@@ -3,7 +3,7 @@ import "node:url";
 import.meta.url;
 import { IdentityProviderRoleMappingEntity } from "../../../../../adapters/database/domains/identity-provider-role-mapping/entity.mjs";
 import "../../../../../adapters/database/domains/index.mjs";
-import { applyQuery } from "../query.mjs";
+import { applyQuery, redactFieldConditions } from "../query.mjs";
 import { translateWhereConditions } from "../helpers.mjs";
 import { validateEntityJoinColumns } from "typeorm-extension";
 //#region src/app/modules/database/repositories/identity-provider-role-mapping/repository.ts
@@ -18,7 +18,7 @@ var IdentityProviderRoleMappingRepositoryAdapter = class {
 		const { pagination } = applyQuery(qb, query);
 		const [entities, total] = await qb.getManyAndCount();
 		return {
-			data: entities,
+			data: redactFieldConditions(query, entities),
 			meta: {
 				total,
 				...pagination

package/dist/app/modules/database/repositories/identity-provider-role-mapping/repository.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"repository.mjs","names":["validateEntityJoinColumns","applyQuery","IdentityProviderRoleMappingEntity","translateWhereConditions","IdentityProviderRoleMappingRepositoryAdapter","repository","findMany","query","qb","createQueryBuilder","groupBy","pagination","entities","total","getManyAndCount","data","meta","findOneById","id","findOneBy","findOneByName","findOneByIdOrName","idOrName","findManyBy","where","findBy","create","merge","entity","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget"],"sources":["../../../../../../src/app/modules/database/repositories/identity-provider-role-mapping/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderRoleMapping } from '@authup/core-kit';\nimport type { IQuery } from '@rapiq/core';\nimport type { Repository } from 'typeorm';\nimport { validateEntityJoinColumns } from 'typeorm-extension';\nimport { applyQuery } from '../query.ts';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IIdentityProviderRoleMappingRepository } from '../../../../../core/index.ts';\nimport { IdentityProviderRoleMappingEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { translateWhereConditions } from '../helpers.ts';\n\nexport class IdentityProviderRoleMappingRepositoryAdapter implements IIdentityProviderRoleMappingRepository {\n    private readonly repository: Repository<IdentityProviderRoleMapping>;\n\n    constructor(repository: Repository<IdentityProviderRoleMapping>) {\n        this.repository = repository;\n    }\n\n    async findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<IdentityProviderRoleMapping>> {\n        const qb = this.repository.createQueryBuilder('providerRole');\n        qb.groupBy('providerRole.id');\n\n        const { pagination } = applyQuery(qb, query);\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    findOneById(id: string): Promise<IdentityProviderRoleMapping | null> {\n        return this.findOneBy({ id });\n    }\n\n    async findOneByName(): Promise<IdentityProviderRoleMapping | null> {\n        return null;\n    }\n\n    async findOneByIdOrName(idOrName: string): Promise<IdentityProviderRoleMapping | null> {\n        return this.findOneById(idOrName);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<IdentityProviderRoleMapping[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<IdentityProviderRoleMapping | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<IdentityProviderRoleMapping>): IdentityProviderRoleMapping {\n        return this.repository.create(data);\n    }\n\n    merge(entity: IdentityProviderRoleMapping, data: Partial<IdentityProviderRoleMapping>): IdentityProviderRoleMapping {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: IdentityProviderRoleMapping): Promise<IdentityProviderRoleMapping> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: IdentityProviderRoleMapping): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<IdentityProviderRoleMapping>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: IdentityProviderRoleMappingEntity,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;AAiBA,IAAaI,+CAAb,MAAaA;CACQC;CAEjB,YAAYA,YAAqD;EAC7D,KAAKA,aAAaA;CACtB;CAEA,MAAMC,SAASC,OAAqF;EAChG,MAAMC,KAAK,KAAKH,WAAWI,mBAAmB,cAAA;EAC9CD,GAAGE,QAAQ,iBAAA;EAEX,MAAM,EAAEC,eAAeV,WAAWO,IAAID,KAAAA;EAEtC,MAAM,CAACK,UAAUC,SAAS,MAAML,GAAGM,gBAAe;EAElD,OAAO;GACHC,MAAMH;GACNI,MAAM;IACFH;IACA,GAAGF;GACP;EACJ;CACJ;CAEAM,YAAYC,IAAyD;EACjE,OAAO,KAAKC,UAAU,EAAED,GAAG,CAAA;CAC/B;CAEA,MAAME,gBAA6D;EAC/D,OAAO;CACX;CAEA,MAAMC,kBAAkBC,UAA+D;EACnF,OAAO,KAAKL,YAAYK,QAAAA;CAC5B;CAEA,MAAMC,WAAWC,OAAoE;EACjF,OAAO,KAAKnB,WAAWoB,OAAOtB,yBAAyBqB,KAAAA,CAAAA;CAC3D;CAEA,MAAML,UAAUK,OAAyE;EACrF,OAAO,KAAKnB,WAAWc,UAAUhB,yBAAyBqB,KAAAA,CAAAA;CAC9D;CAEAE,OAAOX,MAAyE;EAC5E,OAAO,KAAKV,WAAWqB,OAAOX,IAAAA;CAClC;CAEAY,MAAMC,QAAqCb,MAAyE;EAChH,OAAO,KAAKV,WAAWsB,MAAMC,QAAQb,IAAAA;CACzC;CAEA,MAAMc,KAAKD,QAA2E;EAClF,OAAO,KAAKvB,WAAWwB,KAAKD,MAAAA;CAChC;CAEA,MAAME,OAAOF,QAAoD;EAC7D,MAAM,KAAKvB,WAAWyB,OAAOF,MAAAA;CACjC;CAEA,MAAMG,oBAAoBhB,MAA2D;EACjF,MAAMf,0BAA0Be,MAAM;GAClCiB,YAAY,KAAK3B,WAAW4B,QAAQC;GACpCC,cAAcjC;EAClB,CAAA;CACJ;AACJ"}
+{"version":3,"file":"repository.mjs","names":["validateEntityJoinColumns","applyQuery","redactFieldConditions","IdentityProviderRoleMappingEntity","translateWhereConditions","IdentityProviderRoleMappingRepositoryAdapter","repository","findMany","query","qb","createQueryBuilder","groupBy","pagination","entities","total","getManyAndCount","data","meta","findOneById","id","findOneBy","findOneByName","findOneByIdOrName","idOrName","findManyBy","where","findBy","create","merge","entity","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget"],"sources":["../../../../../../src/app/modules/database/repositories/identity-provider-role-mapping/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IdentityProviderRoleMapping } from '@authup/core-kit';\nimport type { IQuery } from '@rapiq/core';\nimport type { Repository } from 'typeorm';\nimport { validateEntityJoinColumns } from 'typeorm-extension';\nimport { applyQuery, redactFieldConditions } from '../query.ts';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IIdentityProviderRoleMappingRepository } from '../../../../../core/index.ts';\nimport { IdentityProviderRoleMappingEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { translateWhereConditions } from '../helpers.ts';\n\nexport class IdentityProviderRoleMappingRepositoryAdapter implements IIdentityProviderRoleMappingRepository {\n    private readonly repository: Repository<IdentityProviderRoleMapping>;\n\n    constructor(repository: Repository<IdentityProviderRoleMapping>) {\n        this.repository = repository;\n    }\n\n    async findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<IdentityProviderRoleMapping>> {\n        const qb = this.repository.createQueryBuilder('providerRole');\n        qb.groupBy('providerRole.id');\n\n        const { pagination } = applyQuery(qb, query);\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: redactFieldConditions(query, entities),\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    findOneById(id: string): Promise<IdentityProviderRoleMapping | null> {\n        return this.findOneBy({ id });\n    }\n\n    async findOneByName(): Promise<IdentityProviderRoleMapping | null> {\n        return null;\n    }\n\n    async findOneByIdOrName(idOrName: string): Promise<IdentityProviderRoleMapping | null> {\n        return this.findOneById(idOrName);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<IdentityProviderRoleMapping[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<IdentityProviderRoleMapping | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<IdentityProviderRoleMapping>): IdentityProviderRoleMapping {\n        return this.repository.create(data);\n    }\n\n    merge(entity: IdentityProviderRoleMapping, data: Partial<IdentityProviderRoleMapping>): IdentityProviderRoleMapping {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: IdentityProviderRoleMapping): Promise<IdentityProviderRoleMapping> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: IdentityProviderRoleMapping): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<IdentityProviderRoleMapping>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: IdentityProviderRoleMappingEntity,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;AAiBA,IAAaK,+CAAb,MAAaA;CACQC;CAEjB,YAAYA,YAAqD;EAC7D,KAAKA,aAAaA;CACtB;CAEA,MAAMC,SAASC,OAAqF;EAChG,MAAMC,KAAK,KAAKH,WAAWI,mBAAmB,cAAA;EAC9CD,GAAGE,QAAQ,iBAAA;EAEX,MAAM,EAAEC,eAAeX,WAAWQ,IAAID,KAAAA;EAEtC,MAAM,CAACK,UAAUC,SAAS,MAAML,GAAGM,gBAAe;EAElD,OAAO;GACHC,MAAMd,sBAAsBM,OAAOK,QAAAA;GACnCI,MAAM;IACFH;IACA,GAAGF;GACP;EACJ;CACJ;CAEAM,YAAYC,IAAyD;EACjE,OAAO,KAAKC,UAAU,EAAED,GAAG,CAAA;CAC/B;CAEA,MAAME,gBAA6D;EAC/D,OAAO;CACX;CAEA,MAAMC,kBAAkBC,UAA+D;EACnF,OAAO,KAAKL,YAAYK,QAAAA;CAC5B;CAEA,MAAMC,WAAWC,OAAoE;EACjF,OAAO,KAAKnB,WAAWoB,OAAOtB,yBAAyBqB,KAAAA,CAAAA;CAC3D;CAEA,MAAML,UAAUK,OAAyE;EACrF,OAAO,KAAKnB,WAAWc,UAAUhB,yBAAyBqB,KAAAA,CAAAA;CAC9D;CAEAE,OAAOX,MAAyE;EAC5E,OAAO,KAAKV,WAAWqB,OAAOX,IAAAA;CAClC;CAEAY,MAAMC,QAAqCb,MAAyE;EAChH,OAAO,KAAKV,WAAWsB,MAAMC,QAAQb,IAAAA;CACzC;CAEA,MAAMc,KAAKD,QAA2E;EAClF,OAAO,KAAKvB,WAAWwB,KAAKD,MAAAA;CAChC;CAEA,MAAME,OAAOF,QAAoD;EAC7D,MAAM,KAAKvB,WAAWyB,OAAOF,MAAAA;CACjC;CAEA,MAAMG,oBAAoBhB,MAA2D;EACjF,MAAMhB,0BAA0BgB,MAAM;GAClCiB,YAAY,KAAK3B,WAAW4B,QAAQC;GACpCC,cAAcjC;EAClB,CAAA;CACJ;AACJ"}

package/dist/app/modules/database/repositories/key/repository.mjs

@@ -7,7 +7,7 @@ import { UserAuthenticatorEntity } from "../../../../../adapters/database/domain
 import "../../../../../core/key/constants.mjs";
 import { isWrappedKeyMaterial, unwrapKeyMaterial, wrapKeyMaterial } from "../../../../../core/key/wrap.mjs";
 import "../../../../../core/index.mjs";
-import { applyQuery } from "../query.mjs";
+import { applyQuery, redactFieldConditions } from "../query.mjs";
 import { applyRealmScopeSelect, isEntityUnique, translateWhereConditions } from "../helpers.mjs";
 import { DatabaseConflictError } from "../../../../../adapters/database/errors/conflict.mjs";
 import "../../../../../adapters/database/index.mjs";
@@ -162,7 +162,7 @@ import { validateEntityJoinColumns } from "typeorm-extension";
 		applyRealmScopeSelect(qb, "keyEntity");
 		const [entities, total] = await qb.getManyAndCount();
 		return {
-			data: entities,
+			data: redactFieldConditions(query, entities),
 			meta: {
 				total,
 				...pagination

