@develit-services/rbac 0.2.3 → 0.3.0

package/dist/export/worker.cjs

@@ -5,7 +5,7 @@ Object.defineProperty(exports, '__esModule', { value: true });
 const backendSdk = require('@develit-io/backend-sdk');
 const database_schema = require('../shared/rbac.Cra1T2nC.cjs');
 const drizzleOrm = require('drizzle-orm');
-const verifyScope = require('../shared/rbac.B2KUW5xp.cjs');
+const verifyScope = require('../shared/rbac.BZDCYlSt.cjs');
 const zod = require('zod');
 const cloudflare_workers = require('cloudflare:workers');
 const d1 = require('drizzle-orm/d1');
@@ -658,12 +658,13 @@ let RbacServiceBase = class extends backendSdk.develitWorker(cloudflare_workers.
   }
   async verifyAccess(input) {
     return this.handleAction(
-      // TODO: This input schema is just copied from auth and is not 100% type safe
       { data: input, schema: verifyScope.verifyAccessInputSchema },
       { successMessage: "Access verification completed." },
       async ({ userId, accessRequests, jwt }) => {
-        for (const request of accessRequests) {
-          this.validateScope(request.scope);
+        for (const requestGroup of accessRequests) {
+          for (const request of requestGroup) {
+            this.validateScope(request.scope);
+          }
         }
         const userPermissionsResponse = await this.getUserPermissions({
           userId
@@ -678,46 +679,55 @@ let RbacServiceBase = class extends backendSdk.develitWorker(cloudflare_workers.
           ...userPermissionsResponse.data.roleScopes,
           ...userPermissionsResponse.data.scopes
         ];
-        const allAccessRequestsSatisfied = accessRequests.every((request) => {
-          const placeholders = parseScopeTemplate(request.scope);
-          return allScopes.some((userScope) => {
-            const scopesMatch = userScope.scope === request.scope;
-            let resourceMatches = false;
-            if (placeholders.length > 0) {
-              if (!request.resourcePath) {
-                throw backendSdk.createInternalError(null, {
-                  message: `Resource path is required when scope '${request.scope}' contains placeholders`,
-                  status: 400,
-                  code: "RESOURCE_PATH_REQUIRED"
-                });
-              }
-              const extractedResources = extractResourcesFromPath(
-                request.scope,
-                request.resourcePath
-              );
-              const allPlaceholdersMatch = placeholders.every((placeholder) => {
-                const extractedValue = extractedResources[`${placeholder.type}.${placeholder.path}`];
-                const jwtParam = placeholder.type === "jwt" ? jwt : void 0;
-                const expectedValue = getValueByKey(
-                  placeholder.type,
-                  placeholder.path,
-                  jwtParam
-                );
-                if (expectedValue === void 0) {
-                  return false;
+        if (accessRequests.length === 0) {
+          return {
+            isVerified: true
+          };
+        }
+        const anyGroupSatisfied = accessRequests.some((requestGroup) => {
+          return requestGroup.every((request) => {
+            const placeholders = parseScopeTemplate(request.scope);
+            return allScopes.some((userScope) => {
+              const scopesMatch = userScope.scope === request.scope;
+              let resourceMatches = false;
+              if (placeholders.length > 0) {
+                if (!request.resourcePath) {
+                  throw backendSdk.createInternalError(null, {
+                    message: `Resource path is required when scope '${request.scope}' contains placeholders`,
+                    status: 400,
+                    code: "RESOURCE_PATH_REQUIRED"
+                  });
                 }
-                return String(extractedValue) === String(expectedValue);
-              });
-              const resourceIdMatches = userScope.resourceId === null || userScope.resourceId === request.resourceId;
-              resourceMatches = allPlaceholdersMatch && resourceIdMatches;
-            } else {
-              resourceMatches = userScope.resourceId === null || userScope.resourceId === request.resourceId;
-            }
-            return scopesMatch && resourceMatches;
+                const extractedResources = extractResourcesFromPath(
+                  request.scope,
+                  request.resourcePath
+                );
+                const allPlaceholdersMatch = placeholders.every(
+                  (placeholder) => {
+                    const extractedValue = extractedResources[`${placeholder.type}.${placeholder.path}`];
+                    const jwtParam = placeholder.type === "jwt" ? jwt : void 0;
+                    const expectedValue = getValueByKey(
+                      placeholder.type,
+                      placeholder.path,
+                      jwtParam
+                    );
+                    if (expectedValue === void 0) {
+                      return false;
+                    }
+                    return String(extractedValue) === String(expectedValue);
+                  }
+                );
+                const resourceIdMatches = userScope.resourceId === null || userScope.resourceId === request.resourceId;
+                resourceMatches = allPlaceholdersMatch && resourceIdMatches;
+              } else {
+                resourceMatches = userScope.resourceId === null || userScope.resourceId === request.resourceId;
+              }
+              return scopesMatch && resourceMatches;
+            });
           });
         });
         return {
-          isVerified: allAccessRequestsSatisfied
+          isVerified: anyGroupSatisfied
         };
       }
     );

