@authup/server-core 1.0.0-beta.60 → 1.0.0-beta.62

package/dist/app/modules/identity/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["ClientIdentityRepository","IdentityProviderAttributeMappingRepository","IdentityProviderPermissionMappingRepository","IdentityProviderRoleMappingRepository","UserIdentityRepository","DatabaseInjectionKey","IdentityProviderAccountRepositoryAdapter","IdentityProviderRepositoryAdapter","ClientEntity","IdentityProviderRepository","RealmEntity","RoleEntity","UserPermissionEntity","UserRepository","UserRoleEntity","ClientRepositoryAdapter","RoleRepositoryAdapter","UserRepositoryAdapter","IdentityPermissionProvider","IdentityProviderAccountManager","IdentityProviderAttributeMapper","IdentityProviderLdapCollectionAuthenticator","IdentityProviderPermissionMapper","IdentityProviderRoleMapper","IdentityResolver","IdentityRoleProvider","LDAPInjectionKey","ModuleName","IdentityInjectionKey","IdentityModule","name","dependencies","IDENTITY","DATABASE","setup","container","dataSource","resolve","DataSource","realmRepository","clientRepository","userRepository","repository","userPermissionRepository","userRoleRepository","register","Resolver","useFactory","clientRepositoryAdapter","userRepositoryAdapter","roleRepositoryAdapter","RoleProvider","PermissionProvider","c","roleRepository","roleProvider","attributeMapperRepository","attributeMapper","roleMapperFinder","roleMapper","permissionMapperRepository","permissionMapper","providerAccountRepository","ProviderAccountManager","identityProviderRepository","ProviderLdapCollectionAuthenticator","accountManager","clientFactory","ClientFactory"],"sources":["../../../../src/app/modules/identity/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    Client,\n    Realm,\n    Role,\n    UserPermission,\n    UserRole,\n} from '@authup/core-kit';\nimport type { Repository } from 'typeorm';\nimport {\n    ClientIdentityRepository,\n    IdentityProviderAttributeMappingRepository,\n    IdentityProviderPermissionMappingRepository,\n    IdentityProviderRoleMappingRepository,\n    UserIdentityRepository,\n} from './repositories/index.ts';\nimport {\n    DatabaseInjectionKey,\n    IdentityProviderAccountRepositoryAdapter,\n    IdentityProviderRepositoryAdapter,\n} from '../database/index.ts';\nimport {\n    ClientEntity,\n    IdentityProviderRepository,\n    RealmEntity,\n    RoleEntity,\n    UserPermissionEntity,\n    UserRepository,\n    UserRoleEntity,\n} from '../../../adapters/database/domains/index.ts';\nimport {\n    ClientRepositoryAdapter,\n    RoleRepositoryAdapter,\n    UserRepositoryAdapter,\n} from '../database/repositories/index.ts';\nimport type { IContainer } from 'eldin';\nimport {\n    IdentityPermissionProvider,\n    IdentityProviderAccountManager,\n    IdentityProviderAttributeMapper,\n    IdentityProviderLdapCollectionAuthenticator,\n    IdentityProviderPermissionMapper,\n    IdentityProviderRoleMapper,\n    IdentityResolver,\n    IdentityRoleProvider,\n} from '../../../core/index.ts';\nimport { LDAPInjectionKey } from '../ldap/index.ts';\n\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\nimport { IdentityInjectionKey } from './constants.ts';\n\nexport class IdentityModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    constructor() {\n        this.name = ModuleName.IDENTITY;\n        this.dependencies = [ModuleName.DATABASE];\n    }\n\n    async setup(container: IContainer): Promise<void> {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n\n        const clientRepository = new ClientIdentityRepository(\n            container.resolve<Repository<Client>>(ClientEntity),\n        );\n        const userRepository = new UserIdentityRepository({\n            repository: new UserRepository(dataSource),\n            userPermissionRepository: container.resolve<Repository<UserPermission>>(UserPermissionEntity),\n            userRoleRepository: container.resolve<Repository<UserRole>>(UserRoleEntity),\n        });\n\n        container.register(IdentityInjectionKey.Resolver, {\n            useFactory: () => new IdentityResolver({\n                clientRepository,\n                userRepository,\n            }),\n        });\n\n        // ---------------------------------------------\n\n        const clientRepositoryAdapter = new ClientRepositoryAdapter({\n            repository: container.resolve<Repository<Client>>(ClientEntity),\n            realmRepository,\n        });\n        const userRepositoryAdapter = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const roleRepositoryAdapter = new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository,\n        });\n\n        container.register(IdentityInjectionKey.RoleProvider, {\n            useFactory: () => new IdentityRoleProvider({\n                clientRepository: clientRepositoryAdapter,\n                userRepository: userRepositoryAdapter,\n            }),\n        });\n\n        container.register(IdentityInjectionKey.PermissionProvider, {\n            useFactory: (c) => new IdentityPermissionProvider({\n                clientRepository: clientRepositoryAdapter,\n                userRepository: userRepositoryAdapter,\n                roleRepository: roleRepositoryAdapter,\n                roleProvider: c.resolve(IdentityInjectionKey.RoleProvider),\n            }),\n        });\n\n        // ---------------------------------------------\n\n        const attributeMapperRepository = new IdentityProviderAttributeMappingRepository(dataSource);\n        const attributeMapper = new IdentityProviderAttributeMapper(attributeMapperRepository);\n\n        const roleMapperFinder = new IdentityProviderRoleMappingRepository(dataSource);\n        const roleMapper = new IdentityProviderRoleMapper(roleMapperFinder);\n\n        const permissionMapperRepository = new IdentityProviderPermissionMappingRepository(dataSource);\n        const permissionMapper = new IdentityProviderPermissionMapper(permissionMapperRepository);\n\n        const providerAccountRepository = new IdentityProviderAccountRepositoryAdapter(dataSource);\n\n        container.register(IdentityInjectionKey.ProviderAccountManager, {\n            useFactory: () => new IdentityProviderAccountManager({\n                repository: providerAccountRepository,\n                userRepository,\n                attributeMapper,\n                roleMapper,\n                permissionMapper,\n            }),\n        });\n\n        // ---------------------------------------------\n\n        const identityProviderRepository = new IdentityProviderRepositoryAdapter({\n            repository: new IdentityProviderRepository(dataSource),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n        container.register(IdentityInjectionKey.ProviderLdapCollectionAuthenticator, {\n            useFactory: (c) => new IdentityProviderLdapCollectionAuthenticator({\n                repository: identityProviderRepository,\n                accountManager: c.resolve(IdentityInjectionKey.ProviderAccountManager),\n                clientFactory: c.resolve(LDAPInjectionKey.ClientFactory),\n            }),\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0DA,IAAa6B,iBAAb,MAAaA;CACAC;CAEAC;CAET,cAAc;EACV,KAAKD,OAAOH,WAAWK;EACvB,KAAKD,eAAe,CAACJ,WAAWM,QAAS;CAC7C;CAEA,MAAMC,MAAMC,WAAsC;EAC9C,MAAMC,aAAaD,UAAUE,QAAQhC,qBAAqBiC,UAAU;EACpE,MAAMC,kBAAkBJ,UAAUE,QAA2B3B,WAAAA;EAE7D,MAAM8B,mBAAmB,IAAIxC,yBACzBmC,UAAUE,QAA4B7B,YAAAA,CAAAA;EAE1C,MAAMiC,iBAAiB,IAAIrC,uBAAuB;GAC9CsC,YAAY,IAAI7B,eAAeuB,UAAAA;GAC/BO,0BAA0BR,UAAUE,QAAoCzB,oBAAAA;GACxEgC,oBAAoBT,UAAUE,QAA8BvB,cAAAA;EAChE,CAAA;EAEAqB,UAAUU,SAASjB,qBAAqBkB,UAAU,EAC9CC,kBAAkB,IAAIvB,iBAAiB;GACnCgB;GACAC;EACJ,CAAA,EACJ,CAAA;EAIA,MAAMO,0BAA0B,IAAIjC,wBAAwB;GACxD2B,YAAYP,UAAUE,QAA4B7B,YAAAA;GAClD+B;EACJ,CAAA;EACA,MAAMU,wBAAwB,IAAIhC,sBAAsB;GACpDyB,YAAY,IAAI7B,eAAeuB,UAAAA;GAC/BG;EACJ,CAAA;EACA,MAAMW,wBAAwB,IAAIlC,sBAAsB;GACpD0B,YAAYP,UAAUE,QAA0B1B,UAAAA;GAChD4B;EACJ,CAAA;EAEAJ,UAAUU,SAASjB,qBAAqBuB,cAAc,EAClDJ,kBAAkB,IAAItB,qBAAqB;GACvCe,kBAAkBQ;GAClBP,gBAAgBQ;EACpB,CAAA,EACJ,CAAA;EAEAd,UAAUU,SAASjB,qBAAqBwB,oBAAoB,EACxDL,aAAaM,MAAM,IAAInC,2BAA2B;GAC9CsB,kBAAkBQ;GAClBP,gBAAgBQ;GAChBK,gBAAgBJ;GAChBK,cAAcF,EAAEhB,QAAQT,qBAAqBuB,YAAY;EAC7D,CAAA,EACJ,CAAA;EAIA,MAAMK,4BAA4B,IAAIvD,2CAA2CmC,UAAAA;EACjF,MAAMqB,kBAAkB,IAAIrC,gCAAgCoC,yBAAAA;EAE5D,MAAME,mBAAmB,IAAIvD,sCAAsCiC,UAAAA;EACnE,MAAMuB,aAAa,IAAIpC,2BAA2BmC,gBAAAA;EAElD,MAAME,6BAA6B,IAAI1D,4CAA4CkC,UAAAA;EACnF,MAAMyB,mBAAmB,IAAIvC,iCAAiCsC,0BAAAA;EAE9D,MAAME,4BAA4B,IAAIxD,yCAAyC8B,UAAAA;EAE/ED,UAAUU,SAASjB,qBAAqBmC,wBAAwB,EAC5DhB,kBAAkB,IAAI5B,+BAA+B;GACjDuB,YAAYoB;GACZrB;GACAgB;GACAE;GACAE;EACJ,CAAA,EACJ,CAAA;EAIA,MAAMG,6BAA6B,IAAIzD,kCAAkC;GACrEmC,YAAY,IAAIjC,2BAA2B2B,UAAAA;GAC3CG,iBAAiBJ,UAAUE,QAA2B3B,WAAAA;EAC1D,CAAA;EACAyB,UAAUU,SAASjB,qBAAqBqC,qCAAqC,EACzElB,aAAaM,MAAM,IAAIhC,4CAA4C;GAC/DqB,YAAYsB;GACZE,gBAAgBb,EAAEhB,QAAQT,qBAAqBmC,sBAAsB;GACrEI,eAAed,EAAEhB,QAAQX,iBAAiB0C,aAAa;EAC3D,CAAA,EACJ,CAAA;CACJ;AACJ"}
+{"version":3,"file":"module.mjs","names":["ClientIdentityRepository","IdentityProviderAccountLinkStore","IdentityProviderAttributeMappingRepository","IdentityProviderPermissionMappingRepository","IdentityProviderRoleMappingRepository","UserIdentityRepository","DatabaseInjectionKey","IdentityProviderAccountRepositoryAdapter","IdentityProviderRepositoryAdapter","ClientEntity","IdentityProviderRepository","RealmEntity","RoleEntity","UserPermissionEntity","UserRepository","UserRoleEntity","ClientRepositoryAdapter","RoleRepositoryAdapter","UserRepositoryAdapter","IdentityPermissionProvider","IdentityProviderAccountManager","IdentityProviderAttributeMapper","IdentityProviderLdapCollectionAuthenticator","IdentityProviderPermissionMapper","IdentityProviderRoleMapper","IdentityResolver","IdentityRoleProvider","LDAPInjectionKey","LoggerInjectionKey","CacheInjectionKey","ModuleName","IdentityInjectionKey","IdentityModule","name","dependencies","IDENTITY","DATABASE","setup","container","dataSource","resolve","DataSource","realmRepository","clientRepository","userRepository","repository","userPermissionRepository","userRoleRepository","register","Resolver","useFactory","clientRepositoryAdapter","userRepositoryAdapter","roleRepositoryAdapter","RoleProvider","PermissionProvider","c","roleRepository","roleProvider","attributeMapperRepository","attributeMapper","roleMapperFinder","roleMapper","permissionMapperRepository","permissionMapper","providerAccountRepository","ProviderAccountManager","logger","ProviderAccountLinkStore","cache","identityProviderRepository","ProviderLdapCollectionAuthenticator","accountManager","clientFactory","ClientFactory"],"sources":["../../../../src/app/modules/identity/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type {\n    Client,\n    Realm,\n    Role,\n    UserPermission,\n    UserRole,\n} from '@authup/core-kit';\nimport type { Repository } from 'typeorm';\nimport {\n    ClientIdentityRepository,\n    IdentityProviderAccountLinkStore,\n    IdentityProviderAttributeMappingRepository,\n    IdentityProviderPermissionMappingRepository,\n    IdentityProviderRoleMappingRepository,\n    UserIdentityRepository,\n} from './repositories/index.ts';\nimport {\n    DatabaseInjectionKey,\n    IdentityProviderAccountRepositoryAdapter,\n    IdentityProviderRepositoryAdapter,\n} from '../database/index.ts';\nimport {\n    ClientEntity,\n    IdentityProviderRepository,\n    RealmEntity,\n    RoleEntity,\n    UserPermissionEntity,\n    UserRepository,\n    UserRoleEntity,\n} from '../../../adapters/database/domains/index.ts';\nimport {\n    ClientRepositoryAdapter,\n    RoleRepositoryAdapter,\n    UserRepositoryAdapter,\n} from '../database/repositories/index.ts';\nimport type { IContainer } from 'eldin';\nimport {\n    IdentityPermissionProvider,\n    IdentityProviderAccountManager,\n    IdentityProviderAttributeMapper,\n    IdentityProviderLdapCollectionAuthenticator,\n    IdentityProviderPermissionMapper,\n    IdentityProviderRoleMapper,\n    IdentityResolver,\n    IdentityRoleProvider,\n} from '../../../core/index.ts';\nimport { LDAPInjectionKey } from '../ldap/index.ts';\nimport { LoggerInjectionKey } from '../logger/index.ts';\nimport { CacheInjectionKey } from '../cache/index.ts';\n\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\nimport { IdentityInjectionKey } from './constants.ts';\n\nexport class IdentityModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    constructor() {\n        this.name = ModuleName.IDENTITY;\n        this.dependencies = [ModuleName.DATABASE];\n    }\n\n    async setup(container: IContainer): Promise<void> {\n        const dataSource = container.resolve(DatabaseInjectionKey.DataSource);\n        const realmRepository = container.resolve<Repository<Realm>>(RealmEntity);\n\n        const clientRepository = new ClientIdentityRepository(\n            container.resolve<Repository<Client>>(ClientEntity),\n        );\n        const userRepository = new UserIdentityRepository({\n            repository: new UserRepository(dataSource),\n            userPermissionRepository: container.resolve<Repository<UserPermission>>(UserPermissionEntity),\n            userRoleRepository: container.resolve<Repository<UserRole>>(UserRoleEntity),\n        });\n\n        container.register(IdentityInjectionKey.Resolver, {\n            useFactory: () => new IdentityResolver({\n                clientRepository,\n                userRepository,\n            }),\n        });\n\n        // ---------------------------------------------\n\n        const clientRepositoryAdapter = new ClientRepositoryAdapter({\n            repository: container.resolve<Repository<Client>>(ClientEntity),\n            realmRepository,\n        });\n        const userRepositoryAdapter = new UserRepositoryAdapter({\n            repository: new UserRepository(dataSource),\n            realmRepository,\n        });\n        const roleRepositoryAdapter = new RoleRepositoryAdapter({\n            repository: container.resolve<Repository<Role>>(RoleEntity),\n            realmRepository,\n        });\n\n        container.register(IdentityInjectionKey.RoleProvider, {\n            useFactory: () => new IdentityRoleProvider({\n                clientRepository: clientRepositoryAdapter,\n                userRepository: userRepositoryAdapter,\n            }),\n        });\n\n        container.register(IdentityInjectionKey.PermissionProvider, {\n            useFactory: (c) => new IdentityPermissionProvider({\n                clientRepository: clientRepositoryAdapter,\n                userRepository: userRepositoryAdapter,\n                roleRepository: roleRepositoryAdapter,\n                roleProvider: c.resolve(IdentityInjectionKey.RoleProvider),\n            }),\n        });\n\n        // ---------------------------------------------\n\n        const attributeMapperRepository = new IdentityProviderAttributeMappingRepository(dataSource);\n        const attributeMapper = new IdentityProviderAttributeMapper(attributeMapperRepository);\n\n        const roleMapperFinder = new IdentityProviderRoleMappingRepository(dataSource);\n        const roleMapper = new IdentityProviderRoleMapper(roleMapperFinder);\n\n        const permissionMapperRepository = new IdentityProviderPermissionMappingRepository(dataSource);\n        const permissionMapper = new IdentityProviderPermissionMapper(permissionMapperRepository);\n\n        const providerAccountRepository = new IdentityProviderAccountRepositoryAdapter(dataSource);\n\n        container.register(IdentityInjectionKey.ProviderAccountManager, {\n            useFactory: (c) => new IdentityProviderAccountManager({\n                repository: providerAccountRepository,\n                userRepository,\n                attributeMapper,\n                roleMapper,\n                permissionMapper,\n                logger: c.resolve(LoggerInjectionKey),\n            }),\n        });\n\n        container.register(IdentityInjectionKey.ProviderAccountLinkStore, {\n            // lazy: the cache module is not a declared dependency of this\n            // one, and a factory only runs once something resolves the store\n            useFactory: (c) => {\n                const cache = c.resolve(CacheInjectionKey);\n\n                return new IdentityProviderAccountLinkStore(cache);\n            },\n        });\n\n        // ---------------------------------------------\n\n        const identityProviderRepository = new IdentityProviderRepositoryAdapter({\n            repository: new IdentityProviderRepository(dataSource),\n            realmRepository: container.resolve<Repository<Realm>>(RealmEntity),\n        });\n        container.register(IdentityInjectionKey.ProviderLdapCollectionAuthenticator, {\n            useFactory: (c) => new IdentityProviderLdapCollectionAuthenticator({\n                repository: identityProviderRepository,\n                accountManager: c.resolve(IdentityInjectionKey.ProviderAccountManager),\n                clientFactory: c.resolve(LDAPInjectionKey.ClientFactory),\n            }),\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6DA,IAAagC,iBAAb,MAAaA;CACAC;CAEAC;CAET,cAAc;EACV,KAAKD,OAAOH,WAAWK;EACvB,KAAKD,eAAe,CAACJ,WAAWM,QAAS;CAC7C;CAEA,MAAMC,MAAMC,WAAsC;EAC9C,MAAMC,aAAaD,UAAUE,QAAQlC,qBAAqBmC,UAAU;EACpE,MAAMC,kBAAkBJ,UAAUE,QAA2B7B,WAAAA;EAE7D,MAAMgC,mBAAmB,IAAI3C,yBACzBsC,UAAUE,QAA4B/B,YAAAA,CAAAA;EAE1C,MAAMmC,iBAAiB,IAAIvC,uBAAuB;GAC9CwC,YAAY,IAAI/B,eAAeyB,UAAAA;GAC/BO,0BAA0BR,UAAUE,QAAoC3B,oBAAAA;GACxEkC,oBAAoBT,UAAUE,QAA8BzB,cAAAA;EAChE,CAAA;EAEAuB,UAAUU,SAASjB,qBAAqBkB,UAAU,EAC9CC,kBAAkB,IAAIzB,iBAAiB;GACnCkB;GACAC;EACJ,CAAA,EACJ,CAAA;EAIA,MAAMO,0BAA0B,IAAInC,wBAAwB;GACxD6B,YAAYP,UAAUE,QAA4B/B,YAAAA;GAClDiC;EACJ,CAAA;EACA,MAAMU,wBAAwB,IAAIlC,sBAAsB;GACpD2B,YAAY,IAAI/B,eAAeyB,UAAAA;GAC/BG;EACJ,CAAA;EACA,MAAMW,wBAAwB,IAAIpC,sBAAsB;GACpD4B,YAAYP,UAAUE,QAA0B5B,UAAAA;GAChD8B;EACJ,CAAA;EAEAJ,UAAUU,SAASjB,qBAAqBuB,cAAc,EAClDJ,kBAAkB,IAAIxB,qBAAqB;GACvCiB,kBAAkBQ;GAClBP,gBAAgBQ;EACpB,CAAA,EACJ,CAAA;EAEAd,UAAUU,SAASjB,qBAAqBwB,oBAAoB,EACxDL,aAAaM,MAAM,IAAIrC,2BAA2B;GAC9CwB,kBAAkBQ;GAClBP,gBAAgBQ;GAChBK,gBAAgBJ;GAChBK,cAAcF,EAAEhB,QAAQT,qBAAqBuB,YAAY;EAC7D,CAAA,EACJ,CAAA;EAIA,MAAMK,4BAA4B,IAAIzD,2CAA2CqC,UAAAA;EACjF,MAAMqB,kBAAkB,IAAIvC,gCAAgCsC,yBAAAA;EAE5D,MAAME,mBAAmB,IAAIzD,sCAAsCmC,UAAAA;EACnE,MAAMuB,aAAa,IAAItC,2BAA2BqC,gBAAAA;EAElD,MAAME,6BAA6B,IAAI5D,4CAA4CoC,UAAAA;EACnF,MAAMyB,mBAAmB,IAAIzC,iCAAiCwC,0BAAAA;EAE9D,MAAME,4BAA4B,IAAI1D,yCAAyCgC,UAAAA;EAE/ED,UAAUU,SAASjB,qBAAqBmC,wBAAwB,EAC5DhB,aAAaM,MAAM,IAAIpC,+BAA+B;GAClDyB,YAAYoB;GACZrB;GACAgB;GACAE;GACAE;GACAG,QAAQX,EAAEhB,QAAQZ,kBAAAA;EACtB,CAAA,EACJ,CAAA;EAEAU,UAAUU,SAASjB,qBAAqBqC,0BAA0B,EAG9DlB,aAAaM,MAAAA;GACT,MAAMa,QAAQb,EAAEhB,QAAQX,iBAAAA;GAExB,OAAO,IAAI5B,iCAAiCoE,KAAAA;EAChD,EACJ,CAAA;EAIA,MAAMC,6BAA6B,IAAI9D,kCAAkC;GACrEqC,YAAY,IAAInC,2BAA2B6B,UAAAA;GAC3CG,iBAAiBJ,UAAUE,QAA2B7B,WAAAA;EAC1D,CAAA;EACA2B,UAAUU,SAASjB,qBAAqBwC,qCAAqC,EACzErB,aAAaM,MAAM,IAAIlC,4CAA4C;GAC/DuB,YAAYyB;GACZE,gBAAgBhB,EAAEhB,QAAQT,qBAAqBmC,sBAAsB;GACrEO,eAAejB,EAAEhB,QAAQb,iBAAiB+C,aAAa;EAC3D,CAAA,EACJ,CAAA;CACJ;AACJ"}

