@gasboost/auth 0.4.0 → 0.5.0

package/dist/authorization/index.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizationPolicy = void 0;
+var AuthorizationPolicy_1 = require("./AuthorizationPolicy");
+Object.defineProperty(exports, "AuthorizationPolicy", { enumerable: true, get: function () { return AuthorizationPolicy_1.AuthorizationPolicy; } });

package/dist/domain/Account.js

@@ -1,4 +1,7 @@
-export class Account {
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Account = void 0;
+class Account {
     id;
     userId;
     identity;
@@ -8,3 +11,4 @@ export class Account {
         this.identity = identity;
     }
 }
+exports.Account = Account;

package/dist/domain/Errors.js

@@ -1,5 +1,9 @@
-export class InvalidPasswordResetError extends Error {
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InvalidPasswordResetError = void 0;
+class InvalidPasswordResetError extends Error {
     constructor() {
         super("Invalid password reset token");
     }
 }
+exports.InvalidPasswordResetError = InvalidPasswordResetError;

package/dist/domain/Password.js

@@ -1,4 +1,7 @@
-export class Password {
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HashedPassword = exports.Password = void 0;
+class Password {
     value;
     utilities;
     pepper;
@@ -35,7 +38,8 @@ export class Password {
         });
     }
 }
-export class HashedPassword {
+exports.Password = Password;
+class HashedPassword {
     value;
     constructor({ value }) {
         this.value = value;
@@ -52,3 +56,4 @@ export class HashedPassword {
         return difference === 0;
     }
 }
+exports.HashedPassword = HashedPassword;

package/dist/domain/PasswordCredential.js

@@ -1,8 +1,11 @@
-import { EmailPasswordIdentity } from "../identity/EmailPasswordIdentity";
-import { Account } from "./Account";
-import { InvalidPasswordResetError } from "./Errors";
-import { PasswordReset } from "./PasswordReset";
-export class PasswordCredential {
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PasswordCredential = void 0;
+const EmailPasswordIdentity_1 = require("../identity/EmailPasswordIdentity");
+const Account_1 = require("./Account");
+const Errors_1 = require("./Errors");
+const PasswordReset_1 = require("./PasswordReset");
+class PasswordCredential {
     account;
     reset;
     constructor({ account, reset, }) {
@@ -10,10 +13,10 @@ export class PasswordCredential {
         this.reset = reset;
     }
     static generate({ account, utilities, expiresAt, }) {
-        if (!(account.identity instanceof EmailPasswordIdentity)) {
+        if (!(account.identity instanceof EmailPasswordIdentity_1.EmailPasswordIdentity)) {
             throw new Error("Invalid account identity");
         }
-        const { reset, token } = PasswordReset.create({
+        const { reset, token } = PasswordReset_1.PasswordReset.create({
             accountId: account.id,
             utilities,
             expiresAt,
@@ -28,25 +31,25 @@ export class PasswordCredential {
     }
     resetPassword({ token, newPassword, utilities, now, }) {
         if (this.reset === null) {
-            throw new InvalidPasswordResetError();
+            throw new Errors_1.InvalidPasswordResetError();
         }
         if (this.reset.accountId !== this.account.id) {
-            throw new InvalidPasswordResetError();
+            throw new Errors_1.InvalidPasswordResetError();
         }
         if (this.reset.enabled === false) {
-            throw new InvalidPasswordResetError();
+            throw new Errors_1.InvalidPasswordResetError();
         }
         if (this.reset.isExpired(now)) {
-            throw new InvalidPasswordResetError();
+            throw new Errors_1.InvalidPasswordResetError();
         }
         if (this.reset.verify(token, utilities) === false) {
-            throw new InvalidPasswordResetError();
+            throw new Errors_1.InvalidPasswordResetError();
         }
-        if (!(this.account.identity instanceof EmailPasswordIdentity)) {
+        if (!(this.account.identity instanceof EmailPasswordIdentity_1.EmailPasswordIdentity)) {
             throw new Error("Invalid account identity");
         }
         return new PasswordCredential({
-            account: new Account({
+            account: new Account_1.Account({
                 id: this.account.id,
                 userId: this.account.userId,
                 identity: this.account.identity.changePassword(newPassword),
@@ -55,3 +58,4 @@ export class PasswordCredential {
         });
     }
 }
+exports.PasswordCredential = PasswordCredential;

