@dudousxd/nestjs-authz-mikro-orm 0.3.1 → 0.5.0

package/CHANGELOG.md

@@ -1,5 +1,33 @@
 # @dudousxd/nestjs-authz-mikro-orm
 
+## 0.5.0
+
+### Minor Changes
+
+- [#18](https://github.com/DavideCarvalho/nestjs-authz/pull/18) [`a5662a2`](https://github.com/DavideCarvalho/nestjs-authz/commit/a5662a2b599d826ae3a0d08e6ad71da7f2e425dc) Thanks [@DavideCarvalho](https://github.com/DavideCarvalho)! - Ship typed MikroORM repositories for the four authz entities, and a schema factory for custom table names.
+
+  - New `AuthzRoleRepository`, `AuthzPermissionRepository`, `AuthzRolePermissionRepository` and `AuthzUserRoleRepository` (empty `EntityRepository` subclasses), bound to the entities via `repository: () => ...` on each `EntitySchema` plus an `[EntityRepositoryType]` marker on each entity class. `em.getRepository(RoleEntity)` now returns — and is typed as — `AuthzRoleRepository`, and `MikroOrmModule.forFeature([...AUTHZ_ENTITY_CLASSES])` registers each repository class as its own DI token, so host apps inject by type instead of threading the entity class through every `em.find(RoleEntity, ...)`.
+  - New `createAuthzEntitySchemas(tableNames?)` — the supported way to relocate the authz tables. It carries the repository binding and derives the index names from the given table names; hand-writing a replacement `EntitySchema` (the previously documented path) silently dropped both. `AUTHZ_ENTITIES` and `RoleEntitySchema` … `UserRoleEntitySchema` are now produced by this factory with the default names, so they are unchanged.
+  - New `AUTHZ_ENTITY_CLASSES` export (the four classes in dependency order) for `MikroOrmModule.forFeature()`, which matches on `meta.class`.
+  - `ensureAuthzSchema` / `authzSchemaSql` now read the four physical table names off the live metadata instead of hard-coding the `authz_*` literals, so relocated tables are created too.
+
+  `EntityRepository`, `EntityRepositoryType` and the `repository` option on `EntitySchemaMetadata` all live in `@mikro-orm/core` on both MikroORM 6 and 7, so this adds no peer and no decorator import. Verified against the v6 suite and the pinned `@mikro-orm/core@7` integration suite.
+
+  `MikroOrmAuthzStore` is unchanged.
+
+## 0.4.0
+
+### Minor Changes
+
+- [`45719bb`](https://github.com/DavideCarvalho/nestjs-authz/commit/45719bb958d7abceb8b0edad4c0c3d97f99590cb) - Support MikroORM 7 (peer `@mikro-orm/core` / `@mikro-orm/nestjs` widened to `^6 || ^7`).
+
+  MikroORM 7 relocated the entity decorators (`@Entity/@Property/@PrimaryKey/@Index`) out of `@mikro-orm/core` into a separate `@mikro-orm/decorators` package, and removed `MikroORM.getSchemaGenerator()`. To run on both v6 and v7 from a single codebase with no extra peer:
+
+  - The four authz entities are now defined with `EntitySchema` (the one definition style that lives in `@mikro-orm/core` on both majors) instead of decorators. The entity classes (`RoleEntity` … `UserRoleEntity`) are unchanged as the store's reference; their schemas are also exported (`RoleEntitySchema` … `UserRoleEntitySchema`) for BYO-table-name re-declaration.
+  - `ensureAuthzSchema` / `authzSchemaSql` now detect a `MikroORM` instance via its `em` property (present on both v6 and v7) instead of the v7-removed `getSchemaGenerator()`, and read the schema generator off the EM-bound platform.
+
+  Verified end-to-end against `@mikro-orm/core@7` + `@mikro-orm/sqlite@7` (and the existing v6 suite still passes).
+
 ## 0.3.1
 
 ### Patch Changes

package/README.md

@@ -7,6 +7,11 @@ roles, permissions, and a Gate seam, with **zero connection ownership** (your ap
 This is the MikroORM sibling of `@dudousxd/nestjs-authz-typeorm`: identical store surface
 and `AuthzRbacModule`, backed by MikroORM entities.
 
+Works with **MikroORM 6 and 7** (peer `@mikro-orm/core` `^6 || ^7`). The entities are
+defined with `EntitySchema` — the one definition style that lives entirely in
+`@mikro-orm/core` across both majors (v7 moved the `@Entity/@Property/...` decorators into a
+separate `@mikro-orm/decorators` package), so no extra peer is required.
+
 ## Install
 
 ```bash
@@ -31,10 +36,56 @@ import { AUTHZ_ENTITIES } from '@dudousxd/nestjs-authz-mikro-orm';
 await MikroORM.init({ entities: [...AUTHZ_ENTITIES /* , your entities */] });
 ```
 
-> BYO table names: MikroORM resolves table names from entity metadata at discovery time,
-> so override them by re-decorating these entities with your own `@Entity({ tableName })`;
-> the store + schema helpers operate purely through the `EntityManager` and never assume a
-> literal name.
+### BYO table names
+
+MikroORM resolves table names from entity metadata at discovery time. Build your own set of
+schemas with `createAuthzEntitySchemas` and register those instead:
+
+```ts
+import { createAuthzEntitySchemas } from '@dudousxd/nestjs-authz-mikro-orm';
+
+const authz = createAuthzEntitySchemas({ roles: 'app_roles', userRole: 'app_user_role' });
+await MikroORM.init({ entities: [...authz.all /* , your entities */] });
+```
+
+Any subset of `roles` / `permissions` / `rolePermission` / `userRole` may be overridden; the
+rest keep their defaults. The factory carries the custom repository binding and derives the
+index names from your table names, so nothing is lost by relocating the tables — hand-writing
+`new EntitySchema({ class: RoleEntity, tableName })` instead silently drops both. The store and
+the schema helpers read the physical names back off the live metadata and never assume a
+literal name.
+
+## Repositories
+
+Each entity is bound to a typed repository, so app code injects it by type rather than passing
+the entity class to every `EntityManager` call:
+
+```ts
+import { AUTHZ_ENTITY_CLASSES, AuthzRoleRepository } from '@dudousxd/nestjs-authz-mikro-orm';
+import { MikroOrmModule } from '@mikro-orm/nestjs';
+
+@Module({
+  // forFeature matches on the entity CLASS — pass these, not the schemas.
+  imports: [MikroOrmModule.forFeature([...AUTHZ_ENTITY_CLASSES])],
+})
+export class RolesModule {}
+
+@Injectable()
+export class RolesService {
+  constructor(private readonly roles: AuthzRoleRepository) {}
+
+  findByName(name: string) {
+    return this.roles.findOne({ name });
+  }
+}
+```
+
+Without `@mikro-orm/nestjs`, `em.getRepository(RoleEntity)` returns the same instance and is
+typed as `AuthzRoleRepository`. The four classes are `AuthzRoleRepository`,
+`AuthzPermissionRepository`, `AuthzRolePermissionRepository` and `AuthzUserRoleRepository`;
+their bodies are empty — this package ships no query surface beyond `MikroOrmAuthzStore`.
+
+`MikroOrmAuthzStore` is unaffected — it still takes an `EntityManager` and owns no connection.
 