package/dist/app/modules/identity/repositories/constants.d.ts

@@ -0,0 +1,4 @@
+export declare enum CacheIdentityPrefix {
+    PROVIDER_ACCOUNT_LINK = "identity_provider_account_link"
+}
+//# sourceMappingURL=constants.d.ts.map

package/dist/app/modules/identity/repositories/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/identity/repositories/constants.ts"],"names":[],"mappings":"AAOA,oBAAY,mBAAmB;IAC3B,qBAAqB,mCAAmC;CAC3D"}

package/dist/app/modules/identity/repositories/constants.mjs

@@ -0,0 +1,12 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+//#region src/app/modules/identity/repositories/constants.ts
+var CacheIdentityPrefix = /*#__PURE__*/ function(CacheIdentityPrefix) {
+	CacheIdentityPrefix["PROVIDER_ACCOUNT_LINK"] = "identity_provider_account_link";
+	return CacheIdentityPrefix;
+}({});
+//#endregion
+export { CacheIdentityPrefix };
+
+//# sourceMappingURL=constants.mjs.map

package/dist/app/modules/identity/repositories/constants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.mjs","names":["CacheIdentityPrefix"],"sources":["../../../../../src/app/modules/identity/repositories/constants.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nexport enum CacheIdentityPrefix {\n    PROVIDER_ACCOUNT_LINK = 'identity_provider_account_link',\n}\n"],"mappings":";;;;AAOA,IAAO,sBAAKA,uBAAAA,qBAAAA;;CAAAA,OAAAA;AAEX,EAAA,CAAA,CAAA"}

package/dist/app/modules/identity/repositories/index.d.ts

@@ -1,4 +1,5 @@
 export * from './provider/index.ts';
+export * from './constants.ts';
 export * from './client.ts';
 export * from './user.ts';
 //# sourceMappingURL=index.d.ts.map

package/dist/app/modules/identity/repositories/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/identity/repositories/index.ts"],"names":[],"mappings":"AAOA,cAAc,qBAAqB,CAAC;AAEpC,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/identity/repositories/index.ts"],"names":[],"mappings":"AAOA,cAAc,qBAAqB,CAAC;AAEpC,cAAc,gBAAgB,CAAC;AAE/B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC"}