package/dist/export/worker.d.cts

@@ -1,6 +1,6 @@
 import * as _develit_io_backend_sdk from '@develit-io/backend-sdk';
 import { IRPCResponse } from '@develit-io/backend-sdk';
-import { L as LabeledScope$1, t as tables, C as CreateRoleInput, a as CreateRoleOutput, A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, V as VerifyAccessInput, r as VerifyAccessOutput, D as DeleteRoleInput, s as DeleteRoleOutput, U as UpdateRoleInput, u as UpdateRoleOutput } from '../shared/rbac.DB0xguAY.cjs';
+import { L as LabeledScope$1, t as tables, C as CreateRoleInput, a as CreateRoleOutput, A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, V as VerifyAccessInput, r as VerifyAccessOutput, D as DeleteRoleInput, s as DeleteRoleOutput, U as UpdateRoleInput, u as UpdateRoleOutput } from '../shared/rbac.B4wUvd3l.cjs';
 import { WorkerEntrypoint } from 'cloudflare:workers';
 import { DrizzleD1Database } from 'drizzle-orm/d1';
 import 'zod';
@@ -26,11 +26,11 @@ declare class RbacServiceBase<TScopes extends readonly LabeledScope$1[] = Labele
     getPermissions(): Promise<IRPCResponse<GetPermissionsOutput>>;
     getUserPermissions(input: GetUserPermissionsInput): Promise<IRPCResponse<GetUserPermissionsOutput>>;
     verifyAccess(input: Omit<VerifyAccessInput, 'accessRequests'> & {
-        accessRequests: Array<{
+        accessRequests: Array<Array<{
             scope: TScopes[number]['value'];
             resourceId?: string;
             resourcePath?: string;
-        }>;
+        }>>;
     }): Promise<IRPCResponse<VerifyAccessOutput>>;
     deleteRole(input: DeleteRoleInput): Promise<IRPCResponse<DeleteRoleOutput>>;
     updateRole(input: UpdateRoleInput): Promise<IRPCResponse<UpdateRoleOutput>>;

package/dist/export/worker.d.mts

@@ -1,6 +1,6 @@
 import * as _develit_io_backend_sdk from '@develit-io/backend-sdk';
 import { IRPCResponse } from '@develit-io/backend-sdk';
-import { L as LabeledScope$1, t as tables, C as CreateRoleInput, a as CreateRoleOutput, A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, V as VerifyAccessInput, r as VerifyAccessOutput, D as DeleteRoleInput, s as DeleteRoleOutput, U as UpdateRoleInput, u as UpdateRoleOutput } from '../shared/rbac.CocWK7y6.mjs';
+import { L as LabeledScope$1, t as tables, C as CreateRoleInput, a as CreateRoleOutput, A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, V as VerifyAccessInput, r as VerifyAccessOutput, D as DeleteRoleInput, s as DeleteRoleOutput, U as UpdateRoleInput, u as UpdateRoleOutput } from '../shared/rbac.DbnJpvqK.mjs';
 import { WorkerEntrypoint } from 'cloudflare:workers';
 import { DrizzleD1Database } from 'drizzle-orm/d1';
 import 'zod';
@@ -26,11 +26,11 @@ declare class RbacServiceBase<TScopes extends readonly LabeledScope$1[] = Labele
     getPermissions(): Promise<IRPCResponse<GetPermissionsOutput>>;
     getUserPermissions(input: GetUserPermissionsInput): Promise<IRPCResponse<GetUserPermissionsOutput>>;
     verifyAccess(input: Omit<VerifyAccessInput, 'accessRequests'> & {
-        accessRequests: Array<{
+        accessRequests: Array<Array<{
             scope: TScopes[number]['value'];
             resourceId?: string;
             resourcePath?: string;
-        }>;
+        }>>;
     }): Promise<IRPCResponse<VerifyAccessOutput>>;
     deleteRole(input: DeleteRoleInput): Promise<IRPCResponse<DeleteRoleOutput>>;
     updateRole(input: UpdateRoleInput): Promise<IRPCResponse<UpdateRoleOutput>>;