 ## Usage
 

package/dist/entities.d.ts

@@ -1,8 +1,10 @@
+import { EntityRepositoryType, EntitySchema } from '@mikro-orm/core';
+import { AuthzPermissionRepository, AuthzRolePermissionRepository, AuthzRoleRepository, AuthzUserRoleRepository } from './repositories.js';
 /**
- * Default table names — the entities below carry these as their `tableName`. MikroORM
- * resolves the physical table from the entity metadata (not at runtime), so an app that
- * wants different names re-decorates these entities; the store + schema helpers operate
- * purely through the EntityManager and never assume a literal name.
+ * Default physical table names. MikroORM resolves the table from entity metadata, so an app
+ * that wants different names builds its own set of schemas with
+ * {@link createAuthzEntitySchemas}; the store + schema helpers operate purely through the
+ * EntityManager and read the physical names back off the live metadata.
  */
 export declare const DEFAULT_TABLE_NAMES: {
     readonly roles: "authz_roles";
@@ -10,20 +12,41 @@ export declare const DEFAULT_TABLE_NAMES: {
     readonly rolePermission: "authz_role_permission";
     readonly userRole: "authz_user_role";
 };
+/** Physical table names for the four authz tables. */
+export interface AuthzTableNames {
+    roles: string;
+    permissions: string;
+    rolePermission: string;
+    userRole: string;
+}
 /**
- * A named role (e.g. `editor`). Permissions are attached via {@link RolePermissionEntity};
- * users are attached via {@link UserRoleEntity}.
+ * The entities are described with {@link EntitySchema} (the schema-first definition style)
+ * rather than property decorators. This is the ONE definition surface that lives entirely
+ * in `@mikro-orm/core` and is identical across MikroORM 6 and 7 — v7 relocated the
+ * `@Entity/@Property/...` decorators to a separate `@mikro-orm/decorators` package, so a
+ * decorator-based definition would force an extra peer and break on v6. The plain classes
+ * below stay the public reference the store keys on (`em.find(RoleEntity, ...)`,
+ * `meta.get(RoleEntity.name)`); the schemas attach metadata to them.
  *
- * Every column declares an explicit `type` instead of relying on `emitDecoratorMetadata`
- * reflection, so the entity discovers correctly even when the consuming app compiles with
- * SWC/esbuild/Vite (which don't emit decorator metadata).
+ * Every column declares an explicit `type`, so discovery works even when the consuming app
+ * compiles with SWC/esbuild/Vite (which don't emit decorator metadata — irrelevant here
+ * since we don't rely on reflection, but kept explicit for clarity and parity).
  *
  * Forward-compat rule: any column added to these entities AFTER v1 MUST be nullable or
  * carry a default — `ensureAuthzSchema` only ever runs the non-destructive `safe` diff
  * (create table + add-missing-column), and `ADD COLUMN NOT NULL` without a default fails
  * on a populated table.
+ *
+ * `[EntityRepositoryType]` is a `declare`d marker: it carries no runtime field (the symbol is
+ * skipped by MikroORM's property discovery either way) and only tells the type system what
+ * `em.getRepository(RoleEntity)` returns.
+ */
+/**
+ * A named role (e.g. `editor`). Permissions are attached via {@link RolePermissionEntity};
+ * users are attached via {@link UserRoleEntity}.
  */
 export declare class RoleEntity {
+    [EntityRepositoryType]?: AuthzRoleRepository;
     id: string;
     name: string;
     guard?: string | null;
@@ -31,6 +54,7 @@ export declare class RoleEntity {
 }
 /** A named permission (e.g. `posts.publish`). Granted to roles via {@link RolePermissionEntity}. */
 export declare class PermissionEntity {
+    [EntityRepositoryType]?: AuthzPermissionRepository;
     id: string;
     name: string;
     guard?: string | null;
@@ -38,6 +62,7 @@ export declare class PermissionEntity {
 }
 /** Pivot: role ↔ permission. Composite PK `(roleId, permissionId)`. */
 export declare class RolePermissionEntity {
+    [EntityRepositoryType]?: AuthzRolePermissionRepository;
     roleId: string;
     permissionId: string;
 }
@@ -47,10 +72,53 @@ export declare class RolePermissionEntity {
  * (mirrors nestjs-context's `UserRef` shape).
  */
 export declare class UserRoleEntity {
+    [EntityRepositoryType]?: AuthzUserRoleRepository;
     userType: string;
     userId: string;
     roleId: string;
 }
-/** All entities, in dependency order — convenient for `entities: [...]` registration. */
-export declare const AUTHZ_ENTITIES: readonly [typeof RoleEntity, typeof PermissionEntity, typeof RolePermissionEntity, typeof UserRoleEntity];
+/** The four {@link EntitySchema} definitions produced by {@link createAuthzEntitySchemas}. */
+export interface AuthzEntitySchemas {
+    role: EntitySchema<RoleEntity>;
+    permission: EntitySchema<PermissionEntity>;
+    rolePermission: EntitySchema<RolePermissionEntity>;
+    userRole: EntitySchema<UserRoleEntity>;
+    /** All four, in dependency order — spread into `entities: [...]`. */
+    all: [
+        EntitySchema<RoleEntity>,
+        EntitySchema<PermissionEntity>,
+        EntitySchema<RolePermissionEntity>,
+        EntitySchema<UserRoleEntity>
+    ];
+}
+/**
+ * Build the four authz {@link EntitySchema} definitions, optionally under your own table
+ * names — this is the supported way to relocate the tables:
+ *
+ * ```ts
+ * const authz = createAuthzEntitySchemas({ roles: 'app_roles' });
+ * await MikroORM.init({ entities: [...authz.all] });
+ * ```
+ *
+ * Going through the factory (rather than hand-writing `new EntitySchema({ tableName })`)
+ * keeps the custom repository binding and the index names attached to the renamed tables;
+ * a hand-rolled re-declaration silently drops both.
+ */
+export declare function createAuthzEntitySchemas(tableNames?: Partial<AuthzTableNames>): AuthzEntitySchemas;
+export declare const RoleEntitySchema: EntitySchema<RoleEntity, never>;
+export declare const PermissionEntitySchema: EntitySchema<PermissionEntity, never>;
+export declare const RolePermissionEntitySchema: EntitySchema<RolePermissionEntity, never>;
+export declare const UserRoleEntitySchema: EntitySchema<UserRoleEntity, never>;
+/**
+ * All entity SCHEMAS, in dependency order — pass to `entities: [...]` registration. These
+ * are the {@link EntitySchema} objects MikroORM discovers; the store keys on the plain
+ * classes ({@link RoleEntity} etc.), which the schemas are bound to via `class`.
+ */
+export declare const AUTHZ_ENTITIES: [EntitySchema<RoleEntity, never>, EntitySchema<PermissionEntity, never>, EntitySchema<RolePermissionEntity, never>, EntitySchema<UserRoleEntity, never>];
+/**
+ * The four entity CLASSES, in the same order. Pass these (not the schemas) to
+ * `MikroOrmModule.forFeature()` — it matches on `meta.class`, and only then does it register
+ * {@link AuthzRoleRepository} & friends as DI tokens.
+ */
+export declare const AUTHZ_ENTITY_CLASSES: readonly [typeof RoleEntity, typeof PermissionEntity, typeof RolePermissionEntity, typeof UserRoleEntity];
 //# sourceMappingURL=entities.d.ts.map