package/dist/app/modules/database/repositories/key/repository.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"repository.mjs","names":["AuthupError","KeyStatus","arrayBufferToBase64","createNanoID","isUUID","AsymmetricKey","CryptoAsymmetricAlgorithm","createAsymmetricKeyPair","JWKType","JWKUse","JWTAlgorithm","Like","validateEntityJoinColumns","applyQuery","getRandomValues","DatabaseConflictError","KeyEntity","RealmEntity","UserAuthenticatorEntity","REALM_CIPHER_BLOB_VERSION","isWrappedKeyMaterial","unwrapKeyMaterial","wrapKeyMaterial","applyRealmScopeSelect","isEntityUnique","translateWhereConditions","RealmRepositoryAdapter","KeyRepositoryAdapter","dataSource","secretsCipher","realmRepository","logger","options","getRepository","repository","resolveOrCreate","realmId","use","entity","findOne","select","id","name","type","status","signatureAlgorithm","encryptionKey","decryptionKey","where","ACTIVE","order","priority","createdAt","afterLoad","total","countBy","ENCRYPTION","createEncryptionKey","createSignatureKey","resolveById","keyPair","RSASSA_PKCS1_V1_5","privateKeyContainer","privateKey","publicKeyContainer","publicKey","material","toBase64","create","generateName","SIGNATURE","RSA","protect","RS256","save","raw","Uint8Array","buffer","OCT","update","e","warn","error","findMany","query","qb","createQueryBuilder","groupBy","pagination","entities","getManyAndCount","data","meta","findOneById","findOneBy","findOneByName","realmKey","resolveId","findOneByIdOrName","idOrName","realm","findManyBy","findBy","merge","saved","remove","validateJoinColumns","entityTarget","checkUniqueness","existing","isUnique","entityExisting","countBlobReferences","keyId","secret","findHighestPriority","maximum"],"sources":["../../../../../../src/app/modules/database/repositories/key/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { AuthupError } from '@authup/errors';\nimport type { IQuery } from '@rapiq/core';\nimport type { Key } from '@authup/core-kit';\nimport { KeyStatus  } from '@authup/core-kit';\nimport { arrayBufferToBase64, createNanoID, isUUID } from '@authup/kit';\nimport {\n    AsymmetricKey,\n    CryptoAsymmetricAlgorithm,\n    type EntityRepositoryFindManyResult,\n    type ISymmetricCipher,\n    type Logger,\n    createAsymmetricKeyPair,\n} from '@authup/server-kit';\nimport { JWKType, JWKUse, JWTAlgorithm } from '@authup/specs';\nimport type { DataSource, FindOptionsWhere, Repository } from 'typeorm';\nimport { Like } from 'typeorm';\nimport { validateEntityJoinColumns } from 'typeorm-extension';\nimport { applyQuery } from '../query.ts';\nimport { getRandomValues } from 'uncrypto';\nimport {\n    DatabaseConflictError,\n    KeyEntity,\n    RealmEntity,\n    UserAuthenticatorEntity,\n} from '../../../../../adapters/database/index.ts';\nimport type { IKeyRepository, IKeyStore, IRealmRepository } from '../../../../../core/index.ts';\nimport {\n    REALM_CIPHER_BLOB_VERSION,\n    isWrappedKeyMaterial,\n    unwrapKeyMaterial,\n    wrapKeyMaterial,\n} from '../../../../../core/index.ts';\nimport { applyRealmScopeSelect, isEntityUnique, translateWhereConditions } from '../helpers.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type KeyRepositoryAdapterOptions = {\n    /**\n     * Optional KEK (config secretsEncryptionKey) — when present, key\n     * material is persisted wrapped and unwrapped transparently on read.\n     */\n    secretsCipher?: ISymmetricCipher | null,\n    logger?: Logger,\n};\n\n/**\n * One adapter, two ports: the entity CRUD surface (IKeyRepository) for the\n * key management API and the material-resolving store (IKeyStore) for the\n * signer / verifier / realm cipher. Entity reads never select\n * decryptionKey; only the IKeyStore surface hands out (unwrapped) material.\n */\nexport class KeyRepositoryAdapter implements IKeyRepository, IKeyStore {\n    protected dataSource : DataSource;\n\n    protected secretsCipher : ISymmetricCipher | null;\n\n    protected realmRepository : IRealmRepository;\n\n    protected logger? : Logger;\n\n    constructor(dataSource: DataSource, options: KeyRepositoryAdapterOptions = {}) {\n        this.dataSource = dataSource;\n        this.secretsCipher = options.secretsCipher ?? null;\n        this.logger = options.logger;\n        this.realmRepository = new RealmRepositoryAdapter(dataSource.getRepository(RealmEntity));\n    }\n\n    protected get repository() : Repository<KeyEntity> {\n        return this.dataSource.getRepository(KeyEntity);\n    }\n\n    // ------------------------------------------------------------------\n    // IKeyStore — material resolution (signer / verifier / realm cipher)\n    // ------------------------------------------------------------------\n\n    async resolveOrCreate(realmId: string, use: `${JWKUse}`): Promise<Key> {\n        const { repository } = this;\n\n        const entity = await repository.findOne({\n            select: {\n                id: true,\n                name: true,\n                type: true,\n                use: true,\n                status: true,\n                signatureAlgorithm: true,\n                encryptionKey: true,\n                decryptionKey: true,\n                realmId: true,\n            },\n            where: {\n                realmId,\n                use,\n                status: KeyStatus.ACTIVE,\n            },\n            // createdAt + id break priority ties deterministically (e.g.\n            // duplicate mints from a concurrent zero-row backstop race —\n            // benign, both keys verify, but selection must be stable).\n            order: {\n                priority: 'DESC', \n                createdAt: 'DESC', \n                id: 'ASC', \n            },\n        });\n\n        if (entity) {\n            return this.afterLoad(repository, entity);\n        }\n\n        const total = await repository.countBy({ realmId, use });\n        if (total > 0) {\n            // an admin who disabled every key meant it — do not silently\n            // re-mint around the kill switch.\n            throw new AuthupError(\n                `No active ${use} key is available for realm ${realmId} ` +\n                `(${total} key(s) exist, none active).`,\n            );\n        }\n\n        if (use === JWKUse.ENCRYPTION) {\n            return this.createEncryptionKey(repository, realmId);\n        }\n\n        return this.createSignatureKey(repository, realmId);\n    }\n\n    async resolveById(id: string): Promise<Key | null> {\n        const { repository } = this;\n\n        // `id` reaches here from an attacker-controlled JWT `kid` header on the\n        // token-verification hot path. A non-UUID value binds against a\n        // postgres `uuid` column as a driver-level type error (500) instead of\n        // a clean miss — short-circuit to \"not found\" so a garbage kid is a\n        // plain verification failure.\n        if (!isUUID(id)) {\n            return null;\n        }\n\n        const entity = await repository.findOne({\n            select: {\n                id: true,\n                name: true,\n                type: true,\n                use: true,\n                status: true,\n                signatureAlgorithm: true,\n                encryptionKey: true,\n                decryptionKey: true,\n                realmId: true,\n            },\n            where: { id },\n        });\n\n        if (!entity) {\n            return null;\n        }\n\n        return this.afterLoad(repository, entity);\n    }\n\n    protected async createSignatureKey(\n        repository: Repository<KeyEntity>,\n        realmId: string,\n    ) : Promise<Key> {\n        const keyPair = await createAsymmetricKeyPair({ name: CryptoAsymmetricAlgorithm.RSASSA_PKCS1_V1_5 });\n\n        const privateKeyContainer = new AsymmetricKey(keyPair.privateKey);\n        const publicKeyContainer = new AsymmetricKey(keyPair.publicKey);\n\n        const material = await privateKeyContainer.toBase64();\n\n        const entity = repository.create({\n            name: this.generateName(JWKUse.SIGNATURE),\n            type: JWKType.RSA,\n            use: JWKUse.SIGNATURE,\n            status: KeyStatus.ACTIVE,\n            decryptionKey: await this.protect(material),\n            encryptionKey: await publicKeyContainer.toBase64(),\n            realmId,\n            signatureAlgorithm: `${JWTAlgorithm.RS256}`,\n        });\n\n        await repository.save(entity);\n\n        // hand the caller usable material regardless of the persisted form.\n        entity.decryptionKey = material;\n\n        return entity;\n    }\n\n    protected async createEncryptionKey(\n        repository: Repository<KeyEntity>,\n        realmId: string,\n    ) : Promise<Key> {\n        const raw = new Uint8Array(32);\n        getRandomValues(raw);\n\n        const material = arrayBufferToBase64(raw.buffer);\n\n        const entity = repository.create({\n            name: this.generateName(JWKUse.ENCRYPTION),\n            type: JWKType.OCT,\n            use: JWKUse.ENCRYPTION,\n            status: KeyStatus.ACTIVE,\n            decryptionKey: await this.protect(material),\n            encryptionKey: null,\n            realmId,\n            signatureAlgorithm: null,\n        });\n\n        await repository.save(entity);\n\n        entity.decryptionKey = material;\n\n        return entity;\n    }\n\n    protected generateName(use: `${JWKUse}`) : string {\n        return `${use}-${createNanoID(10)}`;\n    }\n\n    protected async afterLoad(\n        repository: Repository<KeyEntity>,\n        entity: KeyEntity,\n    ) : Promise<Key> {\n        if (!entity.decryptionKey) {\n            return entity;\n        }\n\n        if (isWrappedKeyMaterial(entity.decryptionKey)) {\n            entity.decryptionKey = await unwrapKeyMaterial(this.secretsCipher, entity.decryptionKey);\n            return entity;\n        }\n\n        if (this.secretsCipher) {\n            // lazy wrap-on-read: a KEK added to a running deployment\n            // hardens existing rows without a migration step. Best-effort —\n            // the material stays readable either way.\n            const material = entity.decryptionKey;\n            try {\n                await repository.update(entity.id, { decryptionKey: await wrapKeyMaterial(this.secretsCipher, material) });\n            } catch (e) {\n                // Best-effort — the material stays readable and the next read\n                // retries. Surface it though: a persistent failure (e.g. a\n                // read-only replica) means the row is never hardened at rest.\n                this.logger?.warn(`Failed to wrap key material at rest for key ${entity.id}.