@develit-services/rbac 0.4.0 → 0.5.1

package/dist/export/worker.cjs

@@ -5,7 +5,7 @@ Object.defineProperty(exports, '__esModule', { value: true });
 const backendSdk = require('@develit-io/backend-sdk');
 const database_schema = require('../shared/rbac.Cra1T2nC.cjs');
 const drizzleOrm = require('drizzle-orm');
-const verifyScope = require('../shared/rbac.JCf4hSCf.cjs');
+const verifyScope = require('../shared/rbac.DH2MYF0T.cjs');
 const zod = require('zod');
 const cloudflare_workers = require('cloudflare:workers');
 const d1 = require('drizzle-orm/d1');
@@ -480,8 +480,15 @@ let RbacServiceBase = class extends backendSdk.develitWorker(cloudflare_workers.
       { successMessage: "Scope successfully granted to user." },
       async ({ userId, scope, resourceId }) => {
         this.validateScope(scope);
-        const userScope = await getScopesByUserQuery({ db: this.db, userId });
-        if (userScope.some((s) => s.scope === scope)) {
+        const userScopes = await getScopesByUserQuery({ db: this.db, userId });
+        const matchingScopes = userScopes.filter((s) => s.scope === scope);
+        if (!resourceId && matchingScopes.find((s) => !s.resourceId)) {
+          throw backendSdk.createInternalError(null, {
+            message: "Scope already assigned to user.",
+            status: 409
+          });
+        }
+        if (resourceId && matchingScopes.some((s) => s.resourceId === resourceId)) {
           throw backendSdk.createInternalError(null, {
             message: "Scope already assigned to user.",
             status: 409
@@ -506,7 +513,16 @@ let RbacServiceBase = class extends backendSdk.develitWorker(cloudflare_workers.
         for (const scope of scopes) {
           this.validateScope(scope.scope);
           const userScopes = await getScopesByUserQuery({ db: this.db, userId });
-          if (userScopes.some((s) => s.scope === scope.scope)) {
+          const matchingScopes = userScopes.filter(
+            (s) => s.scope === scope.scope
+          );
+          if (!scope.resourceId && matchingScopes.find((s) => !s.resourceId)) {
+            throw backendSdk.createInternalError(null, {
+              message: "Scope already assigned to user.",
+              status: 409
+            });
+          }
+          if (scope.resourceId && matchingScopes.some((s) => s.resourceId === scope.resourceId)) {
             throw backendSdk.createInternalError(null, {
               message: "Scope already assigned to user.",
               status: 409
@@ -622,24 +638,34 @@ let RbacServiceBase = class extends backendSdk.develitWorker(cloudflare_workers.
     return this.handleAction(
       { data: input, schema: verifyScope.getUserPermissionsInputSchema },
       { successMessage: "User permissions successfully returned." },
-      async ({ userId }) => {
+      async ({ userId, filter }) => {
         const resultRoles = await getRolesByUserQuery({ db: this.db, userId });
         const resultScopes = await getScopesByUserQuery({ db: this.db, userId });
         const resultRoleScopes = await getScopesByRolesQuery({
           db: this.db,
           roleIds: resultRoles.filter((role) => role.id).map((role) => role.id)
         });
+        const applyFilter = (scopeValue) => {
+          if (!filter) return true;
+          if (filter.scopeContains && !scopeValue.includes(filter.scopeContains)) {
+            return false;
+          }
+          if (filter.scopeStartsWith && !scopeValue.startsWith(filter.scopeStartsWith)) {
+            return false;
+          }
+          return true;
+        };
         const roles = resultRoles.map((role) => ({
           id: role.id,
           name: role.name
         }));
-        const scopes = resultScopes.map((scope) => ({
+        const scopes = resultScopes.filter((scope) => applyFilter(scope.scope)).map((scope) => ({
           id: scope.id,
           scope: scope.scope,
           label: this.SCOPES.find((s) => s.value === scope.scope)?.label || null,
           resourceId: scope.resourceId
         }));
-        const roleScopes = resultRoleScopes.map((scope) => ({
+        const roleScopes = resultRoleScopes.filter((scope) => applyFilter(scope.scope)).map((scope) => ({
           id: scope.id,
           scope: scope.scope,
           label: this.SCOPES.find((s) => s.value === scope.scope)?.label || null,