package/dist/entities.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entities.d.ts","sourceRoot":"","sources":["../src/entities.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB;;;;;CAKtB,CAAC;AAEX;;;;;;;;;;;;GAYG;AACH,qBACa,UAAU;IAErB,EAAE,EAAG,MAAM,CAAC;IAIZ,IAAI,EAAG,MAAM,CAAC;IAGd,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAGtB,SAAS,EAAG,IAAI,CAAC;CAClB;AAED,oGAAoG;AACpG,qBACa,gBAAgB;IAE3B,EAAE,EAAG,MAAM,CAAC;IAIZ,IAAI,EAAG,MAAM,CAAC;IAGd,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAGtB,SAAS,EAAG,IAAI,CAAC;CAClB;AAED,uEAAuE;AACvE,qBACa,oBAAoB;IAE/B,MAAM,EAAG,MAAM,CAAC;IAGhB,YAAY,EAAG,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,qBAEa,cAAc;IAEzB,QAAQ,EAAG,MAAM,CAAC;IAGlB,MAAM,EAAG,MAAM,CAAC;IAGhB,MAAM,EAAG,MAAM,CAAC;CACjB;AAED,yFAAyF;AACzF,eAAO,MAAM,cAAc,2GAKjB,CAAC"}
+{"version":3,"file":"entities.d.ts","sourceRoot":"","sources":["../src/entities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EACL,yBAAyB,EACzB,6BAA6B,EAC7B,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,mBAAmB,CAAC;AAE3B;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB;;;;;CAKtB,CAAC;AAEX,sDAAsD;AACtD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH;;;GAGG;AACH,qBAAa,UAAU;IACb,CAAC,oBAAoB,CAAC,CAAC,EAAE,mBAAmB,CAAC;IACrD,EAAE,EAAG,MAAM,CAAC;IACZ,IAAI,EAAG,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAG,IAAI,CAAC;CAClB;AAED,oGAAoG;AACpG,qBAAa,gBAAgB;IACnB,CAAC,oBAAoB,CAAC,CAAC,EAAE,yBAAyB,CAAC;IAC3D,EAAE,EAAG,MAAM,CAAC;IACZ,IAAI,EAAG,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAG,IAAI,CAAC;CAClB;AAED,uEAAuE;AACvE,qBAAa,oBAAoB;IACvB,CAAC,oBAAoB,CAAC,CAAC,EAAE,6BAA6B,CAAC;IAC/D,MAAM,EAAG,MAAM,CAAC;IAChB,YAAY,EAAG,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,qBAAa,cAAc;IACjB,CAAC,oBAAoB,CAAC,CAAC,EAAE,uBAAuB,CAAC;IACzD,QAAQ,EAAG,MAAM,CAAC;IAClB,MAAM,EAAG,MAAM,CAAC;IAChB,MAAM,EAAG,MAAM,CAAC;CACjB;AAED,8FAA8F;AAC9F,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC;IAC/B,UAAU,EAAE,YAAY,CAAC,gBAAgB,CAAC,CAAC;IAC3C,cAAc,EAAE,YAAY,CAAC,oBAAoB,CAAC,CAAC;IACnD,QAAQ,EAAE,YAAY,CAAC,cAAc,CAAC,CAAC;IACvC,qEAAqE;IACrE,GAAG,EAAE;QACH,YAAY,CAAC,UAAU,CAAC;QACxB,YAAY,CAAC,gBAAgB,CAAC;QAC9B,YAAY,CAAC,oBAAoB,CAAC;QAClC,YAAY,CAAC,cAAc,CAAC;KAC7B,CAAC;CACH;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,GAAE,OAAO,CAAC,eAAe,CAAM,GACxC,kBAAkB,CAkEpB;AAID,eAAO,MAAM,gBAAgB,iCAAsB,CAAC;AACpD,eAAO,MAAM,sBAAsB,uCAA4B,CAAC;AAChE,eAAO,MAAM,0BAA0B,2CAAgC,CAAC;AACxE,eAAO,MAAM,oBAAoB,qCAA0B,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,cAAc,0JAAqB,CAAC;AAEjD;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,2GAKvB,CAAC"}