package/dist/domain/PasswordReset.js

@@ -1,5 +1,8 @@
-import { PasswordResetToken } from "./PasswordResetToken";
-export class PasswordReset {
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PasswordReset = void 0;
+const PasswordResetToken_1 = require("./PasswordResetToken");
+class PasswordReset {
     id;
     accountId;
     tokenHash;
@@ -13,7 +16,7 @@ export class PasswordReset {
         this.enabled = enabled;
     }
     static create({ accountId, utilities, expiresAt, }) {
-        const token = PasswordResetToken.generate(utilities);
+        const token = PasswordResetToken_1.PasswordResetToken.generate(utilities);
         return {
             token: token.value,
             reset: new PasswordReset({
@@ -26,7 +29,7 @@ export class PasswordReset {
         };
     }
     verify(token, utilities) {
-        const tokenHash = new PasswordResetToken(token).hash(utilities);
+        const tokenHash = new PasswordResetToken_1.PasswordResetToken(token).hash(utilities);
         return tokenHash === this.tokenHash;
     }
     isExpired(now) {
@@ -42,3 +45,4 @@ export class PasswordReset {
         });
     }
 }
+exports.PasswordReset = PasswordReset;

package/dist/domain/PasswordResetToken.js

@@ -1,4 +1,7 @@
-export class PasswordResetToken {
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PasswordResetToken = void 0;
+class PasswordResetToken {
     value;
     constructor(value) {
         this.value = value;
@@ -15,3 +18,4 @@ export class PasswordResetToken {
         return tokenHash;
     }
 }
+exports.PasswordResetToken = PasswordResetToken;

package/dist/domain/Session.js

@@ -1,4 +1,7 @@
-export class Session {
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Session = void 0;
+class Session {
     id;
     userId;
     createdAt;
@@ -13,3 +16,4 @@ export class Session {
         return now > this.expiresAt;
     }
 }
+exports.Session = Session;

package/dist/domain/User.js

@@ -1,4 +1,7 @@
-export class User {
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.User = void 0;
+class User {
     id;
     name;
     accounts;
@@ -11,3 +14,4 @@ export class User {
         return (this.accounts.find((account) => account.identity.providerName === provider) || null);
     }
 }
+exports.User = User;

package/dist/factory/sessionStorageFactory.js

@@ -1,11 +1,14 @@
-import { AppsScriptCacheSessionStorage } from "../storage/AppsScriptCacheSessionStorage";
-import { AppsScriptPropertiesSessionStorage } from "../storage/AppsScriptPropertiesSessionStorage";
-export function sessionStorageFactory(storage, { cacheService, propertiesService, }) {
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sessionStorageFactory = sessionStorageFactory;
+const AppsScriptCacheSessionStorage_1 = require("../storage/AppsScriptCacheSessionStorage");
+const AppsScriptPropertiesSessionStorage_1 = require("../storage/AppsScriptPropertiesSessionStorage");
+function sessionStorageFactory(storage, { cacheService, propertiesService, }) {
     if (storage === "properties") {
-        return new AppsScriptPropertiesSessionStorage(propertiesService.getScriptProperties());
+        return new AppsScriptPropertiesSessionStorage_1.AppsScriptPropertiesSessionStorage(propertiesService.getScriptProperties());
     }
     if (storage === "cache") {
-        return new AppsScriptCacheSessionStorage(cacheService.getScriptCache());
+        return new AppsScriptCacheSessionStorage_1.AppsScriptCacheSessionStorage(cacheService.getScriptCache());
     }
     throw new Error("Invalid storage type");
 }

package/dist/hooks/AuthHooks.js

@@ -1 +1,2 @@
-export {};
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/identity/AppsScriptIdentity.js