`, { error: e });\n            }\n            entity.decryptionKey = material;\n        }\n\n        return entity;\n    }\n\n    protected async protect(material: string) : Promise<string> {\n        if (!this.secretsCipher) {\n            return material;\n        }\n\n        return wrapKeyMaterial(this.secretsCipher, material);\n    }\n\n    // ------------------------------------------------------------------\n    // IKeyRepository — entity CRUD surface (key management API)\n    // ------------------------------------------------------------------\n\n    async findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<Key>> {\n        const qb = this.repository.createQueryBuilder('keyEntity');\n        qb.groupBy('keyEntity.id');\n\n        const { pagination } = applyQuery(qb, query);\n\n        applyRealmScopeSelect(qb, 'keyEntity');\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    async findOneById(id: string): Promise<Key | null> {\n        return this.findOneBy({ id });\n    }\n\n    async findOneByName(name: string, realmKey?: string): Promise<Key | null> {\n        const where : FindOptionsWhere<KeyEntity> = { name };\n\n        if (realmKey) {\n            const realmId = await this.realmRepository.resolveId(realmKey);\n            if (!realmId) {\n                return null;\n            }\n\n            where.realmId = realmId;\n        }\n\n        return this.repository.findOneBy(where);\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Key | null> {\n        return isUUID(idOrName) ?\n            this.findOneById(idOrName) :\n            this.findOneByName(idOrName, realm);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<Key[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Key | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<Key>): Key {\n        return this.repository.create(data);\n    }\n\n    merge(entity: Key, data: Partial<Key>): Key {\n        return this.repository.merge(entity as KeyEntity, data);\n    }\n\n    async save(entity: Key): Promise<Key> {\n        if (\n            entity.decryptionKey &&\n            this.secretsCipher &&\n            !isWrappedKeyMaterial(entity.decryptionKey)\n        ) {\n            const material = entity.decryptionKey;\n            entity.decryptionKey = await wrapKeyMaterial(this.secretsCipher, material);\n            const saved = await this.repository.save(entity as KeyEntity);\n            saved.decryptionKey = material;\n            return saved;\n        }\n\n        return this.repository.save(entity as KeyEntity);\n    }\n\n    async remove(entity: Key): Promise<void> {\n        await this.repository.remove(entity as KeyEntity);\n    }\n\n    async validateJoinColumns(data: Partial<Key>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.dataSource,\n            entityTarget: KeyEntity,\n        });\n    }\n\n    async checkUniqueness(data: Partial<Key>, existing?: Key): Promise<void> {\n        const isUnique = await isEntityUnique({\n            dataSource: this.dataSource,\n            entityTarget: KeyEntity,\n            entity: data,\n            entityExisting: existing,\n        });\n\n        if (!isUnique) {\n            throw new DatabaseConflictError();\n        }\n    }\n\n    async countBlobReferences(keyId: string): Promise<number> {\n        return this.dataSource.getRepository(UserAuthenticatorEntity).countBy({ secret: Like(`${REALM_CIPHER_BLOB_VERSION}.${keyId}.%`) });\n    }\n\n    async findHighestPriority(realmId: string, use: string): Promise<number | null> {\n        return this.repository.maximum('priority', { realmId, use: use as `${JWKUse}` });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDA,IAAa2B,uBAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEV,YAAYH,YAAwBI,UAAuC,CAAC,GAAG;EAC3E,KAAKJ,aAAaA;EAClB,KAAKC,gBAAgBG,QAAQH,iBAAiB;EAC9C,KAAKE,SAASC,QAAQD;EACtB,KAAKD,kBAAkB,IAAIJ,uBAAuBE,WAAWK,cAAchB,WAAAA,CAAAA;CAC/E;CAEA,IAAciB,aAAqC;EAC/C,OAAO,KAAKN,WAAWK,cAAcjB,SAAAA;CACzC;CAMA,MAAMmB,gBAAgBC,SAAiBC,KAAgC;EACnE,MAAM,EAAEH,eAAe;EAEvB,MAAMI,SAAS,MAAMJ,WAAWK,QAAQ;GACpCC,QAAQ;IACJC,IAAI;IACJC,MAAM;IACNC,MAAM;IACNN,KAAK;IACLO,QAAQ;IACRC,oBAAoB;IACpBC,eAAe;IACfC,eAAe;IACfX,SAAS;GACb;GACAY,OAAO;IACHZ;IACAC;IACAO,QAAQ3C,UAAUgD;GACtB;GAIAC,OAAO;IACHC,UAAU;IACVC,WAAW;IACXX,IAAI;GACR;EACJ,CAAA;EAEA,IAAIH,QACA,OAAO,KAAKe,UAAUnB,YAAYI,MAAAA;EAGtC,MAAMgB,QAAQ,MAAMpB,WAAWqB,QAAQ;GAAEnB;GAASC;EAAI,CAAA;EACtD,IAAIiB,QAAQ,GAGR,MAAM,IAAItD,YACN,aAAaqC,IAAI,8BAA8BD,QAAQ,IACnDkB,MAAM,6BAA6B;EAI/C,IAAIjB,QAAQ5B,OAAO+C,YACf,OAAO,KAAKC,oBAAoBvB,YAAYE,OAAAA;EAGhD,OAAO,KAAKsB,mBAAmBxB,YAAYE,OAAAA;CAC/C;CAEA,MAAMuB,YAAYlB,IAAiC;EAC/C,MAAM,EAAEP,eAAe;EAOvB,IAAI,CAAC9B,OAAOqC,EAAAA,GACR,OAAO;EAGX,MAAMH,SAAS,MAAMJ,WAAWK,QAAQ;GACpCC,QAAQ;IACJC,IAAI;IACJC,MAAM;IACNC,MAAM;IACNN,KAAK;IACLO,QAAQ;IACRC,oBAAoB;IACpBC,eAAe;IACfC,eAAe;IACfX,SAAS;GACb;GACAY,OAAO,EAAEP,GAAG;EAChB,CAAA;EAEA,IAAI,CAACH,QACD,OAAO;EAGX,OAAO,KAAKe,UAAUnB,YAAYI,MAAAA;CACtC;CAEA,MAAgBoB,mBACZxB,YACAE,SACa;EACb,MAAMwB,UAAU,MAAMrD,wBAAwB,EAAEmC,MAAMpC,0BAA0BuD,kBAAkB,CAAA;EAElG,MAAMC,sBAAsB,IAAIzD,cAAcuD,QAAQG,UAAU;EAChE,MAAMC,qBAAqB,IAAI3D,cAAcuD,QAAQK,SAAS;EAE9D,MAAMC,WAAW,MAAMJ,oBAAoBK,SAAQ;EAEnD,MAAM7B,SAASJ,WAAWkC,OAAO;GAC7B1B,MAAM,KAAK2B,aAAa5D,OAAO6D,SAAS;GACxC3B,MAAMnC,QAAQ+D;GACdlC,KAAK5B,OAAO6D;GACZ1B,QAAQ3C,UAAUgD;GAClBF,eAAe,MAAM,KAAKyB,QAAQN,QAAAA;GAClCpB,eAAe,MAAMkB,mBAAmBG,SAAQ;GAChD/B;GACAS,oBAAoB,GAAGnC,aAAa+D;EACxC,CAAA;EAEA,MAAMvC,WAAWwC,KAAKpC,MAAAA;EAGtBA,OAAOS,gBAAgBmB;EAEvB,OAAO5B;CACX;CAEA,MAAgBmB,oBACZvB,YACAE,SACa;EACb,MAAMuC,sBAAM,IAAIC,WAAW,EAAA;EAC3B9D,gBAAgB6D,GAAAA;EAEhB,MAAMT,WAAWhE,oBAAoByE,IAAIE,MAAM;EAE/C,MAAMvC,SAASJ,WAAWkC,OAAO;GAC7B1B,MAAM,KAAK2B,aAAa5D,OAAO+C,UAAU;GACzCb,MAAMnC,QAAQsE;GACdzC,KAAK5B,OAAO+C;GACZZ,QAAQ3C,UAAUgD;GAClBF,eAAe,MAAM,KAAKyB,QAAQN,QAAAA;GAClCpB,eAAe;GACfV;GACAS,oBAAoB;EACxB,CAAA;EAEA,MAAMX,WAAWwC,KAAKpC,MAAAA;EAEtBA,OAAOS,gBAAgBmB;EAEvB,OAAO5B;CACX;CAEU+B,aAAahC,KAA2B;EAC9C,OAAO,GAAGA,IAAI,GAAGlC,aAAa,EAAA;CAClC;CAEA,MAAgBkD,UACZnB,YACAI,QACa;EACb,IAAI,CAACA,OAAOS,eACR,OAAOT;EAGX,IAAIlB,qBAAqBkB,OAAOS,aAAa,GAAG;GAC5CT,OAAOS,gBAAgB,MAAM1B,kBAAkB,KAAKQ,eAAeS,OAAOS,aAAa;GACvF,OAAOT;EACX;EAEA,IAAI,KAAKT,eAAe;GAIpB,MAAMqC,WAAW5B,OAAOS;GACxB,IAAI;IACA,MAAMb,WAAW6C,OAAOzC,OAAOG,IAAI,EAAEM,eAAe,MAAMzB,gBAAgB,KAAKO,eAAeqC,QAAAA,EAAU,CAAA;GAC5G,SAASc,GAAG;IAIR,KAAKjD,QAAQkD,KAAK,+CAA+C3C,OAAOG,GAAG,IAAI,EAAEyC,OAAOF,EAAE,CAAA;GAC9F;GACA1C,OAAOS,gBAAgBmB;EAC3B;EAEA,OAAO5B;CACX;CAEA,MAAgBkC,QAAQN,UAAoC;EACxD,IAAI,CAAC,KAAKrC,eACN,OAAOqC;EAGX,OAAO5C,gBAAgB,KAAKO,eAAeqC,QAAAA;CAC/C;CAMA,MAAMiB,SAASC,OAA6D;EACxE,MAAMC,KAAK,KAAKnD,WAAWoD,mBAAmB,WAAA;EAC9CD,GAAGE,QAAQ,cAAA;EAEX,MAAM,EAAEC,eAAe3E,WAAWwE,IAAID,KAAAA;EAEtC7D,sBAAsB8D,IAAI,WAAA;EAE1B,MAAM,CAACI,UAAUnC,SAAS,MAAM+B,GAAGK,gBAAe;EAElD,OAAO;GACHC,MAAMF;GACNG,MAAM;IACFtC;IACA,GAAGkC;GACP;EACJ;CACJ;CAEA,MAAMK,YAAYpD,IAAiC;EAC/C,OAAO,KAAKqD,UAAU,EAAErD,GAAG,CAAA;CAC/B;CAEA,MAAMsD,cAAcrD,MAAcsD,UAAwC;EACtE,MAAMhD,QAAsC,EAAEN,KAAK;EAEnD,IAAIsD,UAAU;GACV,MAAM5D,UAAU,MAAM,KAAKN,gBAAgBmE,UAAUD,QAAAA;GACrD,IAAI,CAAC5D,SACD,OAAO;GAGXY,MAAMZ,UAAUA;EACpB;EAEA,OAAO,KAAKF,WAAW4D,UAAU9C,KAAAA;CACrC;CAEA,MAAMkD,kBAAkBC,UAAkBC,OAAqC;EAC3E,OAAOhG,OAAO+F,QAAAA,IACV,KAAKN,YAAYM,QAAAA,IACjB,KAAKJ,cAAcI,UAAUC,KAAAA;CACrC;CAEA,MAAMC,WAAWrD,OAA4C;EACzD,OAAO,KAAKd,WAAWoE,OAAO7E,yBAAyBuB,KAAAA,CAAAA;CAC3D;CAEA,MAAM8C,UAAU9C,OAAiD;EAC7D,OAAO,KAAKd,WAAW4D,UAAUrE,yBAAyBuB,KAAAA,CAAAA;CAC9D;CAEAoB,OAAOuB,MAAyB;EAC5B,OAAO,KAAKzD,WAAWkC,OAAOuB,IAAAA;CAClC;CAEAY,MAAMjE,QAAaqD,MAAyB;EACxC,OAAO,KAAKzD,WAAWqE,MAAMjE,QAAqBqD,IAAAA;CACtD;CAEA,MAAMjB,KAAKpC,QAA2B;EAClC,IACIA,OAAOS,iBACP,KAAKlB,iBACL,CAACT,qBAAqBkB,OAAOS,aAAa,GAC5C;GACE,MAAMmB,WAAW5B,OAAOS;GACxBT,OAAOS,gBAAgB,MAAMzB,gBAAgB,KAAKO,eAAeqC,QAAAA;GACjE,MAAMsC,QAAQ,MAAM,KAAKtE,WAAWwC,KAAKpC,MAAAA;GACzCkE,MAAMzD,gBAAgBmB;GACtB,OAAOsC;EACX;EAEA,OAAO,KAAKtE,WAAWwC,KAAKpC,MAAAA;CAChC;CAEA,MAAMmE,OAAOnE,QAA4B;EACrC,MAAM,KAAKJ,WAAWuE,OAAOnE,MAAAA;CACjC;CAEA,MAAMoE,oBAAoBf,MAAmC;EACzD,MAAM/E,0BAA0B+E,MAAM;GAClC/D,YAAY,KAAKA;GACjB+E,cAAc3F;EAClB,CAAA;CACJ;CAEA,MAAM4F,gBAAgBjB,MAAoBkB,UAA+B;EAQrE,IAAI,CAACC,MAPkBtF,eAAe;GAClCI,YAAY,KAAKA;GACjB+E,cAAc3F;GACdsB,QAAQqD;GACRoB,gBAAgBF;EACpB,CAAA,GAGI,MAAM,IAAI9F,sBAAAA;CAElB;CAEA,MAAMiG,oBAAoBC,OAAgC;EACtD,OAAO,KAAKrF,WAAWK,cAAcf,uBAAAA,CAAAA,CAAyBqC,QAAQ,EAAE2D,QAAQvG,KAAK,MAAgCsG,MAAM,GAAG,EAAE,CAAA;CACpI;CAEA,MAAME,oBAAoB/E,SAAiBC,KAAqC;EAC5E,OAAO,KAAKH,WAAWkF,QAAQ,YAAY;GAAEhF;GAAcC;EAAmB,CAAA;CAClF;AACJ"}
+{"version":3,"file":"repository.mjs","names":["AuthupError","KeyStatus","arrayBufferToBase64","createNanoID","isUUID","AsymmetricKey","CryptoAsymmetricAlgorithm","createAsymmetricKeyPair","JWKType","JWKUse","JWTAlgorithm","Like","validateEntityJoinColumns","applyQuery","redactFieldConditions","getRandomValues","DatabaseConflictError","KeyEntity","RealmEntity","UserAuthenticatorEntity","REALM_CIPHER_BLOB_VERSION","isWrappedKeyMaterial","unwrapKeyMaterial","wrapKeyMaterial","applyRealmScopeSelect","isEntityUnique","translateWhereConditions","RealmRepositoryAdapter","KeyRepositoryAdapter","dataSource","secretsCipher","realmRepository","logger","options","getRepository","repository","resolveOrCreate","realmId","use","entity","findOne","select","id","name","type","status","signatureAlgorithm","encryptionKey","decryptionKey","where","ACTIVE","order","priority","createdAt","afterLoad","total","countBy","ENCRYPTION","createEncryptionKey","createSignatureKey","resolveById","keyPair","RSASSA_PKCS1_V1_5","privateKeyContainer","privateKey","publicKeyContainer","publicKey","material","toBase64","create","generateName","SIGNATURE","RSA","protect","RS256","save","raw","Uint8Array","buffer","OCT","update","e","warn","error","findMany","query","qb","createQueryBuilder","groupBy","pagination","entities","getManyAndCount","data","meta","findOneById","findOneBy","findOneByName","realmKey","resolveId","findOneByIdOrName","idOrName","realm","findManyBy","findBy","merge","saved","remove","validateJoinColumns","entityTarget","checkUniqueness","existing","isUnique","entityExisting","countBlobReferences","keyId","secret","findHighestPriority","maximum"],"sources":["../../../../../../src/app/modules/database/repositories/key/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { AuthupError } from '@authup/errors';\nimport type { IQuery } from '@rapiq/core';\nimport type { Key } from '@authup/core-kit';\nimport { KeyStatus  } from '@authup/core-kit';\nimport { arrayBufferToBase64, createNanoID, isUUID } from '@authup/kit';\nimport {\n    AsymmetricKey,\n    CryptoAsymmetricAlgorithm,\n    type EntityRepositoryFindManyResult,\n    type ISymmetricCipher,\n    type Logger,\n    createAsymmetricKeyPair,\n} from '@authup/server-kit';\nimport { JWKType, JWKUse, JWTAlgorithm } from '@authup/specs';\nimport type { DataSource, FindOptionsWhere, Repository } from 'typeorm';\nimport { Like } from 'typeorm';\nimport { validateEntityJoinColumns } from 'typeorm-extension';\nimport { applyQuery, redactFieldConditions } from '../query.ts';\nimport { getRandomValues } from 'uncrypto';\nimport {\n    DatabaseConflictError,\n    KeyEntity,\n    RealmEntity,\n    UserAuthenticatorEntity,\n} from '../../../../../adapters/database/index.ts';\nimport type { IKeyRepository, IKeyStore, IRealmRepository } from '../../../../../core/index.ts';\nimport {\n    REALM_CIPHER_BLOB_VERSION,\n    isWrappedKeyMaterial,\n    unwrapKeyMaterial,\n    wrapKeyMaterial,\n} from '../../../../../core/index.ts';\nimport { applyRealmScopeSelect, isEntityUnique, translateWhereConditions } from '../helpers.