package/dist/entities.js

@@ -1,18 +1,10 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-import { Entity, Index, PrimaryKey, Property } from '@mikro-orm/core';
+import { EntitySchema } from '@mikro-orm/core';
+import { AuthzPermissionRepository, AuthzRolePermissionRepository, AuthzRoleRepository, AuthzUserRoleRepository, } from './repositories.js';
 /**
- * Default table names — the entities below carry these as their `tableName`. MikroORM
- * resolves the physical table from the entity metadata (not at runtime), so an app that
- * wants different names re-decorates these entities; the store + schema helpers operate
- * purely through the EntityManager and never assume a literal name.
+ * Default physical table names. MikroORM resolves the table from entity metadata, so an app
+ * that wants different names builds its own set of schemas with
+ * {@link createAuthzEntitySchemas}; the store + schema helpers operate purely through the
+ * EntityManager and read the physical names back off the live metadata.
  */
 export const DEFAULT_TABLE_NAMES = {
     roles: 'authz_roles',
@@ -21,119 +13,151 @@ export const DEFAULT_TABLE_NAMES = {
     userRole: 'authz_user_role',
 };
 /**
- * A named role (e.g. `editor`). Permissions are attached via {@link RolePermissionEntity};
- * users are attached via {@link UserRoleEntity}.
+ * The entities are described with {@link EntitySchema} (the schema-first definition style)
+ * rather than property decorators. This is the ONE definition surface that lives entirely
+ * in `@mikro-orm/core` and is identical across MikroORM 6 and 7 — v7 relocated the
+ * `@Entity/@Property/...` decorators to a separate `@mikro-orm/decorators` package, so a
+ * decorator-based definition would force an extra peer and break on v6. The plain classes
+ * below stay the public reference the store keys on (`em.find(RoleEntity, ...)`,
+ * `meta.get(RoleEntity.name)`); the schemas attach metadata to them.
  *
- * Every column declares an explicit `type` instead of relying on `emitDecoratorMetadata`
- * reflection, so the entity discovers correctly even when the consuming app compiles with
- * SWC/esbuild/Vite (which don't emit decorator metadata).
+ * Every column declares an explicit `type`, so discovery works even when the consuming app
+ * compiles with SWC/esbuild/Vite (which don't emit decorator metadata — irrelevant here
+ * since we don't rely on reflection, but kept explicit for clarity and parity).
  *
  * Forward-compat rule: any column added to these entities AFTER v1 MUST be nullable or
  * carry a default — `ensureAuthzSchema` only ever runs the non-destructive `safe` diff
  * (create table + add-missing-column), and `ADD COLUMN NOT NULL` without a default fails
  * on a populated table.
+ *
+ * `[EntityRepositoryType]` is a `declare`d marker: it carries no runtime field (the symbol is
+ * skipped by MikroORM's property discovery either way) and only tells the type system what
+ * `em.getRepository(RoleEntity)` returns.
  */
-let RoleEntity = class RoleEntity {
+/**
+ * A named role (e.g. `editor`). Permissions are attached via {@link RolePermissionEntity};
+ * users are attached via {@link UserRoleEntity}.
+ */
+export class RoleEntity {
     id;
     name;
     guard;
     createdAt;
-};
-__decorate([
-    PrimaryKey({ type: 'string', length: 191 }),
-    __metadata("design:type", String)
-], RoleEntity.prototype, "id", void 0);
-__decorate([
-    Index({ name: 'authz_roles_name_uniq' }),
-    Property({ type: 'string', length: 191, unique: true }),
-    __metadata("design:type", String)
-], RoleEntity.prototype, "name", void 0);
-__decorate([
-    Property({ type: 'string', nullable: true }),
-    __metadata("design:type", Object)
-], RoleEntity.prototype, "guard", void 0);
-__decorate([
-    Property({ type: 'datetime' }),
-    __metadata("design:type", Date)
-], RoleEntity.prototype, "createdAt", void 0);
-RoleEntity = __decorate([
-    Entity({ tableName: DEFAULT_TABLE_NAMES.roles })
-], RoleEntity);
-export { RoleEntity };
+}
 /** A named permission (e.g. `posts.publish`). Granted to roles via {@link RolePermissionEntity}. */
-let PermissionEntity = class PermissionEntity {
+export class PermissionEntity {
     id;
     name;
     guard;
     createdAt;
-};
-__decorate([
-    PrimaryKey({ type: 'string', length: 191 }),
-    __metadata("design:type", String)
-], PermissionEntity.prototype, "id", void 0);
-__decorate([
-    Index({ name: 'authz_permissions_name_uniq' }),
-    Property({ type: 'string', length: 191, unique: true }),
-    __metadata("design:type", String)
-], PermissionEntity.prototype, "name", void 0);
-__decorate([
-    Property({ type: 'string', nullable: true }),
-    __metadata("design:type", Object)
-], PermissionEntity.prototype, "guard", void 0);
-__decorate([
-    Property({ type: 'datetime' }),
-    __metadata("design:type", Date)
-], PermissionEntity.prototype, "createdAt", void 0);
-PermissionEntity = __decorate([
-    Entity({ tableName: DEFAULT_TABLE_NAMES.permissions })
-], PermissionEntity);
-export { PermissionEntity };
+}
 /** Pivot: role ↔ permission. Composite PK `(roleId, permissionId)`. */
-let RolePermissionEntity = class RolePermissionEntity {
+export class RolePermissionEntity {
     roleId;
     permissionId;
-};
-__decorate([
-    PrimaryKey({ type: 'string', length: 191 }),
-    __metadata("design:type", String)