@@ -1,8 +1,12 @@
-import { authPattern } from "../AuthPattern";
-export class AppsScriptIdentity {
-    providerName = authPattern.appsScript;
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppsScriptIdentity = void 0;
+const AuthPattern_1 = require("../AuthPattern");
+class AppsScriptIdentity {
+    providerName = AuthPattern_1.authPattern.appsScript;
     accountId;
     constructor({ googleAccountAddress }) {
         this.accountId = googleAccountAddress;
     }
 }
+exports.AppsScriptIdentity = AppsScriptIdentity;

package/dist/identity/EmailPasswordIdentity.js

@@ -1,6 +1,9 @@
-import { authPattern } from "../AuthPattern";
-export class EmailPasswordIdentity {
-    providerName = authPattern.emailPassword;
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EmailPasswordIdentity = void 0;
+const AuthPattern_1 = require("../AuthPattern");
+class EmailPasswordIdentity {
+    providerName = AuthPattern_1.authPattern.emailPassword;
     accountId;
     password;
     constructor({ accountId, password, }) {
@@ -17,3 +20,4 @@ export class EmailPasswordIdentity {
         });
     }
 }
+exports.EmailPasswordIdentity = EmailPasswordIdentity;

package/dist/identity/ProviderIdentity.js

@@ -1 +1,2 @@
-export {};
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/index.d.ts

@@ -1,7 +1,12 @@
 export { AppsScriptAuth } from "./AppsScriptAuth";
+export { AppsScriptAuthorization } from "./authorization/AppsScriptAuthorization";
 export type { AppsScriptAuthRepository } from "./storage/AppsScriptAuthRepository";
+export type { AuthorizationRepository } from "./authorization/AuthorizationRepository";
+export type { EffectivePermissions, PermissionEffect, PermissionOf, PermissionRequirement, PermissionStatement, StoredPermissionOverride, } from "./authorization/AuthorizationPolicy";
 export type { AuthSchema, AuthSchemaOptions } from "./schema/AuthSchema";
 export { createAuthTables } from "./schema/createAuthTables";
+export type { AuthorizationSchema, AuthorizationSchemaOptions, } from "./schema/AuthorizationSchema";
+export { createAuthorizationTables } from "./schema/createAuthorizationTables";
 export { authPattern, type AuthPattern } from "./AuthPattern";
 export { Account } from "./domain/Account";
 export { User } from "./domain/User";

package/dist/index.js

@@ -1,10 +1,28 @@
-export { AppsScriptAuth } from "./AppsScriptAuth";
-export { createAuthTables } from "./schema/createAuthTables";
-export { authPattern } from "./AuthPattern";
-export { Account } from "./domain/Account";
-export { User } from "./domain/User";
-export { HashedPassword, Password } from "./domain/Password";
-export { PasswordCredential } from "./domain/PasswordCredential";
-export { PasswordReset } from "./domain/PasswordReset";
-export { AppsScriptIdentity } from "./identity/AppsScriptIdentity";
-export { EmailPasswordIdentity } from "./identity/EmailPasswordIdentity";
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EmailPasswordIdentity = exports.AppsScriptIdentity = exports.PasswordReset = exports.PasswordCredential = exports.Password = exports.HashedPassword = exports.User = exports.Account = exports.authPattern = exports.createAuthorizationTables = exports.createAuthTables = exports.AppsScriptAuthorization = exports.AppsScriptAuth = void 0;
+var AppsScriptAuth_1 = require("./AppsScriptAuth");
+Object.defineProperty(exports, "AppsScriptAuth", { enumerable: true, get: function () { return AppsScriptAuth_1.AppsScriptAuth; } });
+var AppsScriptAuthorization_1 = require("./authorization/AppsScriptAuthorization");
+Object.defineProperty(exports, "AppsScriptAuthorization", { enumerable: true, get: function () { return AppsScriptAuthorization_1.AppsScriptAuthorization; } });
+var createAuthTables_1 = require("./schema/createAuthTables");
+Object.defineProperty(exports, "createAuthTables", { enumerable: true, get: function () { return createAuthTables_1.createAuthTables; } });
+var createAuthorizationTables_1 = require("./schema/createAuthorizationTables");
+Object.defineProperty(exports, "createAuthorizationTables", { enumerable: true, get: function () { return createAuthorizationTables_1.createAuthorizationTables; } });
+var AuthPattern_1 = require("./AuthPattern");
+Object.defineProperty(exports, "authPattern", { enumerable: true, get: function () { return AuthPattern_1.authPattern; } });
+var Account_1 = require("./domain/Account");
+Object.defineProperty(exports, "Account", { enumerable: true, get: function () { return Account_1.Account; } });
+var User_1 = require("./domain/User");
+Object.defineProperty(exports, "User", { enumerable: true, get: function () { return User_1.User; } });
+var Password_1 = require("./domain/Password");
+Object.defineProperty(exports, "HashedPassword", { enumerable: true, get: function () { return Password_1.HashedPassword; } });
+Object.defineProperty(exports, "Password", { enumerable: true, get: function () { return Password_1.Password; } });
+var PasswordCredential_1 = require("./domain/PasswordCredential");
+Object.defineProperty(exports, "PasswordCredential", { enumerable: true, get: function () { return PasswordCredential_1.PasswordCredential; } });
+var PasswordReset_1 = require("./domain/PasswordReset");
+Object.defineProperty(exports, "PasswordReset", { enumerable: true, get: function () { return PasswordReset_1.PasswordReset; } });
+var AppsScriptIdentity_1 = require("./identity/AppsScriptIdentity");
+Object.defineProperty(exports, "AppsScriptIdentity", { enumerable: true, get: function () { return AppsScriptIdentity_1.AppsScriptIdentity; } });
+var EmailPasswordIdentity_1 = require("./identity/EmailPasswordIdentity");
+Object.defineProperty(exports, "EmailPasswordIdentity", { enumerable: true, get: function () { return EmailPasswordIdentity_1.EmailPasswordIdentity; } });