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type KeyRepositoryAdapterOptions = {\n    /**\n     * Optional KEK (config secretsEncryptionKey) — when present, key\n     * material is persisted wrapped and unwrapped transparently on read.\n     */\n    secretsCipher?: ISymmetricCipher | null,\n    logger?: Logger,\n};\n\n/**\n * One adapter, two ports: the entity CRUD surface (IKeyRepository) for the\n * key management API and the material-resolving store (IKeyStore) for the\n * signer / verifier / realm cipher. Entity reads never select\n * decryptionKey; only the IKeyStore surface hands out (unwrapped) material.\n */\nexport class KeyRepositoryAdapter implements IKeyRepository, IKeyStore {\n    protected dataSource : DataSource;\n\n    protected secretsCipher : ISymmetricCipher | null;\n\n    protected realmRepository : IRealmRepository;\n\n    protected logger? : Logger;\n\n    constructor(dataSource: DataSource, options: KeyRepositoryAdapterOptions = {}) {\n        this.dataSource = dataSource;\n        this.secretsCipher = options.secretsCipher ?? null;\n        this.logger = options.logger;\n        this.realmRepository = new RealmRepositoryAdapter(dataSource.getRepository(RealmEntity));\n    }\n\n    protected get repository() : Repository<KeyEntity> {\n        return this.dataSource.getRepository(KeyEntity);\n    }\n\n    // ------------------------------------------------------------------\n    // IKeyStore — material resolution (signer / verifier / realm cipher)\n    // ------------------------------------------------------------------\n\n    async resolveOrCreate(realmId: string, use: `${JWKUse}`): Promise<Key> {\n        const { repository } = this;\n\n        const entity = await repository.findOne({\n            select: {\n                id: true,\n                name: true,\n                type: true,\n                use: true,\n                status: true,\n                signatureAlgorithm: true,\n                encryptionKey: true,\n                decryptionKey: true,\n                realmId: true,\n            },\n            where: {\n                realmId,\n                use,\n                status: KeyStatus.ACTIVE,\n            },\n            // createdAt + id break priority ties deterministically (e.g.\n            // duplicate mints from a concurrent zero-row backstop race —\n            // benign, both keys verify, but selection must be stable).\n            order: {\n                priority: 'DESC', \n                createdAt: 'DESC', \n                id: 'ASC', \n            },\n        });\n\n        if (entity) {\n            return this.afterLoad(repository, entity);\n        }\n\n        const total = await repository.countBy({ realmId, use });\n        if (total > 0) {\n            // an admin who disabled every key meant it — do not silently\n            // re-mint around the kill switch.\n            throw new AuthupError(\n                `No active ${use} key is available for realm ${realmId} ` +\n                `(${total} key(s) exist, none active).`,\n            );\n        }\n\n        if (use === JWKUse.ENCRYPTION) {\n            return this.createEncryptionKey(repository, realmId);\n        }\n\n        return this.createSignatureKey(repository, realmId);\n    }\n\n    async resolveById(id: string): Promise<Key | null> {\n        const { repository } = this;\n\n        // `id` reaches here from an attacker-controlled JWT `kid` header on the\n        // token-verification hot path. A non-UUID value binds against a\n        // postgres `uuid` column as a driver-level type error (500) instead of\n        // a clean miss — short-circuit to \"not found\" so a garbage kid is a\n        // plain verification failure.\n        if (!isUUID(id)) {\n            return null;\n        }\n\n        const entity = await repository.findOne({\n            select: {\n                id: true,\n                name: true,\n                type: true,\n                use: true,\n                status: true,\n                signatureAlgorithm: true,\n                encryptionKey: true,\n                decryptionKey: true,\n                realmId: true,\n            },\n            where: { id },\n        });\n\n        if (!entity) {\n            return null;\n        }\n\n        return this.afterLoad(repository, entity);\n    }\n\n    protected async createSignatureKey(\n        repository: Repository<KeyEntity>,\n        realmId: string,\n    ) : Promise<Key> {\n        const keyPair = await createAsymmetricKeyPair({ name: CryptoAsymmetricAlgorithm.RSASSA_PKCS1_V1_5 });\n\n        const privateKeyContainer = new AsymmetricKey(keyPair.privateKey);\n        const publicKeyContainer = new AsymmetricKey(keyPair.publicKey);\n\n        const material = await privateKeyContainer.toBase64();\n\n        const entity = repository.create({\n            name: this.generateName(JWKUse.SIGNATURE),\n            type: JWKType.RSA,\n            use: JWKUse.SIGNATURE,\n            status: KeyStatus.ACTIVE,\n            decryptionKey: await this.protect(material),\n            encryptionKey: await publicKeyContainer.toBase64(),\n            realmId,\n            signatureAlgorithm: `${JWTAlgorithm.RS256}`,\n        });\n\n        await repository.save(entity);\n\n        // hand the caller usable material regardless of the persisted form.\n        entity.decryptionKey = material;\n\n        return entity;\n    }\n\n    protected async createEncryptionKey(\n        repository: Repository<KeyEntity>,\n        realmId: string,\n    ) : Promise<Key> {\n        const raw = new Uint8Array(32);\n        getRandomValues(raw);\n\n        const material = arrayBufferToBase64(raw.buffer);\n\n        const entity = repository.create({\n            name: this.generateName(JWKUse.ENCRYPTION),\n            type: JWKType.OCT,\n            use: JWKUse.ENCRYPTION,\n            status: KeyStatus.ACTIVE,\n            decryptionKey: await this.protect(material),\n            encryptionKey: null,\n            realmId,\n            signatureAlgorithm: null,\n        });\n\n        await repository.save(entity);\n\n        entity.decryptionKey = material;\n\n        return entity;\n    }\n\n    protected generateName(use: `${JWKUse}`) : string {\n        return `${use}-${createNanoID(10)}`;\n    }\n\n    protected async afterLoad(\n        repository: Repository<KeyEntity>,\n        entity: KeyEntity,\n    ) : Promise<Key> {\n        if (!entity.decryptionKey) {\n            return entity;\n        }\n\n        if (isWrappedKeyMaterial(entity.decryptionKey)) {\n            entity.decryptionKey = await unwrapKeyMaterial(this.secretsCipher, entity.decryptionKey);\n            return entity;\n        }\n\n        if (this.secretsCipher) {\n            // lazy wrap-on-read: a KEK added to a running deployment\n            // hardens existing rows without a migration step. Best-effort —\n            // the material stays readable either way.\n            const material = entity.decryptionKey;\n            try {\n                await repository.update(entity.id, { decryptionKey: await wrapKeyMaterial(this.secretsCipher, material) });\n            } catch (e) {\n                // Best-effort — the material stays readable and the next read\n                // retries. Surface it though: a persistent failure (e.g. a\n                // read-only replica) means the row is never hardened at rest.\n                this.logger?.warn(`Failed to wrap key material at rest for key ${entity.id}.`, { error: e });\n            }\n            entity.decryptionKey = material;\n        }\n\n        return entity;\n    }\n\n    protected async protect(material: string) : Promise<string> {\n        if (!this.secretsCipher) {\n            return material;\n        }\n\n        return wrapKeyMaterial(this.secretsCipher, material);\n    }\n\n    // ------------------------------------------------------------------\n    // IKeyRepository — entity CRUD surface (key management API)\n    // ------------------------------------------------------------------\n\n    async findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<Key>> {\n        const qb = this.repository.createQueryBuilder('keyEntity');\n        qb.groupBy('keyEntity.id');\n\n        const { pagination } = applyQuery(qb, query);\n\n        applyRealmScopeSelect(qb, 'keyEntity');\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: redactFieldConditions(query, entities),\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    async findOneById(id: string): Promise<Key | null> {\n        return this.findOneBy({ id });\n    }\n\n    async findOneByName(name: string, realmKey?: string): Promise<Key | null> {\n        const where : FindOptionsWhere<KeyEntity> = { name };\n\n        if (realmKey) {\n            const realmId = await this.realmRepository.resolveId(realmKey);\n            if (!realmId) {\n                return null;\n            }\n\n            where.realmId = realmId;\n        }\n\n        return this.repository.findOneBy(where);\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Key | null> {\n        return isUUID(idOrName) ?\n            this.findOneById(idOrName) :\n            this.findOneByName(idOrName, realm);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<Key[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Key | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<Key>): Key {\n        return this.repository.create(data);\n    }\n\n    merge(entity: Key, data: Partial<Key>): Key {\n        return this.repository.merge(entity as KeyEntity, data);\n    }\n\n    async save(entity: Key): Promise<Key> {\n        if (\n            entity.decryptionKey &&\n            this.secretsCipher &&\n            !isWrappedKeyMaterial(entity.decryptionKey)\n        ) {\n            const material = entity.decryptionKey;\n            entity.decryptionKey = await wrapKeyMaterial(this.secretsCipher, material);\n            const saved = await this.repository.save(entity as KeyEntity);\n            saved.decryptionKey = material;\n            return saved;\n        }\n\n        return this.repository.save(entity as KeyEntity);\n    }\n\n    async remove(entity: Key): Promise<void> {\n        await this.repository.remove(entity as KeyEntity);\n    }\n\n    async validateJoinColumns(data: Partial<Key>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.dataSource,\n            entityTarget: KeyEntity,\n        });\n    }\n\n    async checkUniqueness(data: Partial<Key>, existing?: Key): Promise<void> {\n        const isUnique = await isEntityUnique({\n            dataSource: this.dataSource,\n            entityTarget: KeyEntity,\n            entity: data,\n            entityExisting: existing,\n        });\n\n        if (!isUnique) {\n            throw new DatabaseConflictError();\n        }\n    }\n\n    async countBlobReferences(keyId: string): Promise<number> {\n        return this.dataSource.getRepository(UserAuthenticatorEntity).countBy({ secret: Like(`${REALM_CIPHER_BLOB_VERSION}.