-], RolePermissionEntity.prototype, "roleId", void 0);
-__decorate([
-    PrimaryKey({ type: 'string', length: 191 }),
-    __metadata("design:type", String)
-], RolePermissionEntity.prototype, "permissionId", void 0);
-RolePermissionEntity = __decorate([
-    Entity({ tableName: DEFAULT_TABLE_NAMES.rolePermission })
-], RolePermissionEntity);
-export { RolePermissionEntity };
+}
 /**
  * Pivot: user ↔ role. References the user BY ID ONLY — this package NEVER defines or
  * owns a users table. `userType` lets the same table key polymorphic principals
  * (mirrors nestjs-context's `UserRef` shape).
  */
-let UserRoleEntity = class UserRoleEntity {
+export class UserRoleEntity {
     userType;
     userId;
     roleId;
-};
-__decorate([
-    PrimaryKey({ type: 'string', length: 191 }),
-    __metadata("design:type", String)
-], UserRoleEntity.prototype, "userType", void 0);
-__decorate([
-    PrimaryKey({ type: 'string', length: 191 }),
-    __metadata("design:type", String)
-], UserRoleEntity.prototype, "userId", void 0);
-__decorate([
-    PrimaryKey({ type: 'string', length: 191 }),
-    __metadata("design:type", String)
-], UserRoleEntity.prototype, "roleId", void 0);
-UserRoleEntity = __decorate([
-    Entity({ tableName: DEFAULT_TABLE_NAMES.userRole }),
-    Index({ name: 'authz_user_role_user_idx', properties: ['userType', 'userId'] })
-], UserRoleEntity);
-export { UserRoleEntity };
-/** All entities, in dependency order — convenient for `entities: [...]` registration. */
-export const AUTHZ_ENTITIES = [
+}
+/**
+ * Build the four authz {@link EntitySchema} definitions, optionally under your own table
+ * names — this is the supported way to relocate the tables:
+ *
+ * ```ts
+ * const authz = createAuthzEntitySchemas({ roles: 'app_roles' });
+ * await MikroORM.init({ entities: [...authz.all] });
+ * ```
+ *
+ * Going through the factory (rather than hand-writing `new EntitySchema({ tableName })`)
+ * keeps the custom repository binding and the index names attached to the renamed tables;
+ * a hand-rolled re-declaration silently drops both.
+ */
+export function createAuthzEntitySchemas(tableNames = {}) {
+    const names = { ...DEFAULT_TABLE_NAMES, ...tableNames };
+    const role = new EntitySchema({
+        class: RoleEntity,
+        tableName: names.roles,
+        repository: () => AuthzRoleRepository,
+        properties: {
+            id: { type: 'string', length: 191, primary: true },
+            name: {
+                type: 'string',
+                length: 191,
+                unique: true,
+                index: `${names.roles}_name_uniq`,
+            },
+            guard: { type: 'string', nullable: true },
+            createdAt: { type: 'datetime' },
+        },
+    });
+    const permission = new EntitySchema({
+        class: PermissionEntity,
+        tableName: names.permissions,
+        repository: () => AuthzPermissionRepository,
+        properties: {
+            id: { type: 'string', length: 191, primary: true },
+            name: {
+                type: 'string',
+                length: 191,
+                unique: true,
+                index: `${names.permissions}_name_uniq`,
+            },
+            guard: { type: 'string', nullable: true },
+            createdAt: { type: 'datetime' },
+        },
+    });
+    const rolePermission = new EntitySchema({
+        class: RolePermissionEntity,
+        tableName: names.rolePermission,
+        repository: () => AuthzRolePermissionRepository,
+        properties: {
+            roleId: { type: 'string', length: 191, primary: true },
+            permissionId: { type: 'string', length: 191, primary: true },
+        },
+    });
+    const userRole = new EntitySchema({
+        class: UserRoleEntity,
+        tableName: names.userRole,
+        repository: () => AuthzUserRoleRepository,
+        properties: {
+            userType: { type: 'string', length: 191, primary: true },
+            userId: { type: 'string', length: 191, primary: true },
+            roleId: { type: 'string', length: 191, primary: true },
+        },
+        indexes: [{ name: `${names.userRole}_user_idx`, properties: ['userType', 'userId'] }],
+    });
+    return {
+        role,
+        permission,
+        rolePermission,
+        userRole,
+        all: [role, permission, rolePermission, userRole],
+    };
+}
+const defaultSchemas = createAuthzEntitySchemas();
+export const RoleEntitySchema = defaultSchemas.role;
+export const PermissionEntitySchema = defaultSchemas.permission;
+export const RolePermissionEntitySchema = defaultSchemas.rolePermission;
+export const UserRoleEntitySchema = defaultSchemas.userRole;
+/**
+ * All entity SCHEMAS, in dependency order — pass to `entities: [...]` registration. These
+ * are the {@link EntitySchema} objects MikroORM discovers; the store keys on the plain
+ * classes ({@link RoleEntity} etc.), which the schemas are bound to via `class`.
+ */
+export const AUTHZ_ENTITIES = defaultSchemas.all;
+/**
+ * The four entity CLASSES, in the same order. Pass these (not the schemas) to
+ * `MikroOrmModule.forFeature()` — it matches on `meta.class`, and only then does it register
+ * {@link AuthzRoleRepository} & friends as DI tokens.
+ */
+export const AUTHZ_ENTITY_CLASSES = [
     RoleEntity,
     PermissionEntity,
     RolePermissionEntity,