package/dist/registration/AppsScriptRegistration.js

@@ -1,8 +1,11 @@
-import { authPattern } from "../AuthPattern";
-import { Account } from "../domain/Account";
-import { User } from "../domain/User";
-import { AppsScriptIdentity } from "../identity/AppsScriptIdentity";
-export class AppsScriptRegistration {
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppsScriptRegistration = void 0;
+const AuthPattern_1 = require("../AuthPattern");
+const Account_1 = require("../domain/Account");
+const User_1 = require("../domain/User");
+const AppsScriptIdentity_1 = require("../identity/AppsScriptIdentity");
+class AppsScriptRegistration {
     utilities;
     session;
     repository;
@@ -17,23 +20,23 @@ export class AppsScriptRegistration {
         if (!email) {
             throw new Error("No active user found");
         }
-        const existingAccount = await this.repository.account.findByIdentity(authPattern.appsScript, email);
+        const existingAccount = await this.repository.account.findByIdentity(AuthPattern_1.authPattern.appsScript, email);
         if (existingAccount) {
             throw new Error("Account already registered");
         }
         // AppsScriptIdentity作成
-        const appsScriptIdentity = new AppsScriptIdentity({
+        const appsScriptIdentity = new AppsScriptIdentity_1.AppsScriptIdentity({
             googleAccountAddress: email,
         });
         const userId = this.utilities.getUuid();
         // Account作成
-        const account = new Account({
+        const account = new Account_1.Account({
             id: this.utilities.getUuid(),
             userId: userId,
             identity: appsScriptIdentity,
         });
         // User作成
-        const user = new User({
+        const user = new User_1.User({
             id: userId,
             name: input.name,
             accounts: [account],
@@ -44,3 +47,4 @@ export class AppsScriptRegistration {
         return user;
     }
 }
+exports.AppsScriptRegistration = AppsScriptRegistration;