package/dist/export/worker.d.ts

@@ -1,6 +1,6 @@
 import * as _develit_io_backend_sdk from '@develit-io/backend-sdk';
 import { IRPCResponse } from '@develit-io/backend-sdk';
-import { L as LabeledScope$1, t as tables, C as CreateRoleInput, a as CreateRoleOutput, A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, V as VerifyAccessInput, r as VerifyAccessOutput, D as DeleteRoleInput, s as DeleteRoleOutput, U as UpdateRoleInput, u as UpdateRoleOutput } from '../shared/rbac.CAcqvrNj.js';
+import { L as LabeledScope$1, t as tables, C as CreateRoleInput, a as CreateRoleOutput, A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, V as VerifyAccessInput, r as VerifyAccessOutput, D as DeleteRoleInput, s as DeleteRoleOutput, U as UpdateRoleInput, u as UpdateRoleOutput } from '../shared/rbac.DrhiDe1P.js';
 import { WorkerEntrypoint } from 'cloudflare:workers';
 import { DrizzleD1Database } from 'drizzle-orm/d1';
 import 'zod';
@@ -26,11 +26,11 @@ declare class RbacServiceBase<TScopes extends readonly LabeledScope$1[] = Labele
     getPermissions(): Promise<IRPCResponse<GetPermissionsOutput>>;
     getUserPermissions(input: GetUserPermissionsInput): Promise<IRPCResponse<GetUserPermissionsOutput>>;
     verifyAccess(input: Omit<VerifyAccessInput, 'accessRequests'> & {
-        accessRequests: Array<{
+        accessRequests: Array<Array<{
             scope: TScopes[number]['value'];
             resourceId?: string;
             resourcePath?: string;
-        }>;
+        }>>;
     }): Promise<IRPCResponse<VerifyAccessOutput>>;
     deleteRole(input: DeleteRoleInput): Promise<IRPCResponse<DeleteRoleOutput>>;
     updateRole(input: UpdateRoleInput): Promise<IRPCResponse<UpdateRoleOutput>>;

