@dudousxd/nestjs-authz-mikro-orm 0.4.0 → 0.5.0

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # @dudousxd/nestjs-authz-mikro-orm
 
+## 0.5.0
+
+### Minor Changes
+
+- [#18](https://github.com/DavideCarvalho/nestjs-authz/pull/18) [`a5662a2`](https://github.com/DavideCarvalho/nestjs-authz/commit/a5662a2b599d826ae3a0d08e6ad71da7f2e425dc) Thanks [@DavideCarvalho](https://github.com/DavideCarvalho)! - Ship typed MikroORM repositories for the four authz entities, and a schema factory for custom table names.
+
+  - New `AuthzRoleRepository`, `AuthzPermissionRepository`, `AuthzRolePermissionRepository` and `AuthzUserRoleRepository` (empty `EntityRepository` subclasses), bound to the entities via `repository: () => ...` on each `EntitySchema` plus an `[EntityRepositoryType]` marker on each entity class. `em.getRepository(RoleEntity)` now returns — and is typed as — `AuthzRoleRepository`, and `MikroOrmModule.forFeature([...AUTHZ_ENTITY_CLASSES])` registers each repository class as its own DI token, so host apps inject by type instead of threading the entity class through every `em.find(RoleEntity, ...)`.
+  - New `createAuthzEntitySchemas(tableNames?)` — the supported way to relocate the authz tables. It carries the repository binding and derives the index names from the given table names; hand-writing a replacement `EntitySchema` (the previously documented path) silently dropped both. `AUTHZ_ENTITIES` and `RoleEntitySchema` … `UserRoleEntitySchema` are now produced by this factory with the default names, so they are unchanged.
+  - New `AUTHZ_ENTITY_CLASSES` export (the four classes in dependency order) for `MikroOrmModule.forFeature()`, which matches on `meta.class`.
+  - `ensureAuthzSchema` / `authzSchemaSql` now read the four physical table names off the live metadata instead of hard-coding the `authz_*` literals, so relocated tables are created too.
+
+  `EntityRepository`, `EntityRepositoryType` and the `repository` option on `EntitySchemaMetadata` all live in `@mikro-orm/core` on both MikroORM 6 and 7, so this adds no peer and no decorator import. Verified against the v6 suite and the pinned `@mikro-orm/core@7` integration suite.
+
+  `MikroOrmAuthzStore` is unchanged.
+
 ## 0.4.0
 
 ### Minor Changes

package/README.md

@@ -36,10 +36,56 @@ import { AUTHZ_ENTITIES } from '@dudousxd/nestjs-authz-mikro-orm';
 await MikroORM.init({ entities: [...AUTHZ_ENTITIES /* , your entities */] });
 ```
 
-> BYO table names: MikroORM resolves table names from entity metadata at discovery time,
-> so override them by re-declaring these entities with your own `EntitySchema({ tableName })`
-> (the `RoleEntitySchema` … `UserRoleEntitySchema` exports are the defaults); the store +
-> schema helpers operate purely through the `EntityManager` and never assume a literal name.
+### BYO table names
+
+MikroORM resolves table names from entity metadata at discovery time. Build your own set of
+schemas with `createAuthzEntitySchemas` and register those instead:
+
+```ts
+import { createAuthzEntitySchemas } from '@dudousxd/nestjs-authz-mikro-orm';
+
+const authz = createAuthzEntitySchemas({ roles: 'app_roles', userRole: 'app_user_role' });
+await MikroORM.init({ entities: [...authz.all /* , your entities */] });
+```
+
+Any subset of `roles` / `permissions` / `rolePermission` / `userRole` may be overridden; the
+rest keep their defaults. The factory carries the custom repository binding and derives the
+index names from your table names, so nothing is lost by relocating the tables — hand-writing
+`new EntitySchema({ class: RoleEntity, tableName })` instead silently drops both. The store and
+the schema helpers read the physical names back off the live metadata and never assume a
+literal name.
+
+## Repositories
+
+Each entity is bound to a typed repository, so app code injects it by type rather than passing
+the entity class to every `EntityManager` call:
+
+```ts
+import { AUTHZ_ENTITY_CLASSES, AuthzRoleRepository } from '@dudousxd/nestjs-authz-mikro-orm';
+import { MikroOrmModule } from '@mikro-orm/nestjs';
+
+@Module({
+  // forFeature matches on the entity CLASS — pass these, not the schemas.
+  imports: [MikroOrmModule.forFeature([...AUTHZ_ENTITY_CLASSES])],
+})
+export class RolesModule {}
+
+@Injectable()
+export class RolesService {
+  constructor(private readonly roles: AuthzRoleRepository) {}
+
+  findByName(name: string) {
+    return this.roles.findOne({ name });
+  }
+}
+```
+
+Without `@mikro-orm/nestjs`, `em.getRepository(RoleEntity)` returns the same instance and is
+typed as `AuthzRoleRepository`. The four classes are `AuthzRoleRepository`,
+`AuthzPermissionRepository`, `AuthzRolePermissionRepository` and `AuthzUserRoleRepository`;
+their bodies are empty — this package ships no query surface beyond `MikroOrmAuthzStore`.
+
+`MikroOrmAuthzStore` is unaffected — it still takes an `EntityManager` and owns no connection.
 
 ## Usage
 

package/dist/entities.d.ts

@@ -1,9 +1,10 @@
-import { EntitySchema } from '@mikro-orm/core';
+import { EntityRepositoryType, EntitySchema } from '@mikro-orm/core';
+import { AuthzPermissionRepository, AuthzRolePermissionRepository, AuthzRoleRepository, AuthzUserRoleRepository } from './repositories.js';
 /**
- * Default table names — the {@link EntitySchema} definitions below carry these as their
- * `tableName`. MikroORM resolves the physical table from the entity metadata (not at
- * runtime), so an app that wants different names re-declares these schemas; the store +
- * schema helpers operate purely through the EntityManager and never assume a literal name.