${keyId}.%`) });\n    }\n\n    async findHighestPriority(realmId: string, use: string): Promise<number | null> {\n        return this.repository.maximum('priority', { realmId, use: use as `${JWKUse}` });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDA,IAAa4B,uBAAb,MAAaA;CACCC;CAEAC;CAEAC;CAEAC;CAEV,YAAYH,YAAwBI,UAAuC,CAAC,GAAG;EAC3E,KAAKJ,aAAaA;EAClB,KAAKC,gBAAgBG,QAAQH,iBAAiB;EAC9C,KAAKE,SAASC,QAAQD;EACtB,KAAKD,kBAAkB,IAAIJ,uBAAuBE,WAAWK,cAAchB,WAAAA,CAAAA;CAC/E;CAEA,IAAciB,aAAqC;EAC/C,OAAO,KAAKN,WAAWK,cAAcjB,SAAAA;CACzC;CAMA,MAAMmB,gBAAgBC,SAAiBC,KAAgC;EACnE,MAAM,EAAEH,eAAe;EAEvB,MAAMI,SAAS,MAAMJ,WAAWK,QAAQ;GACpCC,QAAQ;IACJC,IAAI;IACJC,MAAM;IACNC,MAAM;IACNN,KAAK;IACLO,QAAQ;IACRC,oBAAoB;IACpBC,eAAe;IACfC,eAAe;IACfX,SAAS;GACb;GACAY,OAAO;IACHZ;IACAC;IACAO,QAAQ5C,UAAUiD;GACtB;GAIAC,OAAO;IACHC,UAAU;IACVC,WAAW;IACXX,IAAI;GACR;EACJ,CAAA;EAEA,IAAIH,QACA,OAAO,KAAKe,UAAUnB,YAAYI,MAAAA;EAGtC,MAAMgB,QAAQ,MAAMpB,WAAWqB,QAAQ;GAAEnB;GAASC;EAAI,CAAA;EACtD,IAAIiB,QAAQ,GAGR,MAAM,IAAIvD,YACN,aAAasC,IAAI,8BAA8BD,QAAQ,IACnDkB,MAAM,6BAA6B;EAI/C,IAAIjB,QAAQ7B,OAAOgD,YACf,OAAO,KAAKC,oBAAoBvB,YAAYE,OAAAA;EAGhD,OAAO,KAAKsB,mBAAmBxB,YAAYE,OAAAA;CAC/C;CAEA,MAAMuB,YAAYlB,IAAiC;EAC/C,MAAM,EAAEP,eAAe;EAOvB,IAAI,CAAC/B,OAAOsC,EAAAA,GACR,OAAO;EAGX,MAAMH,SAAS,MAAMJ,WAAWK,QAAQ;GACpCC,QAAQ;IACJC,IAAI;IACJC,MAAM;IACNC,MAAM;IACNN,KAAK;IACLO,QAAQ;IACRC,oBAAoB;IACpBC,eAAe;IACfC,eAAe;IACfX,SAAS;GACb;GACAY,OAAO,EAAEP,GAAG;EAChB,CAAA;EAEA,IAAI,CAACH,QACD,OAAO;EAGX,OAAO,KAAKe,UAAUnB,YAAYI,MAAAA;CACtC;CAEA,MAAgBoB,mBACZxB,YACAE,SACa;EACb,MAAMwB,UAAU,MAAMtD,wBAAwB,EAAEoC,MAAMrC,0BAA0BwD,kBAAkB,CAAA;EAElG,MAAMC,sBAAsB,IAAI1D,cAAcwD,QAAQG,UAAU;EAChE,MAAMC,qBAAqB,IAAI5D,cAAcwD,QAAQK,SAAS;EAE9D,MAAMC,WAAW,MAAMJ,oBAAoBK,SAAQ;EAEnD,MAAM7B,SAASJ,WAAWkC,OAAO;GAC7B1B,MAAM,KAAK2B,aAAa7D,OAAO8D,SAAS;GACxC3B,MAAMpC,QAAQgE;GACdlC,KAAK7B,OAAO8D;GACZ1B,QAAQ5C,UAAUiD;GAClBF,eAAe,MAAM,KAAKyB,QAAQN,QAAAA;GAClCpB,eAAe,MAAMkB,mBAAmBG,SAAQ;GAChD/B;GACAS,oBAAoB,GAAGpC,aAAagE;EACxC,CAAA;EAEA,MAAMvC,WAAWwC,KAAKpC,MAAAA;EAGtBA,OAAOS,gBAAgBmB;EAEvB,OAAO5B;CACX;CAEA,MAAgBmB,oBACZvB,YACAE,SACa;EACb,MAAMuC,sBAAM,IAAIC,WAAW,EAAA;EAC3B9D,gBAAgB6D,GAAAA;EAEhB,MAAMT,WAAWjE,oBAAoB0E,IAAIE,MAAM;EAE/C,MAAMvC,SAASJ,WAAWkC,OAAO;GAC7B1B,MAAM,KAAK2B,aAAa7D,OAAOgD,UAAU;GACzCb,MAAMpC,QAAQuE;GACdzC,KAAK7B,OAAOgD;GACZZ,QAAQ5C,UAAUiD;GAClBF,eAAe,MAAM,KAAKyB,QAAQN,QAAAA;GAClCpB,eAAe;GACfV;GACAS,oBAAoB;EACxB,CAAA;EAEA,MAAMX,WAAWwC,KAAKpC,MAAAA;EAEtBA,OAAOS,gBAAgBmB;EAEvB,OAAO5B;CACX;CAEU+B,aAAahC,KAA2B;EAC9C,OAAO,GAAGA,IAAI,GAAGnC,aAAa,EAAA;CAClC;CAEA,MAAgBmD,UACZnB,YACAI,QACa;EACb,IAAI,CAACA,OAAOS,eACR,OAAOT;EAGX,IAAIlB,qBAAqBkB,OAAOS,aAAa,GAAG;GAC5CT,OAAOS,gBAAgB,MAAM1B,kBAAkB,KAAKQ,eAAeS,OAAOS,aAAa;GACvF,OAAOT;EACX;EAEA,IAAI,KAAKT,eAAe;GAIpB,MAAMqC,WAAW5B,OAAOS;GACxB,IAAI;IACA,MAAMb,WAAW6C,OAAOzC,OAAOG,IAAI,EAAEM,eAAe,MAAMzB,gBAAgB,KAAKO,eAAeqC,QAAAA,EAAU,CAAA;GAC5G,SAASc,GAAG;IAIR,KAAKjD,QAAQkD,KAAK,+CAA+C3C,OAAOG,GAAG,IAAI,EAAEyC,OAAOF,EAAE,CAAA;GAC9F;GACA1C,OAAOS,gBAAgBmB;EAC3B;EAEA,OAAO5B;CACX;CAEA,MAAgBkC,QAAQN,UAAoC;EACxD,IAAI,CAAC,KAAKrC,eACN,OAAOqC;EAGX,OAAO5C,gBAAgB,KAAKO,eAAeqC,QAAAA;CAC/C;CAMA,MAAMiB,SAASC,OAA6D;EACxE,MAAMC,KAAK,KAAKnD,WAAWoD,mBAAmB,WAAA;EAC9CD,GAAGE,QAAQ,cAAA;EAEX,MAAM,EAAEC,eAAe5E,WAAWyE,IAAID,KAAAA;EAEtC7D,sBAAsB8D,IAAI,WAAA;EAE1B,MAAM,CAACI,UAAUnC,SAAS,MAAM+B,GAAGK,gBAAe;EAElD,OAAO;GACHC,MAAM9E,sBAAsBuE,OAAOK,QAAAA;GACnCG,MAAM;IACFtC;IACA,GAAGkC;GACP;EACJ;CACJ;CAEA,MAAMK,YAAYpD,IAAiC;EAC/C,OAAO,KAAKqD,UAAU,EAAErD,GAAG,CAAA;CAC/B;CAEA,MAAMsD,cAAcrD,MAAcsD,UAAwC;EACtE,MAAMhD,QAAsC,EAAEN,KAAK;EAEnD,IAAIsD,UAAU;GACV,MAAM5D,UAAU,MAAM,KAAKN,gBAAgBmE,UAAUD,QAAAA;GACrD,IAAI,CAAC5D,SACD,OAAO;GAGXY,MAAMZ,UAAUA;EACpB;EAEA,OAAO,KAAKF,WAAW4D,UAAU9C,KAAAA;CACrC;CAEA,MAAMkD,kBAAkBC,UAAkBC,OAAqC;EAC3E,OAAOjG,OAAOgG,QAAAA,IACV,KAAKN,YAAYM,QAAAA,IACjB,KAAKJ,cAAcI,UAAUC,KAAAA;CACrC;CAEA,MAAMC,WAAWrD,OAA4C;EACzD,OAAO,KAAKd,WAAWoE,OAAO7E,yBAAyBuB,KAAAA,CAAAA;CAC3D;CAEA,MAAM8C,UAAU9C,OAAiD;EAC7D,OAAO,KAAKd,WAAW4D,UAAUrE,yBAAyBuB,KAAAA,CAAAA;CAC9D;CAEAoB,OAAOuB,MAAyB;EAC5B,OAAO,KAAKzD,WAAWkC,OAAOuB,IAAAA;CAClC;CAEAY,MAAMjE,QAAaqD,MAAyB;EACxC,OAAO,KAAKzD,WAAWqE,MAAMjE,QAAqBqD,IAAAA;CACtD;CAEA,MAAMjB,KAAKpC,QAA2B;EAClC,IACIA,OAAOS,iBACP,KAAKlB,iBACL,CAACT,qBAAqBkB,OAAOS,aAAa,GAC5C;GACE,MAAMmB,WAAW5B,OAAOS;GACxBT,OAAOS,gBAAgB,MAAMzB,gBAAgB,KAAKO,eAAeqC,QAAAA;GACjE,MAAMsC,QAAQ,MAAM,KAAKtE,WAAWwC,KAAKpC,MAAAA;GACzCkE,MAAMzD,gBAAgBmB;GACtB,OAAOsC;EACX;EAEA,OAAO,KAAKtE,WAAWwC,KAAKpC,MAAAA;CAChC;CAEA,MAAMmE,OAAOnE,QAA4B;EACrC,MAAM,KAAKJ,WAAWuE,OAAOnE,MAAAA;CACjC;CAEA,MAAMoE,oBAAoBf,MAAmC;EACzD,MAAMhF,0BAA0BgF,MAAM;GAClC/D,YAAY,KAAKA;GACjB+E,cAAc3F;EAClB,CAAA;CACJ;CAEA,MAAM4F,gBAAgBjB,MAAoBkB,UAA+B;EAQrE,IAAI,CAACC,MAPkBtF,eAAe;GAClCI,YAAY,KAAKA;GACjB+E,cAAc3F;GACdsB,QAAQqD;GACRoB,gBAAgBF;EACpB,CAAA,GAGI,MAAM,IAAI9F,sBAAAA;CAElB;CAEA,MAAMiG,oBAAoBC,OAAgC;EACtD,OAAO,KAAKrF,WAAWK,cAAcf,uBAAAA,CAAAA,CAAyBqC,QAAQ,EAAE2D,QAAQxG,KAAK,MAAgCuG,MAAM,GAAG,EAAE,CAAA;CACpI;CAEA,MAAME,oBAAoB/E,SAAiBC,KAAqC;EAC5E,OAAO,KAAKH,WAAWkF,QAAQ,YAAY;GAAEhF;GAAcC;EAAmB,CAAA;CAClF;AACJ"}

package/dist/app/modules/database/repositories/permission/repository.mjs

@@ -3,7 +3,7 @@ import "node:url";
 import.meta.url;
 import { PermissionEntity } from "../../../../../adapters/database/domains/permission/entity.mjs";
 import "../../../../../adapters/database/domains/index.mjs";
-import { applyQuery } from "../query.mjs";
+import { applyQuery, redactFieldConditions } from "../query.mjs";
 import { isEntityUnique, translateWhereConditions } from "../helpers.mjs";
 import { DatabaseConflictError } from "../../../../../adapters/database/errors/conflict.mjs";
 import "../../../../../adapters/database/index.mjs";
@@ -24,7 +24,7 @@ var PermissionRepositoryAdapter = class {
 		const { pagination } = applyQuery(qb, query);
 		const [entities, total] = await qb.getManyAndCount();
 		return {
-			data: entities,
+			data: redactFieldConditions(query, entities),
 			meta: {
 				total,
 				...pagination

package/dist/app/modules/database/repositories/permission/repository.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"repository.mjs","names":["isUUID","validateEntityJoinColumns","applyQuery","DatabaseConflictError","isEntityUnique","translateWhereConditions","PermissionEntity","RealmRepositoryAdapter","PermissionRepositoryAdapter","repository","realmRepository","ctx","findMany","query","qb","createQueryBuilder","groupBy","pagination","entities","total","getManyAndCount","data","meta","findOneById","id","findOneBy","findOneByName","name","realmKey","where","realmId","resolveId","andWhere","getOne","findOneByIdOrName","idOrName","realm","result","findManyBy","findBy","create","merge","entity","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget","checkUniqueness","existing","isUnique","entityExisting"],"sources":["../../../../../../src/app/modules/database/repositories/permission/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Permission, Realm } from '@authup/core-kit';\nimport type { IQuery } from '@rapiq/core';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport { validateEntityJoinColumns } from 'typeorm-extension';\nimport { applyQuery } from '../query.ts';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IPermissionRepository, IRealmRepository } from '../../../../../core/index.ts';\nimport { DatabaseConflictError } from '../../../../../adapters/database/index.ts';\nimport { isEntityUnique, translateWhereConditions } from '../helpers.ts';\nimport { PermissionEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type PermissionRepositoryAdapterContext = {\n    repository: Repository<Permission>,\n    realmRepository: Repository<Realm>,\n};\n\nexport class PermissionRepositoryAdapter implements IPermissionRepository {\n    private readonly repository: Repository<Permission>;\n\n    private readonly realmRepository: IRealmRepository;\n\n    constructor(ctx: PermissionRepositoryAdapterContext) {\n        this.repository = ctx.repository;\n        this.realmRepository = new RealmRepositoryAdapter(ctx.realmRepository);\n    }\n\n    async findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<Permission>> {\n        const qb = this.repository.createQueryBuilder('permission');\n        qb.groupBy('permission.id');\n\n        const { pagination } = applyQuery(qb, query);\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    findOneById(id: string): Promise<Permission | null> {\n        return this.findOneBy({ id });\n    }\n\n    async findOneByName(name: string, realmKey?: string): Promise<Permission | null> {\n        const qb = this.repository.createQueryBuilder('permission');\n        qb.where('permission.name = :name', { name });\n\n        if (realmKey) {\n            const realmId = await this.realmRepository.resolveId(realmKey);\n            if (!realmId) {\n                return null;\n            }\n            qb.andWhere('permission.realmId = :realmId', { realmId });\n        }\n\n        return qb.getOne();\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Permission | null> {\n        const result = isUUID(idOrName) ?\n            await this.findOneById(idOrName) :\n            await this.findOneByName(idOrName, realm);\n\n        return result;\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<Permission[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Permission | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<Permission>): Permission {\n        return this.repository.create(data);\n    }\n\n    merge(entity: Permission, data: Partial<Permission>): Permission {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: Permission): Promise<Permission> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: Permission): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<Permission>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: PermissionEntity,\n        });\n    }\n\n    async checkUniqueness(data: Partial<Permission>, existing?: Permission): Promise<void> {\n        const isUnique = await isEntityUnique({\n            dataSource: this.repository.manager.connection,\n            entityTarget: PermissionEntity,\n            entity: data,\n            entityExisting: existing,\n        });\n\n        if (!isUnique) {\n            throw new DatabaseConflictError();\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;;;AAyBA,IAAaQ,8BAAb,MAAaA;CACQC;CAEAC;CAEjB,YAAYC,KAAyC;EACjD,KAAKF,aAAaE,IAAIF;EACtB,KAAKC,kBAAkB,IAAIH,uBAAuBI,IAAID,eAAe;CACzE;CAEA,MAAME,SAASC,OAAoE;EAC/E,MAAMC,KAAK,KAAKL,WAAWM,mBAAmB,YAAA;EAC9CD,GAAGE,QAAQ,eAAA;EAEX,MAAM,EAAEC,eAAef,WAAWY,IAAID,KAAAA;EAEtC,MAAM,CAACK,UAAUC,SAAS,MAAML,GAAGM,gBAAe;EAElD,OAAO;GACHC,MAAMH;GACNI,MAAM;IACFH;IACA,GAAGF;GACP;EACJ;CACJ;CAEAM,YAAYC,IAAwC;EAChD,OAAO,KAAKC,UAAU,EAAED,GAAG,CAAA;CAC/B;CAEA,MAAME,cAAcC,MAAcC,UAA+C;EAC7E,MAAMd,KAAK,KAAKL,WAAWM,mBAAmB,YAAA;EAC9CD,GAAGe,MAAM,2BAA2B,EAAEF,KAAK,CAAA;EAE3C,IAAIC,UAAU;GACV,MAAME,UAAU,MAAM,KAAKpB,gBAAgBqB,UAAUH,QAAAA;GACrD,IAAI,CAACE,SACD,OAAO;GAEXhB,GAAGkB,SAAS,iCAAiC,EAAEF,QAAQ,CAAA;EAC3D;EAEA,OAAOhB,GAAGmB,OAAM;CACpB;CAEA,MAAMC,kBAAkBC,UAAkBC,OAA4C;EAKlF,OAJepC,OAAOmC,QAAAA,IAClB,MAAM,KAAKZ,YAAYY,QAAAA,IACvB,MAAM,KAAKT,cAAcS,UAAUC,KAAAA;CAG3C;CAEA,MAAME,WAAWT,OAAmD;EAChE,OAAO,KAAKpB,WAAW8B,OAAOlC,yBAAyBwB,KAAAA,CAAAA;CAC3D;CAEA,MAAMJ,UAAUI,OAAwD;EACpE,OAAO,KAAKpB,WAAWgB,UAAUpB,yBAAyBwB,KAAAA,CAAAA;CAC9D;CAEAW,OAAOnB,MAAuC;EAC1C,OAAO,KAAKZ,WAAW+B,OAAOnB,IAAAA;CAClC;CAEAoB,MAAMC,QAAoBrB,MAAuC;EAC7D,OAAO,KAAKZ,WAAWgC,MAAMC,QAAQrB,IAAAA;CACzC;CAEA,MAAMsB,KAAKD,QAAyC;EAChD,OAAO,KAAKjC,WAAWkC,KAAKD,MAAAA;CAChC;CAEA,MAAME,OAAOF,QAAmC;EAC5C,MAAM,KAAKjC,WAAWmC,OAAOF,MAAAA;CACjC;CAEA,MAAMG,oBAAoBxB,MAA0C;EAChE,MAAMpB,0BAA0BoB,MAAM;GAClCyB,YAAY,KAAKrC,WAAWsC,QAAQC;GACpCC,cAAc3C;EAClB,CAAA;CACJ;CAEA,MAAM4C,gBAAgB7B,MAA2B8B,UAAsC;EAQnF,IAAI,CAACC,MAPkBhD,eAAe;GAClC0C,YAAY,KAAKrC,WAAWsC,QAAQC;GACpCC,cAAc3C;GACdoC,QAAQrB;GACRgC,gBAAgBF;EACpB,CAAA,GAGI,MAAM,IAAIhD,sBAAAA;CAElB;AACJ"}
