@jantstack/adonis-authz 1.0.0

package/build/src/models/authz_role_permission.d.ts

@@ -0,0 +1,155 @@
+import { DateTime } from 'luxon';
+declare const AuthzRolePermission_base: {
+    new (...args: any[]): {
+        $attributes: import("@adonisjs/lucid/types/model").ModelObject;
+        $extras: import("@adonisjs/lucid/types/model").ModelObject;
+        $original: import("@adonisjs/lucid/types/model").ModelObject;
+        $preloaded: {
+            [relation: string]: import("@adonisjs/lucid/types/model").LucidRow | import("@adonisjs/lucid/types/model").LucidRow[];
+        };
+        $sideloaded: import("@adonisjs/lucid/types/model").ModelObject;
+        $primaryKeyValue?: number | string;
+        $isPersisted: boolean;
+        $isNew: boolean;
+        $isLocal: boolean;
+        $dirty: import("@adonisjs/lucid/types/model").ModelObject;
+        $isDirty: boolean;
+        $isDeleted: boolean;
+        $options?: import("@adonisjs/lucid/types/model").ModelOptions;
+        $trx?: import("@adonisjs/lucid/types/database").TransactionClientContract;
+        $setOptionsAndTrx(options?: import("@adonisjs/lucid/types/model").ModelAdapterOptions): void;
+        useTransaction(trx: import("@adonisjs/lucid/types/database").TransactionClientContract): /*elided*/ any;
+        useConnection(connection: string): /*elided*/ any;
+        $getQueryFor(action: "insert", client: import("@adonisjs/lucid/types/database").QueryClientContract): ReturnType<import("@adonisjs/lucid/types/database").QueryClientContract["insertQuery"]>;
+        $getQueryFor(action: "update" | "delete" | "refresh", client: import("@adonisjs/lucid/types/database").QueryClientContract): import("@adonisjs/lucid/types/model").ModelQueryBuilderContract<import("@adonisjs/lucid/types/model").LucidModel>;
+        $setAttribute(key: string, value: any): void;
+        $getAttribute(key: string): any;
+        $getAttributeFromCache(key: string, callback: import("@adonisjs/lucid/types/model").CacheNode["getter"]): any;
+        $hasRelated(key: string): boolean;
+        $setRelated(key: string, result: import("@adonisjs/lucid/types/querybuilder").OneOrMany<import("@adonisjs/lucid/types/model").LucidRow> | null): void;
+        $pushRelated(key: string, result: import("@adonisjs/lucid/types/querybuilder").OneOrMany<import("@adonisjs/lucid/types/model").LucidRow> | null): void;
+        $getRelated(key: string, defaultValue?: any): import("@adonisjs/lucid/types/querybuilder").OneOrMany<import("@adonisjs/lucid/types/model").LucidRow> | undefined | null;
+        $consumeAdapterResult(adapterResult: import("@adonisjs/lucid/types/model").ModelObject, sideloadAttributes?: import("@adonisjs/lucid/types/model").ModelObject): void;
+        $hydrateOriginals(): void;
+        fill(value: Partial<import("@adonisjs/lucid/types/model").ModelAttributes</*elided*/ any>>, allowExtraProperties?: boolean): /*elided*/ any;
+        merge(value: Partial<import("@adonisjs/lucid/types/model").ModelAttributes</*elided*/ any>>, allowExtraProperties?: boolean): /*elided*/ any;
+        isDirty(fields?: undefined[] | undefined): boolean;
+        enableForceUpdate(): /*elided*/ any;
+        save(): Promise</*elided*/ any>;
+        saveQuietly(): Promise</*elided*/ any>;
+        lockForUpdate<T>(callback: (user: /*elided*/ any) => T | Promise<T>): Promise<T>;
+        delete(): Promise<void>;
+        deleteQuietly(): Promise<void>;
+        refresh(): Promise</*elided*/ any>;
+        load: import("@adonisjs/lucid/types/model").LucidRowPreload</*elided*/ any>;
+        loadOnce: import("@adonisjs/lucid/types/model").LucidRowPreloadOnce</*elided*/ any>;
+        preload: import("@adonisjs/lucid/types/model").LucidRowPreload</*elided*/ any>;
+        loadAggregate: <Self extends /*elided*/ any, Name extends import("@adonisjs/lucid/types/relations").ExtractModelRelations<Self>, RelatedBuilder = NonNullable<Self[Name]> extends import("@adonisjs/lucid/types/relations").ModelRelations<import("@adonisjs/lucid/types/model").LucidModel, import("@adonisjs/lucid/types/model").LucidModel> ? (import("@adonisjs/lucid/types/relations").ModelRelations<import("@adonisjs/lucid/types/model").LucidModel, import("@adonisjs/lucid/types/model").LucidModel> & Self[Name] & {})["subQuery"] : never>(name: Name, callback: (builder: RelatedBuilder) => void) => import("@adonisjs/lucid/types/model").LazyLoadAggregatesContract<Self>;
+        loadCount: <Self extends /*elided*/ any, Name extends import("@adonisjs/lucid/types/relations").ExtractModelRelations<Self>, RelatedBuilder = NonNullable<Self[Name]> extends import("@adonisjs/lucid/types/relations").ModelRelations<import("@adonisjs/lucid/types/model").LucidModel, import("@adonisjs/lucid/types/model").LucidModel> ? (import("@adonisjs/lucid/types/relations").ModelRelations<import("@adonisjs/lucid/types/model").LucidModel, import("@adonisjs/lucid/types/model").LucidModel> & Self[Name] & {})["subQuery"] : never>(name: Name, callback?: ((builder: RelatedBuilder) => void) | undefined) => import("@adonisjs/lucid/types/model").LazyLoadAggregatesContract<Self>;
+        serializeAttributes(fields?: import("@adonisjs/lucid/types/model").CherryPickFields, raw?: boolean): import("@adonisjs/lucid/types/model").ModelObject;
+        serializeComputed(fields?: import("@adonisjs/lucid/types/model").CherryPickFields): import("@adonisjs/lucid/types/model").ModelObject;
+        serializeRelations(fields: undefined, raw: true): {
+            [key: string]: import("@adonisjs/lucid/types/model").LucidRow | import("@adonisjs/lucid/types/model").LucidRow[];
+        };
+        serializeRelations(cherryPick: import("@adonisjs/lucid/types/model").CherryPick["relations"] | undefined, raw: false | undefined): import("@adonisjs/lucid/types/model").ModelObject;
+        serializeRelations(cherryPick?: import("@adonisjs/lucid/types/model").CherryPick["relations"], raw?: boolean): import("@adonisjs/lucid/types/model").ModelObject;
+        serialize(cherryPick?: import("@adonisjs/lucid/types/model").CherryPick): import("@adonisjs/lucid/types/model").ModelObject;
+        toObject(): import("@adonisjs/lucid/types/model").ModelObject;
+        toJSON(): import("@adonisjs/lucid/types/model").ModelObject;
+        toAttributes(): Record<string, any>;