package/dist/export/worker.mjs

@@ -1,7 +1,7 @@
 import { uuidv4, first, createInternalError, develitWorker, action, service } from '@develit-io/backend-sdk';
 import { s as schema } from '../shared/rbac.D5OV7UPA.mjs';
 import { eq, and, count, inArray } from 'drizzle-orm';
-import { c as createRoleInputSchema, a as assignRoleToUserInputSchema, b as assignRolesToUserInputSchema, r as revokeRoleFromUserInputSchema, f as grantScopeToUserInputSchema, h as grantScopesToUserInputSchema, j as revokeScopeFromUserInputSchema, e as grantScopeToRoleInputSchema, i as revokeScopeFromRoleInputSchema, g as getUserPermissionsInputSchema, v as verifyAccessInputSchema, d as deleteRoleInputSchema, u as updateRoleInputSchema } from '../shared/rbac.CUCczegz.mjs';
+import { c as createRoleInputSchema, a as assignRoleToUserInputSchema, b as assignRolesToUserInputSchema, r as revokeRoleFromUserInputSchema, f as grantScopeToUserInputSchema, h as grantScopesToUserInputSchema, j as revokeScopeFromUserInputSchema, e as grantScopeToRoleInputSchema, i as revokeScopeFromRoleInputSchema, g as getUserPermissionsInputSchema, v as verifyAccessInputSchema, d as deleteRoleInputSchema, u as updateRoleInputSchema } from '../shared/rbac.ihzxYB9Z.mjs';
 import { z } from 'zod';
 import { WorkerEntrypoint } from 'cloudflare:workers';
 import { drizzle } from 'drizzle-orm/d1';
@@ -654,12 +654,13 @@ let RbacServiceBase = class extends develitWorker(WorkerEntrypoint) {
   }
   async verifyAccess(input) {
     return this.handleAction(
-      // TODO: This input schema is just copied from auth and is not 100% type safe
       { data: input, schema: verifyAccessInputSchema },
       { successMessage: "Access verification completed." },
       async ({ userId, accessRequests, jwt }) => {
-        for (const request of accessRequests) {
-          this.validateScope(request.scope);
+        for (const requestGroup of accessRequests) {
+          for (const request of requestGroup) {
+            this.validateScope(request.scope);
+          }
         }
         const userPermissionsResponse = await this.getUserPermissions({
           userId
@@ -674,46 +675,55 @@ let RbacServiceBase = class extends develitWorker(WorkerEntrypoint) {
           ...userPermissionsResponse.data.roleScopes,
           ...userPermissionsResponse.data.scopes
         ];
-        const allAccessRequestsSatisfied = accessRequests.every((request) => {
-          const placeholders = parseScopeTemplate(request.scope);
-          return allScopes.some((userScope) => {
-            const scopesMatch = userScope.scope === request.scope;
-            let resourceMatches = false;
-            if (placeholders.length > 0) {
-              if (!request.resourcePath) {
-                throw createInternalError(null, {
-                  message: `Resource path is required when scope '${request.scope}' contains placeholders`,
-                  status: 400,
-                  code: "RESOURCE_PATH_REQUIRED"
-                });
-              }
-              const extractedResources = extractResourcesFromPath(
-                request.scope,
-                request.resourcePath
-              );
-              const allPlaceholdersMatch = placeholders.every((placeholder) => {
-                const extractedValue = extractedResources[`${placeholder.type}.${placeholder.path}`];
-                const jwtParam = placeholder.type === "jwt" ? jwt : void 0;
-                const expectedValue = getValueByKey(
-                  placeholder.type,
-                  placeholder.path,
-                  jwtParam
-                );
-                if (expectedValue === void 0) {
-                  return false;
+        if (accessRequests.length === 0) {
+          return {
+            isVerified: true
+          };
+        }
+        const anyGroupSatisfied = accessRequests.some((requestGroup) => {
+          return requestGroup.every((request) => {
+            const placeholders = parseScopeTemplate(request.scope);
+            return allScopes.some((userScope) => {
+              const scopesMatch = userScope.scope === request.scope;
+              let resourceMatches = false;
+              if (placeholders.length > 0) {
+                if (!request.resourcePath) {
+                  throw createInternalError(null, {
+                    message: `Resource path is required when scope '${request.scope}' contains placeholders`,
+                    status: 400,
+                    code: "RESOURCE_PATH_REQUIRED"
+                  });
                 }
-                return String(extractedValue) === String(expectedValue);
-              });
-              const resourceIdMatches = userScope.resourceId === null || userScope.resourceId === request.resourceId;
-              resourceMatches = allPlaceholdersMatch && resourceIdMatches;
-            } else {
-              resourceMatches = userScope.resourceId === null || userScope.resourceId === request.resourceId;
-            }
-            return scopesMatch && resourceMatches;
+                const extractedResources = extractResourcesFromPath(
+                  request.scope,
+                  request.resourcePath
+                );
+                const allPlaceholdersMatch = placeholders.every(
+                  (placeholder) => {
+                    const extractedValue = extractedResources[`${placeholder.type}.${placeholder.path}`];
+                    const jwtParam = placeholder.type === "jwt" ? jwt : void 0;
+                    const expectedValue = getValueByKey(
+                      placeholder.type,
+                      placeholder.path,
+                      jwtParam
+                    );
+                    if (expectedValue === void 0) {
+                      return false;
+                    }
+                    return String(extractedValue) === String(expectedValue);
+                  }
+                );
+                const resourceIdMatches = userScope.resourceId === null || userScope.resourceId === request.resourceId;
+                resourceMatches = allPlaceholdersMatch && resourceIdMatches;
+              } else {
+                resourceMatches = userScope.resourceId === null || userScope.resourceId === request.resourceId;
+              }
+              return scopesMatch && resourceMatches;
+            });
           });
         });
         return {
-          isVerified: allAccessRequestsSatisfied
+          isVerified: anyGroupSatisfied
         };
       }
     );