+ * Default physical table names. MikroORM resolves the table from entity metadata, so an app
+ * that wants different names builds its own set of schemas with
+ * {@link createAuthzEntitySchemas}; the store + schema helpers operate purely through the
+ * EntityManager and read the physical names back off the live metadata.
  */
 export declare const DEFAULT_TABLE_NAMES: {
     readonly roles: "authz_roles";
@@ -11,6 +12,13 @@ export declare const DEFAULT_TABLE_NAMES: {
     readonly rolePermission: "authz_role_permission";
     readonly userRole: "authz_user_role";
 };
+/** Physical table names for the four authz tables. */
+export interface AuthzTableNames {
+    roles: string;
+    permissions: string;
+    rolePermission: string;
+    userRole: string;
+}
 /**
  * The entities are described with {@link EntitySchema} (the schema-first definition style)
  * rather than property decorators. This is the ONE definition surface that lives entirely
@@ -28,47 +36,89 @@ export declare const DEFAULT_TABLE_NAMES: {
  * carry a default — `ensureAuthzSchema` only ever runs the non-destructive `safe` diff
  * (create table + add-missing-column), and `ADD COLUMN NOT NULL` without a default fails
  * on a populated table.
+ *
+ * `[EntityRepositoryType]` is a `declare`d marker: it carries no runtime field (the symbol is
+ * skipped by MikroORM's property discovery either way) and only tells the type system what
+ * `em.getRepository(RoleEntity)` returns.
  */
 /**
  * A named role (e.g. `editor`). Permissions are attached via {@link RolePermissionEntity};
  * users are attached via {@link UserRoleEntity}.
  */
 export declare class RoleEntity {
+    [EntityRepositoryType]?: AuthzRoleRepository;
     id: string;
     name: string;
     guard?: string | null;
     createdAt: Date;
 }
-export declare const RoleEntitySchema: EntitySchema<RoleEntity, never>;
 /** A named permission (e.g. `posts.publish`). Granted to roles via {@link RolePermissionEntity}. */
 export declare class PermissionEntity {
+    [EntityRepositoryType]?: AuthzPermissionRepository;
     id: string;
     name: string;
     guard?: string | null;
     createdAt: Date;
 }
-export declare const PermissionEntitySchema: EntitySchema<PermissionEntity, never>;
 /** Pivot: role ↔ permission. Composite PK `(roleId, permissionId)`. */
 export declare class RolePermissionEntity {
+    [EntityRepositoryType]?: AuthzRolePermissionRepository;
     roleId: string;
     permissionId: string;
 }
-export declare const RolePermissionEntitySchema: EntitySchema<RolePermissionEntity, never>;
 /**
  * Pivot: user ↔ role. References the user BY ID ONLY — this package NEVER defines or
  * owns a users table. `userType` lets the same table key polymorphic principals
  * (mirrors nestjs-context's `UserRef` shape).
  */
 export declare class UserRoleEntity {
+    [EntityRepositoryType]?: AuthzUserRoleRepository;
     userType: string;
     userId: string;
     roleId: string;
 }
+/** The four {@link EntitySchema} definitions produced by {@link createAuthzEntitySchemas}. */
+export interface AuthzEntitySchemas {
+    role: EntitySchema<RoleEntity>;
+    permission: EntitySchema<PermissionEntity>;
+    rolePermission: EntitySchema<RolePermissionEntity>;
+    userRole: EntitySchema<UserRoleEntity>;
+    /** All four, in dependency order — spread into `entities: [...]`. */
+    all: [
+        EntitySchema<RoleEntity>,
+        EntitySchema<PermissionEntity>,
+        EntitySchema<RolePermissionEntity>,
+        EntitySchema<UserRoleEntity>
+    ];
+}
+/**
+ * Build the four authz {@link EntitySchema} definitions, optionally under your own table
+ * names — this is the supported way to relocate the tables:
+ *
+ * ```ts
+ * const authz = createAuthzEntitySchemas({ roles: 'app_roles' });
+ * await MikroORM.init({ entities: [...authz.all] });
+ * ```
+ *
+ * Going through the factory (rather than hand-writing `new EntitySchema({ tableName })`)
+ * keeps the custom repository binding and the index names attached to the renamed tables;
+ * a hand-rolled re-declaration silently drops both.
+ */
+export declare function createAuthzEntitySchemas(tableNames?: Partial<AuthzTableNames>): AuthzEntitySchemas;
+export declare const RoleEntitySchema: EntitySchema<RoleEntity, never>;
+export declare const PermissionEntitySchema: EntitySchema<PermissionEntity, never>;
+export declare const RolePermissionEntitySchema: EntitySchema<RolePermissionEntity, never>;
 export declare const UserRoleEntitySchema: EntitySchema<UserRoleEntity, never>;
 /**
  * All entity SCHEMAS, in dependency order — pass to `entities: [...]` registration. These
  * are the {@link EntitySchema} objects MikroORM discovers; the store keys on the plain
  * classes ({@link RoleEntity} etc.), which the schemas are bound to via `class`.