package/dist/export/worker.d.cts

@@ -1,6 +1,6 @@
 import * as _develit_io_backend_sdk from '@develit-io/backend-sdk';
 import { IRPCResponse } from '@develit-io/backend-sdk';
-import { L as LabeledScope$1, t as tables, C as CreateRoleInput, a as CreateRoleOutput, A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, V as VerifyAccessInput, r as VerifyAccessOutput, D as DeleteRoleInput, s as DeleteRoleOutput, U as UpdateRoleInput, u as UpdateRoleOutput } from '../shared/rbac.DBpIRbd3.cjs';
+import { L as LabeledScope$1, t as tables, C as CreateRoleInput, a as CreateRoleOutput, A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, V as VerifyAccessInput, r as VerifyAccessOutput, D as DeleteRoleInput, s as DeleteRoleOutput, U as UpdateRoleInput, u as UpdateRoleOutput } from '../shared/rbac.Dqh3yQbz.cjs';
 import { WorkerEntrypoint } from 'cloudflare:workers';
 import { DrizzleD1Database } from 'drizzle-orm/d1';
 import 'zod';

package/dist/export/worker.d.mts

@@ -1,6 +1,6 @@
 import * as _develit_io_backend_sdk from '@develit-io/backend-sdk';
 import { IRPCResponse } from '@develit-io/backend-sdk';
-import { L as LabeledScope$1, t as tables, C as CreateRoleInput, a as CreateRoleOutput, A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, V as VerifyAccessInput, r as VerifyAccessOutput, D as DeleteRoleInput, s as DeleteRoleOutput, U as UpdateRoleInput, u as UpdateRoleOutput } from '../shared/rbac.CG3CtEwh.mjs';
+import { L as LabeledScope$1, t as tables, C as CreateRoleInput, a as CreateRoleOutput, A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, V as VerifyAccessInput, r as VerifyAccessOutput, D as DeleteRoleInput, s as DeleteRoleOutput, U as UpdateRoleInput, u as UpdateRoleOutput } from '../shared/rbac.BKJdHgo6.mjs';
 import { WorkerEntrypoint } from 'cloudflare:workers';
 import { DrizzleD1Database } from 'drizzle-orm/d1';
 import 'zod';

package/dist/export/worker.d.ts

@@ -1,6 +1,6 @@
 import * as _develit_io_backend_sdk from '@develit-io/backend-sdk';
 import { IRPCResponse } from '@develit-io/backend-sdk';
-import { L as LabeledScope$1, t as tables, C as CreateRoleInput, a as CreateRoleOutput, A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, V as VerifyAccessInput, r as VerifyAccessOutput, D as DeleteRoleInput, s as DeleteRoleOutput, U as UpdateRoleInput, u as UpdateRoleOutput } from '../shared/rbac.BrefTsLW.js';
+import { L as LabeledScope$1, t as tables, C as CreateRoleInput, a as CreateRoleOutput, A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, V as VerifyAccessInput, r as VerifyAccessOutput, D as DeleteRoleInput, s as DeleteRoleOutput, U as UpdateRoleInput, u as UpdateRoleOutput } from '../shared/rbac.Bv-9aL95.js';
 import { WorkerEntrypoint } from 'cloudflare:workers';
 import { DrizzleD1Database } from 'drizzle-orm/d1';
 import 'zod';