package/dist/shared/{rbac.DB0xguAY.d.cts → rbac.B4wUvd3l.d.cts}

@@ -190,11 +190,11 @@ interface UpdateRoleOutput {
 
 declare const verifyAccessInputSchema: z.ZodObject<{
     userId: z.ZodUUID;
-    accessRequests: z.ZodArray<z.ZodObject<{
+    accessRequests: z.ZodArray<z.ZodArray<z.ZodObject<{
         scope: z.ZodString;
         resourceId: z.ZodOptional<z.ZodString>;
         resourcePath: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>;
+    }, z.core.$strip>>>;
     jwt: z.ZodOptional<z.ZodObject<{
         sub: z.ZodString;
         iat: z.ZodNumber;

package/dist/shared/{rbac.B2KUW5xp.cjs → rbac.BZDCYlSt.cjs}

@@ -140,11 +140,13 @@ const coercedJwtPayloadSchema = jwtPayloadSchema.extend({
 const verifyAccessInputSchema = zod.z.object({
   userId: zod.z.uuid(),
   accessRequests: zod.z.array(
-    zod.z.object({
-      scope: zod.z.string(),
-      resourceId: zod.z.string().optional(),
-      resourcePath: zod.z.string().optional()
-    })
+    zod.z.array(
+      zod.z.object({
+        scope: zod.z.string(),
+        resourceId: zod.z.string().optional(),
+        resourcePath: zod.z.string().optional()
+      })
+    )
   ),
   jwt: coercedJwtPayloadSchema.optional()
 });

package/dist/shared/{rbac.CocWK7y6.d.mts → rbac.DbnJpvqK.d.mts}

@@ -190,11 +190,11 @@ interface UpdateRoleOutput {
 
 declare const verifyAccessInputSchema: z.ZodObject<{
     userId: z.ZodUUID;
-    accessRequests: z.ZodArray<z.ZodObject<{
+    accessRequests: z.ZodArray<z.ZodArray<z.ZodObject<{
         scope: z.ZodString;
         resourceId: z.ZodOptional<z.ZodString>;
         resourcePath: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>;
+    }, z.core.$strip>>>;
     jwt: z.ZodOptional<z.ZodObject<{
         sub: z.ZodString;
         iat: z.ZodNumber;

package/dist/shared/{rbac.CAcqvrNj.d.ts → rbac.DrhiDe1P.d.ts}

@@ -190,11 +190,11 @@ interface UpdateRoleOutput {
 
 declare const verifyAccessInputSchema: z.ZodObject<{
     userId: z.ZodUUID;
-    accessRequests: z.ZodArray<z.ZodObject<{
+    accessRequests: z.ZodArray<z.ZodArray<z.ZodObject<{
         scope: z.ZodString;
         resourceId: z.ZodOptional<z.ZodString>;
         resourcePath: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>;
+    }, z.core.$strip>>>;
     jwt: z.ZodOptional<z.ZodObject<{
         sub: z.ZodString;
         iat: z.ZodNumber;

package/dist/shared/{rbac.CUCczegz.mjs → rbac.ihzxYB9Z.mjs}

@@ -138,11 +138,13 @@ const coercedJwtPayloadSchema = jwtPayloadSchema.extend({
 const verifyAccessInputSchema = z.object({
   userId: z.uuid(),
   accessRequests: z.array(
-    z.object({
-      scope: z.string(),
-      resourceId: z.string().optional(),
-      resourcePath: z.string().optional()
-    })
+    z.array(
+      z.object({
+        scope: z.string(),
+        resourceId: z.string().optional(),
+        resourcePath: z.string().optional()
+      })
+    )
   ),
   jwt: coercedJwtPayloadSchema.optional()
 });

package/dist/types.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-const verifyScope = require('./shared/rbac.B2KUW5xp.cjs');
+const verifyScope = require('./shared/rbac.BZDCYlSt.cjs');
 require('zod');
 