  */
-export declare const AUTHZ_ENTITIES: readonly [EntitySchema<RoleEntity, never>, EntitySchema<PermissionEntity, never>, EntitySchema<RolePermissionEntity, never>, EntitySchema<UserRoleEntity, never>];
+export declare const AUTHZ_ENTITIES: [EntitySchema<RoleEntity, never>, EntitySchema<PermissionEntity, never>, EntitySchema<RolePermissionEntity, never>, EntitySchema<UserRoleEntity, never>];
+/**
+ * The four entity CLASSES, in the same order. Pass these (not the schemas) to
+ * `MikroOrmModule.forFeature()` — it matches on `meta.class`, and only then does it register
+ * {@link AuthzRoleRepository} & friends as DI tokens.
+ */
+export declare const AUTHZ_ENTITY_CLASSES: readonly [typeof RoleEntity, typeof PermissionEntity, typeof RolePermissionEntity, typeof UserRoleEntity];
 //# sourceMappingURL=entities.d.ts.map

package/dist/entities.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entities.d.ts","sourceRoot":"","sources":["../src/entities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB;;;;;CAKtB,CAAC;AAEX;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;GAGG;AACH,qBAAa,UAAU;IACrB,EAAE,EAAG,MAAM,CAAC;IACZ,IAAI,EAAG,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAG,IAAI,CAAC;CAClB;AAED,eAAO,MAAM,gBAAgB,iCAc3B,CAAC;AAEH,oGAAoG;AACpG,qBAAa,gBAAgB;IAC3B,EAAE,EAAG,MAAM,CAAC;IACZ,IAAI,EAAG,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAG,IAAI,CAAC;CAClB;AAED,eAAO,MAAM,sBAAsB,uCAcjC,CAAC;AAEH,uEAAuE;AACvE,qBAAa,oBAAoB;IAC/B,MAAM,EAAG,MAAM,CAAC;IAChB,YAAY,EAAG,MAAM,CAAC;CACvB;AAED,eAAO,MAAM,0BAA0B,2CAOrC,CAAC;AAEH;;;;GAIG;AACH,qBAAa,cAAc;IACzB,QAAQ,EAAG,MAAM,CAAC;IAClB,MAAM,EAAG,MAAM,CAAC;IAChB,MAAM,EAAG,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,oBAAoB,qCAS/B,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,cAAc,mKAKjB,CAAC"}
+{"version":3,"file":"entities.d.ts","sourceRoot":"","sources":["../src/entities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EACL,yBAAyB,EACzB,6BAA6B,EAC7B,mBAAmB,EACnB,uBAAuB,EACxB,MAAM,mBAAmB,CAAC;AAE3B;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB;;;;;CAKtB,CAAC;AAEX,sDAAsD;AACtD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH;;;GAGG;AACH,qBAAa,UAAU;IACb,CAAC,oBAAoB,CAAC,CAAC,EAAE,mBAAmB,CAAC;IACrD,EAAE,EAAG,MAAM,CAAC;IACZ,IAAI,EAAG,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAG,IAAI,CAAC;CAClB;AAED,oGAAoG;AACpG,qBAAa,gBAAgB;IACnB,CAAC,oBAAoB,CAAC,CAAC,EAAE,yBAAyB,CAAC;IAC3D,EAAE,EAAG,MAAM,CAAC;IACZ,IAAI,EAAG,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAG,IAAI,CAAC;CAClB;AAED,uEAAuE;AACvE,qBAAa,oBAAoB;IACvB,CAAC,oBAAoB,CAAC,CAAC,EAAE,6BAA6B,CAAC;IAC/D,MAAM,EAAG,MAAM,CAAC;IAChB,YAAY,EAAG,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,qBAAa,cAAc;IACjB,CAAC,oBAAoB,CAAC,CAAC,EAAE,uBAAuB,CAAC;IACzD,QAAQ,EAAG,MAAM,CAAC;IAClB,MAAM,EAAG,MAAM,CAAC;IAChB,MAAM,EAAG,MAAM,CAAC;CACjB;AAED,8FAA8F;AAC9F,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC;IAC/B,UAAU,EAAE,YAAY,CAAC,gBAAgB,CAAC,CAAC;IAC3C,cAAc,EAAE,YAAY,CAAC,oBAAoB,CAAC,CAAC;IACnD,QAAQ,EAAE,YAAY,CAAC,cAAc,CAAC,CAAC;IACvC,qEAAqE;IACrE,GAAG,EAAE;QACH,YAAY,CAAC,UAAU,CAAC;QACxB,YAAY,CAAC,gBAAgB,CAAC;QAC9B,YAAY,CAAC,oBAAoB,CAAC;QAClC,YAAY,CAAC,cAAc,CAAC;KAC7B,CAAC;CACH;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CACtC,UAAU,GAAE,OAAO,CAAC,eAAe,CAAM,GACxC,kBAAkB,CAkEpB;AAID,eAAO,MAAM,gBAAgB,iCAAsB,CAAC;AACpD,eAAO,MAAM,sBAAsB,uCAA4B,CAAC;AAChE,eAAO,MAAM,0BAA0B,2CAAgC,CAAC;AACxE,eAAO,MAAM,oBAAoB,qCAA0B,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,cAAc,0JAAqB,CAAC;AAEjD;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,2GAKvB,CAAC"}

package/dist/entities.js

@@ -1,9 +1,10 @@
 import { EntitySchema } from '@mikro-orm/core';
+import { AuthzPermissionRepository, AuthzRolePermissionRepository, AuthzRoleRepository, AuthzUserRoleRepository, } from './repositories.js';
 /**
- * Default table names — the {@link EntitySchema} definitions below carry these as their
- * `tableName`. MikroORM resolves the physical table from the entity metadata (not at
- * runtime), so an app that wants different names re-declares these schemas; the store +
- * schema helpers operate purely through the EntityManager and never assume a literal name.
+ * Default physical table names. MikroORM resolves the table from entity metadata, so an app
+ * that wants different names builds its own set of schemas with
+ * {@link createAuthzEntitySchemas}; the store + schema helpers operate purely through the
+ * EntityManager and read the physical names back off the live metadata.