package/dist/app/modules/identity/repositories/index.mjs

@@ -4,7 +4,9 @@ import.meta.url;
 import { IdentityProviderAttributeMappingRepository } from "./provider/mapper/attribute.mjs";
 import { IdentityProviderPermissionMappingRepository } from "./provider/mapper/permission.mjs";
 import { IdentityProviderRoleMappingRepository } from "./provider/mapper/role.mjs";
+import { CacheIdentityPrefix } from "./constants.mjs";
+import { IdentityProviderAccountLinkStore } from "./provider/link.mjs";
 import "./provider/index.mjs";
 import { ClientIdentityRepository } from "./client.mjs";
 import { UserIdentityRepository } from "./user.mjs";
-export { ClientIdentityRepository, IdentityProviderAttributeMappingRepository, IdentityProviderPermissionMappingRepository, IdentityProviderRoleMappingRepository, UserIdentityRepository };
+export { CacheIdentityPrefix, ClientIdentityRepository, IdentityProviderAccountLinkStore, IdentityProviderAttributeMappingRepository, IdentityProviderPermissionMappingRepository, IdentityProviderRoleMappingRepository, UserIdentityRepository };

package/dist/app/modules/identity/repositories/provider/index.d.ts

@@ -1,2 +1,3 @@
 export * from './mapper/index.ts';
+export * from './link.ts';
 //# sourceMappingURL=index.d.ts.map

package/dist/app/modules/identity/repositories/provider/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/identity/repositories/provider/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/identity/repositories/provider/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC"}

package/dist/app/modules/identity/repositories/provider/index.mjs

@@ -5,4 +5,5 @@ import { IdentityProviderAttributeMappingRepository } from "./mapper/attribute.m
 import { IdentityProviderPermissionMappingRepository } from "./mapper/permission.mjs";
 import { IdentityProviderRoleMappingRepository } from "./mapper/role.mjs";
 import "./mapper/index.mjs";
-export { IdentityProviderAttributeMappingRepository, IdentityProviderPermissionMappingRepository, IdentityProviderRoleMappingRepository };
+import { IdentityProviderAccountLinkStore } from "./link.mjs";
+export { IdentityProviderAccountLinkStore, IdentityProviderAttributeMappingRepository, IdentityProviderPermissionMappingRepository, IdentityProviderRoleMappingRepository };

package/dist/app/modules/identity/repositories/provider/link.d.ts

@@ -0,0 +1,9 @@
+import type { ICache } from '@authup/server-kit';
+import type { IIdentityProviderAccountLinkStore, IdentityProviderAccountLink } from '../../../../../core/index.ts';
+export declare class IdentityProviderAccountLinkStore implements IIdentityProviderAccountLinkStore {
+    protected cache: ICache;
+    constructor(cache: ICache);
+    save(data: IdentityProviderAccountLink): Promise<string>;
+    consume(handle: string): Promise<IdentityProviderAccountLink | null>;
+}
+//# sourceMappingURL=link.d.ts.map

package/dist/app/modules/identity/repositories/provider/link.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"link.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/identity/repositories/provider/link.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAEjD,OAAO,KAAK,EACR,iCAAiC,EACjC,2BAA2B,EAC9B,MAAM,8BAA8B,CAAC;AAItC,qBAAa,gCAAiC,YAAW,iCAAiC;IACtF,SAAS,CAAC,KAAK,EAAG,MAAM,CAAC;gBAEb,KAAK,EAAE,MAAM;IAInB,IAAI,CAAC,IAAI,EAAE,2BAA2B,GAAG,OAAO,CAAC,MAAM,CAAC;IAexD,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAAC;CAY7E"}

package/dist/app/modules/identity/repositories/provider/link.mjs

@@ -0,0 +1,34 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { IDENTITY_PROVIDER_ACCOUNT_LINK_TTL } from "../../../../../core/identity/provider/account/constants.mjs";
+import "../../../../../core/index.mjs";
+import { CacheIdentityPrefix } from "../constants.mjs";
+import { createNanoID } from "@authup/kit";
+import { buildCacheKey } from "@authup/server-kit";
+//#region src/app/modules/identity/repositories/provider/link.ts
+var IdentityProviderAccountLinkStore = class {
+	cache;
+	constructor(cache) {
+		this.cache = cache;
+	}
+	async save(data) {
+		const handle = createNanoID();
+		await this.cache.set(buildCacheKey({
+			prefix: CacheIdentityPrefix.PROVIDER_ACCOUNT_LINK,
+			key: handle
+		}), data, { ttl: IDENTITY_PROVIDER_ACCOUNT_LINK_TTL });
+		return handle;
+	}
+	async consume(handle) {
+		const key = buildCacheKey({
+			prefix: CacheIdentityPrefix.PROVIDER_ACCOUNT_LINK,
+			key: handle
+		});
+		return this.cache.pop(key);
+	}
+};
+//#endregion
+export { IdentityProviderAccountLinkStore };
+
+//# sourceMappingURL=link.mjs.map

package/dist/app/modules/identity/repositories/provider/link.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"link.mjs","names":["createNanoID","buildCacheKey","IDENTITY_PROVIDER_ACCOUNT_LINK_TTL","CacheIdentityPrefix","IdentityProviderAccountLinkStore","cache","save","data","handle","set","prefix","PROVIDER_ACCOUNT_LINK","key","ttl","consume","pop"],"sources":["../../../../../../src/app/modules/identity/repositories/provider/link.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createNanoID } from '@authup/kit';\nimport type { ICache } from '@authup/server-kit';\nimport { buildCacheKey } from '@authup/server-kit';\nimport type {\n    IIdentityProviderAccountLinkStore,\n    IdentityProviderAccountLink,\n} from '../../../../../core/index.ts';\nimport { IDENTITY_PROVIDER_ACCOUNT_LINK_TTL } from '../../../../../core/index.ts';\nimport { CacheIdentityPrefix } from '../constants.ts';\n\nexport class IdentityProviderAccountLinkStore implements IIdentityProviderAccountLinkStore {\n    protected cache : ICache;\n\n    constructor(cache: ICache) {\n        this.cache = cache;\n    }\n\n    async save(data: IdentityProviderAccountLink): Promise<string> {\n        const handle = createNanoID();\n\n        await this.cache.set(\n            buildCacheKey({\n                prefix: CacheIdentityPrefix.PROVIDER_ACCOUNT_LINK,\n                key: handle,\n            }),\n            data,\n            { ttl: IDENTITY_PROVIDER_ACCOUNT_LINK_TTL },\n        );\n\n        return handle;\n    }\n\n    async consume(handle: string): Promise<IdentityProviderAccountLink | null> {\n        const key = buildCacheKey({\n            prefix: CacheIdentityPrefix.PROVIDER_ACCOUNT_LINK,\n            key: handle,\n        });\n\n        // `pop` is the atomic read-and-drop (redis GETDEL, one tick on the\n        // memory adapter). A get followed by a drop is two round-trips, and\n        // two simultaneous redemptions of one handle would both read the\n        // payload before either drop landed.\n        return this.cache.pop<IdentityProviderAccountLink>(key);\n    }\n}\n"],"mappings":";;;;;;;;;AAiBA,IAAaI,mCAAb,MAAaA;CACCC;CAEV,YAAYA,OAAe;EACvB,KAAKA,QAAQA;CACjB;CAEA,MAAMC,KAAKC,MAAoD;EAC3D,MAAMC,SAASR,aAAAA;EAEf,MAAM,KAAKK,MAAMI,IACbR,cAAc;GACVS,QAAQP,oBAAoBQ;GAC5BC,KAAKJ;EACT,CAAA,GACAD,MACA,EAAEM,KAAKX,mCAAmC,CAAA;EAG9C,OAAOM;CACX;CAEA,MAAMM,QAAQN,QAA6D;EACvE,MAAMI,MAAMX,cAAc;GACtBS,QAAQP,oBAAoBQ;GAC5BC,KAAKJ;EACT,CAAA;EAMA,OAAO,KAAKH,MAAMU,IAAiCH,GAAAA;CACvD;AACJ"}

package/dist/app/modules/identity/repositories/user.d.ts

@@ -18,6 +18,7 @@ export declare class UserIdentityRepository implements IUserIdentityRepository {
     findOneBy(where: Record<string, any>): Promise<User | null>;
     private find;
     saveOneWithEA(user: Partial<User>, extraAttributes: Record<string, any>): Promise<User>;
+    remove(user: User): Promise<void>;
     savePermissions(user: User, items: IdentityProviderMapperElement[]): Promise<void>;
     saveRoles(user: User, items: IdentityProviderMapperElement[]): Promise<void>;
 }

package/dist/app/modules/identity/repositories/user.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/identity/repositories/user.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAGvE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,uBAAuB,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAExG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gDAAgD,CAAC;AAGrF,MAAM,MAAM,6BAA6B,GAAG;IACxC,UAAU,EAAE,cAAc,CAAC;IAC3B,wBAAwB,EAAE,UAAU,CAAC,cAAc,CAAC,CAAC;IACrD,kBAAkB,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;CAC5C,CAAC;AAEF,qBAAa,sBAAuB,YAAW,uBAAuB;IAClE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAiB;IAE5C,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAA6B;IAEtE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAuB;gBAE9C,GAAG,EAAE,6BAA6B;IAMxC,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAI7C,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAI/D,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAIzE,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;YAInD,IAAI;IA4CZ,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAKvF,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,6BAA6B,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAwDlF,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,6BAA6B,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAqDrF"}
+{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/identity/repositories/user.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAGvE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAE1C,OAAO,KAAK,EAAE,uBAAuB,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAExG,OAAO,KAAK,EAAc,cAAc,EAAE,MAAM,gDAAgD,CAAC;AAGjG,MAAM,MAAM,6BAA6B,GAAG;IACxC,UAAU,EAAE,cAAc,CAAC;IAC3B,wBAAwB,EAAE,UAAU,CAAC,cAAc,CAAC,CAAC;IACrD,kBAAkB,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;CAC5C,CAAC;AAEF,qBAAa,sBAAuB,YAAW,uBAAuB;IAClE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAiB;IAE5C,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAA6B;IAEtE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAuB;gBAE9C,GAAG,EAAE,6BAA6B;IAMxC,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAI7C,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAI/D,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAIzE,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;YAInD,IAAI;IA4CZ,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAKvF,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjC,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,6BAA6B,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAwDlF,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,6BAA6B,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAqDrF"}

package/dist/app/modules/identity/repositories/user.mjs

@@ -53,6 +53,9 @@ var UserIdentityRepository = class {
 		const entity = this.repository.create(user);
 		return this.repository.saveOneWithEA(entity, extraAttributes);
 	}
+	async remove(user) {
+		await this.repository.remove(user);
+	}
 	async savePermissions(user, items) {
 		const { userPermissionRepository: repository } = this;
 		const ids = items.map((item) => item.value);