+        related<Name extends undefined>(relation: Name): NonNullable</*elided*/ any[Name]> extends import("@adonisjs/lucid/types/relations").ModelRelations<import("@adonisjs/lucid/types/model").LucidModel, import("@adonisjs/lucid/types/model").LucidModel> ? (import("@adonisjs/lucid/types/relations").ModelRelations<import("@adonisjs/lucid/types/model").LucidModel, import("@adonisjs/lucid/types/model").LucidModel> & /*elided*/ any[Name] & {})["client"] : never;
+    };
+    selfAssignPrimaryKey: boolean;
+    generateUuid(model: any): void;
+    nextUuid(): string;
+    find: <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, value: any, options?: import("@adonisjs/lucid/types/model").ModelAdapterOptions) => Promise<null | InstanceType<T>>;
+    readonly booted: boolean;
+    $columnsDefinitions: Map<string, import("@adonisjs/lucid/types/model").ModelColumnOptions>;
+    $relationsDefinitions: Map<string, import("@adonisjs/lucid/types/relations").RelationshipsContract>;
+    $computedDefinitions: Map<string, import("@adonisjs/lucid/types/model").ComputedOptions>;
+    primaryKey: string;
+    connection?: string | undefined;
+    namingStrategy: import("@adonisjs/lucid/types/model").NamingStrategyContract;
+    table: string;
+    $adapter: import("@adonisjs/lucid/types/model").AdapterContract;
+    useAdapter: (adapter: import("@adonisjs/lucid/types/model").AdapterContract) => void;
+    $hooks: import("@poppinss/hooks").default<any>;
+    $keys: {
+        attributesToColumns: import("@adonisjs/lucid/types/model").ModelKeysContract;
+        attributesToSerialized: import("@adonisjs/lucid/types/model").ModelKeysContract;
+        columnsToAttributes: import("@adonisjs/lucid/types/model").ModelKeysContract;
+        columnsToSerialized: import("@adonisjs/lucid/types/model").ModelKeysContract;
+        serializedToColumns: import("@adonisjs/lucid/types/model").ModelKeysContract;
+        serializedToAttributes: import("@adonisjs/lucid/types/model").ModelKeysContract;
+        columnAliasesToAttributes: import("@adonisjs/lucid/types/model").ModelKeysContract;
+    };
+    $createFromAdapterResult: <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, result?: import("@adonisjs/lucid/types/model").ModelObject, sideloadAttributes?: import("@adonisjs/lucid/types/model").ModelObject, options?: import("@adonisjs/lucid/types/model").ModelAdapterOptions) => null | InstanceType<T>;
+    $createMultipleFromAdapterResult: <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, results: import("@adonisjs/lucid/types/model").ModelObject[], sideloadAttributes?: import("@adonisjs/lucid/types/model").ModelObject, options?: import("@adonisjs/lucid/types/model").ModelAdapterOptions) => InstanceType<T>[];
+    $addColumn: (name: string, options: Partial<import("@adonisjs/lucid/types/model").ColumnOptions>) => import("@adonisjs/lucid/types/model").ColumnOptions;
+    $hasColumn: (name: string) => boolean;
+    $getColumn: (name: string) => import("@adonisjs/lucid/types/model").ModelColumnOptions | undefined;
+    $getColumnAlias: (columnName: string) => string;
+    columnsForSelect: () => Record<string, string>;
+    $addComputed: (name: string, options: Partial<import("@adonisjs/lucid/types/model").ComputedOptions>) => import("@adonisjs/lucid/types/model").ComputedOptions;
+    $hasComputed: (name: string) => boolean;
+    $getComputed: (name: string) => import("@adonisjs/lucid/types/model").ComputedOptions | undefined;
+    $addRelation: (name: string, type: import("@adonisjs/lucid/types/relations").ModelRelationTypes["__opaque_type"], relatedModel: () => import("@adonisjs/lucid/types/model").LucidModel, options: import("@adonisjs/lucid/types/model").ModelRelationOptions) => void;
+    $hasRelation: (name: string) => boolean;
+    $getRelation: {
+        <Model extends import("@adonisjs/lucid/types/model").LucidModel, Name extends import("@adonisjs/lucid/types/relations").ExtractModelRelations<InstanceType<Model>>>(this: Model, name: Name): NonNullable<InstanceType<Model>[Name]> extends import("@adonisjs/lucid/types/relations").ModelRelations<import("@adonisjs/lucid/types/model").LucidModel, import("@adonisjs/lucid/types/model").LucidModel> ? NonNullable<InstanceType<Model>[Name]>["client"]["relation"] : import("@adonisjs/lucid/types/relations").RelationshipsContract;
+        <Model extends import("@adonisjs/lucid/types/model").LucidModel>(this: Model, name: string): import("@adonisjs/lucid/types/relations").RelationshipsContract;
+    };
+    $defineProperty: <Model extends import("@adonisjs/lucid/types/model").LucidModel, Prop extends keyof Model>(this: Model, propertyName: Prop, defaultValue: Model[Prop], strategy: "inherit" | "define" | ((value: Model[Prop]) => Model[Prop])) => void;
+    boot: () => void;
+    before: {
+        <Model extends import("@adonisjs/lucid/types/model").LucidModel, Event extends "find" | "fetch">(this: Model, event: Event, handler: import("@adonisjs/lucid/types/model").HooksHandler<import("@adonisjs/lucid/types/model").ModelQueryBuilderContract<Model>, Event>): void;
+        <Model extends import("@adonisjs/lucid/types/model").LucidModel>(this: Model, event: "paginate", handler: import("@adonisjs/lucid/types/model").HooksHandler<[import("@adonisjs/lucid/types/model").ModelQueryBuilderContract<Model>, import("@adonisjs/lucid/types/model").ModelQueryBuilderContract<Model>], "paginate">): void;
+        <Model extends import("@adonisjs/lucid/types/model").LucidModel, Event extends import("@adonisjs/lucid/types/model").EventsList>(this: Model, event: Event, handler: import("@adonisjs/lucid/types/model").HooksHandler<InstanceType<Model>, Event>): void;
+    };
+    after: {
+        <Model extends import("@adonisjs/lucid/types/model").LucidModel>(this: Model, event: "fetch", handler: import("@adonisjs/lucid/types/model").HooksHandler<InstanceType<Model>[], "fetch">): void;
+        <Model extends import("@adonisjs/lucid/types/model").LucidModel>(this: Model, event: "paginate", handler: import("@adonisjs/lucid/types/model").HooksHandler<import("@adonisjs/lucid/types/model").ModelPaginatorContract<InstanceType<Model>>, "paginate">): void;
+        <Model extends import("@adonisjs/lucid/types/model").LucidModel, Event extends import("@adonisjs/lucid/types/model").EventsList>(this: Model, event: Event, handler: import("@adonisjs/lucid/types/model").HooksHandler<InstanceType<Model>, Event>): void;
+    };