  */
 export const DEFAULT_TABLE_NAMES = {
     roles: 'authz_roles',
@@ -28,6 +29,10 @@ export const DEFAULT_TABLE_NAMES = {
  * carry a default — `ensureAuthzSchema` only ever runs the non-destructive `safe` diff
  * (create table + add-missing-column), and `ADD COLUMN NOT NULL` without a default fails
  * on a populated table.
+ *
+ * `[EntityRepositoryType]` is a `declare`d marker: it carries no runtime field (the symbol is
+ * skipped by MikroORM's property discovery either way) and only tells the type system what
+ * `em.getRepository(RoleEntity)` returns.
  */
 /**
  * A named role (e.g. `editor`). Permissions are attached via {@link RolePermissionEntity};
@@ -39,21 +44,6 @@ export class RoleEntity {
     guard;
     createdAt;
 }
-export const RoleEntitySchema = new EntitySchema({
-    class: RoleEntity,
-    tableName: DEFAULT_TABLE_NAMES.roles,
-    properties: {
-        id: { type: 'string', length: 191, primary: true },
-        name: {
-            type: 'string',
-            length: 191,
-            unique: true,
-            index: 'authz_roles_name_uniq',
-        },
-        guard: { type: 'string', nullable: true },
-        createdAt: { type: 'datetime' },
-    },
-});
 /** A named permission (e.g. `posts.publish`). Granted to roles via {@link RolePermissionEntity}. */
 export class PermissionEntity {
     id;
@@ -61,34 +51,11 @@ export class PermissionEntity {
     guard;
     createdAt;
 }
-export const PermissionEntitySchema = new EntitySchema({
-    class: PermissionEntity,
-    tableName: DEFAULT_TABLE_NAMES.permissions,
-    properties: {
-        id: { type: 'string', length: 191, primary: true },
-        name: {
-            type: 'string',
-            length: 191,
-            unique: true,
-            index: 'authz_permissions_name_uniq',
-        },
-        guard: { type: 'string', nullable: true },
-        createdAt: { type: 'datetime' },
-    },
-});
 /** Pivot: role ↔ permission. Composite PK `(roleId, permissionId)`. */
 export class RolePermissionEntity {
     roleId;
     permissionId;
 }
-export const RolePermissionEntitySchema = new EntitySchema({
-    class: RolePermissionEntity,
-    tableName: DEFAULT_TABLE_NAMES.rolePermission,
-    properties: {
-        roleId: { type: 'string', length: 191, primary: true },
-        permissionId: { type: 'string', length: 191, primary: true },
-    },
-});
 /**
  * Pivot: user ↔ role. References the user BY ID ONLY — this package NEVER defines or
  * owns a users table. `userType` lets the same table key polymorphic principals
@@ -99,25 +66,101 @@ export class UserRoleEntity {
     userId;
     roleId;
 }
-export const UserRoleEntitySchema = new EntitySchema({
-    class: UserRoleEntity,
-    tableName: DEFAULT_TABLE_NAMES.userRole,
-    properties: {
-        userType: { type: 'string', length: 191, primary: true },
-        userId: { type: 'string', length: 191, primary: true },
-        roleId: { type: 'string', length: 191, primary: true },
-    },
-    indexes: [{ name: 'authz_user_role_user_idx', properties: ['userType', 'userId'] }],
-});
+/**
+ * Build the four authz {@link EntitySchema} definitions, optionally under your own table
+ * names — this is the supported way to relocate the tables:
+ *
+ * ```ts
+ * const authz = createAuthzEntitySchemas({ roles: 'app_roles' });
+ * await MikroORM.init({ entities: [...authz.all] });
+ * ```
+ *
+ * Going through the factory (rather than hand-writing `new EntitySchema({ tableName })`)
+ * keeps the custom repository binding and the index names attached to the renamed tables;
+ * a hand-rolled re-declaration silently drops both.
+ */
+export function createAuthzEntitySchemas(tableNames = {}) {
+    const names = { ...DEFAULT_TABLE_NAMES, ...tableNames };
+    const role = new EntitySchema({
+        class: RoleEntity,
+        tableName: names.roles,
+        repository: () => AuthzRoleRepository,
+        properties: {
+            id: { type: 'string', length: 191, primary: true },
+            name: {
+                type: 'string',
+                length: 191,
+                unique: true,
+                index: `${names.roles}_name_uniq`,
+            },
+            guard: { type: 'string', nullable: true },
+            createdAt: { type: 'datetime' },
+        },
+    });
+    const permission = new EntitySchema({
+        class: PermissionEntity,
+        tableName: names.permissions,
+        repository: () => AuthzPermissionRepository,
+        properties: {
+            id: { type: 'string', length: 191, primary: true },
+            name: {
+                type: 'string',
+                length: 191,
+                unique: true,
+                index: `${names.permissions}_name_uniq`,
+            },
+            guard: { type: 'string', nullable: true },
+            createdAt: { type: 'datetime' },
+        },
+    });
+    const rolePermission = new EntitySchema({
+        class: RolePermissionEntity,
+        tableName: names.rolePermission,
+        repository: () => AuthzRolePermissionRepository,
+        properties: {
+            roleId: { type: 'string', length: 191, primary: true },
+            permissionId: { type: 'string', length: 191, primary: true },
+        },
+    });
+    const userRole = new EntitySchema({
+        class: UserRoleEntity,
+        tableName: names.userRole,
+        repository: () => AuthzUserRoleRepository,
+        properties: {
+            userType: { type: 'string', length: 191, primary: true },
+            userId: { type: 'string', length: 191, primary: true },
+            roleId: { type: 'string', length: 191, primary: true },
+        },
+        indexes: [{ name: `${names.userRole}_user_idx`, properties: ['userType', 'userId'] }],
+    });
+    return {
+        role,
+        permission,
+        rolePermission,
+        userRole,
+        all: [role, permission, rolePermission, userRole],
+    };
+}
+const defaultSchemas = createAuthzEntitySchemas();
+export const RoleEntitySchema = defaultSchemas.role;
+export const PermissionEntitySchema = defaultSchemas.permission;
+export const RolePermissionEntitySchema = defaultSchemas.rolePermission;
+export const UserRoleEntitySchema = defaultSchemas.userRole;
 /**
  * All entity SCHEMAS, in dependency order — pass to `entities: [...]` registration. These
  * are the {@link EntitySchema} objects MikroORM discovers; the store keys on the plain
  * classes ({@link RoleEntity} etc.), which the schemas are bound to via `class`.