package/dist/export/worker.mjs

@@ -1,7 +1,7 @@
 import { uuidv4, first, createInternalError, develitWorker, action, service } from '@develit-io/backend-sdk';
 import { s as schema } from '../shared/rbac.D5OV7UPA.mjs';
 import { eq, and, count, inArray } from 'drizzle-orm';
-import { c as createRoleInputSchema, a as assignRoleToUserInputSchema, b as assignRolesToUserInputSchema, r as revokeRoleFromUserInputSchema, f as grantScopeToUserInputSchema, h as grantScopesToUserInputSchema, j as revokeScopeFromUserInputSchema, e as grantScopeToRoleInputSchema, i as revokeScopeFromRoleInputSchema, g as getUserPermissionsInputSchema, v as verifyAccessInputSchema, d as deleteRoleInputSchema, u as updateRoleInputSchema, l as isScopeObject, m as isOrCondition, n as isAndCondition, o as isImplicitAndCondition } from '../shared/rbac.2_i8g_mW.mjs';
+import { c as createRoleInputSchema, a as assignRoleToUserInputSchema, b as assignRolesToUserInputSchema, r as revokeRoleFromUserInputSchema, f as grantScopeToUserInputSchema, h as grantScopesToUserInputSchema, j as revokeScopeFromUserInputSchema, e as grantScopeToRoleInputSchema, i as revokeScopeFromRoleInputSchema, g as getUserPermissionsInputSchema, v as verifyAccessInputSchema, d as deleteRoleInputSchema, u as updateRoleInputSchema, l as isScopeObject, m as isOrCondition, n as isAndCondition, o as isImplicitAndCondition } from '../shared/rbac.BdBAChkr.mjs';
 import { z } from 'zod';
 import { WorkerEntrypoint } from 'cloudflare:workers';
 import { drizzle } from 'drizzle-orm/d1';
@@ -476,8 +476,15 @@ let RbacServiceBase = class extends develitWorker(WorkerEntrypoint) {
       { successMessage: "Scope successfully granted to user." },
       async ({ userId, scope, resourceId }) => {
         this.validateScope(scope);
-        const userScope = await getScopesByUserQuery({ db: this.db, userId });
-        if (userScope.some((s) => s.scope === scope)) {
+        const userScopes = await getScopesByUserQuery({ db: this.db, userId });
+        const matchingScopes = userScopes.filter((s) => s.scope === scope);
+        if (!resourceId && matchingScopes.find((s) => !s.resourceId)) {
+          throw createInternalError(null, {
+            message: "Scope already assigned to user.",
+            status: 409
+          });
+        }
+        if (resourceId && matchingScopes.some((s) => s.resourceId === resourceId)) {
           throw createInternalError(null, {
             message: "Scope already assigned to user.",
             status: 409
@@ -502,7 +509,16 @@ let RbacServiceBase = class extends develitWorker(WorkerEntrypoint) {
         for (const scope of scopes) {
           this.validateScope(scope.scope);
           const userScopes = await getScopesByUserQuery({ db: this.db, userId });
-          if (userScopes.some((s) => s.scope === scope.scope)) {
+          const matchingScopes = userScopes.filter(
+            (s) => s.scope === scope.scope
+          );
+          if (!scope.resourceId && matchingScopes.find((s) => !s.resourceId)) {
+            throw createInternalError(null, {
+              message: "Scope already assigned to user.",
+              status: 409
+            });
+          }
+          if (scope.resourceId && matchingScopes.some((s) => s.resourceId === scope.resourceId)) {
             throw createInternalError(null, {
               message: "Scope already assigned to user.",
               status: 409
@@ -618,24 +634,34 @@ let RbacServiceBase = class extends develitWorker(WorkerEntrypoint) {
     return this.handleAction(
       { data: input, schema: getUserPermissionsInputSchema },
       { successMessage: "User permissions successfully returned." },
-      async ({ userId }) => {
+      async ({ userId, filter }) => {
         const resultRoles = await getRolesByUserQuery({ db: this.db, userId });
         const resultScopes = await getScopesByUserQuery({ db: this.db, userId });
         const resultRoleScopes = await getScopesByRolesQuery({
           db: this.db,
           roleIds: resultRoles.filter((role) => role.id).map((role) => role.id)
         });
+        const applyFilter = (scopeValue) => {
+          if (!filter) return true;
+          if (filter.scopeContains && !scopeValue.includes(filter.scopeContains)) {
+            return false;
+          }
+          if (filter.scopeStartsWith && !scopeValue.startsWith(filter.scopeStartsWith)) {
+            return false;
+          }
+          return true;
+        };
         const roles = resultRoles.map((role) => ({
           id: role.id,
           name: role.name
         }));
-        const scopes = resultScopes.map((scope) => ({
+        const scopes = resultScopes.filter((scope) => applyFilter(scope.scope)).map((scope) => ({
           id: scope.id,
           scope: scope.scope,
           label: this.SCOPES.find((s) => s.value === scope.scope)?.label || null,
           resourceId: scope.resourceId
         }));
-        const roleScopes = resultRoleScopes.map((scope) => ({
+        const roleScopes = resultRoleScopes.filter((scope) => applyFilter(scope.scope)).map((scope) => ({
           id: scope.id,
           scope: scope.scope,
           label: this.SCOPES.find((s) => s.value === scope.scope)?.label || null,