+    create: <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, values: Partial<import("@adonisjs/lucid/types/model").ModelAttributes<InstanceType<T>>>, options?: import("@adonisjs/lucid/types/model").ModelAssignOptions) => Promise<InstanceType<T>>;
+    createQuietly: <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, values: Partial<import("@adonisjs/lucid/types/model").ModelAttributes<InstanceType<T>>>, options?: import("@adonisjs/lucid/types/model").ModelAssignOptions) => Promise<InstanceType<T>>;
+    createMany: <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, values: Partial<import("@adonisjs/lucid/types/model").ModelAttributes<InstanceType<T>>>[], options?: import("@adonisjs/lucid/types/model").ModelAssignOptions) => Promise<InstanceType<T>[]>;
+    createManyQuietly: <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, values: Partial<import("@adonisjs/lucid/types/model").ModelAttributes<InstanceType<T>>>[], options?: import("@adonisjs/lucid/types/model").ModelAssignOptions) => Promise<InstanceType<T>[]>;
+    findOrFail: <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, value: any, options?: import("@adonisjs/lucid/types/model").ModelAdapterOptions) => Promise<InstanceType<T>>;
+    findBy: {
+        <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, clause: Record<string, unknown>, options?: import("@adonisjs/lucid/types/model").ModelAdapterOptions): Promise<null | InstanceType<T>>;
+        <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, key: string, value: any, options?: import("@adonisjs/lucid/types/model").ModelAdapterOptions): Promise<null | InstanceType<T>>;
+    };
+    findByOrFail: {
+        <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, clause: Record<string, unknown>, options?: import("@adonisjs/lucid/types/model").ModelAdapterOptions): Promise<InstanceType<T>>;
+        <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, key: string, value: any, options?: import("@adonisjs/lucid/types/model").ModelAdapterOptions): Promise<InstanceType<T>>;
+    };
+    findManyBy: {
+        <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, clause: Record<string, unknown>, options?: import("@adonisjs/lucid/types/model").ModelAdapterOptions): Promise<InstanceType<T>[]>;
+        <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, key: string, value: any, options?: import("@adonisjs/lucid/types/model").ModelAdapterOptions): Promise<InstanceType<T>[]>;
+    };
+    first: <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, options?: import("@adonisjs/lucid/types/model").ModelAdapterOptions) => Promise<null | InstanceType<T>>;
+    firstOrFail: <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, options?: import("@adonisjs/lucid/types/model").ModelAdapterOptions) => Promise<InstanceType<T>>;
+    findMany: <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, value: any[], options?: import("@adonisjs/lucid/types/model").ModelAdapterOptions) => Promise<InstanceType<T>[]>;
+    firstOrNew: <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, searchPayload: Partial<import("@adonisjs/lucid/types/model").ModelAttributes<InstanceType<T>>>, savePayload?: Partial<import("@adonisjs/lucid/types/model").ModelAttributes<InstanceType<T>>>, options?: import("@adonisjs/lucid/types/model").ModelAssignOptions) => Promise<InstanceType<T>>;
+    firstOrCreate: <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, searchPayload: Partial<import("@adonisjs/lucid/types/model").ModelAttributes<InstanceType<T>>>, savePayload?: Partial<import("@adonisjs/lucid/types/model").ModelAttributes<InstanceType<T>>>, options?: import("@adonisjs/lucid/types/model").ModelAssignOptions) => Promise<InstanceType<T>>;
+    updateOrCreate: <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, searchPayload: Partial<import("@adonisjs/lucid/types/model").ModelAttributes<InstanceType<T>>>, updatePayload: Partial<import("@adonisjs/lucid/types/model").ModelAttributes<InstanceType<T>>>, options?: import("@adonisjs/lucid/types/model").ModelAssignOptions) => Promise<InstanceType<T>>;
+    fetchOrNewUpMany: <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, predicate: keyof import("@adonisjs/lucid/types/model").ModelAttributes<InstanceType<T>> | (keyof import("@adonisjs/lucid/types/model").ModelAttributes<InstanceType<T>>)[], payload: Partial<import("@adonisjs/lucid/types/model").ModelAttributes<InstanceType<T>>>[], options?: import("@adonisjs/lucid/types/model").ModelAssignOptions) => Promise<InstanceType<T>[]>;
+    fetchOrCreateMany: <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, predicate: keyof import("@adonisjs/lucid/types/model").ModelAttributes<InstanceType<T>> | (keyof import("@adonisjs/lucid/types/model").ModelAttributes<InstanceType<T>>)[], payload: Partial<import("@adonisjs/lucid/types/model").ModelAttributes<InstanceType<T>>>[], options?: import("@adonisjs/lucid/types/model").ModelAssignOptions) => Promise<InstanceType<T>[]>;
+    updateOrCreateMany: <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, predicate: keyof import("@adonisjs/lucid/types/model").ModelAttributes<InstanceType<T>> | (keyof import("@adonisjs/lucid/types/model").ModelAttributes<InstanceType<T>>)[], payload: Partial<import("@adonisjs/lucid/types/model").ModelAttributes<InstanceType<T>>>[], options?: import("@adonisjs/lucid/types/model").ModelAssignOptions) => Promise<InstanceType<T>[]>;
+    all: <T extends import("@adonisjs/lucid/types/model").LucidModel>(this: T, options?: import("@adonisjs/lucid/types/model").ModelAdapterOptions) => Promise<InstanceType<T>[]>;
+    query: <Model extends import("@adonisjs/lucid/types/model").LucidModel, Result = InstanceType<Model>>(this: Model, options?: import("@adonisjs/lucid/types/model").ModelAdapterOptions) => import("@adonisjs/lucid/types/model").ModelQueryBuilderContract<Model, Result>;
+    transaction: import("@adonisjs/lucid/types/database").TransactionFn;
+    truncate: (cascade?: boolean) => Promise<void>;
+} & import("@adonisjs/lucid/types/model").LucidModel;
+/** Pivot rol ↔ permiso del motor de autorización propio. */
+export default class AuthzRolePermission extends AuthzRolePermission_base {
+    static table: string;
+    static primaryKey: string;
+    uuid: string;
+    roleUuid: string;
+    permissionUuid: string;
+    createdAt: DateTime;
+}
+export {};
+//# sourceMappingURL=authz_role_permission.d.ts.map