package/dist/registration/EmailPasswordRegistration.js

@@ -1,9 +1,12 @@
-import { authPattern } from "../AuthPattern";
-import { Account } from "../domain/Account";
-import { Password } from "../domain/Password";
-import { User } from "../domain/User";
-import { EmailPasswordIdentity } from "../identity/EmailPasswordIdentity";
-export class EmailPasswordRegistration {
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EmailPasswordRegistration = void 0;
+const AuthPattern_1 = require("../AuthPattern");
+const Account_1 = require("../domain/Account");
+const Password_1 = require("../domain/Password");
+const User_1 = require("../domain/User");
+const EmailPasswordIdentity_1 = require("../identity/EmailPasswordIdentity");
+class EmailPasswordRegistration {
     repository;
     utilities;
     config;
@@ -13,24 +16,24 @@ export class EmailPasswordRegistration {
         this.config = config;
     }
     async register(input) {
-        const existingAccount = await this.repository.account.findByIdentity(authPattern.emailPassword, input.email);
+        const existingAccount = await this.repository.account.findByIdentity(AuthPattern_1.authPattern.emailPassword, input.email);
         if (existingAccount) {
             throw new Error("Account already registered");
         }
         const userId = this.utilities.getUuid();
         const accountId = this.utilities.getUuid();
-        const password = new Password(input.password, this.utilities, this.config.pepper, this.config.iterations);
+        const password = new Password_1.Password(input.password, this.utilities, this.config.pepper, this.config.iterations);
         const hashedPassword = await password.hash(accountId);
-        const identity = new EmailPasswordIdentity({
+        const identity = new EmailPasswordIdentity_1.EmailPasswordIdentity({
             accountId: input.email,
             password: hashedPassword,
         });
-        const account = new Account({
+        const account = new Account_1.Account({
             id: accountId,
             userId,
             identity,
         });
-        const user = new User({
+        const user = new User_1.User({
             id: userId,
             name: input.name,
             accounts: [account],
@@ -39,3 +42,4 @@ export class EmailPasswordRegistration {
         return user;
     }
 }
+exports.EmailPasswordRegistration = EmailPasswordRegistration;

package/dist/registration/Registration.js

@@ -1 +1,2 @@
-export {};
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/schema/AuthSchema.js

@@ -1,4 +1,7 @@
-export function resolveAuthSchema(options) {
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveAuthSchema = resolveAuthSchema;
+function resolveAuthSchema(options) {
     return {
         user: {
             modelName: options.user?.modelName ?? "user",

package/dist/schema/AuthorizationSchema.d.ts

@@ -0,0 +1,64 @@
+export type AuthorizationSchemaOptions = {
+    role?: {
+        modelName?: string;
+        fields?: {
+            id?: string;
+            userId?: string;
+            role?: string;
+        };
+    };
+    permission?: {
+        modelName?: string;
+        fields?: {
+            id?: string;
+            userId?: string;
+            permission?: string;
+            effect?: string;
+        };
+    };
+};
+export type AuthorizationSchema = {
+    role: {
+        modelName: string;
+        fields: {
+            id: string;
+            userId: string;
+            role: string;
+        };
+    };
+    permission: {
+        modelName: string;
+        fields: {
+            id: string;
+            userId: string;
+            permission: string;
+            effect: string;
+        };
+    };
+};
+type Section<O, K extends PropertyKey> = K extends keyof O ? O[K] : undefined;
+type Fields<T> = [T] extends [null | undefined] ? undefined : "fields" extends keyof NonNullable<T> ? NonNullable<T>["fields"] : undefined;
+type PropertyOrDefault<T, K extends PropertyKey, Default extends string> = [
+    T
+] extends [null | undefined] ? Default : K extends keyof NonNullable<T> ? Exclude<NonNullable<T>[K], undefined> extends infer Value ? [Value] extends [never] ? Default : Value extends string ? Value : Default : Default : Default;
+export type ResolveAuthorizationSchema<O extends AuthorizationSchemaOptions> = {
+    role: {
+        modelName: PropertyOrDefault<Section<O, "role">, "modelName", "authorizationRole">;
+        fields: {
+            id: PropertyOrDefault<Fields<Section<O, "role">>, "id", "id">;
+            userId: PropertyOrDefault<Fields<Section<O, "role">>, "userId", "userId">;
+            role: PropertyOrDefault<Fields<Section<O, "role">>, "role", "role">;
+        };
+    };
+    permission: {
+        modelName: PropertyOrDefault<Section<O, "permission">, "modelName", "authorizationPermission">;
+        fields: {
+            id: PropertyOrDefault<Fields<Section<O, "permission">>, "id", "id">;
+            userId: PropertyOrDefault<Fields<Section<O, "permission">>, "userId", "userId">;
+            permission: PropertyOrDefault<Fields<Section<O, "permission">>, "permission", "permission">;
+            effect: PropertyOrDefault<Fields<Section<O, "permission">>, "effect", "effect">;
+        };
+    };
+};
+export declare function resolveAuthorizationSchema<const O extends AuthorizationSchemaOptions>(options: O): ResolveAuthorizationSchema<O>;
+export {};