  */
-export const AUTHZ_ENTITIES = [
-    RoleEntitySchema,
-    PermissionEntitySchema,
-    RolePermissionEntitySchema,
-    UserRoleEntitySchema,
+export const AUTHZ_ENTITIES = defaultSchemas.all;
+/**
+ * The four entity CLASSES, in the same order. Pass these (not the schemas) to
+ * `MikroOrmModule.forFeature()` — it matches on `meta.class`, and only then does it register
+ * {@link AuthzRoleRepository} & friends as DI tokens.
+ */
+export const AUTHZ_ENTITY_CLASSES = [
+    RoleEntity,
+    PermissionEntity,
+    RolePermissionEntity,
+    UserRoleEntity,
 ];
 //# sourceMappingURL=entities.js.map

package/dist/entities.js.map

@@ -1 +1 @@
-{"version":3,"file":"entities.js","sourceRoot":"","sources":["../src/entities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,KAAK,EAAE,aAAa;IACpB,WAAW,EAAE,mBAAmB;IAChC,cAAc,EAAE,uBAAuB;IACvC,QAAQ,EAAE,iBAAiB;CACnB,CAAC;AAEX;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;GAGG;AACH,MAAM,OAAO,UAAU;IACrB,EAAE,CAAU;IACZ,IAAI,CAAU;IACd,KAAK,CAAiB;IACtB,SAAS,CAAQ;CAClB;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,YAAY,CAAa;IAC3D,KAAK,EAAE,UAAU;IACjB,SAAS,EAAE,mBAAmB,CAAC,KAAK;IACpC,UAAU,EAAE;QACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;QAClD,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,GAAG;YACX,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,uBAAuB;SAC/B;QACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QACzC,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;KAChC;CACF,CAAC,CAAC;AAEH,oGAAoG;AACpG,MAAM,OAAO,gBAAgB;IAC3B,EAAE,CAAU;IACZ,IAAI,CAAU;IACd,KAAK,CAAiB;IACtB,SAAS,CAAQ;CAClB;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,YAAY,CAAmB;IACvE,KAAK,EAAE,gBAAgB;IACvB,SAAS,EAAE,mBAAmB,CAAC,WAAW;IAC1C,UAAU,EAAE;QACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;QAClD,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,GAAG;YACX,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,6BAA6B;SACrC;QACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QACzC,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;KAChC;CACF,CAAC,CAAC;AAEH,uEAAuE;AACvE,MAAM,OAAO,oBAAoB;IAC/B,MAAM,CAAU;IAChB,YAAY,CAAU;CACvB;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,YAAY,CAAuB;IAC/E,KAAK,EAAE,oBAAoB;IAC3B,SAAS,EAAE,mBAAmB,CAAC,cAAc;IAC7C,UAAU,EAAE;QACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;QACtD,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;KAC7D;CACF,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,OAAO,cAAc;IACzB,QAAQ,CAAU;IAClB,MAAM,CAAU;IAChB,MAAM,CAAU;CACjB;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,YAAY,CAAiB;IACnE,KAAK,EAAE,cAAc;IACrB,SAAS,EAAE,mBAAmB,CAAC,QAAQ;IACvC,UAAU,EAAE;QACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;QACxD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;QACtD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;KACvD;IACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,UAAU,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;CACpF,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,gBAAgB;IAChB,sBAAsB;IACtB,0BAA0B;IAC1B,oBAAoB;CACZ,CAAC"}
+{"version":3,"file":"entities.js","sourceRoot":"","sources":["../src/entities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EACL,yBAAyB,EACzB,6BAA6B,EAC7B,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAE3B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,KAAK,EAAE,aAAa;IACpB,WAAW,EAAE,mBAAmB;IAChC,cAAc,EAAE,uBAAuB;IACvC,QAAQ,EAAE,iBAAiB;CACnB,CAAC;AAUX;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH;;;GAGG;AACH,MAAM,OAAO,UAAU;IAErB,EAAE,CAAU;IACZ,IAAI,CAAU;IACd,KAAK,CAAiB;IACtB,SAAS,CAAQ;CAClB;AAED,oGAAoG;AACpG,MAAM,OAAO,gBAAgB;IAE3B,EAAE,CAAU;IACZ,IAAI,CAAU;IACd,KAAK,CAAiB;IACtB,SAAS,CAAQ;CAClB;AAED,uEAAuE;AACvE,MAAM,OAAO,oBAAoB;IAE/B,MAAM,CAAU;IAChB,YAAY,CAAU;CACvB;AAED;;;;GAIG;AACH,MAAM,OAAO,cAAc;IAEzB,QAAQ,CAAU;IAClB,MAAM,CAAU;IAChB,MAAM,CAAU;CACjB;AAiBD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,wBAAwB,CACtC,aAAuC,EAAE;IAEzC,MAAM,KAAK,GAAoB,EAAE,GAAG,mBAAmB,EAAE,GAAG,UAAU,EAAE,CAAC;IAEzE,MAAM,IAAI,GAAG,IAAI,YAAY,CAAa;QACxC,KAAK,EAAE,UAAU;QACjB,SAAS,EAAE,KAAK,CAAC,KAAK;QACtB,UAAU,EAAE,GAAG,EAAE,CAAC,mBAAmB;QACrC,UAAU,EAAE;YACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;YAClD,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,GAAG;gBACX,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,YAAY;aAClC;YACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YACzC,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;SAChC;KACF,