package/dist/entities.js.map

@@ -1 +1 @@
-{"version":3,"file":"entities.js","sourceRoot":"","sources":["../src/entities.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAEtE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,KAAK,EAAE,aAAa;IACpB,WAAW,EAAE,mBAAmB;IAChC,cAAc,EAAE,uBAAuB;IACvC,QAAQ,EAAE,iBAAiB;CACnB,CAAC;AAEX;;;;;;;;;;;;GAYG;AAEI,IAAM,UAAU,GAAhB,MAAM,UAAU;IAErB,EAAE,CAAU;IAIZ,IAAI,CAAU;IAGd,KAAK,CAAiB;IAGtB,SAAS,CAAQ;CAClB,CAAA;AAXC;IADC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;;sCAChC;AAIZ;IAFC,KAAK,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IACxC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;;wCAC1C;AAGd;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;yCACvB;AAGtB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;8BACnB,IAAI;6CAAC;AAZN,UAAU;IADtB,MAAM,CAAC,EAAE,SAAS,EAAE,mBAAmB,CAAC,KAAK,EAAE,CAAC;GACpC,UAAU,CAatB;;AAED,oGAAoG;AAE7F,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAE3B,EAAE,CAAU;IAIZ,IAAI,CAAU;IAGd,KAAK,CAAiB;IAGtB,SAAS,CAAQ;CAClB,CAAA;AAXC;IADC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;;4CAChC;AAIZ;IAFC,KAAK,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC;IAC9C,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;;8CAC1C;AAGd;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;+CACvB;AAGtB;IADC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;8BACnB,IAAI;mDAAC;AAZN,gBAAgB;IAD5B,MAAM,CAAC,EAAE,SAAS,EAAE,mBAAmB,CAAC,WAAW,EAAE,CAAC;GAC1C,gBAAgB,CAa5B;;AAED,uEAAuE;AAEhE,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAE/B,MAAM,CAAU;IAGhB,YAAY,CAAU;CACvB,CAAA;AAJC;IADC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;;oDAC5B;AAGhB;IADC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;;0DACtB;AALX,oBAAoB;IADhC,MAAM,CAAC,EAAE,SAAS,EAAE,mBAAmB,CAAC,cAAc,EAAE,CAAC;GAC7C,oBAAoB,CAMhC;;AAED;;;;GAIG;AAGI,IAAM,cAAc,GAApB,MAAM,cAAc;IAEzB,QAAQ,CAAU;IAGlB,MAAM,CAAU;IAGhB,MAAM,CAAU;CACjB,CAAA;AAPC;IADC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;;gDAC1B;AAGlB;IADC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;;8CAC5B;AAGhB;IADC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;;8CAC5B;AARL,cAAc;IAF1B,MAAM,CAAC,EAAE,SAAS,EAAE,mBAAmB,CAAC,QAAQ,EAAE,CAAC;IACnD,KAAK,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,UAAU,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;GACnE,cAAc,CAS1B;;AAED,yFAAyF;AACzF,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,UAAU;IACV,gBAAgB;IAChB,oBAAoB;IACpB,cAAc;CACN,CAAC"}
+{"version":3,"file":"entities.js","sourceRoot":"","sources":["../src/entities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EACL,yBAAyB,EACzB,6BAA6B,EAC7B,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAE3B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,KAAK,EAAE,aAAa;IACpB,WAAW,EAAE,mBAAmB;IAChC,cAAc,EAAE,uBAAuB;IACvC,QAAQ,EAAE,iBAAiB;CACnB,CAAC;AAUX;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH;;;GAGG;AACH,MAAM,OAAO,UAAU;IAErB,EAAE,CAAU;IACZ,IAAI,CAAU;IACd,KAAK,CAAiB;IACtB,SAAS,CAAQ;CAClB;AAED,oGAAoG;AACpG,MAAM,OAAO,gBAAgB;IAE3B,EAAE,CAAU;IACZ,IAAI,CAAU;IACd,KAAK,CAAiB;IACtB,SAAS,CAAQ;CAClB;AAED,uEAAuE;AACvE,MAAM,OAAO,oBAAoB;IAE/B,MAAM,CAAU;IAChB,YAAY,CAAU;CACvB;AAED;;;;GAIG;AACH,MAAM,OAAO,cAAc;IAEzB,QAAQ,CAAU;IAClB,MAAM,CAAU;IAChB,MAAM,CAAU;CACjB;AAiBD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,wBAAwB,CACtC,aAAuC,EAAE;IAEzC,MAAM,KAAK,GAAoB,EAAE,GAAG,mBAAmB,EAAE,GAAG,UAAU,EAAE,CAAC;IAEzE,MAAM,IAAI,GAAG,IAAI,YAAY,CAAa;QACxC,KAAK,EAAE,UAAU;QACjB,SAAS,EAAE,KAAK,CAAC,KAAK;QACtB,UAAU,EAAE,GAAG,EAAE,CAAC,mBAAmB;QACrC,UAAU,EAAE;YACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;YAClD,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,GAAG;gBACX,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,YAAY;aAClC;YACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YACzC,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;SAChC;KACF,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,IAAI,YAAY,CAAmB;QACpD,KAAK,EAAE,gBAAgB;QACvB,SAAS,EAAE,KAAK,CAAC,WAAW;QAC5B,UAAU,EAAE,GAAG,EAAE,CAAC,yBAAyB;QAC3C,UAAU,EAAE;YACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;YAClD,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,GAAG;gBACX,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,GAAG,KAAK,CAAC,WAAW,YAAY;aACxC;YACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YACzC,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;SAChC;KACF,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,IAAI,YAAY,CAAuB;QAC5D,KAAK,EAAE,oBAAoB;QAC3B,SAAS,EAAE,KAAK,CAAC,cAAc;QAC/B,UAAU,EAAE,GAAG,EAAE,CAAC,6BAA6B;QAC/C,UAAU,EAAE;YACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;YACtD,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;SAC7D;KACF,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAiB;QAChD,KAAK,EAAE,cAAc;QACrB,SAAS,EAAE,KAAK,CAAC,QAAQ;QACzB,UAAU,EAAE,GAAG,EAAE,CAAC,uBAAuB;QACzC,UAAU,EAAE;YACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;YACxD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;YACtD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;SACvD;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,QAAQ,WAAW,EAAE,UAAU,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;KACtF,CAAC,CAAC;IAEH,OAAO;QACL,IAAI;QACJ,UAAU;QACV,cAAc;QACd,QAAQ;QACR,GAAG,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,cAAc,GAAG,wBAAwB,EAAE,CAAC;AAElD,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAc,CAAC,IAAI,CAAC;AACpD,MAAM,CAAC,MAAM,sBAAsB,GAAG,cAAc,CAAC,UAAU,CAAC;AAChE,MAAM,CAAC,MAAM,0BAA0B,GAAG,cAAc,CAAC,cAAc,CAAC;AACxE,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAC,QAAQ,CAAC;AAE5D;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,cAAc,CAAC,GAAG,CAAC;AAEjD;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,UAAU;IACV,gBAAgB;IAChB,oBAAoB;IACpB,cAAc;CACN,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,6 @@
-export { AUTHZ_ENTITIES, DEFAULT_TABLE_NAMES, PermissionEntity, RoleEntity, RolePermissionEntity, UserRoleEntity, } from './entities.js';
+export { AUTHZ_ENTITIES, AUTHZ_ENTITY_CLASSES, createAuthzEntitySchemas, DEFAULT_TABLE_NAMES, PermissionEntity, PermissionEntitySchema, RoleEntity, RoleEntitySchema, RolePermissionEntity, RolePermissionEntitySchema, UserRoleEntity, UserRoleEntitySchema, } from './entities.js';
+export type { AuthzEntitySchemas, AuthzTableNames } from './entities.js';
+export { AuthzPermissionRepository, AuthzRolePermissionRepository, AuthzRoleRepository, AuthzUserRoleRepository, } from './repositories.js';
 export { authzSchemaSql, ensureAuthzSchema } from './schema.js';
 export { MikroOrmAuthzStore } from './mikro-orm-authz.store.js';
 export type { UserAuthz } from './mikro-orm-authz.store.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,gBAAgB,EAChB,UAAU,EACV,oBAAoB,EACpB,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,YAAY,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,2BAA2B,EAC3B,sBAAsB,EACtB,aAAa,GACd,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACtD,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,wBAAwB,EACxB,mBAAmB,EACnB,gBAAgB,EAChB,sBAAsB,EACtB,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EACpB,0BAA0B,EAC1B,cAAc,EACd,oBAAoB,GACrB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGzE,OAAO,EACL,yBAAyB,EACzB,6BAA6B,EAC7B,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,YAAY,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,2BAA2B,EAC3B,sBAAsB,EACtB,aAAa,GACd,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACtD,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -1,4 +1,7 @@
-export { AUTHZ_ENTITIES, DEFAULT_TABLE_NAMES, PermissionEntity, RoleEntity, RolePermissionEntity, UserRoleEntity, } from './entities.js';
+export { AUTHZ_ENTITIES, AUTHZ_ENTITY_CLASSES, createAuthzEntitySchemas, DEFAULT_TABLE_NAMES, PermissionEntity, PermissionEntitySchema, RoleEntity, RoleEntitySchema, RolePermissionEntity, RolePermissionEntitySchema, UserRoleEntity, UserRoleEntitySchema, } from './entities.js';
+// VALUE exports on purpose: these classes are the DI tokens `MikroOrmModule.forFeature()`
+// registers, so `export type` would compile green and be `undefined` at runtime.
+export { AuthzPermissionRepository, AuthzRolePermissionRepository, AuthzRoleRepository, AuthzUserRoleRepository, } from './repositories.js';
 export { authzSchemaSql, ensureAuthzSchema } from './schema.js';
 export { MikroOrmAuthzStore } from './mikro-orm-authz.store.js';
 export { AUTHZ_RBAC_OPTIONS, AUTHZ_RBAC_STORE, AuthzRbacModule, defaultUserRefMapper, } from './authz-rbac.module.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,gBAAgB,EAChB,UAAU,EACV,oBAAoB,EACpB,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAQhC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,wBAAwB,EACxB,mBAAmB,EACnB,gBAAgB,EAChB,sBAAsB,EACtB,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EACpB,0BAA0B,EAC1B,cAAc,EACd,oBAAoB,GACrB,MAAM,eAAe,CAAC;AAEvB,0FAA0F;AAC1F,iFAAiF;AACjF,OAAO,EACL,yBAAyB,EACzB,6BAA6B,EAC7B,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAQhC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC"}