package/build/src/models/authz_role_permission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authz_role_permission.d.ts","sourceRoot":"","sources":["../../../src/models/authz_role_permission.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oZAsBoxtB,gDAAiD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAjBr2tB,4DAA4D;AAC5D,MAAM,CAAC,OAAO,OAAO,mBAAoB,SAAQ,wBAA2B;IAC1E,OAAc,KAAK,SAA2B;IAC9C,OAAc,UAAU,SAAS;IAGzB,IAAI,EAAE,MAAM,CAAA;IAGZ,QAAQ,EAAE,MAAM,CAAA;IAGhB,cAAc,EAAE,MAAM,CAAA;IAGtB,SAAS,EAAE,QAAQ,CAAA;CAC5B"}

package/build/src/models/authz_role_permission.js

@@ -0,0 +1,35 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { DateTime } from 'luxon';
+import { BaseModel, column } from '@adonisjs/lucid/orm';
+import { compose } from '@adonisjs/core/helpers';
+import { hasUuid } from '../traits/has_uuid.js';
+/** Pivot rol ↔ permiso del motor de autorización propio. */
+export default class AuthzRolePermission extends compose(BaseModel, hasUuid) {
+    static table = 'authz_role_permissions';
+    static primaryKey = 'uuid';
+}
+__decorate([
+    column({ isPrimary: true }),
+    __metadata("design:type", String)
+], AuthzRolePermission.prototype, "uuid", void 0);
+__decorate([
+    column({ columnName: 'role_uuid' }),
+    __metadata("design:type", String)
+], AuthzRolePermission.prototype, "roleUuid", void 0);
+__decorate([
+    column({ columnName: 'permission_uuid' }),
+    __metadata("design:type", String)
+], AuthzRolePermission.prototype, "permissionUuid", void 0);
+__decorate([
+    column.dateTime({ autoCreate: true, columnName: 'created_at' }),
+    __metadata("design:type", DateTime)
+], AuthzRolePermission.prototype, "createdAt", void 0);
+//# sourceMappingURL=authz_role_permission.js.map

package/build/src/models/authz_role_permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authz_role_permission.js","sourceRoot":"","sources":["../../../src/models/authz_role_permission.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAA;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAA;AAE/C,4DAA4D;AAC5D,MAAM,CAAC,OAAO,OAAO,mBAAoB,SAAQ,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC;IACnE,MAAM,CAAC,KAAK,GAAG,wBAAwB,CAAA;IACvC,MAAM,CAAC,UAAU,GAAG,MAAM,CAAA;;AAGzB;IADP,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;;iDACR;AAGZ;IADP,MAAM,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;;qDACZ;AAGhB;IADP,MAAM,CAAC,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC;;2DACZ;AAGtB;IADP,MAAM,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;8BAC7C,QAAQ;sDAAA"}

package/build/src/testing/contract.d.ts

@@ -0,0 +1,27 @@
+import '@japa/assert';
+import type { AuthorizationDriver, CatalogSpec } from '../types.js';
+/**
+ * Suite de contrato del sistema de autorización — EL JUEZ.
+ *
+ * Cualquier driver (database, openfga, custom del consumidor) debe pasar
+ * estos casos sin modificarlos: son la definición ejecutable de la semántica
+ * documentada en `#services/authorization/types`. Para enchufar un driver:
+ *
+ *   runAuthorizationDriverContract({
+ *     name: 'mi-driver',
+ *     makeDriver: () => new MiDriver(),
+ *     seedCatalog: (catalog) => ...,   // materializa roles/permisos
+ *     cleanup: () => ...,              // borra hechos + catálogo entre tests
+ *   })
+ *
+ * `seedCatalog`/`cleanup` son del harness (no del contrato) porque cada
+ * backend materializa el catálogo a su manera (tablas propias, FGA model...).
+ */
+export interface DriverContractHarness {
+    name: string;
+    makeDriver: () => AuthorizationDriver | Promise<AuthorizationDriver>;
+    seedCatalog: (catalog: CatalogSpec) => Promise<void>;
+    cleanup: () => Promise<void>;
+}
+export declare function runAuthorizationDriverContract(harness: DriverContractHarness): void;
+//# sourceMappingURL=contract.d.ts.map

package/build/src/testing/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../../src/testing/contract.ts"],"names":[],"mappings":"AAAA,OAAO,cAAc,CAAA;AAGrB,OAAO,KAAK,EACV,mBAAmB,EACnB,WAAW,EAGZ,MAAM,aAAa,CAAA;AAGpB;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAA;IACpE,WAAW,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACpD,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC7B;AAoBD,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,qBAAqB,QAkP5E"}