package/dist/schema/AuthorizationSchema.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveAuthorizationSchema = resolveAuthorizationSchema;
+function resolveAuthorizationSchema(options) {
+    return {
+        role: {
+            modelName: options.role?.modelName ?? "authorizationRole",
+            fields: {
+                id: options.role?.fields?.id ?? "id",
+                userId: options.role?.fields?.userId ?? "userId",
+                role: options.role?.fields?.role ?? "role",
+            },
+        },
+        permission: {
+            modelName: options.permission?.modelName ?? "authorizationPermission",
+            fields: {
+                id: options.permission?.fields?.id ?? "id",
+                userId: options.permission?.fields?.userId ?? "userId",
+                permission: options.permission?.fields?.permission ?? "permission",
+                effect: options.permission?.fields?.effect ?? "effect",
+            },
+        },
+    };
+}

package/dist/schema/createAuthTables.js

@@ -1,5 +1,8 @@
-import { z } from "zod";
-import { resolveAuthSchema, } from "./AuthSchema";
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAuthTables = createAuthTables;
+const zod_1 = require("zod");
+const AuthSchema_1 = require("./AuthSchema");
 function ensureUniqueFieldNames(modelName, fields) {
     const fieldNames = Object.values(fields);
     if (new Set(fieldNames).size !== fieldNames.length) {
@@ -9,28 +12,28 @@ function ensureUniqueFieldNames(modelName, fields) {
 function keyedTable(definition) {
     return definition;
 }
-export function createAuthTables(options = {}) {
-    const schema = resolveAuthSchema(options);
+function createAuthTables(options = {}) {
+    const schema = (0, AuthSchema_1.resolveAuthSchema)(options);
     ensureUniqueFieldNames(schema.user.modelName, schema.user.fields);
     ensureUniqueFieldNames(schema.account.modelName, schema.account.fields);
     ensureUniqueFieldNames(schema.passwordReset.modelName, schema.passwordReset.fields);
-    const userSchema = z.object({
-        [schema.user.fields.id]: z.string(),
-        [schema.user.fields.name]: z.string(),
+    const userSchema = zod_1.z.object({
+        [schema.user.fields.id]: zod_1.z.string(),
+        [schema.user.fields.name]: zod_1.z.string(),
     });
-    const accountSchema = z.object({
-        [schema.account.fields.id]: z.string(),
-        [schema.account.fields.userId]: z.string(),
-        [schema.account.fields.provider]: z.enum(["emailPassword", "appsScript"]),
-        [schema.account.fields.providerAccountId]: z.string(),
-        [schema.account.fields.passwordHash]: z.string().nullable(),
+    const accountSchema = zod_1.z.object({
+        [schema.account.fields.id]: zod_1.z.string(),
+        [schema.account.fields.userId]: zod_1.z.string(),
+        [schema.account.fields.provider]: zod_1.z.enum(["emailPassword", "appsScript"]),
+        [schema.account.fields.providerAccountId]: zod_1.z.string(),
+        [schema.account.fields.passwordHash]: zod_1.z.string().nullable(),
     });
-    const passwordResetSchema = z.object({
-        [schema.passwordReset.fields.id]: z.string(),
-        [schema.passwordReset.fields.accountId]: z.string(),
-        [schema.passwordReset.fields.tokenHash]: z.string(),
-        [schema.passwordReset.fields.expiresAt]: z.date(),
-        [schema.passwordReset.fields.enabled]: z.boolean(),
+    const passwordResetSchema = zod_1.z.object({
+        [schema.passwordReset.fields.id]: zod_1.z.string(),
+        [schema.passwordReset.fields.accountId]: zod_1.z.string(),
+        [schema.passwordReset.fields.tokenHash]: zod_1.z.string(),
+        [schema.passwordReset.fields.expiresAt]: zod_1.z.date(),
+        [schema.passwordReset.fields.enabled]: zod_1.z.boolean(),
     });
     return {
         schema,