package/dist/export/wrangler.cjs

@@ -10,10 +10,15 @@ function defineRbacServiceWrangler(config) {
       name
     }),
     vars: {
-      // Variables
       ...envs.local.vars,
       ENVIRONMENT: "localhost"
     },
+    services: [
+      {
+        binding: "SECRETS_STORE",
+        service: `${project}-secrets-store`
+      }
+    ],
     d1_databases: [
       {
         binding: "RBAC_D1",

package/dist/export/wrangler.d.cts

@@ -5,6 +5,10 @@ declare function defineRbacServiceWrangler(config: RbacServiceWranglerConfig): {
         ENVIRONMENT: string;
         SERVICE_CONFIG_INCLUDE_CONFIRMATION: boolean;
     };
+    services: {
+        binding: string;
+        service: string;
+    }[];
     d1_databases: {
         binding: string;
         database_name: string;

package/dist/export/wrangler.d.mts

@@ -5,6 +5,10 @@ declare function defineRbacServiceWrangler(config: RbacServiceWranglerConfig): {
         ENVIRONMENT: string;
         SERVICE_CONFIG_INCLUDE_CONFIRMATION: boolean;
     };
+    services: {
+        binding: string;
+        service: string;
+    }[];
     d1_databases: {
         binding: string;
         database_name: string;

package/dist/export/wrangler.d.ts

@@ -5,6 +5,10 @@ declare function defineRbacServiceWrangler(config: RbacServiceWranglerConfig): {
         ENVIRONMENT: string;
         SERVICE_CONFIG_INCLUDE_CONFIRMATION: boolean;
     };
+    services: {
+        binding: string;
+        service: string;
+    }[];
     d1_databases: {
         binding: string;
         database_name: string;

package/dist/export/wrangler.mjs

@@ -8,10 +8,15 @@ function defineRbacServiceWrangler(config) {
       name
     }),
     vars: {
-      // Variables
       ...envs.local.vars,
       ENVIRONMENT: "localhost"
     },
+    services: [
+      {
+        binding: "SECRETS_STORE",
+        service: `${project}-secrets-store`
+      }
+    ],
     d1_databases: [
       {
         binding: "RBAC_D1",

package/dist/shared/{rbac.CG3CtEwh.d.mts → rbac.BKJdHgo6.d.mts}

@@ -93,6 +93,10 @@ interface GetPermissionsOutput {
 
 declare const getUserPermissionsInputSchema: z.ZodObject<{
     userId: z.ZodUUID;
+    filter: z.ZodOptional<z.ZodObject<{
+        scopeContains: z.ZodOptional<z.ZodString>;
+        scopeStartsWith: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 interface GetUserPermissionsInput extends z.infer<typeof getUserPermissionsInputSchema> {
 }

package/dist/shared/{rbac.2_i8g_mW.mjs → rbac.BdBAChkr.mjs}

@@ -19,7 +19,11 @@ const deleteRoleInputSchema = z.object({
 });
 
 const getUserPermissionsInputSchema = z.object({
-  userId: z.uuid()
+  userId: z.uuid(),
+  filter: z.object({
+    scopeContains: z.string().optional(),
+    scopeStartsWith: z.string().optional()
+  }).optional()
 });
 
 const grantScopeToRoleInputSchema = z.object({

package/dist/shared/{rbac.BrefTsLW.d.ts → rbac.Bv-9aL95.d.ts}

@@ -93,6 +93,10 @@ interface GetPermissionsOutput {
 
 declare const getUserPermissionsInputSchema: z.ZodObject<{
     userId: z.ZodUUID;
+    filter: z.ZodOptional<z.ZodObject<{
+        scopeContains: z.ZodOptional<z.ZodString>;
+        scopeStartsWith: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 interface GetUserPermissionsInput extends z.infer<typeof getUserPermissionsInputSchema> {
 }

package/dist/shared/{rbac.JCf4hSCf.cjs → rbac.DH2MYF0T.cjs}

@@ -21,7 +21,11 @@ const deleteRoleInputSchema = zod.z.object({
 });
 
 const getUserPermissionsInputSchema = zod.z.object({
-  userId: zod.z.uuid()
+  userId: zod.z.uuid(),
+  filter: zod.z.object({
+    scopeContains: zod.z.string().optional(),
+    scopeStartsWith: zod.z.string().optional()
+  }).optional()
 });
 