package/build/src/testing/contract.js

@@ -0,0 +1,211 @@
+import '@japa/assert';
+import { test } from '@japa/runner';
+import { v7 as uuidv7 } from 'uuid';
+import { APP_SCOPE } from '../types.js';
+/** Catálogo de prueba: roles a nivel app y a nivel organization. */
+const CONTRACT_CATALOG = {
+    permissions: [{ slug: 'docs:read' }, { slug: 'docs:write' }, { slug: 'billing:read' }],
+    roles: [
+        { slug: 'editor', scopeType: 'app', permissions: ['docs:read', 'docs:write'] },
+        { slug: 'viewer', scopeType: 'app', permissions: ['docs:read'] },
+        { slug: 'org-editor', scopeType: 'organization', permissions: ['docs:read', 'docs:write'] },
+    ],
+};
+function subject(type = 'users') {
+    return { type, uuid: uuidv7() };
+}
+function orgScope(uuid = uuidv7()) {
+    return { type: 'organization', uuid };
+}
+export function runAuthorizationDriverContract(harness) {
+    test.group(`authorization contract [${harness.name}]`, (group) => {
+        let driver;
+        group.each.setup(async () => {
+            await harness.cleanup();
+            await harness.seedCatalog(CONTRACT_CATALOG);
+            driver = await harness.makeDriver();
+        });
+        group.teardown(async () => {
+            await harness.cleanup();
+        });
+        test('grant de un rol concede sus permisos (authorize true)', async ({ assert }) => {
+            const alice = subject();
+            await driver.grant(alice, 'editor', APP_SCOPE);
+            assert.isTrue(await driver.authorize(alice, 'docs:read', APP_SCOPE));
+            assert.isTrue(await driver.authorize(alice, 'docs:write', APP_SCOPE));
+        });
+        test('sin asignación → authorize false (denegación por defecto)', async ({ assert }) => {
+            assert.isFalse(await driver.authorize(subject(), 'docs:read', APP_SCOPE));
+        });
+        test('permiso fuera del rol → false; permiso desconocido → false sin throw', async ({ assert, }) => {
+            const bob = subject();
+            await driver.grant(bob, 'viewer', APP_SCOPE);
+            assert.isTrue(await driver.authorize(bob, 'docs:read', APP_SCOPE));
+            assert.isFalse(await driver.authorize(bob, 'docs:write', APP_SCOPE));
+            assert.isFalse(await driver.authorize(bob, 'no:existe', APP_SCOPE));
+        });
+        test('revoke retira el permiso', async ({ assert }) => {
+            const alice = subject();
+            await driver.grant(alice, 'editor', APP_SCOPE);
+            await driver.revoke(alice, 'editor', APP_SCOPE);
+            assert.isFalse(await driver.authorize(alice, 'docs:read', APP_SCOPE));
+        });
+        test('grant de rol inexistente para el scope lanza', async ({ assert }) => {
+            await assert.rejects(() => driver.grant(subject(), 'no-existe', APP_SCOPE));
+            // org-editor existe pero a nivel organization, no app:
+            await assert.rejects(() => driver.grant(subject(), 'org-editor', APP_SCOPE));
+        });
+        test('deny explícito gana sobre el rol; removeDeny lo restaura', async ({ assert }) => {
+            const alice = subject();
+            await driver.grant(alice, 'editor', APP_SCOPE);
+            await driver.deny(alice, 'docs:write', APP_SCOPE);
+            assert.isFalse(await driver.authorize(alice, 'docs:write', APP_SCOPE));
+            // El deny es quirúrgico: solo bloquea ese permiso.
+            assert.isTrue(await driver.authorize(alice, 'docs:read', APP_SCOPE));
+            await driver.removeDeny(alice, 'docs:write', APP_SCOPE);
+            assert.isTrue(await driver.authorize(alice, 'docs:write', APP_SCOPE));
+        });
+        test('deny de permiso desconocido lanza (error de programación)', async ({ assert }) => {
+            await assert.rejects(() => driver.deny(subject(), 'no:existe', APP_SCOPE));
+        });
+        test('asignación expirada no concede; expiración futura sí', async ({ assert }) => {
+            const past = subject();
+            await driver.grant(past, 'editor', APP_SCOPE, {
+                expiresAt: new Date(Date.now() - 60_000),
+            });
+            assert.isFalse(await driver.authorize(past, 'docs:read', APP_SCOPE));
+            const future = subject();
+            await driver.grant(future, 'editor', APP_SCOPE, {
+                expiresAt: new Date(Date.now() + 60_000),
+            });
+            assert.isTrue(await driver.authorize(future, 'docs:read', APP_SCOPE));
+        });
+        test('scope aislado: grant en una org NO autoriza en app ni en otra org', async ({ assert, }) => {
+            const alice = subject();
+            const orgA = orgScope();
+            const orgB = orgScope();
+            await driver.grant(alice, 'org-editor', orgA);
+            assert.isTrue(await driver.authorize(alice, 'docs:write', orgA));
+            assert.isFalse(await driver.authorize(alice, 'docs:write', orgB));
+            assert.isFalse(await driver.authorize(alice, 'docs:write', APP_SCOPE));
+        });
+        test('herencia hacia abajo: grant a nivel app autoriza dentro de una org', async ({ assert, }) => {
+            const alice = subject();
+            await driver.grant(alice, 'editor', APP_SCOPE);
+            assert.isTrue(await driver.authorize(alice, 'docs:write', orgScope()));
+        });
+        test('deny en el scope cercano bloquea el grant heredado, solo ahí', async ({ assert }) => {
+            const alice = subject();
+            const orgA = orgScope();
+            const orgB = orgScope();
+            await driver.grant(alice, 'editor', APP_SCOPE);
+            await driver.deny(alice, 'docs:write', orgA);
+            assert.isFalse(await driver.authorize(alice, 'docs:write', orgA));
+            assert.isTrue(await driver.authorize(alice, 'docs:write', orgB));
+            assert.isTrue(await driver.authorize(alice, 'docs:write', APP_SCOPE));
+        });