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,IAAI,YAAY,CAAmB;QACpD,KAAK,EAAE,gBAAgB;QACvB,SAAS,EAAE,KAAK,CAAC,WAAW;QAC5B,UAAU,EAAE,GAAG,EAAE,CAAC,yBAAyB;QAC3C,UAAU,EAAE;YACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;YAClD,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,GAAG;gBACX,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,GAAG,KAAK,CAAC,WAAW,YAAY;aACxC;YACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;YACzC,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;SAChC;KACF,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,IAAI,YAAY,CAAuB;QAC5D,KAAK,EAAE,oBAAoB;QAC3B,SAAS,EAAE,KAAK,CAAC,cAAc;QAC/B,UAAU,EAAE,GAAG,EAAE,CAAC,6BAA6B;QAC/C,UAAU,EAAE;YACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;YACtD,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;SAC7D;KACF,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAiB;QAChD,KAAK,EAAE,cAAc;QACrB,SAAS,EAAE,KAAK,CAAC,QAAQ;QACzB,UAAU,EAAE,GAAG,EAAE,CAAC,uBAAuB;QACzC,UAAU,EAAE;YACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;YACxD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;YACtD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE;SACvD;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,QAAQ,WAAW,EAAE,UAAU,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;KACtF,CAAC,CAAC;IAEH,OAAO;QACL,IAAI;QACJ,UAAU;QACV,cAAc;QACd,QAAQ;QACR,GAAG,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,cAAc,GAAG,wBAAwB,EAAE,CAAC;AAElD,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAc,CAAC,IAAI,CAAC;AACpD,MAAM,CAAC,MAAM,sBAAsB,GAAG,cAAc,CAAC,UAAU,CAAC;AAChE,MAAM,CAAC,MAAM,0BAA0B,GAAG,cAAc,CAAC,cAAc,CAAC;AACxE,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAC,QAAQ,CAAC;AAE5D;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,cAAc,CAAC,GAAG,CAAC;AAEjD;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,UAAU;IACV,gBAAgB;IAChB,oBAAoB;IACpB,cAAc;CACN,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,6 @@
-export { AUTHZ_ENTITIES, DEFAULT_TABLE_NAMES, PermissionEntity, PermissionEntitySchema, RoleEntity, RoleEntitySchema, RolePermissionEntity, RolePermissionEntitySchema, UserRoleEntity, UserRoleEntitySchema, } from './entities.js';
+export { AUTHZ_ENTITIES, AUTHZ_ENTITY_CLASSES, createAuthzEntitySchemas, DEFAULT_TABLE_NAMES, PermissionEntity, PermissionEntitySchema, RoleEntity, RoleEntitySchema, RolePermissionEntity, RolePermissionEntitySchema, UserRoleEntity, UserRoleEntitySchema, } from './entities.js';
+export type { AuthzEntitySchemas, AuthzTableNames } from './entities.js';
+export { AuthzPermissionRepository, AuthzRolePermissionRepository, AuthzRoleRepository, AuthzUserRoleRepository, } from './repositories.js';
 export { authzSchemaSql, ensureAuthzSchema } from './schema.js';
 export { MikroOrmAuthzStore } from './mikro-orm-authz.store.js';
 export type { UserAuthz } from './mikro-orm-authz.store.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,gBAAgB,EAChB,sBAAsB,EACtB,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EACpB,0BAA0B,EAC1B,cAAc,EACd,oBAAoB,GACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,YAAY,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,2BAA2B,EAC3B,sBAAsB,EACtB,aAAa,GACd,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACtD,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,wBAAwB,EACxB,mBAAmB,EACnB,gBAAgB,EAChB,sBAAsB,EACtB,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EACpB,0BAA0B,EAC1B,cAAc,EACd,oBAAoB,GACrB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGzE,OAAO,EACL,yBAAyB,EACzB,6BAA6B,EAC7B,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,YAAY,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,2BAA2B,EAC3B,sBAAsB,EACtB,aAAa,GACd,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACtD,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -1,4 +1,7 @@
-export { AUTHZ_ENTITIES, DEFAULT_TABLE_NAMES, PermissionEntity, PermissionEntitySchema, RoleEntity, RoleEntitySchema, RolePermissionEntity, RolePermissionEntitySchema, UserRoleEntity, UserRoleEntitySchema, } from './entities.js';
+export { AUTHZ_ENTITIES, AUTHZ_ENTITY_CLASSES, createAuthzEntitySchemas, DEFAULT_TABLE_NAMES, PermissionEntity, PermissionEntitySchema, RoleEntity, RoleEntitySchema, RolePermissionEntity, RolePermissionEntitySchema, UserRoleEntity, UserRoleEntitySchema, } from './entities.js';
+// VALUE exports on purpose: these classes are the DI tokens `MikroOrmModule.forFeature()`
+// registers, so `export type` would compile green and be `undefined` at runtime.