 const grantScopeToRoleInputSchema = zod.z.object({

package/dist/shared/{rbac.DBpIRbd3.d.cts → rbac.Dqh3yQbz.d.cts}

@@ -93,6 +93,10 @@ interface GetPermissionsOutput {
 
 declare const getUserPermissionsInputSchema: z.ZodObject<{
     userId: z.ZodUUID;
+    filter: z.ZodOptional<z.ZodObject<{
+        scopeContains: z.ZodOptional<z.ZodString>;
+        scopeStartsWith: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 interface GetUserPermissionsInput extends z.infer<typeof getUserPermissionsInputSchema> {
 }

package/dist/types.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-const verifyScope = require('./shared/rbac.JCf4hSCf.cjs');
+const verifyScope = require('./shared/rbac.DH2MYF0T.cjs');
 require('zod');
 
 

package/dist/types.d.cts

@@ -1,4 +1,4 @@
-export { A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, C as CreateRoleInput, a as CreateRoleOutput, D as DeleteRoleInput, s as DeleteRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, L as LabeledScope, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, y as RoleInsertType, w as RoleScopeInsertType, v as RoleScopeSelectType, x as RoleSelectType, S as Scope, _ as ScopeCondition, Z as ScopeObject, U as UpdateRoleInput, u as UpdateRoleOutput, B as UserRoleInsertType, z as UserRoleSelectType, F as UserScopeInsertType, E as UserScopeSelectType, V as VerifyAccessInput, r as VerifyAccessOutput, H as assignRoleToUserInputSchema, I as assignRolesToUserInputSchema, J as createRoleInputSchema, K as deleteRoleInputSchema, M as getUserPermissionsInputSchema, N as grantScopeToRoleInputSchema, O as grantScopeToUserInputSchema, P as grantScopesToUserInputSchema, a3 as isAndCondition, a4 as isImplicitAndCondition, a2 as isOrCondition, a1 as isScopeObject, Q as revokeRoleFromUserInputSchema, T as revokeScopeFromRoleInputSchema, W as revokeScopeFromUserInputSchema, $ as scopeConditionSchema, Y as scopeObjectSchema, X as updateRoleInputSchema, a0 as verifyAccessInputSchema } from './shared/rbac.DBpIRbd3.cjs';
+export { A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, C as CreateRoleInput, a as CreateRoleOutput, D as DeleteRoleInput, s as DeleteRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, L as LabeledScope, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, y as RoleInsertType, w as RoleScopeInsertType, v as RoleScopeSelectType, x as RoleSelectType, S as Scope, _ as ScopeCondition, Z as ScopeObject, U as UpdateRoleInput, u as UpdateRoleOutput, B as UserRoleInsertType, z as UserRoleSelectType, F as UserScopeInsertType, E as UserScopeSelectType, V as VerifyAccessInput, r as VerifyAccessOutput, H as assignRoleToUserInputSchema, I as assignRolesToUserInputSchema, J as createRoleInputSchema, K as deleteRoleInputSchema, M as getUserPermissionsInputSchema, N as grantScopeToRoleInputSchema, O as grantScopeToUserInputSchema, P as grantScopesToUserInputSchema, a3 as isAndCondition, a4 as isImplicitAndCondition, a2 as isOrCondition, a1 as isScopeObject, Q as revokeRoleFromUserInputSchema, T as revokeScopeFromRoleInputSchema, W as revokeScopeFromUserInputSchema, $ as scopeConditionSchema, Y as scopeObjectSchema, X as updateRoleInputSchema, a0 as verifyAccessInputSchema } from './shared/rbac.Dqh3yQbz.cjs';
 import { z } from 'zod';
 export { b as RbacServiceEnv, a as RbacServiceEnvironmentConfig, R as RbacServiceWranglerConfig } from './shared/rbac.ClMKyW8J.cjs';
 import 'drizzle-orm';