package/dist/schema/createAuthorizationTables.d.ts

@@ -0,0 +1,25 @@
+import { z } from "zod";
+import { type AuthorizationSchema, type AuthorizationSchemaOptions } from "./AuthorizationSchema";
+type RoleShape<S extends AuthorizationSchema> = {
+    [K in S["role"]["fields"]["id"] | S["role"]["fields"]["userId"] | S["role"]["fields"]["role"]]: z.ZodString;
+};
+type PermissionShape<S extends AuthorizationSchema> = {
+    [K in S["permission"]["fields"]["id"] | S["permission"]["fields"]["userId"] | S["permission"]["fields"]["permission"] | S["permission"]["fields"]["effect"]]: K extends S["permission"]["fields"]["effect"] ? z.ZodEnum<{
+        allow: "allow";
+        deny: "deny";
+    }> : z.ZodString;
+};
+export declare function createAuthorizationTables<const O extends AuthorizationSchemaOptions = Record<never, never>>(options?: O): {
+    readonly schema: import("./AuthorizationSchema").ResolveAuthorizationSchema<O>;
+    readonly role: import("@gasboost/table").TableDefinition<["role" extends infer T ? T extends "role" ? T extends keyof O ? O[T] : undefined : never : never] extends [null | undefined] ? "authorizationRole" : "modelName" extends infer T_1 ? T_1 extends "modelName" ? T_1 extends keyof NonNullable<"role" extends infer T ? T extends "role" ? T extends keyof O ? O[T] : undefined : never : never> ? Exclude<NonNullable<"role" extends infer T ? T extends "role" ? T extends keyof O ? O[T] : undefined : never : never>[T_1], undefined> extends infer Value ? [Value] extends [never] ? "authorizationRole" : Value extends string ? Value : "authorizationRole" : "authorizationRole" : "authorizationRole" : never : never, z.ZodObject<RoleShape<import("./AuthorizationSchema").ResolveAuthorizationSchema<O>> extends infer T_2 ? { -readonly [P in keyof T_2]: T_2[P]; } : never, z.core.$strip>> & {
+        readonly primaryKey: Extract<keyof z.core.$InferObjectOutput<RoleShape<import("./AuthorizationSchema").ResolveAuthorizationSchema<O>> extends infer T_2 ? { -readonly [P in keyof T_2]: T_2[P]; } : never, {}>, string>;
+    } & {
+        readonly primaryKey: [["role" extends infer T ? T extends "role" ? T extends keyof O ? O[T] : undefined : never : never] extends [null | undefined] ? undefined : "fields" extends keyof NonNullable<"role" extends infer T ? T extends "role" ? T extends keyof O ? O[T] : undefined : never : never> ? NonNullable<"role" extends infer T ? T extends "role" ? T extends keyof O ? O[T] : undefined : never : never>[keyof NonNullable<"role" extends infer T ? T extends "role" ? T extends keyof O ? O[T] : undefined : never : never> & "fields"] : undefined] extends [null | undefined] ? "id" : "id" extends infer T_3 ? T_3 extends "id" ? T_3 extends keyof NonNullable<["role" extends infer T ? T extends "role" ? T extends keyof O ? O[T] : undefined : never : never] extends [null | undefined] ? undefined : "fields" extends keyof NonNullable<"role" extends infer T ? T extends "role" ? T extends keyof O ? O[T] : undefined : never : never> ? NonNullable<"role" extends infer T ? T extends "role" ? T extends keyof O ? O[T] : undefined : never : never>[keyof NonNullable<"role" extends infer T ? T extends "role" ? T extends keyof O ? O[T] : undefined : never : never> & "fields"] : undefined> ? Exclude<NonNullable<["role" extends infer T ? T extends "role" ? T extends keyof O ? O[T] : undefined : never : never] extends [null | undefined] ? undefined : "fields" extends keyof NonNullable<"role" extends infer T ? T extends "role" ? T extends keyof O ? O[T] : undefined : never : never> ? NonNullable<"role" extends infer T ? T extends "role" ? T extends keyof O ? O[T] : undefined : never : never>[keyof NonNullable<"role" extends infer T ? T extends "role" ? T extends keyof O ? O[T] : undefined : never : never> & "fields"] : undefined>[T_3], undefined> extends infer Value ? [Value] extends [never] ? "id" : Value extends string ? Value : "id" : "id" : "id" : never : never;