package/dist/app/modules/identity/repositories/user.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"user.mjs","names":["isUUID","buildRedisKeyPath","In","IdentityProviderMapperOperation","CachePrefix","UserIdentityRepository","repository","userPermissionRepository","userRoleRepository","ctx","findOneById","id","find","findOneByName","realm","findOneByIdOrName","idOrName","findOneBy","where","key","realmKey","query","createQueryBuilder","leftJoinAndSelect","isId","name","trim","toLowerCase","andWhere","realmId","realmName","columns","metadata","column","isSelect","addSelect","propertyName","cache","prefix","USER","entity","getOne","extendOneWithEA","saveOneWithEA","user","extraAttributes","create","savePermissions","items","ids","map","item","value","idsToDelete","filter","operation","DELETE","entities","findBy","userId","permissionId","entitiesToDelete","index","indexOf","push","length","remove","entitiesToCreate","CREATE","findIndex","userRealmId","permissionRealmId","save","saveRoles","roleId","roleRealmId"],"sources":["../../../../../src/app/modules/identity/repositories/user.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { User, UserPermission, UserRole } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport type { IUserIdentityRepository, IdentityProviderMapperElement } from '../../../../core/index.ts';\nimport { IdentityProviderMapperOperation } from '../../../../core/index.ts';\nimport type { UserRepository } from '../../../../adapters/database/domains/index.ts';\nimport { CachePrefix } from '../../../../adapters/database/domains/index.ts';\n\nexport type UserIdentityRepositoryContext = {\n    repository: UserRepository,\n    userPermissionRepository: Repository<UserPermission>,\n    userRoleRepository: Repository<UserRole>,\n};\n\nexport class UserIdentityRepository implements IUserIdentityRepository {\n    private readonly repository: UserRepository;\n\n    private readonly userPermissionRepository: Repository<UserPermission>;\n\n    private readonly userRoleRepository: Repository<UserRole>;\n\n    constructor(ctx: UserIdentityRepositoryContext) {\n        this.repository = ctx.repository;\n        this.userPermissionRepository = ctx.userPermissionRepository;\n        this.userRoleRepository = ctx.userRoleRepository;\n    }\n\n    async findOneById(id: string): Promise<User | null> {\n        return this.find(id);\n    }\n\n    async findOneByName(id: string, realm?: string): Promise<User | null> {\n        return this.find(id, realm);\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<User | null> {\n        return this.find(idOrName, realm);\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<User | null> {\n        return this.repository.findOneBy(where);\n    }\n\n    private async find(key: string, realmKey?: string) : Promise<User | null> {\n        const query = this.repository.createQueryBuilder('user')\n            .leftJoinAndSelect('user.realm', 'realm');\n\n        const isId = isUUID(key);\n        if (isId) {\n            query.where('user.id = :id', { id: key });\n        } else {\n            query.where('user.name = :name', { name: key.trim().toLowerCase() });\n\n            if (realmKey) {\n                if (isUUID(realmKey)) {\n                    query.andWhere('user.realmId = :realmId', { realmId: realmKey });\n                } else {\n                    query.andWhere('realm.name = :realmName', { realmName: realmKey.trim().toLowerCase() });\n                }\n            }\n        }\n\n        const { columns } = this.repository.metadata;\n        for (const column of columns) {\n            if (!column.isSelect) {\n                query.addSelect(`user.${column.propertyName}`);\n            }\n        }\n\n        if (isId) {\n            query.cache(\n                buildRedisKeyPath({\n                    prefix: CachePrefix.USER,\n                    key,\n                }),\n                60_000,\n            );\n        }\n\n        const entity = await query.getOne();\n        if (entity) {\n            return this.repository.extendOneWithEA(entity);\n        }\n\n        return null;\n    }\n\n    async saveOneWithEA(user: Partial<User>, extraAttributes: Record<string, any>): Promise<User> {\n        const entity = this.repository.create(user);\n        return this.repository.saveOneWithEA(entity, extraAttributes);\n    }\n\n    async savePermissions(user: User, items: IdentityProviderMapperElement[]): Promise<void> {\n        const { userPermissionRepository: repository } = this;\n\n        const ids = items.map((item) => item.value);\n\n        const idsToDelete = items\n            .filter((item) => item.operation === IdentityProviderMapperOperation.DELETE)\n            .map((item) => item.value);\n\n        const entities = await repository.findBy({\n            userId: user.id,\n            permissionId: In(ids),\n        });\n\n        const entitiesToDelete : UserPermission[] = [];\n        for (const entity of entities) {\n            const index = idsToDelete.indexOf(entity.permissionId);\n            if (index === -1) {\n                continue;\n            }\n\n            entitiesToDelete.push(entity);\n        }\n\n        if (entitiesToDelete.length > 0) {\n            await repository.remove(entitiesToDelete);\n        }\n\n        const entitiesToCreate : UserPermission[] = [];\n        for (const item of items) {\n            if (item.operation !== IdentityProviderMapperOperation.CREATE) {\n                continue;\n            }\n\n            const index = entities.findIndex(\n                (entity) => entity.permissionId === item.value,\n            );\n            if (index !== -1) {\n                continue;\n            }\n\n            const entity = repository.create({\n                userId: user.id,\n                userRealmId: user.realmId,\n                permissionId: item.value as string,\n                permissionRealmId: item.realmId as string,\n            });\n\n            entitiesToCreate.push(entity);\n        }\n\n        if (entitiesToCreate.length > 0) {\n            await repository.save(entitiesToCreate);\n        }\n    }\n\n    async saveRoles(user: User, items: IdentityProviderMapperElement[]): Promise<void> {\n        const { userRoleRepository: repository } = this;\n\n        const ids = items.map((item) => item.value);\n\n        const idsToDelete = items\n            .filter((item) => item.operation === IdentityProviderMapperOperation.DELETE)\n            .map((item) => item.value);\n\n        const entities = await repository.findBy({\n            userId: user.id,\n            roleId: In(ids),\n        });\n\n        const entitiesToDelete : UserRole[] = [];\n        for (const entity of entities) {\n            const index = idsToDelete.indexOf(entity.roleId);\n            if (index === -1) {\n                continue;\n            }\n\n            entitiesToDelete.push(entity);\n        }\n\n        if (entitiesToDelete.length > 0) {\n            await repository.remove(entitiesToDelete);\n        }\n\n        const entitiesToCreate : UserRole[] = [];\n        for (const item of items) {\n            if (item.operation !== IdentityProviderMapperOperation.CREATE) {\n                continue;\n            }\n\n            const index = entities.findIndex((entity) => entity.roleId === item.value);\n            if (index !== -1) {\n                continue;\n            }\n\n            const entity = repository.create({\n                userId: user.id,\n                userRealmId: user.realmId,\n                roleId: item.value as string,\n                roleRealmId: item.realmId as string,\n            });\n\n            entitiesToCreate.push(entity);\n        }\n\n        if (entitiesToCreate.length > 0) {\n            await repository.save(entitiesToCreate);\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;AAuBA,IAAaK,yBAAb,MAAaA;CACQC;CAEAC;CAEAC;CAEjB,YAAYC,KAAoC;EAC5C,KAAKH,aAAaG,IAAIH;EACtB,KAAKC,2BAA2BE,IAAIF;EACpC,KAAKC,qBAAqBC,IAAID;CAClC;CAEA,MAAME,YAAYC,IAAkC;EAChD,OAAO,KAAKC,KAAKD,EAAAA;CACrB;CAEA,MAAME,cAAcF,IAAYG,OAAsC;EAClE,OAAO,KAAKF,KAAKD,IAAIG,KAAAA;CACzB;CAEA,MAAMC,kBAAkBC,UAAkBF,OAAsC;EAC5E,OAAO,KAAKF,KAAKI,UAAUF,KAAAA;CAC/B;CAEA,MAAMG,UAAUC,OAAkD;EAC9D,OAAO,KAAKZ,WAAWW,UAAUC,KAAAA;CACrC;CAEA,MAAcN,KAAKO,KAAaC,UAA0C;EACtE,MAAMC,QAAQ,KAAKf,WAAWgB,mBAAmB,MAAA,CAAA,CAC5CC,kBAAkB,cAAc,OAAA;EAErC,MAAMC,OAAOxB,OAAOmB,GAAAA;EACpB,IAAIK,MACAH,MAAMH,MAAM,iBAAiB,EAAEP,IAAIQ,IAAI,CAAA;OACpC;GACHE,MAAMH,MAAM,qBAAqB,EAAEO,MAAMN,IAAIO,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;GAElE,IAAIP,UACA,IAAIpB,OAAOoB,QAAAA,GACPC,MAAMO,SAAS,2BAA2B,EAAEC,SAAST,SAAS,CAAA;QAE9DC,MAAMO,SAAS,2BAA2B,EAAEE,WAAWV,SAASM,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;EAGjG;EAEA,MAAM,EAAEI,YAAY,KAAKzB,WAAW0B;EACpC,KAAK,MAAMC,UAAUF,SACjB,IAAI,CAACE,OAAOC,UACRb,MAAMc,UAAU,QAAQF,OAAOG,cAAc;EAIrD,IAAIZ,MACAH,MAAMgB,MACFpC,kBAAkB;GACdqC,QAAQlC,YAAYmC;GACpBpB;EACJ,CAAA,GACA,GAAA;EAIR,MAAMqB,SAAS,MAAMnB,MAAMoB,OAAM;EACjC,IAAID,QACA,OAAO,KAAKlC,WAAWoC,gBAAgBF,MAAAA;EAG3C,OAAO;CACX;CAEA,MAAMG,cAAcC,MAAqBC,iBAAqD;EAC1F,MAAML,SAAS,KAAKlC,WAAWwC,OAAOF,IAAAA;EACtC,OAAO,KAAKtC,WAAWqC,cAAcH,QAAQK,eAAAA;CACjD;CAEA,MAAME,gBAAgBH,MAAYI,OAAuD;EACrF,MAAM,EAAEzC,0BAA0BD,eAAe;EAEjD,MAAM2C,MAAMD,MAAME,KAAKC,SAASA,KAAKC,KAAK;EAE1C,MAAMC,cAAcL,MACfM,QAAQH,SAASA,KAAKI,cAAcpD,gCAAgCqD,MAAM,CAAA,CAC1EN,KAAKC,SAASA,KAAKC,KAAK;EAE7B,MAAMK,WAAW,MAAMnD,WAAWoD,OAAO;GACrCC,QAAQf,KAAKjC;GACbiD,cAAc1D,GAAG+C,GAAAA;EACrB,CAAA;EAEA,MAAMY,mBAAsC,CAAA;EAC5C,KAAK,MAAMrB,UAAUiB,UAAU;GAE3B,IADcJ,YAAYU,QAAQvB,OAAOoB,YACrCE,MAAU,IACV;GAGJD,iBAAiBG,KAAKxB,MAAAA;EAC1B;EAEA,IAAIqB,iBAAiBI,SAAS,GAC1B,MAAM3D,WAAW4D,OAAOL,gBAAAA;EAG5B,MAAMM,mBAAsC,CAAA;EAC5C,KAAK,MAAMhB,QAAQH,OAAO;GACtB,IAAIG,KAAKI,cAAcpD,gCAAgCiE,QACnD;GAMJ,IAHcX,SAASY,WAClB7B,WAAWA,OAAOoB,iBAAiBT,KAAKC,KAEzCU,MAAU,IACV;GAGJ,MAAMtB,SAASlC,WAAWwC,OAAO;IAC7Ba,QAAQf,KAAKjC;IACb2D,aAAa1B,KAAKf;IAClB+B,cAAcT,KAAKC;IACnBmB,mBAAmBpB,KAAKtB;GAC5B,CAAA;GAEAsC,iBAAiBH,KAAKxB,MAAAA;EAC1B;EAEA,IAAI2B,iBAAiBF,SAAS,GAC1B,MAAM3D,WAAWkE,KAAKL,gBAAAA;CAE9B;CAEA,MAAMM,UAAU7B,MAAYI,OAAuD;EAC/E,MAAM,EAAExC,oBAAoBF,eAAe;EAE3C,MAAM2C,MAAMD,MAAME,KAAKC,SAASA,KAAKC,KAAK;EAE1C,MAAMC,cAAcL,MACfM,QAAQH,SAASA,KAAKI,cAAcpD,gCAAgCqD,MAAM,CAAA,CAC1EN,KAAKC,SAASA,KAAKC,KAAK;EAE7B,MAAMK,WAAW,MAAMnD,WAAWoD,OAAO;GACrCC,QAAQf,KAAKjC;GACb+D,QAAQxE,GAAG+C,GAAAA;EACf,CAAA;EAEA,MAAMY,mBAAgC,CAAA;EACtC,KAAK,MAAMrB,UAAUiB,UAAU;GAE3B,IADcJ,YAAYU,QAAQvB,OAAOkC,MACrCZ,MAAU,IACV;GAGJD,iBAAiBG,KAAKxB,MAAAA;EAC1B;EAEA,IAAIqB,iBAAiBI,SAAS,GAC1B,MAAM3D,WAAW4D,OAAOL,gBAAAA;EAG5B,MAAMM,mBAAgC,CAAA;EACtC,KAAK,MAAMhB,QAAQH,OAAO;GACtB,IAAIG,KAAKI,cAAcpD,gCAAgCiE,QACnD;GAIJ,IADcX,SAASY,WAAW7B,WAAWA,OAAOkC,WAAWvB,KAAKC,KAChEU,MAAU,IACV;GAGJ,MAAMtB,SAASlC,WAAWwC,OAAO;IAC7Ba,QAAQf,KAAKjC;IACb2D,aAAa1B,KAAKf;IAClB6C,QAAQvB,KAAKC;IACbuB,aAAaxB,KAAKtB;GACtB,CAAA;GAEAsC,iBAAiBH,KAAKxB,MAAAA;EAC1B;EAEA,IAAI2B,iBAAiBF,SAAS,GAC1B,MAAM3D,WAAWkE,KAAKL,gBAAAA;CAE9B;AACJ"}