+        test('holder polimórfico: mismo uuid con distinto type no se cruzan', async ({ assert }) => {
+            const uuid = uuidv7();
+            const asUser = { type: 'users', uuid };
+            const asAdmin = { type: 'admins', uuid };
+            await driver.grant(asUser, 'editor', APP_SCOPE);
+            assert.isTrue(await driver.authorize(asUser, 'docs:read', APP_SCOPE));
+            assert.isFalse(await driver.authorize(asAdmin, 'docs:read', APP_SCOPE));
+        });
+        test('grant duplicado es idempotente (y refresca expiresAt)', async ({ assert }) => {
+            const alice = subject();
+            // Primera vez expirada, re-grant sin expiración: debe quedar vigente y única.
+            await driver.grant(alice, 'editor', APP_SCOPE, {
+                expiresAt: new Date(Date.now() - 60_000),
+            });
+            await driver.grant(alice, 'editor', APP_SCOPE);
+            await driver.grant(alice, 'editor', APP_SCOPE);
+            assert.isTrue(await driver.authorize(alice, 'docs:read', APP_SCOPE));
+            const holders = await driver.listSubjects('editor', APP_SCOPE);
+            assert.lengthOf(holders.filter((h) => h.uuid === alice.uuid), 1);
+        });
+        test('hasRole respeta scope, herencia y expiración', async ({ assert }) => {
+            const alice = subject();
+            await driver.grant(alice, 'editor', APP_SCOPE);
+            assert.isTrue(await driver.hasRole(alice, 'editor', APP_SCOPE));
+            // Herencia hacia abajo: el rol de app "vale" dentro de una org.
+            assert.isTrue(await driver.hasRole(alice, 'editor', orgScope()));
+            assert.isFalse(await driver.hasRole(alice, 'viewer', APP_SCOPE));
+            await driver.revoke(alice, 'editor', APP_SCOPE);
+            assert.isFalse(await driver.hasRole(alice, 'editor', APP_SCOPE));
+            const expired = subject();
+            await driver.grant(expired, 'editor', APP_SCOPE, {
+                expiresAt: new Date(Date.now() - 60_000),
+            });
+            assert.isFalse(await driver.hasRole(expired, 'editor', APP_SCOPE));
+        });
+        test('listSubjects: holders vigentes del rol en el scope exacto', async ({ assert }) => {
+            const alice = subject();
+            const bob = subject();
+            const expired = subject();
+            const otherScope = orgScope();
+            await driver.grant(alice, 'editor', APP_SCOPE);
+            await driver.grant(bob, 'editor', APP_SCOPE);
+            await driver.grant(expired, 'editor', APP_SCOPE, {
+                expiresAt: new Date(Date.now() - 60_000),
+            });
+            await driver.grant(subject(), 'org-editor', otherScope);
+            const holders = await driver.listSubjects('editor', APP_SCOPE);
+            const uuids = holders.map((h) => h.uuid);
+            assert.includeMembers(uuids, [alice.uuid, bob.uuid]);
+            assert.notInclude(uuids, expired.uuid);
+        });
+        test('listScopes: scopes directos que conceden el permiso, sin los denegados', async ({ assert, }) => {
+            const alice = subject();
+            const orgA = orgScope();
+            const orgB = orgScope();
+            await driver.grant(alice, 'editor', APP_SCOPE);
+            await driver.grant(alice, 'org-editor', orgA);
+            await driver.grant(alice, 'org-editor', orgB);
+            await driver.deny(alice, 'docs:write', orgB);
+            const scopes = await driver.listScopes(alice, 'docs:write');
+            const keys = scopes.map((s) => `${s.type}:${s.uuid ?? ''}`);
+            assert.includeMembers(keys, ['app:', `organization:${orgA.uuid}`]);
+            assert.notInclude(keys, `organization:${orgB.uuid}`);
+        });
+        test('revoke/removeDeny inexistentes son no-ops seguros', async ({ assert }) => {
+            const ghost = subject();
+            await driver.revoke(ghost, 'editor', APP_SCOPE);
+            await driver.removeDeny(ghost, 'docs:read', APP_SCOPE);
+            assert.isFalse(await driver.authorize(ghost, 'docs:read', APP_SCOPE));
+        });
+        test('listRoles: roles directos vigentes en el scope exacto', async ({ assert }) => {
+            const alice = subject();
+            const orgA = orgScope();
+            await driver.grant(alice, 'editor', APP_SCOPE);
+            await driver.grant(alice, 'viewer', APP_SCOPE, {
+                expiresAt: new Date(Date.now() - 60_000), // expirado: no cuenta
+            });
+            await driver.grant(alice, 'org-editor', orgA);
+            const appRoles = await driver.listRoles(alice, APP_SCOPE);
+            assert.deepEqual(appRoles.sort(), ['editor']);
+            // El scope exacto manda: en la org NO aparece el rol de app (eso es
+            // herencia de authorize/hasRole, no membresía directa).
+            const orgRoles = await driver.listRoles(alice, orgA);
+            assert.deepEqual(orgRoles, ['org-editor']);
+            assert.deepEqual(await driver.listRoles(subject(), APP_SCOPE), []);
+        });
+        test('listRoleScopes: scopes del tipo con algún rol directo vigente', async ({ assert }) => {
+            const alice = subject();
+            const orgA = orgScope();
+            const orgB = orgScope();
+            await driver.grant(alice, 'org-editor', orgA);
+            await driver.grant(alice, 'org-editor', orgB, {
+                expiresAt: new Date(Date.now() - 60_000), // expirado: fuera
+            });
+            await driver.grant(alice, 'editor', APP_SCOPE);
+            const orgs = await driver.listRoleScopes(alice, 'organization');
+            assert.deepEqual(orgs.map((s) => s.uuid), [orgA.uuid]);
+            // El tipo filtra: el grant a nivel app no aparece como organization.
+            const apps = await driver.listRoleScopes(alice, 'app');
+            assert.lengthOf(apps, 1);
+            assert.isNull(apps[0].uuid);
+        });
+    });
+}
+//# sourceMappingURL=contract.js.map