+    };
+    readonly permission: import("@gasboost/table").TableDefinition<["permission" extends infer T_4 ? T_4 extends "permission" ? T_4 extends keyof O ? O[T_4] : undefined : never : never] extends [null | undefined] ? "authorizationPermission" : "modelName" extends infer T_5 ? T_5 extends "modelName" ? T_5 extends keyof NonNullable<"permission" extends infer T_4 ? T_4 extends "permission" ? T_4 extends keyof O ? O[T_4] : undefined : never : never> ? Exclude<NonNullable<"permission" extends infer T_4 ? T_4 extends "permission" ? T_4 extends keyof O ? O[T_4] : undefined : never : never>[T_5], undefined> extends infer Value ? [Value] extends [never] ? "authorizationPermission" : Value extends string ? Value : "authorizationPermission" : "authorizationPermission" : "authorizationPermission" : never : never, z.ZodObject<PermissionShape<import("./AuthorizationSchema").ResolveAuthorizationSchema<O>> extends infer T_6 ? { -readonly [P in keyof T_6]: T_6[P]; } : never, z.core.$strip>> & {
+        readonly primaryKey: Extract<keyof z.core.$InferObjectOutput<PermissionShape<import("./AuthorizationSchema").ResolveAuthorizationSchema<O>> extends infer T_6 ? { -readonly [P in keyof T_6]: T_6[P]; } : never, {}>, string>;
+    } & {
+        readonly primaryKey: [["permission" extends infer T_4 ? T_4 extends "permission" ? T_4 extends keyof O ? O[T_4] : undefined : never : never] extends [null | undefined] ? undefined : "fields" extends keyof NonNullable<"permission" extends infer T_4 ? T_4 extends "permission" ? T_4 extends keyof O ? O[T_4] : undefined : never : never> ? NonNullable<"permission" extends infer T_4 ? T_4 extends "permission" ? T_4 extends keyof O ? O[T_4] : undefined : never : never>[keyof NonNullable<"permission" extends infer T_4 ? T_4 extends "permission" ? T_4 extends keyof O ? O[T_4] : undefined : never : never> & "fields"] : undefined] extends [null | undefined] ? "id" : "id" extends infer T_7 ? T_7 extends "id" ? T_7 extends keyof NonNullable<["permission" extends infer T_4 ? T_4 extends "permission" ? T_4 extends keyof O ? O[T_4] : undefined : never : never] extends [null | undefined] ? undefined : "fields" extends keyof NonNullable<"permission" extends infer T_4 ? T_4 extends "permission" ? T_4 extends keyof O ? O[T_4] : undefined : never : never> ? NonNullable<"permission" extends infer T_4 ? T_4 extends "permission" ? T_4 extends keyof O ? O[T_4] : undefined : never : never>[keyof NonNullable<"permission" extends infer T_4 ? T_4 extends "permission" ? T_4 extends keyof O ? O[T_4] : undefined : never : never> & "fields"] : undefined> ? Exclude<NonNullable<["permission" extends infer T_4 ? T_4 extends "permission" ? T_4 extends keyof O ? O[T_4] : undefined : never : never] extends [null | undefined] ? undefined : "fields" extends keyof NonNullable<"permission" extends infer T_4 ? T_4 extends "permission" ? T_4 extends keyof O ? O[T_4] : undefined : never : never> ? NonNullable<"permission" extends infer T_4 ? T_4 extends "permission" ? T_4 extends keyof O ? O[T_4] : undefined : never : never>[keyof NonNullable<"permission" extends infer T_4 ? T_4 extends "permission" ? T_4 extends keyof O ? O[T_4] : undefined : never : never> & "fields"] : undefined>[T_7], undefined> extends infer Value ? [Value] extends [never] ? "id" : Value extends string ? Value : "id" : "id" : "id" : never : never;
+    };
+};
+export {};