+{"version":3,"file":"user.mjs","names":["isUUID","buildRedisKeyPath","In","IdentityProviderMapperOperation","CachePrefix","UserIdentityRepository","repository","userPermissionRepository","userRoleRepository","ctx","findOneById","id","find","findOneByName","realm","findOneByIdOrName","idOrName","findOneBy","where","key","realmKey","query","createQueryBuilder","leftJoinAndSelect","isId","name","trim","toLowerCase","andWhere","realmId","realmName","columns","metadata","column","isSelect","addSelect","propertyName","cache","prefix","USER","entity","getOne","extendOneWithEA","saveOneWithEA","user","extraAttributes","create","remove","savePermissions","items","ids","map","item","value","idsToDelete","filter","operation","DELETE","entities","findBy","userId","permissionId","entitiesToDelete","index","indexOf","push","length","entitiesToCreate","CREATE","findIndex","userRealmId","permissionRealmId","save","saveRoles","roleId","roleRealmId"],"sources":["../../../../../src/app/modules/identity/repositories/user.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport type { User, UserPermission, UserRole } from '@authup/core-kit';\nimport { isUUID } from '@authup/kit';\nimport { buildRedisKeyPath } from '@authup/server-kit';\nimport type { Repository } from 'typeorm';\nimport { In } from 'typeorm';\nimport type { IUserIdentityRepository, IdentityProviderMapperElement } from '../../../../core/index.ts';\nimport { IdentityProviderMapperOperation } from '../../../../core/index.ts';\nimport type { UserEntity, UserRepository } from '../../../../adapters/database/domains/index.ts';\nimport { CachePrefix } from '../../../../adapters/database/domains/index.ts';\n\nexport type UserIdentityRepositoryContext = {\n    repository: UserRepository,\n    userPermissionRepository: Repository<UserPermission>,\n    userRoleRepository: Repository<UserRole>,\n};\n\nexport class UserIdentityRepository implements IUserIdentityRepository {\n    private readonly repository: UserRepository;\n\n    private readonly userPermissionRepository: Repository<UserPermission>;\n\n    private readonly userRoleRepository: Repository<UserRole>;\n\n    constructor(ctx: UserIdentityRepositoryContext) {\n        this.repository = ctx.repository;\n        this.userPermissionRepository = ctx.userPermissionRepository;\n        this.userRoleRepository = ctx.userRoleRepository;\n    }\n\n    async findOneById(id: string): Promise<User | null> {\n        return this.find(id);\n    }\n\n    async findOneByName(id: string, realm?: string): Promise<User | null> {\n        return this.find(id, realm);\n    }\n\n    async findOneByIdOrName(idOrName: string, realm?: string): Promise<User | null> {\n        return this.find(idOrName, realm);\n    }\n\n    async findOneBy(where: Record<string, any>): Promise<User | null> {\n        return this.repository.findOneBy(where);\n    }\n\n    private async find(key: string, realmKey?: string) : Promise<User | null> {\n        const query = this.repository.createQueryBuilder('user')\n            .leftJoinAndSelect('user.realm', 'realm');\n\n        const isId = isUUID(key);\n        if (isId) {\n            query.where('user.id = :id', { id: key });\n        } else {\n            query.where('user.name = :name', { name: key.trim().toLowerCase() });\n\n            if (realmKey) {\n                if (isUUID(realmKey)) {\n                    query.andWhere('user.realmId = :realmId', { realmId: realmKey });\n                } else {\n                    query.andWhere('realm.name = :realmName', { realmName: realmKey.trim().toLowerCase() });\n                }\n            }\n        }\n\n        const { columns } = this.repository.metadata;\n        for (const column of columns) {\n            if (!column.isSelect) {\n                query.addSelect(`user.${column.propertyName}`);\n            }\n        }\n\n        if (isId) {\n            query.cache(\n                buildRedisKeyPath({\n                    prefix: CachePrefix.USER,\n                    key,\n                }),\n                60_000,\n            );\n        }\n\n        const entity = await query.getOne();\n        if (entity) {\n            return this.repository.extendOneWithEA(entity);\n        }\n\n        return null;\n    }\n\n    async saveOneWithEA(user: Partial<User>, extraAttributes: Record<string, any>): Promise<User> {\n        const entity = this.repository.create(user);\n        return this.repository.saveOneWithEA(entity, extraAttributes);\n    }\n\n    async remove(user: User): Promise<void> {\n        await this.repository.remove(user as UserEntity);\n    }\n\n    async savePermissions(user: User, items: IdentityProviderMapperElement[]): Promise<void> {\n        const { userPermissionRepository: repository } = this;\n\n        const ids = items.map((item) => item.value);\n\n        const idsToDelete = items\n            .filter((item) => item.operation === IdentityProviderMapperOperation.DELETE)\n            .map((item) => item.value);\n\n        const entities = await repository.findBy({\n            userId: user.id,\n            permissionId: In(ids),\n        });\n\n        const entitiesToDelete : UserPermission[] = [];\n        for (const entity of entities) {\n            const index = idsToDelete.indexOf(entity.permissionId);\n            if (index === -1) {\n                continue;\n            }\n\n            entitiesToDelete.push(entity);\n        }\n\n        if (entitiesToDelete.length > 0) {\n            await repository.remove(entitiesToDelete);\n        }\n\n        const entitiesToCreate : UserPermission[] = [];\n        for (const item of items) {\n            if (item.operation !== IdentityProviderMapperOperation.CREATE) {\n                continue;\n            }\n\n            const index = entities.findIndex(\n                (entity) => entity.permissionId === item.value,\n            );\n            if (index !== -1) {\n                continue;\n            }\n\n            const entity = repository.create({\n                userId: user.id,\n                userRealmId: user.realmId,\n                permissionId: item.value as string,\n                permissionRealmId: item.realmId as string,\n            });\n\n            entitiesToCreate.push(entity);\n        }\n\n        if (entitiesToCreate.length > 0) {\n            await repository.save(entitiesToCreate);\n        }\n    }\n\n    async saveRoles(user: User, items: IdentityProviderMapperElement[]): Promise<void> {\n        const { userRoleRepository: repository } = this;\n\n        const ids = items.map((item) => item.value);\n\n        const idsToDelete = items\n            .filter((item) => item.operation === IdentityProviderMapperOperation.DELETE)\n            .map((item) => item.value);\n\n        const entities = await repository.findBy({\n            userId: user.id,\n            roleId: In(ids),\n        });\n\n        const entitiesToDelete : UserRole[] = [];\n        for (const entity of entities) {\n            const index = idsToDelete.indexOf(entity.roleId);\n            if (index === -1) {\n                continue;\n            }\n\n            entitiesToDelete.push(entity);\n        }\n\n        if (entitiesToDelete.length > 0) {\n            await repository.remove(entitiesToDelete);\n        }\n\n        const entitiesToCreate : UserRole[] = [];\n        for (const item of items) {\n            if (item.operation !== IdentityProviderMapperOperation.CREATE) {\n                continue;\n            }\n\n            const index = entities.findIndex((entity) => entity.roleId === item.value);\n            if (index !== -1) {\n                continue;\n            }\n\n            const entity = repository.create({\n                userId: user.id,\n                userRealmId: user.realmId,\n                roleId: item.value as string,\n                roleRealmId: item.realmId as string,\n            });\n\n            entitiesToCreate.push(entity);\n        }\n\n        if (entitiesToCreate.length > 0) {\n            await repository.save(entitiesToCreate);\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;AAuBA,IAAaK,yBAAb,MAAaA;CACQC;CAEAC;CAEAC;CAEjB,YAAYC,KAAoC;EAC5C,KAAKH,aAAaG,IAAIH;EACtB,KAAKC,2BAA2BE,IAAIF;EACpC,KAAKC,qBAAqBC,IAAID;CAClC;CAEA,MAAME,YAAYC,IAAkC;EAChD,OAAO,KAAKC,KAAKD,EAAAA;CACrB;CAEA,MAAME,cAAcF,IAAYG,OAAsC;EAClE,OAAO,KAAKF,KAAKD,IAAIG,KAAAA;CACzB;CAEA,MAAMC,kBAAkBC,UAAkBF,OAAsC;EAC5E,OAAO,KAAKF,KAAKI,UAAUF,KAAAA;CAC/B;CAEA,MAAMG,UAAUC,OAAkD;EAC9D,OAAO,KAAKZ,WAAWW,UAAUC,KAAAA;CACrC;CAEA,MAAcN,KAAKO,KAAaC,UAA0C;EACtE,MAAMC,QAAQ,KAAKf,WAAWgB,mBAAmB,MAAA,CAAA,CAC5CC,kBAAkB,cAAc,OAAA;EAErC,MAAMC,OAAOxB,OAAOmB,GAAAA;EACpB,IAAIK,MACAH,MAAMH,MAAM,iBAAiB,EAAEP,IAAIQ,IAAI,CAAA;OACpC;GACHE,MAAMH,MAAM,qBAAqB,EAAEO,MAAMN,IAAIO,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;GAElE,IAAIP,UACA,IAAIpB,OAAOoB,QAAAA,GACPC,MAAMO,SAAS,2BAA2B,EAAEC,SAAST,SAAS,CAAA;QAE9DC,MAAMO,SAAS,2BAA2B,EAAEE,WAAWV,SAASM,KAAI,CAAA,CAAGC,YAAW,EAAG,CAAA;EAGjG;EAEA,MAAM,EAAEI,YAAY,KAAKzB,WAAW0B;EACpC,KAAK,MAAMC,UAAUF,SACjB,IAAI,CAACE,OAAOC,UACRb,MAAMc,UAAU,QAAQF,OAAOG,cAAc;EAIrD,IAAIZ,MACAH,MAAMgB,MACFpC,kBAAkB;GACdqC,QAAQlC,YAAYmC;GACpBpB;EACJ,CAAA,GACA,GAAA;EAIR,MAAMqB,SAAS,MAAMnB,MAAMoB,OAAM;EACjC,IAAID,QACA,OAAO,KAAKlC,WAAWoC,gBAAgBF,MAAAA;EAG3C,OAAO;CACX;CAEA,MAAMG,cAAcC,MAAqBC,iBAAqD;EAC1F,MAAML,SAAS,KAAKlC,WAAWwC,OAAOF,IAAAA;EACtC,OAAO,KAAKtC,WAAWqC,cAAcH,QAAQK,eAAAA;CACjD;CAEA,MAAME,OAAOH,MAA2B;EACpC,MAAM,KAAKtC,WAAWyC,OAAOH,IAAAA;CACjC;CAEA,MAAMI,gBAAgBJ,MAAYK,OAAuD;EACrF,MAAM,EAAE1C,0BAA0BD,eAAe;EAEjD,MAAM4C,MAAMD,MAAME,KAAKC,SAASA,KAAKC,KAAK;EAE1C,MAAMC,cAAcL,MACfM,QAAQH,SAASA,KAAKI,cAAcrD,gCAAgCsD,MAAM,CAAA,CAC1EN,KAAKC,SAASA,KAAKC,KAAK;EAE7B,MAAMK,WAAW,MAAMpD,WAAWqD,OAAO;GACrCC,QAAQhB,KAAKjC;GACbkD,cAAc3D,GAAGgD,GAAAA;EACrB,CAAA;EAEA,MAAMY,mBAAsC,CAAA;EAC5C,KAAK,MAAMtB,UAAUkB,UAAU;GAE3B,IADcJ,YAAYU,QAAQxB,OAAOqB,YACrCE,MAAU,IACV;GAGJD,iBAAiBG,KAAKzB,MAAAA;EAC1B;EAEA,IAAIsB,iBAAiBI,SAAS,GAC1B,MAAM5D,WAAWyC,OAAOe,gBAAAA;EAG5B,MAAMK,mBAAsC,CAAA;EAC5C,KAAK,MAAMf,QAAQH,OAAO;GACtB,IAAIG,KAAKI,cAAcrD,gCAAgCiE,QACnD;GAMJ,IAHcV,SAASW,WAClB7B,WAAWA,OAAOqB,iBAAiBT,KAAKC,KAEzCU,MAAU,IACV;GAGJ,MAAMvB,SAASlC,WAAWwC,OAAO;IAC7Bc,QAAQhB,KAAKjC;IACb2D,aAAa1B,KAAKf;IAClBgC,cAAcT,KAAKC;IACnBkB,mBAAmBnB,KAAKvB;GAC5B,CAAA;GAEAsC,iBAAiBF,KAAKzB,MAAAA;EAC1B;EAEA,IAAI2B,iBAAiBD,SAAS,GAC1B,MAAM5D,WAAWkE,KAAKL,gBAAAA;CAE9B;CAEA,MAAMM,UAAU7B,MAAYK,OAAuD;EAC/E,MAAM,EAAEzC,oBAAoBF,eAAe;EAE3C,MAAM4C,MAAMD,MAAME,KAAKC,SAASA,KAAKC,KAAK;EAE1C,MAAMC,cAAcL,MACfM,QAAQH,SAASA,KAAKI,cAAcrD,gCAAgCsD,MAAM,CAAA,CAC1EN,KAAKC,SAASA,KAAKC,KAAK;EAE7B,MAAMK,WAAW,MAAMpD,WAAWqD,OAAO;GACrCC,QAAQhB,KAAKjC;GACb+D,QAAQxE,GAAGgD,GAAAA;EACf,CAAA;EAEA,MAAMY,mBAAgC,CAAA;EACtC,KAAK,MAAMtB,UAAUkB,UAAU;GAE3B,IADcJ,YAAYU,QAAQxB,OAAOkC,MACrCX,MAAU,IACV;GAGJD,iBAAiBG,KAAKzB,MAAAA;EAC1B;EAEA,IAAIsB,iBAAiBI,SAAS,GAC1B,MAAM5D,WAAWyC,OAAOe,gBAAAA;EAG5B,MAAMK,mBAAgC,CAAA;EACtC,KAAK,MAAMf,QAAQH,OAAO;GACtB,IAAIG,KAAKI,cAAcrD,gCAAgCiE,QACnD;GAIJ,IADcV,SAASW,WAAW7B,WAAWA,OAAOkC,WAAWtB,KAAKC,KAChEU,MAAU,IACV;GAGJ,MAAMvB,SAASlC,WAAWwC,OAAO;IAC7Bc,QAAQhB,KAAKjC;IACb2D,aAAa1B,KAAKf;IAClB6C,QAAQtB,KAAKC;IACbsB,aAAavB,KAAKvB;GACtB,CAAA;GAEAsC,iBAAiBF,KAAKzB,MAAAA;EAC1B;EAEA,IAAI2B,iBAAiBD,SAAS,GAC1B,MAAM5D,WAAWkE,KAAKL,gBAAAA;CAE9B;AACJ"}