+export { AuthzPermissionRepository, AuthzRolePermissionRepository, AuthzRoleRepository, AuthzUserRoleRepository, } from './repositories.js';
 export { authzSchemaSql, ensureAuthzSchema } from './schema.js';
 export { MikroOrmAuthzStore } from './mikro-orm-authz.store.js';
 export { AUTHZ_RBAC_OPTIONS, AUTHZ_RBAC_STORE, AuthzRbacModule, defaultUserRefMapper, } from './authz-rbac.module.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,gBAAgB,EAChB,sBAAsB,EACtB,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EACpB,0BAA0B,EAC1B,cAAc,EACd,oBAAoB,GACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAQhC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,wBAAwB,EACxB,mBAAmB,EACnB,gBAAgB,EAChB,sBAAsB,EACtB,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EACpB,0BAA0B,EAC1B,cAAc,EACd,oBAAoB,GACrB,MAAM,eAAe,CAAC;AAEvB,0FAA0F;AAC1F,iFAAiF;AACjF,OAAO,EACL,yBAAyB,EACzB,6BAA6B,EAC7B,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAQhC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC"}

package/dist/repositories.d.ts

@@ -0,0 +1,26 @@
+import { EntityRepository } from '@mikro-orm/core';
+import type { PermissionEntity, RoleEntity, RolePermissionEntity, UserRoleEntity } from './entities.js';
+/**
+ * Typed repositories for the four authz entities, so a host app injects `AuthzRoleRepository`
+ * by type instead of threading the entity class through `em.find(RoleEntity, ...)` at every
+ * call site.
+ *
+ * The binding is two-sided: `repository: () => ...` on each `EntitySchema` (what
+ * `em.getRepository()` and `MikroOrmModule.forFeature()` read at runtime) plus the
+ * `[EntityRepositoryType]` marker on each entity class (what makes the return type narrow).
+ *
+ * `EntityRepository` is exported from `@mikro-orm/core` on both MikroORM 6 and 7, so this
+ * needs no extra peer and no decorator import.
+ *
+ * The bodies are intentionally empty — this package ships no query surface beyond
+ * `MikroOrmAuthzStore`; they exist to give the four entities an injectable identity.
+ */
+export declare class AuthzRoleRepository extends EntityRepository<RoleEntity> {
+}
+export declare class AuthzPermissionRepository extends EntityRepository<PermissionEntity> {
+}
+export declare class AuthzRolePermissionRepository extends EntityRepository<RolePermissionEntity> {
+}
+export declare class AuthzUserRoleRepository extends EntityRepository<UserRoleEntity> {
+}
+//# sourceMappingURL=repositories.d.ts.map

package/dist/repositories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositories.d.ts","sourceRoot":"","sources":["../src/repositories.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EACV,gBAAgB,EAChB,UAAU,EACV,oBAAoB,EACpB,cAAc,EACf,MAAM,eAAe,CAAC;AAEvB;;;;;;;;;;;;;;GAcG;AACH,qBAAa,mBAAoB,SAAQ,gBAAgB,CAAC,UAAU,CAAC;CAAG;AAExE,qBAAa,yBAA0B,SAAQ,gBAAgB,CAAC,gBAAgB,CAAC;CAAG;AAEpF,qBAAa,6BAA8B,SAAQ,gBAAgB,CAAC,oBAAoB,CAAC;CAAG;AAE5F,qBAAa,uBAAwB,SAAQ,gBAAgB,CAAC,cAAc,CAAC;CAAG"}

package/dist/repositories.js

@@ -0,0 +1,25 @@
+import { EntityRepository } from '@mikro-orm/core';
+/**
+ * Typed repositories for the four authz entities, so a host app injects `AuthzRoleRepository`
+ * by type instead of threading the entity class through `em.find(RoleEntity, ...)` at every
+ * call site.
+ *
+ * The binding is two-sided: `repository: () => ...` on each `EntitySchema` (what
+ * `em.getRepository()` and `MikroOrmModule.forFeature()` read at runtime) plus the
+ * `[EntityRepositoryType]` marker on each entity class (what makes the return type narrow).
+ *
+ * `EntityRepository` is exported from `@mikro-orm/core` on both MikroORM 6 and 7, so this
+ * needs no extra peer and no decorator import.
+ *
+ * The bodies are intentionally empty — this package ships no query surface beyond
+ * `MikroOrmAuthzStore`; they exist to give the four entities an injectable identity.
+ */
+export class AuthzRoleRepository extends EntityRepository {
+}
+export class AuthzPermissionRepository extends EntityRepository {
+}
+export class AuthzRolePermissionRepository extends EntityRepository {
+}
+export class AuthzUserRoleRepository extends EntityRepository {
+}
+//# sourceMappingURL=repositories.js.map

package/dist/repositories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repositories.js","sourceRoot":"","sources":["../src/repositories.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAQnD;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,mBAAoB,SAAQ,gBAA4B;CAAG;AAExE,MAAM,OAAO,yBAA0B,SAAQ,gBAAkC;CAAG;AAEpF,MAAM,OAAO,6BAA8B,SAAQ,gBAAsC;CAAG;AAE5F,MAAM,OAAO,uBAAwB,SAAQ,gBAAgC;CAAG"}

package/dist/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAwC/D;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,QAAQ,GAAG,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAGvF;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,QAAQ,GAAG,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAQxF"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AA4D/D;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,QAAQ,GAAG,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAGvF;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,QAAQ,GAAG,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAQxF"}

package/dist/schema.js

@@ -1,10 +1,20 @@
-/** The four authz table names — used to filter the schema diff down to our tables. */
-const AUTHZ_TABLES = [
-    'authz_roles',
-    'authz_permissions',
-    'authz_role_permission',
-    'authz_user_role',
+import { DEFAULT_TABLE_NAMES, PermissionEntity, RoleEntity, RolePermissionEntity, UserRoleEntity, } from './entities.js';
+/** Entity class → the table name to fall back to when the entity is not registered. */
+const AUTHZ_ENTITY_TABLE_DEFAULTS = [
+    [RoleEntity, DEFAULT_TABLE_NAMES.roles],
+    [PermissionEntity, DEFAULT_TABLE_NAMES.permissions],
+    [RolePermissionEntity, DEFAULT_TABLE_NAMES.rolePermission],
+    [UserRoleEntity, DEFAULT_TABLE_NAMES.userRole],
 ];
+/**
+ * The four authz table names — used to filter the schema diff down to our tables. Read off
+ * the live metadata so a host that relocated the tables (see `createAuthzEntitySchemas`)
+ * still gets them created.