+{"version":3,"file":"repository.mjs","names":["isUUID","validateEntityJoinColumns","applyQuery","redactFieldConditions","DatabaseConflictError","isEntityUnique","translateWhereConditions","PermissionEntity","RealmRepositoryAdapter","PermissionRepositoryAdapter","repository","realmRepository","ctx","findMany","query","qb","createQueryBuilder","groupBy","pagination","entities","total","getManyAndCount","data","meta","findOneById","id","findOneBy","findOneByName","name","realmKey","where","realmId","resolveId","andWhere","getOne","findOneByIdOrName","idOrName","realm","result","findManyBy","findBy","create","merge","entity","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget","checkUniqueness","existing","isUnique","entityExisting"],"sources":["../../../../../../src/app/modules/database/repositories/permission/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Permission, Realm } from '@authup/core-kit';\nimport type { IQuery } from '@rapiq/core';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport { validateEntityJoinColumns } from 'typeorm-extension';\nimport { applyQuery, redactFieldConditions } from '../query.ts';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IPermissionRepository, IRealmRepository } from '../../../../../core/index.ts';\nimport { DatabaseConflictError } from '../../../../../adapters/database/index.ts';\nimport { isEntityUnique, translateWhereConditions } from '../helpers.ts';\nimport { PermissionEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type PermissionRepositoryAdapterContext = {\n    repository: Repository<Permission>,\n    realmRepository: Repository<Realm>,\n};\n\nexport class PermissionRepositoryAdapter implements IPermissionRepository {\n    private readonly repository: Repository<Permission>;\n\n    private readonly realmRepository: IRealmRepository;\n\n    constructor(ctx: PermissionRepositoryAdapterContext) {\n        this.repository = ctx.repository;\n        this.realmRepository = new RealmRepositoryAdapter(ctx.realmRepository);\n    }\n\n    async findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<Permission>> {\n        const qb = this.repository.createQueryBuilder('permission');\n        qb.groupBy('permission.id');\n\n        const { pagination } = applyQuery(qb, query);\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: redactFieldConditions(query, entities),\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    findOneById(id: string): Promise<Permission | null> {\n        return this.findOneBy({ id });\n    }\n\n    async findOneByName(name: string, realmKey?: string): Promise<Permission | null> {\n        const qb = this.repository.createQueryBuilder('permission');\n        qb.where('permission.name = :name', { name });\n\n        if (realmKey) {\n            const realmId = await this.realmRepository.resolveId(realmKey);\n            if (!realmId) {\n                return null;\n            }\n            qb.andWhere('permission.realmId = :realmId', { realmId });\n        }\n\n        return qb.getOne();\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Permission | null> {\n        const result = isUUID(idOrName) ?\n            await this.findOneById(idOrName) :\n            await this.findOneByName(idOrName, realm);\n\n        return result;\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<Permission[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Permission | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<Permission>): Permission {\n        return this.repository.create(data);\n    }\n\n    merge(entity: Permission, data: Partial<Permission>): Permission {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: Permission): Promise<Permission> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: Permission): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<Permission>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: PermissionEntity,\n        });\n    }\n\n    async checkUniqueness(data: Partial<Permission>, existing?: Permission): Promise<void> {\n        const isUnique = await isEntityUnique({\n            dataSource: this.repository.manager.connection,\n            entityTarget: PermissionEntity,\n            entity: data,\n            entityExisting: existing,\n        });\n\n        if (!isUnique) {\n            throw new DatabaseConflictError();\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;;;AAyBA,IAAaS,8BAAb,MAAaA;CACQC;CAEAC;CAEjB,YAAYC,KAAyC;EACjD,KAAKF,aAAaE,IAAIF;EACtB,KAAKC,kBAAkB,IAAIH,uBAAuBI,IAAID,eAAe;CACzE;CAEA,MAAME,SAASC,OAAoE;EAC/E,MAAMC,KAAK,KAAKL,WAAWM,mBAAmB,YAAA;EAC9CD,GAAGE,QAAQ,eAAA;EAEX,MAAM,EAAEC,eAAehB,WAAWa,IAAID,KAAAA;EAEtC,MAAM,CAACK,UAAUC,SAAS,MAAML,GAAGM,gBAAe;EAElD,OAAO;GACHC,MAAMnB,sBAAsBW,OAAOK,QAAAA;GACnCI,MAAM;IACFH;IACA,GAAGF;GACP;EACJ;CACJ;CAEAM,YAAYC,IAAwC;EAChD,OAAO,KAAKC,UAAU,EAAED,GAAG,CAAA;CAC/B;CAEA,MAAME,cAAcC,MAAcC,UAA+C;EAC7E,MAAMd,KAAK,KAAKL,WAAWM,mBAAmB,YAAA;EAC9CD,GAAGe,MAAM,2BAA2B,EAAEF,KAAK,CAAA;EAE3C,IAAIC,UAAU;GACV,MAAME,UAAU,MAAM,KAAKpB,gBAAgBqB,UAAUH,QAAAA;GACrD,IAAI,CAACE,SACD,OAAO;GAEXhB,GAAGkB,SAAS,iCAAiC,EAAEF,QAAQ,CAAA;EAC3D;EAEA,OAAOhB,GAAGmB,OAAM;CACpB;CAEA,MAAMC,kBAAkBC,UAAkBC,OAA4C;EAKlF,OAJerC,OAAOoC,QAAAA,IAClB,MAAM,KAAKZ,YAAYY,QAAAA,IACvB,MAAM,KAAKT,cAAcS,UAAUC,KAAAA;CAG3C;CAEA,MAAME,WAAWT,OAAmD;EAChE,OAAO,KAAKpB,WAAW8B,OAAOlC,yBAAyBwB,KAAAA,CAAAA;CAC3D;CAEA,MAAMJ,UAAUI,OAAwD;EACpE,OAAO,KAAKpB,WAAWgB,UAAUpB,yBAAyBwB,KAAAA,CAAAA;CAC9D;CAEAW,OAAOnB,MAAuC;EAC1C,OAAO,KAAKZ,WAAW+B,OAAOnB,IAAAA;CAClC;CAEAoB,MAAMC,QAAoBrB,MAAuC;EAC7D,OAAO,KAAKZ,WAAWgC,MAAMC,QAAQrB,IAAAA;CACzC;CAEA,MAAMsB,KAAKD,QAAyC;EAChD,OAAO,KAAKjC,WAAWkC,KAAKD,MAAAA;CAChC;CAEA,MAAME,OAAOF,QAAmC;EAC5C,MAAM,KAAKjC,WAAWmC,OAAOF,MAAAA;CACjC;CAEA,MAAMG,oBAAoBxB,MAA0C;EAChE,MAAMrB,0BAA0BqB,MAAM;GAClCyB,YAAY,KAAKrC,WAAWsC,QAAQC;GACpCC,cAAc3C;EAClB,CAAA;CACJ;CAEA,MAAM4C,gBAAgB7B,MAA2B8B,UAAsC;EAQnF,IAAI,CAACC,MAPkBhD,eAAe;GAClC0C,YAAY,KAAKrC,WAAWsC,QAAQC;GACpCC,cAAc3C;GACdoC,QAAQrB;GACRgC,gBAAgBF;EACpB,CAAA,GAGI,MAAM,IAAIhD,sBAAAA;CAElB;AACJ"}

package/dist/app/modules/database/repositories/permission-policy/repository.mjs

@@ -3,7 +3,7 @@ import "node:url";
 import.meta.url;
 import { PermissionPolicyEntity } from "../../../../../adapters/database/domains/permission-policy/entity.mjs";
 import "../../../../../adapters/database/domains/index.mjs";
-import { applyQuery } from "../query.mjs";
+import { applyQuery, redactFieldConditions } from "../query.mjs";
 import { translateWhereConditions } from "../helpers.mjs";
 import { validateEntityJoinColumns } from "typeorm-extension";
 //#region src/app/modules/database/repositories/permission-policy/repository.ts
@@ -18,7 +18,7 @@ var PermissionPolicyRepositoryAdapter = class {
 		const { pagination } = applyQuery(qb, query);
 		const [entities, total] = await qb.getManyAndCount();
 		return {
-			data: entities,
+			data: redactFieldConditions(query, entities),
 			meta: {
 				total,
 				...pagination

package/dist/app/modules/database/repositories/permission-policy/repository.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"repository.mjs","names":["validateEntityJoinColumns","applyQuery","PermissionPolicyEntity","translateWhereConditions","PermissionPolicyRepositoryAdapter","repository","findMany","query","qb","createQueryBuilder","groupBy","pagination","entities","total","getManyAndCount","data","meta","findOneById","id","findOneBy","findOneByName","findOneByIdOrName","idOrName","findManyBy","where","findBy","create","merge","entity","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget"],"sources":["../../../../../../src/app/modules/database/repositories/permission-policy/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PermissionPolicy } from '@authup/core-kit';\nimport type { IQuery } from '@rapiq/core';\nimport type { Repository } from 'typeorm';\nimport { validateEntityJoinColumns } from 'typeorm-extension';\nimport { applyQuery } from '../query.ts';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IPermissionPolicyRepository } from '../../../../../core/index.ts';\nimport { PermissionPolicyEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { translateWhereConditions } from '../helpers.ts';\n\nexport class PermissionPolicyRepositoryAdapter implements IPermissionPolicyRepository {\n    private readonly repository: Repository<PermissionPolicy>;\n\n    constructor(repository: Repository<PermissionPolicy>) {\n        this.repository = repository;\n    }\n\n    async findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<PermissionPolicy>> {\n        const qb = this.repository.createQueryBuilder('permissionPolicy');\n        qb.groupBy('permissionPolicy.id');\n\n        const { pagination } = applyQuery(qb, query);\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    findOneById(id: string): Promise<PermissionPolicy | null> {\n        return this.findOneBy({ id });\n    }\n\n    async findOneByName(): Promise<PermissionPolicy | null> {\n        return null;\n    }\n\n    findOneByIdOrName(idOrName: string): Promise<PermissionPolicy | null> {\n        return this.findOneById(idOrName);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<PermissionPolicy[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<PermissionPolicy | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<PermissionPolicy>): PermissionPolicy {\n        return this.repository.create(data);\n    }\n\n    merge(entity: PermissionPolicy, data: Partial<PermissionPolicy>): PermissionPolicy {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: PermissionPolicy): Promise<PermissionPolicy> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: PermissionPolicy): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<PermissionPolicy>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: PermissionPolicyEntity,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;AAiBA,IAAaI,oCAAb,MAAaA;CACQC;CAEjB,YAAYA,YAA0C;EAClD,KAAKA,aAAaA;CACtB;CAEA,MAAMC,SAASC,OAA0E;EACrF,MAAMC,KAAK,KAAKH,WAAWI,mBAAmB,kBAAA;EAC9CD,GAAGE,QAAQ,qBAAA;EAEX,MAAM,EAAEC,eAAeV,WAAWO,IAAID,KAAAA;EAEtC,MAAM,CAACK,UAAUC,SAAS,MAAML,GAAGM,gBAAe;EAElD,OAAO;GACHC,MAAMH;GACNI,MAAM;IACFH;IACA,GAAGF;GACP;EACJ;CACJ;CAEAM,YAAYC,IAA8C;EACtD,OAAO,KAAKC,UAAU,EAAED,GAAG,CAAA;CAC/B;CAEA,MAAME,gBAAkD;EACpD,OAAO;CACX;CAEAC,kBAAkBC,UAAoD;EAClE,OAAO,KAAKL,YAAYK,QAAAA;CAC5B;CAEA,MAAMC,WAAWC,OAAyD;EACtE,OAAO,KAAKnB,WAAWoB,OAAOtB,yBAAyBqB,KAAAA,CAAAA;CAC3D;CAEA,MAAML,UAAUK,OAA8D;EAC1E,OAAO,KAAKnB,WAAWc,UAAUhB,yBAAyBqB,KAAAA,CAAAA;CAC9D;CAEAE,OAAOX,MAAmD;EACtD,OAAO,KAAKV,WAAWqB,OAAOX,IAAAA;CAClC;CAEAY,MAAMC,QAA0Bb,MAAmD;EAC/E,OAAO,KAAKV,WAAWsB,MAAMC,QAAQb,IAAAA;CACzC;CAEA,MAAMc,KAAKD,QAAqD;EAC5D,OAAO,KAAKvB,WAAWwB,KAAKD,MAAAA;CAChC;CAEA,MAAME,OAAOF,QAAyC;EAClD,MAAM,KAAKvB,WAAWyB,OAAOF,MAAAA;CACjC;CAEA,MAAMG,oBAAoBhB,MAAgD;EACtE,MAAMf,0BAA0Be,MAAM;GAClCiB,YAAY,KAAK3B,WAAW4B,QAAQC;GACpCC,cAAcjC;EAClB,CAAA;CACJ;AACJ"}