package/dist/repositories.d.ts

@@ -0,0 +1,26 @@
+import { EntityRepository } from '@mikro-orm/core';
+import type { PermissionEntity, RoleEntity, RolePermissionEntity, UserRoleEntity } from './entities.js';
+/**
+ * Typed repositories for the four authz entities, so a host app injects `AuthzRoleRepository`
+ * by type instead of threading the entity class through `em.find(RoleEntity, ...)` at every
+ * call site.
+ *
+ * The binding is two-sided: `repository: () => ...` on each `EntitySchema` (what
+ * `em.getRepository()` and `MikroOrmModule.forFeature()` read at runtime) plus the
+ * `[EntityRepositoryType]` marker on each entity class (what makes the return type narrow).
+ *
+ * `EntityRepository` is exported from `@mikro-orm/core` on both MikroORM 6 and 7, so this
+ * needs no extra peer and no decorator import.
+ *
+ * The bodies are intentionally empty — this package ships no query surface beyond
+ * `MikroOrmAuthzStore`; they exist to give the four entities an injectable identity.
+ */
+export declare class AuthzRoleRepository extends EntityRepository<RoleEntity> {
+}
+export declare class AuthzPermissionRepository extends EntityRepository<PermissionEntity> {
+}
+export declare class AuthzRolePermissionRepository extends EntityRepository<RolePermissionEntity> {
+}
+export declare class AuthzUserRoleRepository extends EntityRepository<UserRoleEntity> {
+}
+//# sourceMappingURL=repositories.d.ts.map

package/dist/repositories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositories.d.ts","sourceRoot":"","sources":["../src/repositories.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EACV,gBAAgB,EAChB,UAAU,EACV,oBAAoB,EACpB,cAAc,EACf,MAAM,eAAe,CAAC;AAEvB;;;;;;;;;;;;;;GAcG;AACH,qBAAa,mBAAoB,SAAQ,gBAAgB,CAAC,UAAU,CAAC;CAAG;AAExE,qBAAa,yBAA0B,SAAQ,gBAAgB,CAAC,gBAAgB,CAAC;CAAG;AAEpF,qBAAa,6BAA8B,SAAQ,gBAAgB,CAAC,oBAAoB,CAAC;CAAG;AAE5F,qBAAa,uBAAwB,SAAQ,gBAAgB,CAAC,cAAc,CAAC;CAAG"}

package/dist/repositories.js

@@ -0,0 +1,25 @@
+import { EntityRepository } from '@mikro-orm/core';
+/**
+ * Typed repositories for the four authz entities, so a host app injects `AuthzRoleRepository`
+ * by type instead of threading the entity class through `em.find(RoleEntity, ...)` at every
+ * call site.
+ *
+ * The binding is two-sided: `repository: () => ...` on each `EntitySchema` (what
+ * `em.getRepository()` and `MikroOrmModule.forFeature()` read at runtime) plus the
+ * `[EntityRepositoryType]` marker on each entity class (what makes the return type narrow).
+ *
+ * `EntityRepository` is exported from `@mikro-orm/core` on both MikroORM 6 and 7, so this
+ * needs no extra peer and no decorator import.
+ *
+ * The bodies are intentionally empty — this package ships no query surface beyond
+ * `MikroOrmAuthzStore`; they exist to give the four entities an injectable identity.
+ */
+export class AuthzRoleRepository extends EntityRepository {
+}
+export class AuthzPermissionRepository extends EntityRepository {
+}
+export class AuthzRolePermissionRepository extends EntityRepository {
+}
+export class AuthzUserRoleRepository extends EntityRepository {
+}
+//# sourceMappingURL=repositories.js.map

package/dist/repositories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositories.js","sourceRoot":"","sources":["../src/repositories.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAQnD;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,mBAAoB,SAAQ,gBAA4B;CAAG;AAExE,MAAM,OAAO,yBAA0B,SAAQ,gBAAkC;CAAG;AAEpF,MAAM,OAAO,6BAA8B,SAAQ,gBAAsC;CAAG;AAE5F,MAAM,OAAO,uBAAwB,SAAQ,gBAAgC;CAAG"}

package/dist/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAiC/D;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,QAAQ,GAAG,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAGvF;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,QAAQ,GAAG,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAQxF"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AA4D/D;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,QAAQ,GAAG,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAGvF;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,QAAQ,GAAG,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAQxF"}