package/dist/types.d.mts

@@ -1,4 +1,4 @@
-export { A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, C as CreateRoleInput, a as CreateRoleOutput, D as DeleteRoleInput, s as DeleteRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, L as LabeledScope, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, y as RoleInsertType, w as RoleScopeInsertType, v as RoleScopeSelectType, x as RoleSelectType, S as Scope, _ as ScopeCondition, Z as ScopeObject, U as UpdateRoleInput, u as UpdateRoleOutput, B as UserRoleInsertType, z as UserRoleSelectType, F as UserScopeInsertType, E as UserScopeSelectType, V as VerifyAccessInput, r as VerifyAccessOutput, H as assignRoleToUserInputSchema, I as assignRolesToUserInputSchema, J as createRoleInputSchema, K as deleteRoleInputSchema, M as getUserPermissionsInputSchema, N as grantScopeToRoleInputSchema, O as grantScopeToUserInputSchema, P as grantScopesToUserInputSchema, a3 as isAndCondition, a4 as isImplicitAndCondition, a2 as isOrCondition, a1 as isScopeObject, Q as revokeRoleFromUserInputSchema, T as revokeScopeFromRoleInputSchema, W as revokeScopeFromUserInputSchema, $ as scopeConditionSchema, Y as scopeObjectSchema, X as updateRoleInputSchema, a0 as verifyAccessInputSchema } from './shared/rbac.CG3CtEwh.mjs';
+export { A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, C as CreateRoleInput, a as CreateRoleOutput, D as DeleteRoleInput, s as DeleteRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, L as LabeledScope, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, y as RoleInsertType, w as RoleScopeInsertType, v as RoleScopeSelectType, x as RoleSelectType, S as Scope, _ as ScopeCondition, Z as ScopeObject, U as UpdateRoleInput, u as UpdateRoleOutput, B as UserRoleInsertType, z as UserRoleSelectType, F as UserScopeInsertType, E as UserScopeSelectType, V as VerifyAccessInput, r as VerifyAccessOutput, H as assignRoleToUserInputSchema, I as assignRolesToUserInputSchema, J as createRoleInputSchema, K as deleteRoleInputSchema, M as getUserPermissionsInputSchema, N as grantScopeToRoleInputSchema, O as grantScopeToUserInputSchema, P as grantScopesToUserInputSchema, a3 as isAndCondition, a4 as isImplicitAndCondition, a2 as isOrCondition, a1 as isScopeObject, Q as revokeRoleFromUserInputSchema, T as revokeScopeFromRoleInputSchema, W as revokeScopeFromUserInputSchema, $ as scopeConditionSchema, Y as scopeObjectSchema, X as updateRoleInputSchema, a0 as verifyAccessInputSchema } from './shared/rbac.BKJdHgo6.mjs';
 import { z } from 'zod';
 export { b as RbacServiceEnv, a as RbacServiceEnvironmentConfig, R as RbacServiceWranglerConfig } from './shared/rbac.ClMKyW8J.mjs';
 import 'drizzle-orm';

package/dist/types.d.ts

@@ -1,4 +1,4 @@
-export { A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, C as CreateRoleInput, a as CreateRoleOutput, D as DeleteRoleInput, s as DeleteRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, L as LabeledScope, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, y as RoleInsertType, w as RoleScopeInsertType, v as RoleScopeSelectType, x as RoleSelectType, S as Scope, _ as ScopeCondition, Z as ScopeObject, U as UpdateRoleInput, u as UpdateRoleOutput, B as UserRoleInsertType, z as UserRoleSelectType, F as UserScopeInsertType, E as UserScopeSelectType, V as VerifyAccessInput, r as VerifyAccessOutput, H as assignRoleToUserInputSchema, I as assignRolesToUserInputSchema, J as createRoleInputSchema, K as deleteRoleInputSchema, M as getUserPermissionsInputSchema, N as grantScopeToRoleInputSchema, O as grantScopeToUserInputSchema, P as grantScopesToUserInputSchema, a3 as isAndCondition, a4 as isImplicitAndCondition, a2 as isOrCondition, a1 as isScopeObject, Q as revokeRoleFromUserInputSchema, T as revokeScopeFromRoleInputSchema, W as revokeScopeFromUserInputSchema, $ as scopeConditionSchema, Y as scopeObjectSchema, X as updateRoleInputSchema, a0 as verifyAccessInputSchema } from './shared/rbac.BrefTsLW.js';
+export { A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, C as CreateRoleInput, a as CreateRoleOutput, D as DeleteRoleInput, s as DeleteRoleOutput, o as GetPermissionsOutput, p as GetUserPermissionsInput, q as GetUserPermissionsOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, L as LabeledScope, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, y as RoleInsertType, w as RoleScopeInsertType, v as RoleScopeSelectType, x as RoleSelectType, S as Scope, _ as ScopeCondition, Z as ScopeObject, U as UpdateRoleInput, u as UpdateRoleOutput, B as UserRoleInsertType, z as UserRoleSelectType, F as UserScopeInsertType, E as UserScopeSelectType, V as VerifyAccessInput, r as VerifyAccessOutput, H as assignRoleToUserInputSchema, I as assignRolesToUserInputSchema, J as createRoleInputSchema, K as deleteRoleInputSchema, M as getUserPermissionsInputSchema, N as grantScopeToRoleInputSchema, O as grantScopeToUserInputSchema, P as grantScopesToUserInputSchema, a3 as isAndCondition, a4 as isImplicitAndCondition, a2 as isOrCondition, a1 as isScopeObject, Q as revokeRoleFromUserInputSchema, T as revokeScopeFromRoleInputSchema, W as revokeScopeFromUserInputSchema, $ as scopeConditionSchema, Y as scopeObjectSchema, X as updateRoleInputSchema, a0 as verifyAccessInputSchema } from './shared/rbac.Bv-9aL95.js';
 import { z } from 'zod';
 export { b as RbacServiceEnv, a as RbacServiceEnvironmentConfig, R as RbacServiceWranglerConfig } from './shared/rbac.ClMKyW8J.js';
 import 'drizzle-orm';