+{"version":3,"file":"repository.mjs","names":["validateEntityJoinColumns","applyQuery","redactFieldConditions","PermissionPolicyEntity","translateWhereConditions","PermissionPolicyRepositoryAdapter","repository","findMany","query","qb","createQueryBuilder","groupBy","pagination","entities","total","getManyAndCount","data","meta","findOneById","id","findOneBy","findOneByName","findOneByIdOrName","idOrName","findManyBy","where","findBy","create","merge","entity","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget"],"sources":["../../../../../../src/app/modules/database/repositories/permission-policy/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { PermissionPolicy } from '@authup/core-kit';\nimport type { IQuery } from '@rapiq/core';\nimport type { Repository } from 'typeorm';\nimport { validateEntityJoinColumns } from 'typeorm-extension';\nimport { applyQuery, redactFieldConditions } from '../query.ts';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IPermissionPolicyRepository } from '../../../../../core/index.ts';\nimport { PermissionPolicyEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { translateWhereConditions } from '../helpers.ts';\n\nexport class PermissionPolicyRepositoryAdapter implements IPermissionPolicyRepository {\n    private readonly repository: Repository<PermissionPolicy>;\n\n    constructor(repository: Repository<PermissionPolicy>) {\n        this.repository = repository;\n    }\n\n    async findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<PermissionPolicy>> {\n        const qb = this.repository.createQueryBuilder('permissionPolicy');\n        qb.groupBy('permissionPolicy.id');\n\n        const { pagination } = applyQuery(qb, query);\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: redactFieldConditions(query, entities),\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    findOneById(id: string): Promise<PermissionPolicy | null> {\n        return this.findOneBy({ id });\n    }\n\n    async findOneByName(): Promise<PermissionPolicy | null> {\n        return null;\n    }\n\n    findOneByIdOrName(idOrName: string): Promise<PermissionPolicy | null> {\n        return this.findOneById(idOrName);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<PermissionPolicy[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<PermissionPolicy | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<PermissionPolicy>): PermissionPolicy {\n        return this.repository.create(data);\n    }\n\n    merge(entity: PermissionPolicy, data: Partial<PermissionPolicy>): PermissionPolicy {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: PermissionPolicy): Promise<PermissionPolicy> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: PermissionPolicy): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<PermissionPolicy>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: PermissionPolicyEntity,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;AAiBA,IAAaK,oCAAb,MAAaA;CACQC;CAEjB,YAAYA,YAA0C;EAClD,KAAKA,aAAaA;CACtB;CAEA,MAAMC,SAASC,OAA0E;EACrF,MAAMC,KAAK,KAAKH,WAAWI,mBAAmB,kBAAA;EAC9CD,GAAGE,QAAQ,qBAAA;EAEX,MAAM,EAAEC,eAAeX,WAAWQ,IAAID,KAAAA;EAEtC,MAAM,CAACK,UAAUC,SAAS,MAAML,GAAGM,gBAAe;EAElD,OAAO;GACHC,MAAMd,sBAAsBM,OAAOK,QAAAA;GACnCI,MAAM;IACFH;IACA,GAAGF;GACP;EACJ;CACJ;CAEAM,YAAYC,IAA8C;EACtD,OAAO,KAAKC,UAAU,EAAED,GAAG,CAAA;CAC/B;CAEA,MAAME,gBAAkD;EACpD,OAAO;CACX;CAEAC,kBAAkBC,UAAoD;EAClE,OAAO,KAAKL,YAAYK,QAAAA;CAC5B;CAEA,MAAMC,WAAWC,OAAyD;EACtE,OAAO,KAAKnB,WAAWoB,OAAOtB,yBAAyBqB,KAAAA,CAAAA;CAC3D;CAEA,MAAML,UAAUK,OAA8D;EAC1E,OAAO,KAAKnB,WAAWc,UAAUhB,yBAAyBqB,KAAAA,CAAAA;CAC9D;CAEAE,OAAOX,MAAmD;EACtD,OAAO,KAAKV,WAAWqB,OAAOX,IAAAA;CAClC;CAEAY,MAAMC,QAA0Bb,MAAmD;EAC/E,OAAO,KAAKV,WAAWsB,MAAMC,QAAQb,IAAAA;CACzC;CAEA,MAAMc,KAAKD,QAAqD;EAC5D,OAAO,KAAKvB,WAAWwB,KAAKD,MAAAA;CAChC;CAEA,MAAME,OAAOF,QAAyC;EAClD,MAAM,KAAKvB,WAAWyB,OAAOF,MAAAA;CACjC;CAEA,MAAMG,oBAAoBhB,MAAgD;EACtE,MAAMhB,0BAA0BgB,MAAM;GAClCiB,YAAY,KAAK3B,WAAW4B,QAAQC;GACpCC,cAAcjC;EAClB,CAAA;CACJ;AACJ"}

package/dist/app/modules/database/repositories/policy/repository.mjs

@@ -3,7 +3,7 @@ import "node:url";
 import.meta.url;
 import { PolicyEntity } from "../../../../../adapters/database/domains/policy/entity.mjs";
 import "../../../../../adapters/database/domains/index.mjs";
-import { applyQuery } from "../query.mjs";
+import { applyQuery, redactFieldConditions } from "../query.mjs";
 import { isEntityUnique, translateWhereConditions } from "../helpers.mjs";
 import { DatabaseConflictError } from "../../../../../adapters/database/errors/conflict.mjs";
 import "../../../../../adapters/database/index.mjs";
@@ -25,7 +25,7 @@ var PolicyRepositoryAdapter = class {
 		const [entities, total] = await qb.getManyAndCount();
 		await this.repository.extendManyWithEA(entities);
 		return {
-			data: entities,
+			data: redactFieldConditions(query, entities),
 			meta: {
 				total,
 				...pagination

package/dist/app/modules/database/repositories/policy/repository.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"repository.mjs","names":["isUUID","validateEntityJoinColumns","applyQuery","DatabaseConflictError","PolicyEntity","isEntityUnique","translateWhereConditions","RealmRepositoryAdapter","PolicyRepositoryAdapter","repository","realmRepository","ctx","findMany","query","qb","createQueryBuilder","groupBy","pagination","entities","total","getManyAndCount","extendManyWithEA","data","meta","findOneById","id","entity","findOneBy","extendOneWithEA","findOneByName","name","realmKey","where","realmId","resolveId","andWhere","getOne","findOneByIdOrName","idOrName","realm","findManyBy","findBy","create","merge","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget","checkUniqueness","existing","isUnique","entityExisting","saveWithEA","saveOneWithEA","updateClosureTable","deleteFromTree","treeRepository","getTreeRepository"],"sources":["../../../../../../src/app/modules/database/repositories/policy/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Policy, Realm } from '@authup/core-kit';\nimport type { IQuery } from '@rapiq/core';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport { validateEntityJoinColumns } from 'typeorm-extension';\nimport { applyQuery } from '../query.ts';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IPolicyRepository, IRealmRepository } from '../../../../../core/index.ts';\nimport { DatabaseConflictError } from '../../../../../adapters/database/index.ts';\nimport type { PolicyRepository } from '../../../../../adapters/database/domains/index.ts';\nimport { PolicyEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { isEntityUnique, translateWhereConditions } from '../helpers.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type PolicyRepositoryAdapterContext = {\n    repository: PolicyRepository,\n    realmRepository: Repository<Realm>,\n};\n\nexport class PolicyRepositoryAdapter implements IPolicyRepository {\n    private readonly repository: PolicyRepository;\n\n    private readonly realmRepository: IRealmRepository;\n\n    constructor(ctx: PolicyRepositoryAdapterContext) {\n        this.repository = ctx.repository;\n        this.realmRepository = new RealmRepositoryAdapter(ctx.realmRepository);\n    }\n\n    async findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<Policy>> {\n        const qb = this.repository.createQueryBuilder('policy');\n        qb.groupBy('policy.id');\n\n        const { pagination } = applyQuery(qb, query);\n\n        const [entities, total] = await qb.getManyAndCount();\n        await this.repository.extendManyWithEA(entities);\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    async findOneById(id: string): Promise<Policy | null> {\n        const entity = await this.findOneBy({ id });\n        if (entity) {\n            await this.repository.extendOneWithEA(entity);\n        }\n        return entity;\n    }\n\n    async findOneByName(name: string, realmKey?: string): Promise<Policy | null> {\n        const qb = this.repository.createQueryBuilder('policy');\n        qb.where('policy.name = :name', { name });\n\n        if (realmKey) {\n            const realmId = await this.realmRepository.resolveId(realmKey);\n            if (!realmId) {\n                return null;\n            }\n            qb.andWhere('policy.realmId = :realmId', { realmId });\n        }\n\n        const entity = await qb.getOne();\n        if (entity) {\n            await this.repository.extendOneWithEA(entity);\n        }\n        return entity;\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Policy | null> {\n        return isUUID(idOrName) ?