package/dist/app/modules/index.mjs

@@ -58,6 +58,8 @@ import { IdentityInjectionKey } from "./identity/constants.mjs";
 import { IdentityProviderAttributeMappingRepository } from "./identity/repositories/provider/mapper/attribute.mjs";
 import { IdentityProviderPermissionMappingRepository } from "./identity/repositories/provider/mapper/permission.mjs";
 import { IdentityProviderRoleMappingRepository } from "./identity/repositories/provider/mapper/role.mjs";
+import { CacheIdentityPrefix } from "./identity/repositories/constants.mjs";
+import { IdentityProviderAccountLinkStore } from "./identity/repositories/provider/link.mjs";
 import { ClientIdentityRepository } from "./identity/repositories/client.mjs";
 import { UserIdentityRepository } from "./identity/repositories/user.mjs";
 import { LDAPInjectionKey } from "./ldap/constants.mjs";
@@ -81,4 +83,4 @@ import { ProvisionerModule } from "./provisioning/module.mjs";
 import "./provisioning/index.mjs";
 import { RuntimeModule } from "./runtime/module.mjs";
 import "./runtime/index.mjs";
-export { AuthenticationInjectionKey, AuthenticationModule, CacheInjectionKey, CacheModule, ClientIdentityRepository, ClientPermissionRepositoryAdapter, ClientRepositoryAdapter, ClientRoleRepositoryAdapter, ClientScopeRepositoryAdapter, ComponentsModule, CompositeProvisioningSource, ConfigEnvironmentVariableName, ConfigInjectionKey, ConfigModule, DatabaseInjectionKey, DatabaseModule, DefaultProvisioningSource, EventRepositoryAdapter, FileProvisioningSource, HTTPInjectionKey, HTTPModule, IdentityInjectionKey, IdentityModule, IdentityProviderAccountRepositoryAdapter, IdentityProviderAttributeMappingRepository, IdentityProviderPermissionMappingRepository, IdentityProviderRepositoryAdapter, IdentityProviderRoleMappingRepository, IdentityProviderRoleMappingRepositoryAdapter, KeyRepositoryAdapter, LDAPInjectionKey, LazyWildcardRealmProvisioner, LdapModule, LoggerInjectionKey, LoggerModule, MailInjectionKey, MailModule, MailTemplateRendererInjectionKey, MetricsInjectionKey, ModuleName, OAuth2InjectionToken, OAuth2Module, PermissionDatabaseProvider, PermissionPolicyRepositoryAdapter, PermissionRepositoryAdapter, PolicyRepositoryAdapter, PromAuthFlowMetrics, ProvisionerModule, ProvisioningInjectionKey, RealmRepositoryAdapter, RoleAttributeRepositoryAdapter, RolePermissionRepositoryAdapter, RoleRepositoryAdapter, RuntimeModule, ScopeRepositoryAdapter, SessionRepository, TrustAnchorRepositoryAdapter, UserAttributeRepositoryAdapter, UserAuthenticatorRepositoryAdapter, UserIdentityRepository, UserPermissionRepositoryAdapter, UserRepositoryAdapter, UserRoleRepositoryAdapter, expandToOrigins, getAppOrigins, readConfig, readConfigRaw, readConfigRawFromEnv, readConfigRawFromFS };
+export { AuthenticationInjectionKey, AuthenticationModule, CacheIdentityPrefix, CacheInjectionKey, CacheModule, ClientIdentityRepository, ClientPermissionRepositoryAdapter, ClientRepositoryAdapter, ClientRoleRepositoryAdapter, ClientScopeRepositoryAdapter, ComponentsModule, CompositeProvisioningSource, ConfigEnvironmentVariableName, ConfigInjectionKey, ConfigModule, DatabaseInjectionKey, DatabaseModule, DefaultProvisioningSource, EventRepositoryAdapter, FileProvisioningSource, HTTPInjectionKey, HTTPModule, IdentityInjectionKey, IdentityModule, IdentityProviderAccountLinkStore, IdentityProviderAccountRepositoryAdapter, IdentityProviderAttributeMappingRepository, IdentityProviderPermissionMappingRepository, IdentityProviderRepositoryAdapter, IdentityProviderRoleMappingRepository, IdentityProviderRoleMappingRepositoryAdapter, KeyRepositoryAdapter, LDAPInjectionKey, LazyWildcardRealmProvisioner, LdapModule, LoggerInjectionKey, LoggerModule, MailInjectionKey, MailModule, MailTemplateRendererInjectionKey, MetricsInjectionKey, ModuleName, OAuth2InjectionToken, OAuth2Module, PermissionDatabaseProvider, PermissionPolicyRepositoryAdapter, PermissionRepositoryAdapter, PolicyRepositoryAdapter, PromAuthFlowMetrics, ProvisionerModule, ProvisioningInjectionKey, RealmRepositoryAdapter, RoleAttributeRepositoryAdapter, RolePermissionRepositoryAdapter, RoleRepositoryAdapter, RuntimeModule, ScopeRepositoryAdapter, SessionRepository, TrustAnchorRepositoryAdapter, UserAttributeRepositoryAdapter, UserAuthenticatorRepositoryAdapter, UserIdentityRepository, UserPermissionRepositoryAdapter, UserRepositoryAdapter, UserRoleRepositoryAdapter, expandToOrigins, getAppOrigins, readConfig, readConfigRaw, readConfigRawFromEnv, readConfigRawFromFS };

package/dist/app/modules/oauth2/repositories/authorize/state/repository.d.ts

@@ -3,8 +3,7 @@ import type { IOAuth2AuthorizeStateRepository, OAuth2AuthorizationState } from '
 export declare class OAuth2AuthorizationStateRepository implements IOAuth2AuthorizeStateRepository {
     protected cache: ICache;
     constructor(cache: ICache);
-    findOneById(key: string): Promise<OAuth2AuthorizationState | null>;
-    remove(key: string): Promise<void>;
     insert(data: OAuth2AuthorizationState): Promise<string>;
+    popOneById(key: string): Promise<OAuth2AuthorizationState | null>;
 }
 //# sourceMappingURL=repository.d.ts.map

package/dist/app/modules/oauth2/repositories/authorize/state/repository.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../../src/app/modules/oauth2/repositories/authorize/state/repository.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAEjD,OAAO,KAAK,EAAE,+BAA+B,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAGjH,qBAAa,kCAAmC,YAAW,+BAA+B;IACtF,SAAS,CAAC,KAAK,EAAG,MAAM,CAAC;gBAEb,KAAK,EAAE,MAAM;IAInB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC;IAalE,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASlC,MAAM,CAAC,IAAI,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC;CAchE"}
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../../../../../src/app/modules/oauth2/repositories/authorize/state/repository.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAEjD,OAAO,KAAK,EAAE,+BAA+B,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAGjH,qBAAa,kCAAmC,YAAW,+BAA+B;IACtF,SAAS,CAAC,KAAK,EAAG,MAAM,CAAC;gBAEb,KAAK,EAAE,MAAM;IAInB,MAAM,CAAC,IAAI,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC;IAevD,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC;CAM1E"}

package/dist/app/modules/oauth2/repositories/authorize/state/repository.mjs

@@ -10,29 +10,20 @@ var OAuth2AuthorizationStateRepository = class {
 	constructor(cache) {
 		this.cache = cache;
 	}
-	async findOneById(key) {
-		const id = buildCacheKey({
-			prefix: CacheOAuth2Prefix.AUTHORIZATION_CODE,
-			key
-		});
-		const payload = await this.cache.get(id);
-		if (payload) return payload;
-		return null;
-	}
-	async remove(key) {
-		await this.cache.drop(buildCacheKey({
-			prefix: CacheOAuth2Prefix.AUTHORIZATION_CODE,
-			key
-		}));
-	}
 	async insert(data) {
 		const state = createNanoID();
 		await this.cache.set(buildCacheKey({
-			prefix: CacheOAuth2Prefix.AUTHORIZATION_CODE,
+			prefix: CacheOAuth2Prefix.AUTHORIZATION_STATE,
 			key: state
 		}), data, { ttl: 18e5 });
 		return state;
 	}
+	async popOneById(key) {
+		return this.cache.pop(buildCacheKey({
+			prefix: CacheOAuth2Prefix.AUTHORIZATION_STATE,
+			key
+		}));
+	}
 };
 //#endregion
 export { OAuth2AuthorizationStateRepository };