 

package/dist/types.d.cts

@@ -1,4 +1,4 @@
-export { A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, C as CreateRoleInput, a as CreateRoleOutput, D as DeleteRoleInput, s as DeleteRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, L as LabeledScope, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, y as RoleInsertType, w as RoleScopeInsertType, v as RoleScopeSelectType, x as RoleSelectType, S as Scope, U as UpdateRoleInput, u as UpdateRoleOutput, B as UserRoleInsertType, z as UserRoleSelectType, F as UserScopeInsertType, E as UserScopeSelectType, V as VerifyAccessInput, r as VerifyAccessOutput, H as assignRoleToUserInputSchema, I as assignRolesToUserInputSchema, J as createRoleInputSchema, K as deleteRoleInputSchema, M as getUserPermissionsInputSchema, N as grantScopeToRoleInputSchema, O as grantScopeToUserInputSchema, P as grantScopesToUserInputSchema, Q as revokeRoleFromUserInputSchema, T as revokeScopeFromRoleInputSchema, W as revokeScopeFromUserInputSchema, X as updateRoleInputSchema, Y as verifyAccessInputSchema } from './shared/rbac.DB0xguAY.cjs';
+export { A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, C as CreateRoleInput, a as CreateRoleOutput, D as DeleteRoleInput, s as DeleteRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, L as LabeledScope, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, y as RoleInsertType, w as RoleScopeInsertType, v as RoleScopeSelectType, x as RoleSelectType, S as Scope, U as UpdateRoleInput, u as UpdateRoleOutput, B as UserRoleInsertType, z as UserRoleSelectType, F as UserScopeInsertType, E as UserScopeSelectType, V as VerifyAccessInput, r as VerifyAccessOutput, H as assignRoleToUserInputSchema, I as assignRolesToUserInputSchema, J as createRoleInputSchema, K as deleteRoleInputSchema, M as getUserPermissionsInputSchema, N as grantScopeToRoleInputSchema, O as grantScopeToUserInputSchema, P as grantScopesToUserInputSchema, Q as revokeRoleFromUserInputSchema, T as revokeScopeFromRoleInputSchema, W as revokeScopeFromUserInputSchema, X as updateRoleInputSchema, Y as verifyAccessInputSchema } from './shared/rbac.B4wUvd3l.cjs';
 import { z } from 'zod';
 export { b as RbacServiceEnv, a as RbacServiceEnvironmentConfig, R as RbacServiceWranglerConfig } from './shared/rbac.ClMKyW8J.cjs';
 import 'drizzle-orm';

package/dist/types.d.mts

@@ -1,4 +1,4 @@
-export { A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, C as CreateRoleInput, a as CreateRoleOutput, D as DeleteRoleInput, s as DeleteRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, L as LabeledScope, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, y as RoleInsertType, w as RoleScopeInsertType, v as RoleScopeSelectType, x as RoleSelectType, S as Scope, U as UpdateRoleInput, u as UpdateRoleOutput, B as UserRoleInsertType, z as UserRoleSelectType, F as UserScopeInsertType, E as UserScopeSelectType, V as VerifyAccessInput, r as VerifyAccessOutput, H as assignRoleToUserInputSchema, I as assignRolesToUserInputSchema, J as createRoleInputSchema, K as deleteRoleInputSchema, M as getUserPermissionsInputSchema, N as grantScopeToRoleInputSchema, O as grantScopeToUserInputSchema, P as grantScopesToUserInputSchema, Q as revokeRoleFromUserInputSchema, T as revokeScopeFromRoleInputSchema, W as revokeScopeFromUserInputSchema, X as updateRoleInputSchema, Y as verifyAccessInputSchema } from './shared/rbac.CocWK7y6.mjs';
+export { A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, C as CreateRoleInput, a as CreateRoleOutput, D as DeleteRoleInput, s as DeleteRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, L as LabeledScope, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, y as RoleInsertType, w as RoleScopeInsertType, v as RoleScopeSelectType, x as RoleSelectType, S as Scope, U as UpdateRoleInput, u as UpdateRoleOutput, B as UserRoleInsertType, z as UserRoleSelectType, F as UserScopeInsertType, E as UserScopeSelectType, V as VerifyAccessInput, r as VerifyAccessOutput, H as assignRoleToUserInputSchema, I as assignRolesToUserInputSchema, J as createRoleInputSchema, K as deleteRoleInputSchema, M as getUserPermissionsInputSchema, N as grantScopeToRoleInputSchema, O as grantScopeToUserInputSchema, P as grantScopesToUserInputSchema, Q as revokeRoleFromUserInputSchema, T as revokeScopeFromRoleInputSchema, W as revokeScopeFromUserInputSchema, X as updateRoleInputSchema, Y as verifyAccessInputSchema } from './shared/rbac.DbnJpvqK.mjs';
 import { z } from 'zod';
 export { b as RbacServiceEnv, a as RbacServiceEnvironmentConfig, R as RbacServiceWranglerConfig } from './shared/rbac.ClMKyW8J.mjs';
 import 'drizzle-orm';