\n            this.findOneById(idOrName) :\n            this.findOneByName(idOrName, realm);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<Policy[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Policy | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<Policy>): Policy {\n        return this.repository.create(data);\n    }\n\n    merge(entity: Policy, data: Partial<Policy>): Policy {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: Policy): Promise<Policy> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: Policy): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<Policy>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: PolicyEntity,\n        });\n    }\n\n    async checkUniqueness(data: Partial<Policy>, existing?: Policy): Promise<void> {\n        const isUnique = await isEntityUnique({\n            dataSource: this.repository.manager.connection,\n            entityTarget: PolicyEntity,\n            entity: data,\n            entityExisting: existing,\n        });\n\n        if (!isUnique) {\n            throw new DatabaseConflictError();\n        }\n    }\n\n    async saveWithEA(entity: Policy, data?: Record<string, any>): Promise<Policy> {\n        await this.repository.saveOneWithEA(entity, data);\n        await this.repository.updateClosureTable(entity, this.repository.manager);\n\n        return entity;\n    }\n\n    async deleteFromTree(entity: Policy): Promise<void> {\n        const treeRepository = this.repository.manager.connection.getTreeRepository(PolicyEntity);\n        await treeRepository.remove(entity);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;AA0BA,IAAaQ,0BAAb,MAAaA;CACQC;CAEAC;CAEjB,YAAYC,KAAqC;EAC7C,KAAKF,aAAaE,IAAIF;EACtB,KAAKC,kBAAkB,IAAIH,uBAAuBI,IAAID,eAAe;CACzE;CAEA,MAAME,SAASC,OAAgE;EAC3E,MAAMC,KAAK,KAAKL,WAAWM,mBAAmB,QAAA;EAC9CD,GAAGE,QAAQ,WAAA;EAEX,MAAM,EAAEC,eAAef,WAAWY,IAAID,KAAAA;EAEtC,MAAM,CAACK,UAAUC,SAAS,MAAML,GAAGM,gBAAe;EAClD,MAAM,KAAKX,WAAWY,iBAAiBH,QAAAA;EAEvC,OAAO;GACHI,MAAMJ;GACNK,MAAM;IACFJ;IACA,GAAGF;GACP;EACJ;CACJ;CAEA,MAAMO,YAAYC,IAAoC;EAClD,MAAMC,SAAS,MAAM,KAAKC,UAAU,EAAEF,GAAG,CAAA;EACzC,IAAIC,QACA,MAAM,KAAKjB,WAAWmB,gBAAgBF,MAAAA;EAE1C,OAAOA;CACX;CAEA,MAAMG,cAAcC,MAAcC,UAA2C;EACzE,MAAMjB,KAAK,KAAKL,WAAWM,mBAAmB,QAAA;EAC9CD,GAAGkB,MAAM,uBAAuB,EAAEF,KAAK,CAAA;EAEvC,IAAIC,UAAU;GACV,MAAME,UAAU,MAAM,KAAKvB,gBAAgBwB,UAAUH,QAAAA;GACrD,IAAI,CAACE,SACD,OAAO;GAEXnB,GAAGqB,SAAS,6BAA6B,EAAEF,QAAQ,CAAA;EACvD;EAEA,MAAMP,SAAS,MAAMZ,GAAGsB,OAAM;EAC9B,IAAIV,QACA,MAAM,KAAKjB,WAAWmB,gBAAgBF,MAAAA;EAE1C,OAAOA;CACX;CAEA,MAAMW,kBAAkBC,UAAkBC,OAAwC;EAC9E,OAAOvC,OAAOsC,QAAAA,IACV,KAAKd,YAAYc,QAAAA,IACjB,KAAKT,cAAcS,UAAUC,KAAAA;CACrC;CAEA,MAAMC,WAAWR,OAA+C;EAC5D,OAAO,KAAKvB,WAAWgC,OAAOnC,yBAAyB0B,KAAAA,CAAAA;CAC3D;CAEA,MAAML,UAAUK,OAAoD;EAChE,OAAO,KAAKvB,WAAWkB,UAAUrB,yBAAyB0B,KAAAA,CAAAA;CAC9D;CAEAU,OAAOpB,MAA+B;EAClC,OAAO,KAAKb,WAAWiC,OAAOpB,IAAAA;CAClC;CAEAqB,MAAMjB,QAAgBJ,MAA+B;EACjD,OAAO,KAAKb,WAAWkC,MAAMjB,QAAQJ,IAAAA;CACzC;CAEA,MAAMsB,KAAKlB,QAAiC;EACxC,OAAO,KAAKjB,WAAWmC,KAAKlB,MAAAA;CAChC;CAEA,MAAMmB,OAAOnB,QAA+B;EACxC,MAAM,KAAKjB,WAAWoC,OAAOnB,MAAAA;CACjC;CAEA,MAAMoB,oBAAoBxB,MAAsC;EAC5D,MAAMrB,0BAA0BqB,MAAM;GAClCyB,YAAY,KAAKtC,WAAWuC,QAAQC;GACpCC,cAAc9C;EAClB,CAAA;CACJ;CAEA,MAAM+C,gBAAgB7B,MAAuB8B,UAAkC;EAQ3E,IAAI,CAACC,MAPkBhD,eAAe;GAClC0C,YAAY,KAAKtC,WAAWuC,QAAQC;GACpCC,cAAc9C;GACdsB,QAAQJ;GACRgC,gBAAgBF;EACpB,CAAA,GAGI,MAAM,IAAIjD,sBAAAA;CAElB;CAEA,MAAMoD,WAAW7B,QAAgBJ,MAA6C;EAC1E,MAAM,KAAKb,WAAW+C,cAAc9B,QAAQJ,IAAAA;EAC5C,MAAM,KAAKb,WAAWgD,mBAAmB/B,QAAQ,KAAKjB,WAAWuC,OAAO;EAExE,OAAOtB;CACX;CAEA,MAAMgC,eAAehC,QAA+B;EAEhD,MADuB,KAAKjB,WAAWuC,QAAQC,WAAWW,kBAAkBxD,YACtEuD,CAAAA,CAAed,OAAOnB,MAAAA;CAChC;AACJ"}
+{"version":3,"file":"repository.mjs","names":["isUUID","validateEntityJoinColumns","applyQuery","redactFieldConditions","DatabaseConflictError","PolicyEntity","isEntityUnique","translateWhereConditions","RealmRepositoryAdapter","PolicyRepositoryAdapter","repository","realmRepository","ctx","findMany","query","qb","createQueryBuilder","groupBy","pagination","entities","total","getManyAndCount","extendManyWithEA","data","meta","findOneById","id","entity","findOneBy","extendOneWithEA","findOneByName","name","realmKey","where","realmId","resolveId","andWhere","getOne","findOneByIdOrName","idOrName","realm","findManyBy","findBy","create","merge","save","remove","validateJoinColumns","dataSource","manager","connection","entityTarget","checkUniqueness","existing","isUnique","entityExisting","saveWithEA","saveOneWithEA","updateClosureTable","deleteFromTree","treeRepository","getTreeRepository"],"sources":["../../../../../../src/app/modules/database/repositories/policy/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { Policy, Realm } from '@authup/core-kit';\nimport type { IQuery } from '@rapiq/core';\nimport { isUUID } from '@authup/kit';\nimport type { Repository } from 'typeorm';\nimport { validateEntityJoinColumns } from 'typeorm-extension';\nimport { applyQuery, redactFieldConditions } from '../query.ts';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type { IPolicyRepository, IRealmRepository } from '../../../../../core/index.ts';\nimport { DatabaseConflictError } from '../../../../../adapters/database/index.ts';\nimport type { PolicyRepository } from '../../../../../adapters/database/domains/index.ts';\nimport { PolicyEntity } from '../../../../../adapters/database/domains/index.ts';\nimport { isEntityUnique, translateWhereConditions } from '../helpers.ts';\nimport { RealmRepositoryAdapter } from '../realm/repository.ts';\n\nexport type PolicyRepositoryAdapterContext = {\n    repository: PolicyRepository,\n    realmRepository: Repository<Realm>,\n};\n\nexport class PolicyRepositoryAdapter implements IPolicyRepository {\n    private readonly repository: PolicyRepository;\n\n    private readonly realmRepository: IRealmRepository;\n\n    constructor(ctx: PolicyRepositoryAdapterContext) {\n        this.repository = ctx.repository;\n        this.realmRepository = new RealmRepositoryAdapter(ctx.realmRepository);\n    }\n\n    async findMany(query: IQuery): Promise<EntityRepositoryFindManyResult<Policy>> {\n        const qb = this.repository.createQueryBuilder('policy');\n        qb.groupBy('policy.id');\n\n        const { pagination } = applyQuery(qb, query);\n\n        const [entities, total] = await qb.getManyAndCount();\n        await this.repository.extendManyWithEA(entities);\n\n        return {\n            data: redactFieldConditions(query, entities),\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n\n    async findOneById(id: string): Promise<Policy | null> {\n        const entity = await this.findOneBy({ id });\n        if (entity) {\n            await this.repository.extendOneWithEA(entity);\n        }\n        return entity;\n    }\n\n    async findOneByName(name: string, realmKey?: string): Promise<Policy | null> {\n        const qb = this.repository.createQueryBuilder('policy');\n        qb.where('policy.name = :name', { name });\n\n        if (realmKey) {\n            const realmId = await this.realmRepository.resolveId(realmKey);\n            if (!realmId) {\n                return null;\n            }\n            qb.andWhere('policy.realmId = :realmId', { realmId });\n        }\n\n        const entity = await qb.getOne();\n        if (entity) {\n            await this.repository.extendOneWithEA(entity);\n        }\n        return entity;\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<Policy | null> {\n        return isUUID(idOrName) ?\n            this.findOneById(idOrName) :\n            this.findOneByName(idOrName, realm);\n    }\n\n    async findManyBy(where: Record<string, any>): Promise<Policy[]> {\n        return this.repository.findBy(translateWhereConditions(where));\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<Policy | null> {\n        return this.repository.findOneBy(translateWhereConditions(where));\n    }\n\n    create(data: Partial<Policy>): Policy {\n        return this.repository.create(data);\n    }\n\n    merge(entity: Policy, data: Partial<Policy>): Policy {\n        return this.repository.merge(entity, data);\n    }\n\n    async save(entity: Policy): Promise<Policy> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: Policy): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async validateJoinColumns(data: Partial<Policy>): Promise<void> {\n        await validateEntityJoinColumns(data, {\n            dataSource: this.repository.manager.connection,\n            entityTarget: PolicyEntity,\n        });\n    }\n\n    async checkUniqueness(data: Partial<Policy>, existing?: Policy): Promise<void> {\n        const isUnique = await isEntityUnique({\n            dataSource: this.repository.manager.connection,\n            entityTarget: PolicyEntity,\n            entity: data,\n            entityExisting: existing,\n        });\n\n        if (!isUnique) {\n            throw new DatabaseConflictError();\n        }\n    }\n\n    async saveWithEA(entity: Policy, data?: Record<string, any>): Promise<Policy> {\n        await this.repository.saveOneWithEA(entity, data);\n        await this.repository.updateClosureTable(entity, this.repository.manager);\n\n        return entity;\n    }\n\n    async deleteFromTree(entity: Policy): Promise<void> {\n        const treeRepository = this.repository.manager.connection.getTreeRepository(PolicyEntity);\n        await treeRepository.remove(entity);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;AA0BA,IAAaS,0BAAb,MAAaA;CACQC;CAEAC;CAEjB,YAAYC,KAAqC;EAC7C,KAAKF,aAAaE,IAAIF;EACtB,KAAKC,kBAAkB,IAAIH,uBAAuBI,IAAID,eAAe;CACzE;CAEA,MAAME,SAASC,OAAgE;EAC3E,MAAMC,KAAK,KAAKL,WAAWM,mBAAmB,QAAA;EAC9CD,GAAGE,QAAQ,WAAA;EAEX,MAAM,EAAEC,eAAehB,WAAWa,IAAID,KAAAA;EAEtC,MAAM,CAACK,UAAUC,SAAS,MAAML,GAAGM,gBAAe;EAClD,MAAM,KAAKX,WAAWY,iBAAiBH,QAAAA;EAEvC,OAAO;GACHI,MAAMpB,sBAAsBW,OAAOK,QAAAA;GACnCK,MAAM;IACFJ;IACA,GAAGF;GACP;EACJ;CACJ;CAEA,MAAMO,YAAYC,IAAoC;EAClD,MAAMC,SAAS,MAAM,KAAKC,UAAU,EAAEF,GAAG,CAAA;EACzC,IAAIC,QACA,MAAM,KAAKjB,WAAWmB,gBAAgBF,MAAAA;EAE1C,OAAOA;CACX;CAEA,MAAMG,cAAcC,MAAcC,UAA2C;EACzE,MAAMjB,KAAK,KAAKL,WAAWM,mBAAmB,QAAA;EAC9CD,GAAGkB,MAAM,uBAAuB,EAAEF,KAAK,CAAA;EAEvC,IAAIC,UAAU;GACV,MAAME,UAAU,MAAM,KAAKvB,gBAAgBwB,UAAUH,QAAAA;GACrD,IAAI,CAACE,SACD,OAAO;GAEXnB,GAAGqB,SAAS,6BAA6B,EAAEF,QAAQ,CAAA;EACvD;EAEA,MAAMP,SAAS,MAAMZ,GAAGsB,OAAM;EAC9B,IAAIV,QACA,MAAM,KAAKjB,WAAWmB,gBAAgBF,MAAAA;EAE1C,OAAOA;CACX;CAEA,MAAMW,kBAAkBC,UAAkBC,OAAwC;EAC9E,OAAOxC,OAAOuC,QAAAA,IACV,KAAKd,YAAYc,QAAAA,IACjB,KAAKT,cAAcS,UAAUC,KAAAA;CACrC;CAEA,MAAMC,WAAWR,OAA+C;EAC5D,OAAO,KAAKvB,WAAWgC,OAAOnC,yBAAyB0B,KAAAA,CAAAA;CAC3D;CAEA,MAAML,UAAUK,OAAoD;EAChE,OAAO,KAAKvB,WAAWkB,UAAUrB,yBAAyB0B,KAAAA,CAAAA;CAC9D;CAEAU,OAAOpB,MAA+B;EAClC,OAAO,KAAKb,WAAWiC,OAAOpB,IAAAA;CAClC;CAEAqB,MAAMjB,QAAgBJ,MAA+B;EACjD,OAAO,KAAKb,WAAWkC,MAAMjB,QAAQJ,IAAAA;CACzC;CAEA,MAAMsB,KAAKlB,QAAiC;EACxC,OAAO,KAAKjB,WAAWmC,KAAKlB,MAAAA;CAChC;CAEA,MAAMmB,OAAOnB,QAA+B;EACxC,MAAM,KAAKjB,WAAWoC,OAAOnB,MAAAA;CACjC;CAEA,MAAMoB,oBAAoBxB,MAAsC;EAC5D,MAAMtB,0BAA0BsB,MAAM;GAClCyB,YAAY,KAAKtC,WAAWuC,QAAQC;GACpCC,cAAc9C;EAClB,CAAA;CACJ;CAEA,MAAM+C,gBAAgB7B,MAAuB8B,UAAkC;EAQ3E,IAAI,CAACC,MAPkBhD,eAAe;GAClC0C,YAAY,KAAKtC,WAAWuC,QAAQC;GACpCC,cAAc9C;GACdsB,QAAQJ;GACRgC,gBAAgBF;EACpB,CAAA,GAGI,MAAM,IAAIjD,sBAAAA;CAElB;CAEA,MAAMoD,WAAW7B,QAAgBJ,MAA6C;EAC1E,MAAM,KAAKb,WAAW+C,cAAc9B,QAAQJ,IAAAA;EAC5C,MAAM,KAAKb,WAAWgD,mBAAmB/B,QAAQ,KAAKjB,WAAWuC,OAAO;EAExE,OAAOtB;CACX;CAEA,MAAMgC,eAAehC,QAA+B;EAEhD,MADuB,KAAKjB,WAAWuC,QAAQC,WAAWW,kBAAkBxD,YACtEuD,CAAAA,CAAed,OAAOnB,MAAAA;CAChC;AACJ"}