package/dist/types.mjs

@@ -1,2 +1,2 @@
-export { a as assignRoleToUserInputSchema, b as assignRolesToUserInputSchema, c as createRoleInputSchema, d as deleteRoleInputSchema, g as getUserPermissionsInputSchema, e as grantScopeToRoleInputSchema, f as grantScopeToUserInputSchema, h as grantScopesToUserInputSchema, n as isAndCondition, o as isImplicitAndCondition, m as isOrCondition, l as isScopeObject, r as revokeRoleFromUserInputSchema, i as revokeScopeFromRoleInputSchema, j as revokeScopeFromUserInputSchema, k as scopeConditionSchema, s as scopeObjectSchema, u as updateRoleInputSchema, v as verifyAccessInputSchema, p as verifyScopeInputSchema, q as verifyScopeOutputSchema } from './shared/rbac.2_i8g_mW.mjs';
+export { a as assignRoleToUserInputSchema, b as assignRolesToUserInputSchema, c as createRoleInputSchema, d as deleteRoleInputSchema, g as getUserPermissionsInputSchema, e as grantScopeToRoleInputSchema, f as grantScopeToUserInputSchema, h as grantScopesToUserInputSchema, n as isAndCondition, o as isImplicitAndCondition, m as isOrCondition, l as isScopeObject, r as revokeRoleFromUserInputSchema, i as revokeScopeFromRoleInputSchema, j as revokeScopeFromUserInputSchema, k as scopeConditionSchema, s as scopeObjectSchema, u as updateRoleInputSchema, v as verifyAccessInputSchema, p as verifyScopeInputSchema, q as verifyScopeOutputSchema } from './shared/rbac.BdBAChkr.mjs';
 import 'zod';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@develit-services/rbac",
-  "version": "0.4.0",
+  "version": "0.5.1",
   "author": "Develit.io s.r.o.",
   "type": "module",
   "exports": {
@@ -30,13 +30,13 @@
     "./dist"
   ],
   "scripts": {
-    "dev": "wrangler dev --port 9237 --persist-to ../../.wrangler/state",
+    "dev": "wrangler dev --port 9237 --persist-to ../../.wrangler/state -c ./wrangler.jsonc -c ../../apps/secrets-store/wrangler.jsonc",
     "wrangler:generate": "bunx develit wrangler:generate --types",
     "db:init": "wrangler d1 execute develit-rbac --local --persist-to ../../.wrangler/state --command=\"SELECT 'Creating database...' AS status;\"",
     "db:generate": "drizzle-kit generate",
     "db:migrate": "drizzle-kit migrate",
     "db:explore": "drizzle-kit studio",
-    "types": "wrangler types --env-interface RbacEnv --include-runtime false",
+    "types": "bash typegen.sh",
     "lint": "biome check",
     "lint:fix": "biome check --fix",
     "test": "vitest",