package/dist/types.d.ts

@@ -1,4 +1,4 @@
-export { A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, C as CreateRoleInput, a as CreateRoleOutput, D as DeleteRoleInput, s as DeleteRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, L as LabeledScope, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, y as RoleInsertType, w as RoleScopeInsertType, v as RoleScopeSelectType, x as RoleSelectType, S as Scope, U as UpdateRoleInput, u as UpdateRoleOutput, B as UserRoleInsertType, z as UserRoleSelectType, F as UserScopeInsertType, E as UserScopeSelectType, V as VerifyAccessInput, r as VerifyAccessOutput, H as assignRoleToUserInputSchema, I as assignRolesToUserInputSchema, J as createRoleInputSchema, K as deleteRoleInputSchema, M as getUserPermissionsInputSchema, N as grantScopeToRoleInputSchema, O as grantScopeToUserInputSchema, P as grantScopesToUserInputSchema, Q as revokeRoleFromUserInputSchema, T as revokeScopeFromRoleInputSchema, W as revokeScopeFromUserInputSchema, X as updateRoleInputSchema, Y as verifyAccessInputSchema } from './shared/rbac.CAcqvrNj.js';
+export { A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, C as CreateRoleInput, a as CreateRoleOutput, D as DeleteRoleInput, s as DeleteRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, L as LabeledScope, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, y as RoleInsertType, w as RoleScopeInsertType, v as RoleScopeSelectType, x as RoleSelectType, S as Scope, U as UpdateRoleInput, u as UpdateRoleOutput, B as UserRoleInsertType, z as UserRoleSelectType, F as UserScopeInsertType, E as UserScopeSelectType, V as VerifyAccessInput, r as VerifyAccessOutput, H as assignRoleToUserInputSchema, I as assignRolesToUserInputSchema, J as createRoleInputSchema, K as deleteRoleInputSchema, M as getUserPermissionsInputSchema, N as grantScopeToRoleInputSchema, O as grantScopeToUserInputSchema, P as grantScopesToUserInputSchema, Q as revokeRoleFromUserInputSchema, T as revokeScopeFromRoleInputSchema, W as revokeScopeFromUserInputSchema, X as updateRoleInputSchema, Y as verifyAccessInputSchema } from './shared/rbac.DrhiDe1P.js';
 import { z } from 'zod';
 export { b as RbacServiceEnv, a as RbacServiceEnvironmentConfig, R as RbacServiceWranglerConfig } from './shared/rbac.ClMKyW8J.js';
 import 'drizzle-orm';

package/dist/types.mjs

@@ -1,2 +1,2 @@
-export { a as assignRoleToUserInputSchema, b as assignRolesToUserInputSchema, c as createRoleInputSchema, d as deleteRoleInputSchema, g as getUserPermissionsInputSchema, e as grantScopeToRoleInputSchema, f as grantScopeToUserInputSchema, h as grantScopesToUserInputSchema, r as revokeRoleFromUserInputSchema, i as revokeScopeFromRoleInputSchema, j as revokeScopeFromUserInputSchema, u as updateRoleInputSchema, v as verifyAccessInputSchema, k as verifyScopeInputSchema, l as verifyScopeOutputSchema } from './shared/rbac.CUCczegz.mjs';
+export { a as assignRoleToUserInputSchema, b as assignRolesToUserInputSchema, c as createRoleInputSchema, d as deleteRoleInputSchema, g as getUserPermissionsInputSchema, e as grantScopeToRoleInputSchema, f as grantScopeToUserInputSchema, h as grantScopesToUserInputSchema, r as revokeRoleFromUserInputSchema, i as revokeScopeFromRoleInputSchema, j as revokeScopeFromUserInputSchema, u as updateRoleInputSchema, v as verifyAccessInputSchema, k as verifyScopeInputSchema, l as verifyScopeOutputSchema } from './shared/rbac.ihzxYB9Z.mjs';
 import 'zod';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@develit-services/rbac",
-  "version": "0.2.3",
+  "version": "0.3.0",
   "author": "Develit.io s.r.o.",
   "type": "module",
   "exports": {