+ */
+function authzTables(em) {
+    const metadata = em.getMetadata();
+    return AUTHZ_ENTITY_TABLE_DEFAULTS.map(([entity, fallback]) => metadata.find(entity.name)?.tableName ?? fallback);
+}
 /** Resolve an {@link EntityManager} from a {@link MikroORM} or an EM. */
 function toEm(ormOrEm) {
     return isOrm(ormOrEm) ? ormOrEm.em : ormOrEm;
@@ -25,11 +35,12 @@ function generatorFor(em) {
 }
 /** Statements (split, trimmed) from the non-destructive schema diff that touch our tables. */
 async function authzStatements(em) {
+    const tables = authzTables(em);
     const sql = await generatorFor(em).getUpdateSchemaSQL({ safe: true, wrap: false });
     return sql
         .split(';')
         .map((s) => s.trim())
-        .filter((s) => s.length > 0 && AUTHZ_TABLES.some((t) => new RegExp(`\\b${t}\\b`, 'i').test(s)));
+        .filter((s) => s.length > 0 && tables.some((t) => new RegExp(`\\b${t}\\b`, 'i').test(s)));
 }
 /**
  * Returns the non-destructive SQL needed to bring only the authz RBAC tables up to date

package/dist/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAEA,sFAAsF;AACtF,MAAM,YAAY,GAAG;IACnB,aAAa;IACb,mBAAmB;IACnB,uBAAuB;IACvB,iBAAiB;CAClB,CAAC;AAEF,yEAAyE;AACzE,SAAS,IAAI,CAAC,OAAiC;IAC7C,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,OAAO,CAAC,EAA+B,CAAC,CAAC,CAAC,OAAO,CAAC;AAC7E,CAAC;AAED;;;;;GAKG;AACH,SAAS,KAAK,CAAC,KAA+B;IAC5C,MAAM,SAAS,GAAG,KAAyB,CAAC;IAC5C,OAAO,SAAS,CAAC,EAAE,IAAI,IAAI,IAAI,OAAO,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC;AAClE,CAAC;AAED,0EAA0E;AAC1E,SAAS,YAAY,CAAC,EAAiB;IACrC,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,8FAA8F;AAC9F,KAAK,UAAU,eAAe,CAAC,EAAiB;IAC9C,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpG,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAiC;IACpE,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACxD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAiC;IACvE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,EAAE,CAAC,CAAC;IAC7C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACpC,MAAM,UAAU,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC;IACtC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;AACH,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,UAAU,EACV,oBAAoB,EACpB,cAAc,GACf,MAAM,eAAe,CAAC;AAEvB,uFAAuF;AACvF,MAAM,2BAA2B,GAAuD;IACtF,CAAC,UAAU,EAAE,mBAAmB,CAAC,KAAK,CAAC;IACvC,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,WAAW,CAAC;IACnD,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,cAAc,CAAC;IAC1D,CAAC,cAAc,EAAE,mBAAmB,CAAC,QAAQ,CAAC;CAC/C,CAAC;AAEF;;;;GAIG;AACH,SAAS,WAAW,CAAC,EAAiB;IACpC,MAAM,QAAQ,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IAClC,OAAO,2BAA2B,CAAC,GAAG,CACpC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,IAAI,QAAQ,CAC1E,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,SAAS,IAAI,CAAC,OAAiC;IAC7C,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,OAAO,CAAC,EAA+B,CAAC,CAAC,CAAC,OAAO,CAAC;AAC7E,CAAC;AAED;;;;;GAKG;AACH,SAAS,KAAK,CAAC,KAA+B;IAC5C,MAAM,SAAS,GAAG,KAAyB,CAAC;IAC5C,OAAO,SAAS,CAAC,EAAE,IAAI,IAAI,IAAI,OAAO,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC;AAClE,CAAC;AAED,0EAA0E;AAC1E,SAAS,YAAY,CAAC,EAAiB;IACrC,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,8FAA8F;AAC9F,KAAK,UAAU,eAAe,CAAC,EAAiB;IAC9C,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAiC;IACpE,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACxD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAiC;IACvE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,EAAE,CAAC,CAAC;IAC7C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACpC,MAAM,UAAU,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC;IACtC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dudousxd/nestjs-authz-mikro-orm",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "MikroORM RBAC persistence for @dudousxd/nestjs-authz — roles, permissions, and a Gate seam (zero connection ownership).",
   "license": "MIT",
   "repository": {
@@ -49,7 +49,7 @@
     "rxjs": "^7.8.1",
     "typescript": "^5.4.0",
     "vitest": "^3.0.0",
-    "@dudousxd/nestjs-authz": "^0.6.3"
+    "@dudousxd/nestjs-authz": "^0.6.4"
   },
   "engines": {
     "node": ">=20"