package/dist/app/modules/oauth2/repositories/authorize/state/repository.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"repository.mjs","names":["createNanoID","buildCacheKey","CacheOAuth2Prefix","OAuth2AuthorizationStateRepository","cache","findOneById","key","id","prefix","AUTHORIZATION_CODE","payload","get","remove","drop","insert","data","state","set","ttl"],"sources":["../../../../../../../src/app/modules/oauth2/repositories/authorize/state/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createNanoID } from '@authup/kit';\nimport type { ICache } from '@authup/server-kit';\nimport { buildCacheKey } from '@authup/server-kit';\nimport type { IOAuth2AuthorizeStateRepository, OAuth2AuthorizationState } from '../../../../../../core/index.ts';\nimport { CacheOAuth2Prefix } from '../../constants.ts';\n\nexport class OAuth2AuthorizationStateRepository implements IOAuth2AuthorizeStateRepository {\n    protected cache : ICache;\n\n    constructor(cache: ICache) {\n        this.cache = cache;\n    }\n\n    async findOneById(key: string): Promise<OAuth2AuthorizationState | null> {\n        const id = buildCacheKey({\n            prefix: CacheOAuth2Prefix.AUTHORIZATION_CODE,\n            key, \n        });\n        const payload = await this.cache.get<OAuth2AuthorizationState>(id);\n        if (payload) {\n            return payload;\n        }\n\n        return null;\n    }\n\n    async remove(key: string): Promise<void> {\n        await this.cache.drop(\n            buildCacheKey({\n                prefix: CacheOAuth2Prefix.AUTHORIZATION_CODE,\n                key, \n            }),\n        );\n    }\n\n    async insert(data: OAuth2AuthorizationState): Promise<string> {\n        const state = createNanoID();\n\n        await this.cache.set(\n            buildCacheKey({\n                prefix: CacheOAuth2Prefix.AUTHORIZATION_CODE,\n                key: state, \n            }),\n            data,\n            { ttl: 1000 * 60 * 30 }, // 30 min\n        );\n\n        return state;\n    }\n}\n"],"mappings":";;;;;;;AAaA,IAAaG,qCAAb,MAAaA;CACCC;CAEV,YAAYA,OAAe;EACvB,KAAKA,QAAQA;CACjB;CAEA,MAAMC,YAAYC,KAAuD;EACrE,MAAMC,KAAKN,cAAc;GACrBO,QAAQN,kBAAkBO;GAC1BH;EACJ,CAAA;EACA,MAAMI,UAAU,MAAM,KAAKN,MAAMO,IAA8BJ,EAAAA;EAC/D,IAAIG,SACA,OAAOA;EAGX,OAAO;CACX;CAEA,MAAME,OAAON,KAA4B;EACrC,MAAM,KAAKF,MAAMS,KACbZ,cAAc;GACVO,QAAQN,kBAAkBO;GAC1BH;EACJ,CAAA,CAAA;CAER;CAEA,MAAMQ,OAAOC,MAAiD;EAC1D,MAAMC,QAAQhB,aAAAA;EAEd,MAAM,KAAKI,MAAMa,IACbhB,cAAc;GACVO,QAAQN,kBAAkBO;GAC1BH,KAAKU;EACT,CAAA,GACAD,MACA,EAAEG,KAAK,KAAe,CAAA;EAG1B,OAAOF;CACX;AACJ"}
+{"version":3,"file":"repository.mjs","names":["createNanoID","buildCacheKey","CacheOAuth2Prefix","OAuth2AuthorizationStateRepository","cache","insert","data","state","set","prefix","AUTHORIZATION_STATE","key","ttl","popOneById","pop"],"sources":["../../../../../../../src/app/modules/oauth2/repositories/authorize/state/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { createNanoID } from '@authup/kit';\nimport type { ICache } from '@authup/server-kit';\nimport { buildCacheKey } from '@authup/server-kit';\nimport type { IOAuth2AuthorizeStateRepository, OAuth2AuthorizationState } from '../../../../../../core/index.ts';\nimport { CacheOAuth2Prefix } from '../../constants.ts';\n\nexport class OAuth2AuthorizationStateRepository implements IOAuth2AuthorizeStateRepository {\n    protected cache : ICache;\n\n    constructor(cache: ICache) {\n        this.cache = cache;\n    }\n\n    async insert(data: OAuth2AuthorizationState): Promise<string> {\n        const state = createNanoID();\n\n        await this.cache.set(\n            buildCacheKey({\n                prefix: CacheOAuth2Prefix.AUTHORIZATION_STATE,\n                key: state,\n            }),\n            data,\n            { ttl: 1000 * 60 * 30 }, // 30 min\n        );\n\n        return state;\n    }\n\n    async popOneById(key: string): Promise<OAuth2AuthorizationState | null> {\n        return this.cache.pop<OAuth2AuthorizationState>(buildCacheKey({\n            prefix: CacheOAuth2Prefix.AUTHORIZATION_STATE,\n            key,\n        }));\n    }\n}\n"],"mappings":";;;;;;;AAaA,IAAaG,qCAAb,MAAaA;CACCC;CAEV,YAAYA,OAAe;EACvB,KAAKA,QAAQA;CACjB;CAEA,MAAMC,OAAOC,MAAiD;EAC1D,MAAMC,QAAQP,aAAAA;EAEd,MAAM,KAAKI,MAAMI,IACbP,cAAc;GACVQ,QAAQP,kBAAkBQ;GAC1BC,KAAKJ;EACT,CAAA,GACAD,MACA,EAAEM,KAAK,KAAe,CAAA;EAG1B,OAAOL;CACX;CAEA,MAAMM,WAAWF,KAAuD;EACpE,OAAO,KAAKP,MAAMU,IAA8Bb,cAAc;GAC1DQ,QAAQP,kBAAkBQ;GAC1BC;EACJ,CAAA,CAAA;CACJ;AACJ"}

package/dist/app/modules/runtime/module.mjs

@@ -1,13 +1,13 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { resolveURL } from "../../../utils/url.mjs";
+import "../../../utils/index.mjs";
 import { ModuleName } from "../constants.mjs";
 import { ConfigInjectionKey } from "../config/constants.mjs";
 import "../config/index.mjs";
 import { LoggerInjectionKey } from "../logger/constants.mjs";
 import "../logger/index.mjs";
-import { resolveURL } from "../../../utils/url.mjs";
-import "../../../utils/index.mjs";
 //#region src/app/modules/runtime/module.ts
 var RuntimeModule = class {
 	name;

package/dist/cli/commands/migration.mjs

@@ -11,9 +11,9 @@ import { ApplicationBuilder } from "../../app/builder.mjs";
 import "../../app/index.mjs";
 import { createCLIConfigModule } from "../config.mjs";
 import { DataSource } from "typeorm";
+import { checkDatabase, createDatabase, dropDatabase, generateMigration, transformFilePath } from "typeorm-extension";
 import path from "node:path";
 import process from "node:process";
-import { checkDatabase, createDatabase, dropDatabase, generateMigration, transformFilePath } from "typeorm-extension";
 import { defineCommand } from "citty";
 //#region src/cli/commands/migration.ts
 var MigrationOperation = /*#__PURE__*/ function(MigrationOperation) {

package/dist/core/entities/client-scope/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/client-scope/schema.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAMpD,eAAO,MAAM,iBAAiB,gDA2B5B,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/client-scope/schema.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAMpD,eAAO,MAAM,iBAAiB,gDA8C5B,CAAC"}

package/dist/core/entities/client-scope/schema.mjs

@@ -17,7 +17,9 @@ const clientScopeSchema = defineSchema({
 		["scopeId"],
 		["default"],
 		["clientRealmId"],
-		["scopeRealmId"]
+		["scopeRealmId"],
+		["createdAt"],
+		["updatedAt"]
 	],
 	fields: { default: [
 		"id",
@@ -44,6 +46,19 @@ const clientScopeSchema = defineSchema({
 		allowed: ["client", "scope"],
 		validate: createRelationsReadGate(schemaMapping)
 	},
+	sorts: {
+		allowed: [
+			"id",
+			"default",
+			"clientId",
+			"clientRealmId",
+			"scopeId",
+			"scopeRealmId",
+			"createdAt",
+			"updatedAt"
+		],
+		indexed: true
+	},
 	pagination: { maxLimit: 50 },
 	schemaMapping
 });

package/dist/core/entities/client-scope/schema.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"schema.mjs","names":["defineSchema","EntityType","createRelationsReadGate","schemaMapping","client","CLIENT","scope","SCOPE","clientScopeSchema","name","CLIENT_SCOPE","indexes","fields","default","filters","allowed","indexed","relations","validate","pagination","maxLimit"],"sources":["../../../../src/core/entities/client-scope/schema.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { defineSchema } from '@rapiq/core';\nimport type { ClientScope } from '@authup/core-kit';\nimport { EntityType } from '@authup/core-kit';\nimport { createRelationsReadGate } from '../../query/relations.ts';\n\nconst schemaMapping = { client: EntityType.CLIENT, scope: EntityType.SCOPE };\n\nexport const clientScopeSchema = defineSchema<ClientScope>({\n    name: EntityType.CLIENT_SCOPE,\n    indexes: [\n        ['id'],\n        ['clientId', 'scopeId'],\n        ['scopeId'],\n        ['default'],\n        ['clientRealmId'],\n        ['scopeRealmId'],\n    ],\n    // see user-role schema — explicit root projection for include= decodes\n    fields: {\n        default: [\n            'id',\n            'default',\n            'clientId',\n            'clientRealmId',\n            'scopeId',\n            'scopeRealmId',\n            'createdAt',\n            'updatedAt',\n        ],\n    },\n    filters: { allowed: ['clientId', 'scopeId', 'default', 'id', 'clientRealmId', 'scopeRealmId'], indexed: true },\n    relations: { allowed: ['client', 'scope'], validate: createRelationsReadGate(schemaMapping) },\n    pagination: { maxLimit: 50 },\n    schemaMapping,\n});\n"],"mappings":";;;;;;;AAYA,MAAMG,gBAAgB;CAAEC,QAAQH,WAAWI;CAAQC,OAAOL,WAAWM;AAAM;AAE3E,MAAaC,oBAAoBR,aAA0B;CACvDS,MAAMR,WAAWS;CACjBC,SAAS;EACL,CAAC,IAAK;EACN,CAAC,YAAY,SAAU;EACvB,CAAC,SAAU;EACX,CAAC,SAAU;EACX,CAAC,eAAgB;EACjB,CAAC,cAAe;CACnB;CAEDC,QAAQ,EACJC,SAAS;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACH,EACL;CACAC,SAAS;EAAEC,SAAS;GAAC;GAAY;GAAW;GAAW;GAAM;GAAiB;EAAe;EAAEC,SAAS;CAAK;CAC7GC,WAAW;EAAEF,SAAS,CAAC,UAAU,OAAQ;EAAEG,UAAUhB,wBAAwBC,aAAAA;CAAe;CAC5FgB,YAAY,EAAEC,UAAU,GAAG;CAC3BjB;AACJ,CAAA"}
+{"version":3,"file":"schema.mjs","names":["defineSchema","EntityType","createRelationsReadGate","schemaMapping","client","CLIENT","scope","SCOPE","clientScopeSchema","name","CLIENT_SCOPE","indexes","fields","default","filters","allowed","indexed","relations","validate","sorts","pagination","maxLimit"],"sources":["../../../../src/core/entities/client-scope/schema.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { defineSchema } from '@rapiq/core';\nimport type { ClientScope } from '@authup/core-kit';\nimport { EntityType } from '@authup/core-kit';\nimport { createRelationsReadGate } from '../../query/relations.ts';\n\nconst schemaMapping = { client: EntityType.CLIENT, scope: EntityType.SCOPE };\n\nexport const clientScopeSchema = defineSchema<ClientScope>({\n    name: EntityType.CLIENT_SCOPE,\n    indexes: [\n        ['id'],\n        ['clientId', 'scopeId'],\n        ['scopeId'],\n        ['default'],\n        ['clientRealmId'],\n        ['scopeRealmId'],\n        ['createdAt'],\n        ['updatedAt'],\n    ],\n    // see user-role schema — explicit root projection for include= decodes\n    fields: {\n        default: [\n            'id',\n            'default',\n            'clientId',\n            'clientRealmId',\n            'scopeId',\n            'scopeRealmId',\n            'createdAt',\n            'updatedAt',\n        ],\n    },\n    filters: { allowed: ['clientId', 'scopeId', 'default', 'id', 'clientRealmId', 'scopeRealmId'], indexed: true },\n    relations: { allowed: ['client', 'scope'], validate: createRelationsReadGate(schemaMapping) },\n    // wider than the junction siblings' id/createdAt/updatedAt on purpose:\n    // every column here is already indexed and already sorts today through\n    // the missing-allow-list fallback, so a narrow list would demote the\n    // rest from working-and-sorted to silently unsorted (#3441)\n    sorts: {\n        allowed: [\n            'id',\n            'default',\n            'clientId',\n            'clientRealmId',\n            'scopeId',\n            'scopeRealmId',\n            'createdAt',\n            'updatedAt',\n        ],\n        indexed: true,\n    },\n    pagination: { maxLimit: 50 },\n    schemaMapping,\n});\n"],"mappings":";;;;;;;AAYA,MAAMG,gBAAgB;CAAEC,QAAQH,WAAWI;CAAQC,OAAOL,WAAWM;AAAM;AAE3E,MAAaC,oBAAoBR,aAA0B;CACvDS,MAAMR,WAAWS;CACjBC,SAAS;EACL,CAAC,IAAK;EACN,CAAC,YAAY,SAAU;EACvB,CAAC,SAAU;EACX,CAAC,SAAU;EACX,CAAC,eAAgB;EACjB,CAAC,cAAe;EAChB,CAAC,WAAY;EACb,CAAC,WAAY;CAChB;CAEDC,QAAQ,EACJC,SAAS;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACH,EACL;CACAC,SAAS;EAAEC,SAAS;GAAC;GAAY;GAAW;GAAW;GAAM;GAAiB;EAAe;EAAEC,SAAS;CAAK;CAC7GC,WAAW;EAAEF,SAAS,CAAC,UAAU,OAAQ;EAAEG,UAAUhB,wBAAwBC,aAAAA;CAAe;CAK5FgB,OAAO;EACHJ,SAAS;GACL;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EACH;EACDC,SAAS;CACb;CACAI,YAAY,EAAEC,UAAU,GAAG;CAC3BlB;AACJ,CAAA"}

package/dist/core/entities/event/constants.d.ts

@@ -4,6 +4,15 @@
  * EVENT_LOG_RETENTION_DAYS, 0 = keep forever).
  */
 export declare const EVENT_LOG_RETENTION_DAYS_DEFAULT = 90;
+/**
+ * Rows removed per statement by the retention sweep. The sweep runs every
+ * minute on every replica, and the first one after a retention change (or the
+ * day a full retention window first matures) can match millions of rows. A
+ * single unbounded DELETE would then be one long transaction, issued
+ * concurrently by every replica. Batching keeps each statement bounded; the
+ * sweep still drains by looping.
+ */
+export declare const EVENT_RETENTION_SWEEP_BATCH_SIZE = 1000;
 /**
  * Column bound for the denormalized actor name. Shared by the write boundary
  * (EventService.record truncates to it) and every reader that matches stored

package/dist/core/entities/event/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/event/constants.ts"],"names":[],"mappings":"AAOA;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,KAAK,CAAC;AAEnD;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,MAAM,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/event/constants.ts"],"names":[],"mappings":"AAOA;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,KAAK,CAAC;AAEnD;;;;;;;GAOG;AACH,eAAO,MAAM,gCAAgC,OAAO,CAAC;AAErD;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B,MAAM,CAAC"}

package/dist/core/entities/event/constants.mjs

@@ -8,12 +8,20 @@ import.meta.url;
 * EVENT_LOG_RETENTION_DAYS, 0 = keep forever).
 */ const EVENT_LOG_RETENTION_DAYS_DEFAULT = 90;
 /**
+* Rows removed per statement by the retention sweep. The sweep runs every
+* minute on every replica, and the first one after a retention change (or the
+* day a full retention window first matures) can match millions of rows. A
+* single unbounded DELETE would then be one long transaction, issued
+* concurrently by every replica. Batching keeps each statement bounded; the
+* sweep still drains by looping.
+*/ const EVENT_RETENTION_SWEEP_BATCH_SIZE = 1e3;
+/**
 * Column bound for the denormalized actor name. Shared by the write boundary
 * (EventService.record truncates to it) and every reader that matches stored
 * rows by actor name (the login throttle) so the two cannot drift — an
 * untruncated lookup key never matches its own truncated rows.
 */ const EVENT_ACTOR_NAME_MAX_LENGTH = 128;
 //#endregion
-export { EVENT_ACTOR_NAME_MAX_LENGTH, EVENT_LOG_RETENTION_DAYS_DEFAULT };
+export { EVENT_ACTOR_NAME_MAX_LENGTH, EVENT_LOG_RETENTION_DAYS_DEFAULT, EVENT_RETENTION_SWEEP_BATCH_SIZE };
 