package/build/src/testing/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../../src/testing/contract.ts"],"names":[],"mappings":"AAAA,OAAO,cAAc,CAAA;AACrB,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AACnC,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAA;AAOnC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AA2BvC,oEAAoE;AACpE,MAAM,gBAAgB,GAAgB;IACpC,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IACtF,KAAK,EAAE;QACL,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE;QAC9E,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,WAAW,CAAC,EAAE;QAChE,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE;KAC5F;CACF,CAAA;AAED,SAAS,OAAO,CAAC,OAAe,OAAO;IACrC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAA;AACjC,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe,MAAM,EAAE;IACvC,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAA;AACvC,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,OAA8B;IAC3E,IAAI,CAAC,KAAK,CAAC,2BAA2B,OAAO,CAAC,IAAI,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE;QAC/D,IAAI,MAA2B,CAAA;QAE/B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE;YAC1B,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;YACvB,MAAM,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAA;YAC3C,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAA;QACrC,CAAC,CAAC,CAAA;QAEF,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YACxB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAA;QACzB,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,uDAAuD,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACjF,MAAM,KAAK,GAAG,OAAO,EAAE,CAAA;YACvB,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;YAC9C,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAA;YACpE,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAA;QACvE,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,2DAA2D,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACrF,MAAM,CAAC,OAAO,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAA;QAC3E,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,sEAAsE,EAAE,KAAK,EAAE,EAClF,MAAM,GACP,EAAE,EAAE;YACH,MAAM,GAAG,GAAG,OAAO,EAAE,CAAA;YACrB,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;YAC5C,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAA;YAClE,MAAM,CAAC,OAAO,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAA;YACpE,MAAM,CAAC,OAAO,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAA;QACrE,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,0BAA0B,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACpD,MAAM,KAAK,GAAG,OAAO,EAAE,CAAA;YACvB,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;YAC9C,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;YAC/C,MAAM,CAAC,OAAO,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAA;QACvE,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,8CAA8C,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACxE,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAA;YAC3E,uDAAuD;YACvD,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAA;QAC9E,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,0DAA0D,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACpF,MAAM,KAAK,GAAG,OAAO,EAAE,CAAA;YACvB,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;YAC9C,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,CAAA;YAEjD,MAAM,CAAC,OAAO,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAA;YACtE,mDAAmD;YACnD,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAA;YAEpE,MAAM,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,CAAA;YACvD,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAA;QACvE,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,2DAA2D,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACrF,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAA;QAC5E,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,sDAAsD,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YAChF,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;YACtB,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE;gBAC5C,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;aACzC,CAAC,CAAA;YACF,MAAM,CAAC,OAAO,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAA;YAEpE,MAAM,MAAM,GAAG,OAAO,EAAE,CAAA;YACxB,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE;gBAC9C,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;aACzC,CAAC,CAAA;YACF,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAA;QACvE,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,mEAAmE,EAAE,KAAK,EAAE,EAC/E,MAAM,GACP,EAAE,EAAE;YACH,MAAM,KAAK,GAAG,OAAO,EAAE,CAAA;YACvB,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAA;YACvB,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAA;YACvB,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;YAE7C,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAA;YAChE,MAAM,CAAC,OAAO,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAA;YACjE,MAAM,CAAC,OAAO,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAA;QACxE,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,oEAAoE,EAAE,KAAK,EAAE,EAChF,MAAM,GACP,EAAE,EAAE;YACH,MAAM,KAAK,GAAG,OAAO,EAAE,CAAA;YACvB,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;YAC9C,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAA;QACxE,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,8DAA8D,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACxF,MAAM,KAAK,GAAG,OAAO,EAAE,CAAA;YACvB,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAA;YACvB,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAA;YACvB,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;YAC9C,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;YAE5C,MAAM,CAAC,OAAO,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAA;YACjE,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAA;YAChE,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAA;QACvE,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,+DAA+D,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACzF,MAAM,IAAI,GAAG,MAAM,EAAE,CAAA;YACrB,MAAM,MAAM,GAAe,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;YAClD,MAAM,OAAO,GAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;YACpD,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;YAE/C,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAA;YACrE,MAAM,CAAC,OAAO,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAA;QACzE,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,uDAAuD,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACjF,MAAM,KAAK,GAAG,OAAO,EAAE,CAAA;YACvB,8EAA8E;YAC9E,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE;gBAC7C,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;aACzC,CAAC,CAAA;YACF,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;YAC9C,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;YAE9C,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAA;YACpE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;YAC9D,MAAM,CAAC,QAAQ,CACb,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,EAC5C,CAAC,CACF,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,8CAA8C,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACxE,MAAM,KAAK,GAAG,OAAO,EAAE,CAAA;YACvB,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;YAE9C,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAA;YAC/D,gEAAgE;YAChE,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAA;YAChE,MAAM,CAAC,OAAO,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAA;YAEhE,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;YAC/C,MAAM,CAAC,OAAO,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAA;YAEhE,MAAM,OAAO,GAAG,OAAO,EAAE,CAAA;YACzB,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE;gBAC/C,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;aACzC,CAAC,CAAA;YACF,MAAM,CAAC,OAAO,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAA;QACpE,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,2DAA2D,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACrF,MAAM,KAAK,GAAG,OAAO,EAAE,CAAA;YACvB,MAAM,GAAG,GAAG,OAAO,EAAE,CAAA;YACrB,MAAM,OAAO,GAAG,OAAO,EAAE,CAAA;YACzB,MAAM,UAAU,GAAG,QAAQ,EAAE,CAAA;YAE7B,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;YAC9C,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;YAC5C,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE;gBAC/C,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;aACzC,CAAC,CAAA;YACF,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,UAAU,CAAC,CAAA;YAEvD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;YAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YACxC,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;YACpD,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;QACxC,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,wEAAwE,EAAE,KAAK,EAAE,EACpF,MAAM,GACP,EAAE,EAAE;YACH,MAAM,KAAK,GAAG,OAAO,EAAE,CAAA;YACvB,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAA;YACvB,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAA;YACvB,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;YAC9C,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;YAC7C,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;YAC7C,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;YAE5C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,CAAA;YAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAA;YAC3D,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,gBAAgB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;YAClE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,gBAAgB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;QACtD,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,mDAAmD,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YAC7E,MAAM,KAAK,GAAG,OAAO,EAAE,CAAA;YACvB,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;YAC/C,MAAM,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,CAAA;YACtD,MAAM,CAAC,OAAO,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAA;QACvE,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,uDAAuD,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACjF,MAAM,KAAK,GAAG,OAAO,EAAE,CAAA;YACvB,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAA;YACvB,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;YAC9C,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE;gBAC7C,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,sBAAsB;aACjE,CAAC,CAAA;YACF,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;YAE7C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;YACzD,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAA;YAE7C,oEAAoE;YACpE,wDAAwD;YACxD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;YACpD,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,YAAY,CAAC,CAAC,CAAA;YAE1C,MAAM,CAAC,SAAS,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAA;QACpE,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,+DAA+D,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACzF,MAAM,KAAK,GAAG,OAAO,EAAE,CAAA;YACvB,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAA;YACvB,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAA;YACvB,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;YAC7C,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE;gBAC5C,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,kBAAkB;aAC7D,CAAC,CAAA;YACF,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;YAE9C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,cAAc,CAAC,CAAA;YAC/D,MAAM,CAAC,SAAS,CACd,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EACvB,CAAC,IAAI,CAAC,IAAI,CAAC,CACZ,CAAA;YACD,qEAAqE;YACrE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;YACtD,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;YACxB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QAC7B,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/build/src/testing/main.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Suite de contrato del paquete — el juez de cualquier driver.
+ *
+ *   import { runAuthorizationDriverContract } from '@jantstack/adonis-authz/testing'
+ *
+ * Requiere Japa en el proyecto consumidor (es donde vive la base de datos
+ * real contra la que tiene sentido ejecutarla).
+ */
+export { runAuthorizationDriverContract } from './contract.js';
+export type { DriverContractHarness } from './contract.js';
+//# sourceMappingURL=main.d.ts.map