package/dist/schema.js

@@ -1,16 +1,33 @@
-/** The four authz table names — used to filter the schema diff down to our tables. */
-const AUTHZ_TABLES = [
-    'authz_roles',
-    'authz_permissions',
-    'authz_role_permission',
-    'authz_user_role',
+import { DEFAULT_TABLE_NAMES, PermissionEntity, RoleEntity, RolePermissionEntity, UserRoleEntity, } from './entities.js';
+/** Entity class → the table name to fall back to when the entity is not registered. */
+const AUTHZ_ENTITY_TABLE_DEFAULTS = [
+    [RoleEntity, DEFAULT_TABLE_NAMES.roles],
+    [PermissionEntity, DEFAULT_TABLE_NAMES.permissions],
+    [RolePermissionEntity, DEFAULT_TABLE_NAMES.rolePermission],
+    [UserRoleEntity, DEFAULT_TABLE_NAMES.userRole],
 ];
+/**
+ * The four authz table names — used to filter the schema diff down to our tables. Read off
+ * the live metadata so a host that relocated the tables (see `createAuthzEntitySchemas`)
+ * still gets them created.
+ */
+function authzTables(em) {
+    const metadata = em.getMetadata();
+    return AUTHZ_ENTITY_TABLE_DEFAULTS.map(([entity, fallback]) => metadata.find(entity.name)?.tableName ?? fallback);
+}
 /** Resolve an {@link EntityManager} from a {@link MikroORM} or an EM. */
 function toEm(ormOrEm) {
     return isOrm(ormOrEm) ? ormOrEm.em : ormOrEm;
 }
+/**
+ * A {@link MikroORM} instance exposes its {@link EntityManager} as a (non-null) `em`
+ * property; an EntityManager does not expose an `em`. That distinction is stable across
+ * MikroORM 6 and 7 — v7 removed `MikroORM.getSchemaGenerator()`, so we can no longer probe
+ * for it (the EM-bound generator is read via {@link generatorFor} instead).
+ */
 function isOrm(value) {
-    return 'em' in value && typeof value.getSchemaGenerator === 'function';
+    const candidate = value;
+    return candidate.em != null && typeof candidate.em === 'object';
 }
 /** The platform's schema generator for a given EM (driver + EM bound). */
 function generatorFor(em) {
@@ -18,11 +35,12 @@ function generatorFor(em) {
 }
 /** Statements (split, trimmed) from the non-destructive schema diff that touch our tables. */
 async function authzStatements(em) {
+    const tables = authzTables(em);
     const sql = await generatorFor(em).getUpdateSchemaSQL({ safe: true, wrap: false });
     return sql
         .split(';')
         .map((s) => s.trim())
-        .filter((s) => s.length > 0 && AUTHZ_TABLES.some((t) => new RegExp(`\\b${t}\\b`, 'i').test(s)));
+        .filter((s) => s.length > 0 && tables.some((t) => new RegExp(`\\b${t}\\b`, 'i').test(s)));
 }
 /**
  * Returns the non-destructive SQL needed to bring only the authz RBAC tables up to date

package/dist/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAEA,sFAAsF;AACtF,MAAM,YAAY,GAAG;IACnB,aAAa;IACb,mBAAmB;IACnB,uBAAuB;IACvB,iBAAiB;CAClB,CAAC;AAEF,yEAAyE;AACzE,SAAS,IAAI,CAAC,OAAiC;IAC7C,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,OAAO,CAAC,EAA+B,CAAC,CAAC,CAAC,OAAO,CAAC;AAC7E,CAAC;AAED,SAAS,KAAK,CAAC,KAA+B;IAC5C,OAAO,IAAI,IAAK,KAAgB,IAAI,OAAQ,KAAkB,CAAC,kBAAkB,KAAK,UAAU,CAAC;AACnG,CAAC;AAED,0EAA0E;AAC1E,SAAS,YAAY,CAAC,EAAiB;IACrC,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,8FAA8F;AAC9F,KAAK,UAAU,eAAe,CAAC,EAAiB;IAC9C,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpG,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAiC;IACpE,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACxD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAiC;IACvE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,EAAE,CAAC,CAAC;IAC7C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACpC,MAAM,UAAU,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC;IACtC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;AACH,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,UAAU,EACV,oBAAoB,EACpB,cAAc,GACf,MAAM,eAAe,CAAC;AAEvB,uFAAuF;AACvF,MAAM,2BAA2B,GAAuD;IACtF,CAAC,UAAU,EAAE,mBAAmB,CAAC,KAAK,CAAC;IACvC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,WAAW,CAAC;IACnD,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,cAAc,CAAC;IAC1D,CAAC,cAAc,EAAE,mBAAmB,CAAC,QAAQ,CAAC;CAC/C,CAAC;AAEF;;;;GAIG;AACH,SAAS,WAAW,CAAC,EAAiB;IACpC,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IAClC,OAAO,2BAA2B,CAAC,GAAG,CACpC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,IAAI,QAAQ,CAC1E,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,SAAS,IAAI,CAAC,OAAiC;IAC7C,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,OAAO,CAAC,EAA+B,CAAC,CAAC,CAAC,OAAO,CAAC;AAC7E,CAAC;AAED;;;;;GAKG;AACH,SAAS,KAAK,CAAC,KAA+B;IAC5C,MAAM,SAAS,GAAG,KAAyB,CAAC;IAC5C,OAAO,SAAS,CAAC,EAAE,IAAI,IAAI,IAAI,OAAO,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC;AAClE,CAAC;AAED,0EAA0E;AAC1E,SAAS,YAAY,CAAC,EAAiB;IACrC,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,8FAA8F;AAC9F,KAAK,UAAU,eAAe,CAAC,EAAiB;IAC9C,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAiC;IACpE,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACxD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAiC;IACvE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,EAAE,CAAC,CAAC;IAC7C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACpC,MAAM,UAAU,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC;IACtC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dudousxd/nestjs-authz-mikro-orm",
-  "version": "0.3.1",
+  "version": "0.5.0",
   "description": "MikroORM RBAC persistence for @dudousxd/nestjs-authz — roles, permissions, and a Gate seam (zero connection ownership).",
   "license": "MIT",
   "repository": {
@@ -26,8 +26,8 @@
   ],
   "peerDependencies": {
     "@dudousxd/nestjs-authz": ">=0.1.0",
-    "@mikro-orm/core": "^6.0.0",
-    "@mikro-orm/nestjs": "^5.0.0 || ^6.0.0",
+    "@mikro-orm/core": "^6.0.0 || ^7.0.0",
+    "@mikro-orm/nestjs": "^5.0.0 || ^6.0.0 || ^7.0.0",
     "@nestjs/common": ">=10.0.0",
     "@nestjs/core": ">=10.0.0",
     "reflect-metadata": ">=0.1.13"
@@ -49,7 +49,7 @@
     "rxjs": "^7.8.1",
     "typescript": "^5.4.0",
     "vitest": "^3.0.0",
-    "@dudousxd/nestjs-authz": "^0.6.1"
+    "@dudousxd/nestjs-authz": "^0.6.4"
   },
   "engines": {
     "node": ">=20"