 //# sourceMappingURL=constants.mjs.map

package/dist/core/entities/event/constants.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"constants.mjs","names":["EVENT_LOG_RETENTION_DAYS_DEFAULT","EVENT_ACTOR_NAME_MAX_LENGTH"],"sources":["../../../../src/core/entities/event/constants.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\n/**\n * Default retention for persisted security events in days (hosted-provider\n * posture, Okta-parity; raise via eventLogRetentionDays /\n * EVENT_LOG_RETENTION_DAYS, 0 = keep forever).\n */\nexport const EVENT_LOG_RETENTION_DAYS_DEFAULT = 90;\n\n/**\n * Column bound for the denormalized actor name. Shared by the write boundary\n * (EventService.record truncates to it) and every reader that matches stored\n * rows by actor name (the login throttle) so the two cannot drift — an\n * untruncated lookup key never matches its own truncated rows.\n */\nexport const EVENT_ACTOR_NAME_MAX_LENGTH = 128;\n"],"mappings":";;;;;;;;GAYA,MAAaA,mCAAmC;;;;;;GAQhD,MAAaC,8BAA8B"}
+{"version":3,"file":"constants.mjs","names":["EVENT_LOG_RETENTION_DAYS_DEFAULT","EVENT_RETENTION_SWEEP_BATCH_SIZE","EVENT_ACTOR_NAME_MAX_LENGTH"],"sources":["../../../../src/core/entities/event/constants.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\n/**\n * Default retention for persisted security events in days (hosted-provider\n * posture, Okta-parity; raise via eventLogRetentionDays /\n * EVENT_LOG_RETENTION_DAYS, 0 = keep forever).\n */\nexport const EVENT_LOG_RETENTION_DAYS_DEFAULT = 90;\n\n/**\n * Rows removed per statement by the retention sweep. The sweep runs every\n * minute on every replica, and the first one after a retention change (or the\n * day a full retention window first matures) can match millions of rows. A\n * single unbounded DELETE would then be one long transaction, issued\n * concurrently by every replica. Batching keeps each statement bounded; the\n * sweep still drains by looping.\n */\nexport const EVENT_RETENTION_SWEEP_BATCH_SIZE = 1000;\n\n/**\n * Column bound for the denormalized actor name. Shared by the write boundary\n * (EventService.record truncates to it) and every reader that matches stored\n * rows by actor name (the login throttle) so the two cannot drift — an\n * untruncated lookup key never matches its own truncated rows.\n */\nexport const EVENT_ACTOR_NAME_MAX_LENGTH = 128;\n"],"mappings":";;;;;;;;GAYA,MAAaA,mCAAmC;;;;;;;;GAUhD,MAAaC,mCAAmC;;;;;;GAQhD,MAAaC,8BAA8B"}

package/dist/core/entities/event/index.mjs

@@ -1,10 +1,10 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-import { EVENT_ACTOR_NAME_MAX_LENGTH, EVENT_LOG_RETENTION_DAYS_DEFAULT } from "./constants.mjs";
+import { EVENT_ACTOR_NAME_MAX_LENGTH, EVENT_LOG_RETENTION_DAYS_DEFAULT, EVENT_RETENTION_SWEEP_BATCH_SIZE } from "./constants.mjs";
 import { eventSchema } from "./schema.mjs";
 import { EVENT_DIFF_SECRET_KEY_REGEX, EVENT_DIFF_VALUE_MAX_LENGTH, buildEntityDiff } from "./diff.mjs";
 import { EntityEventHandler } from "./entity-event-handler.mjs";
 import { sanitizeEventData } from "./sanitize.mjs";
 import { EventService } from "./service.mjs";
-export { EVENT_ACTOR_NAME_MAX_LENGTH, EVENT_DIFF_SECRET_KEY_REGEX, EVENT_DIFF_VALUE_MAX_LENGTH, EVENT_LOG_RETENTION_DAYS_DEFAULT, EntityEventHandler, EventService, buildEntityDiff, eventSchema, sanitizeEventData };
+export { EVENT_ACTOR_NAME_MAX_LENGTH, EVENT_DIFF_SECRET_KEY_REGEX, EVENT_DIFF_VALUE_MAX_LENGTH, EVENT_LOG_RETENTION_DAYS_DEFAULT, EVENT_RETENTION_SWEEP_BATCH_SIZE, EntityEventHandler, EventService, buildEntityDiff, eventSchema, sanitizeEventData };

package/dist/core/entities/event/types.d.ts

@@ -42,10 +42,19 @@ export interface IEventRepository {
     /**
      * Retention sweep: drop every expiring row whose expiresAt lies before
      * the given instant (non-expiring rows are kept forever). Returns the
-     * number of removed rows.
+     * number of removed rows. Removal is batched (see
+     * EVENT_RETENTION_SWEEP_BATCH_SIZE).
      */
-    deleteExpired(now: string): Promise<number>;
+    deleteExpired(now: string, options?: EventDeleteExpiredOptions): Promise<number>;
 }
+export type EventDeleteExpiredOptions = {
+    /**
+     * Rows removed per statement. Defaults to
+     * EVENT_RETENTION_SWEEP_BATCH_SIZE, which anything that is not a positive
+     * safe integer also falls back to.
+     */
+    batchSize?: number;
+};
 export type EventRecordInput = {
     scope: `${EventScope}`;
     name: `${EventName}`;

package/dist/core/entities/event/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/event/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,KAAK,EACL,SAAS,EACT,UAAU,EACV,YAAY,EACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,YAAY,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACvF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,MAAM,UAAU,GAAG;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAC9B,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,QAAQ,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IAC/B;;;OAGG;IACH,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,UAAU,CAAC,EAAE,mBAAmB,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACjC,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,WAAW,gBAAgB;IAC7B,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IAEpC,IAAI,CAAC,MAAM,EAAE,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAEpC,QAAQ,CACJ,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,oBAAoB,GAC/B,OAAO,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC,CAAC;IAElD,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAE/C,WAAW,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE7D;;;;OAIG;IACH,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC/C;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC3B,KAAK,EAAE,GAAG,UAAU,EAAE,CAAC;IACvB,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,GAAG,YAAY,EAAE,GAAG,IAAI,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IAClC;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAC9B;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAC9B,SAAS,EAAE,GAAG,YAAY,EAAE,GAAG,IAAI,CAAC;IACpC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACpC;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,WAAW,aAAa;IAC1B;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/C;;;;OAIG;IACH,OAAO,CACH,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,KAAK,EAAE,YAAY,EACnB,OAAO,CAAC,EAAE,uBAAuB,GAClC,OAAO,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC,CAAC;IAElD;;OAEG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;CAC9F"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/event/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,KAAK,EACL,SAAS,EACT,UAAU,EACV,YAAY,EACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,YAAY,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACvF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,MAAM,UAAU,GAAG;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAC9B,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,QAAQ,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IAC/B;;;OAGG;IACH,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,UAAU,CAAC,EAAE,mBAAmB,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACjC,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,WAAW,gBAAgB;IAC7B,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IAEpC,IAAI,CAAC,MAAM,EAAE,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAEpC,QAAQ,CACJ,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,oBAAoB,GAC/B,OAAO,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC,CAAC;IAElD,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAE/C,WAAW,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE7D;;;;;OAKG;IACH,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,yBAAyB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACpF;AAED,MAAM,MAAM,yBAAyB,GAAG;IACpC;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC3B,KAAK,EAAE,GAAG,UAAU,EAAE,CAAC;IACvB,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,GAAG,YAAY,EAAE,GAAG,IAAI,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IAClC;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAC9B;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAC9B,SAAS,EAAE,GAAG,YAAY,EAAE,GAAG,IAAI,CAAC;IACpC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACpC;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,WAAW,aAAa;IAC1B;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/C;;;;OAIG;IACH,OAAO,CACH,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,KAAK,EAAE,YAAY,EACnB,OAAO,CAAC,EAAE,uBAAuB,GAClC,OAAO,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC,CAAC;IAElD;;OAEG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;CAC9F"}

package/dist/core/entities/identity-provider-account/types.d.ts

@@ -44,6 +44,12 @@ export interface IIdentityProviderAccountRepository {
      * Find identity account with user relation (federated login + link flow).
      */
     findOneByProviderIdentity(identity: IdentityProviderIdentity): Promise<IdentityProviderAccount | null>;
+    /**
+     * Throws `EntityConflictError` (`@authup/errors`) when the row violates
+     * EITHER unique index, (providerUserId, providerId) or (providerId,
+     * userId): the driver does not tell them apart, so the caller
+     * classifies by re-reading the identity.
+     */
     save(entity: DeepPartial<IdentityProviderAccount>): Promise<IdentityProviderAccount>;
 }
 export type IdentityProviderAccountServiceReadOptions = {

package/dist/core/entities/identity-provider-account/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/identity-provider-account/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,YAAY,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACvF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAEjF;;GAEG;AACH,eAAO,MAAM,qCAAqC,0EAMxC,CAAC;AAEX,MAAM,MAAM,sCAAsC,GAAG;IACjD;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,kCAAkC;IAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,sCAAsC,GAAG,OAAO,CAAC,8BAA8B,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAE5I,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IAEjE,MAAM,CAAC,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvD;;;;;;;;;OASG;IACH,aAAa,CAAC,MAAM,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE7F;;OAEG;IACH,yBAAyB,CAAC,QAAQ,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IAEvG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,uBAAuB,CAAC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACxF;AAED,MAAM,MAAM,yCAAyC,GAAG;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,WAAW,+BAA+B;IAC5C;;;OAGG;IACH,OAAO,CACH,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,KAAK,EAAE,YAAY,EACnB,OAAO,CAAC,EAAE,yCAAyC,GACpD,OAAO,CAAC,8BAA8B,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAEpE;;OAEG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,yCAAyC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAE/H;;;;OAIG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,yCAAyC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAClI"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/identity-provider-account/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,YAAY,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACvF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAEjF;;GAEG;AACH,eAAO,MAAM,qCAAqC,0EAMxC,CAAC;AAEX,MAAM,MAAM,sCAAsC,GAAG;IACjD;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,kCAAkC;IAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,sCAAsC,GAAG,OAAO,CAAC,8BAA8B,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAE5I,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IAEjE,MAAM,CAAC,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvD;;;;;;;;;OASG;IACH,aAAa,CAAC,MAAM,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE7F;;OAEG;IACH,yBAAyB,CAAC,QAAQ,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IAEvG;;;;;OAKG;IACH,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,uBAAuB,CAAC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACxF;AAED,MAAM,MAAM,yCAAyC,GAAG;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,WAAW,+BAA+B;IAC5C;;;OAGG;IACH,OAAO,CACH,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,KAAK,EAAE,YAAY,EACnB,OAAO,CAAC,EAAE,yCAAyC,GACpD,OAAO,CAAC,8BAA8B,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAEpE;;OAEG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,yCAAyC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAE/H;;;;OAIG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,yCAAyC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAClI"}