package/build/src/testing/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../../src/testing/main.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,8BAA8B,EAAE,MAAM,eAAe,CAAA;AAC9D,YAAY,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA"}

package/build/src/testing/main.js

@@ -0,0 +1,10 @@
+/**
+ * Suite de contrato del paquete — el juez de cualquier driver.
+ *
+ *   import { runAuthorizationDriverContract } from '@jantstack/adonis-authz/testing'
+ *
+ * Requiere Japa en el proyecto consumidor (es donde vive la base de datos
+ * real contra la que tiene sentido ejecutarla).
+ */
+export { runAuthorizationDriverContract } from './contract.js';
+//# sourceMappingURL=main.js.map

package/build/src/testing/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../../src/testing/main.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,8BAA8B,EAAE,MAAM,eAAe,CAAA"}

package/build/src/traits/authz_scopes.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Scopes de query sobre el motor de autorización propio — paridad con los
+ * whereRoles/wherePermissions del paquete extirpado, ahora sobre `authz_*`.
+ *
+ * Filtra holders del modelo con asignación VIGENTE (sin expirar) del rol o
+ * permiso, en cualquier scope. Es un listado grueso (¿quién tiene X?): el
+ * enforcement fino por scope+denies lo hace `authorization.authorize()`.
+ *
+ * El morph name del holder sale del decorador @MorphMap del modelo.
+ *
+ *   Admin.query().withScopes((s) => s.whereRoles('superadmin'))
+ *   User.query().withScopes((s) => s.wherePermissions('audit:read'))
+ */
+export declare function withAuthzScopes<T extends {
+    new (...args: any[]): {};
+}>(Base: T): {
+    new (...args: any[]): {};
+    whereRoles: import("@adonisjs/lucid/types/model").QueryScope<import("@adonisjs/lucid/types/model").LucidModel, (query: any, ...roles: string[]) => void>;
+    wherePermissions: import("@adonisjs/lucid/types/model").QueryScope<import("@adonisjs/lucid/types/model").LucidModel, (query: any, ...permissions: string[]) => void>;
+} & T;
+//# sourceMappingURL=authz_scopes.d.ts.map

package/build/src/traits/authz_scopes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authz_scopes.d.ts","sourceRoot":"","sources":["../../../src/traits/authz_scopes.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,CAAC,SAAS;IAAE,KAAK,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;CAAE,EAAE,IAAI,EAAE,CAAC;kBAArB,GAAG,EAAE;2HAEzB,GAAG,YAAY,MAAM,EAAE;iIAajB,GAAG,kBAAkB,MAAM,EAAE;MAcxE"}

package/build/src/traits/authz_scopes.js

@@ -0,0 +1,45 @@
+import { scope } from '@adonisjs/lucid/orm';
+import db from '@adonisjs/lucid/services/db';
+/**
+ * Scopes de query sobre el motor de autorización propio — paridad con los
+ * whereRoles/wherePermissions del paquete extirpado, ahora sobre `authz_*`.
+ *
+ * Filtra holders del modelo con asignación VIGENTE (sin expirar) del rol o
+ * permiso, en cualquier scope. Es un listado grueso (¿quién tiene X?): el
+ * enforcement fino por scope+denies lo hace `authorization.authorize()`.
+ *
+ * El morph name del holder sale del decorador @MorphMap del modelo.
+ *
+ *   Admin.query().withScopes((s) => s.whereRoles('superadmin'))
+ *   User.query().withScopes((s) => s.wherePermissions('audit:read'))
+ */
+export function withAuthzScopes(Base) {
+    return class extends Base {
+        static whereRoles = scope((query, ...roles) => {
+            const model = query.model;
+            const morph = model.prototype.__morphMapName;
+            const sub = db
+                .from('authz_assignments as a')
+                .join('authz_roles as r', 'r.uuid', 'a.role_uuid')
+                .where('a.holder_type', morph)
+                .whereIn('r.slug', roles)
+                .where((b) => b.whereNull('a.expires_at').orWhere('a.expires_at', '>', new Date()))
+                .select('a.holder_uuid');
+            query.whereIn(model.primaryKey, sub);
+        });
+        static wherePermissions = scope((query, ...permissions) => {
+            const model = query.model;
+            const morph = model.prototype.__morphMapName;
+            const sub = db
+                .from('authz_assignments as a')
+                .join('authz_role_permissions as rp', 'rp.role_uuid', 'a.role_uuid')
+                .join('authz_permissions as p', 'p.uuid', 'rp.permission_uuid')
+                .where('a.holder_type', morph)
+                .whereIn('p.slug', permissions)
+                .where((b) => b.whereNull('a.expires_at').orWhere('a.expires_at', '>', new Date()))
+                .select('a.holder_uuid');
+            query.whereIn(model.primaryKey, sub);
+        });
+    };
+}
+//# sourceMappingURL=authz_scopes.js.map

package/build/src/traits/authz_scopes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authz_scopes.js","sourceRoot":"","sources":["../../../src/traits/authz_scopes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAC3C,OAAO,EAAE,MAAM,6BAA6B,CAAA;AAE5C;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAyC,IAAO;IAC7E,OAAO,KAAM,SAAQ,IAAI;QACvB,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,CAAC,KAAU,EAAE,GAAG,KAAe,EAAE,EAAE;YAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;YACzB,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,cAAc,CAAA;YAC5C,MAAM,GAAG,GAAG,EAAE;iBACX,IAAI,CAAC,wBAAwB,CAAC;iBAC9B,IAAI,CAAC,kBAAkB,EAAE,QAAQ,EAAE,aAAa,CAAC;iBACjD,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC;iBAC7B,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC;iBACxB,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;iBAClF,MAAM,CAAC,eAAe,CAAC,CAAA;YAC1B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;QACtC,CAAC,CAAC,CAAA;QAEF,MAAM,CAAC,gBAAgB,GAAG,KAAK,CAAC,CAAC,KAAU,EAAE,GAAG,WAAqB,EAAE,EAAE;YACvE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;YACzB,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,cAAc,CAAA;YAC5C,MAAM,GAAG,GAAG,EAAE;iBACX,IAAI,CAAC,wBAAwB,CAAC;iBAC9B,IAAI,CAAC,8BAA8B,EAAE,cAAc,EAAE,aAAa,CAAC;iBACnE,IAAI,CAAC,wBAAwB,EAAE,QAAQ,EAAE,oBAAoB,CAAC;iBAC9D,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC;iBAC7B,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC;iBAC9B,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;iBAClF,MAAM,CAAC,eAAe,CAAC,CAAA;YAC1B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;QACtC,CAAC,CAAC,CAAA;KACH,CAAA;AACH,CAAC"}