@m5kdev/backend 0.9.0 → 0.9.2

package/dist/src/modules/base/base.service.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"base.service.cjs","names":["Base","createServiceProcedureBuilder","validateActor","createPermissionServiceProcedureBuilder","checkPermissionSync","checkPermissionAsync"],"sources":["../../../../src/modules/base/base.service.ts"],"sourcesContent":["import type { QueryFilter, QueryInput } from \"@m5kdev/commons/modules/schemas/query.schema\";\r\nimport { err, ok } from \"neverthrow\";\r\nimport { Base } from \"./base.abstract\";\r\nimport { type AuthenticatedActor, validateActor } from \"./base.actor\";\r\nimport type { ServerResult, ServerResultAsync } from \"./base.dto\";\r\nimport {\r\n  checkPermissionAsync,\r\n  checkPermissionSync,\r\n  type Entity,\r\n  type ResourceActionGrant,\r\n  type ResourceGrant,\r\n} from \"./base.grants\";\r\nimport {\r\n  createPermissionServiceProcedureBuilder,\r\n  createServiceProcedureBuilder,\r\n  type PermissionServiceProcedureBuilder,\r\n  type ServiceProcedureBuilder,\r\n  type ServiceProcedureContext,\r\n} from \"./base.procedure\";\r\n\r\nexport type {\r\n  PermissionServiceProcedureBuilder,\r\n  ServiceProcedure,\r\n  ServiceProcedureAccessConfig,\r\n  ServiceProcedureAccessEntitiesConfig,\r\n  ServiceProcedureAccessStateConfig,\r\n  ServiceProcedureArgs,\r\n  ServiceProcedureBuilder,\r\n  ServiceProcedureContext,\r\n  ServiceProcedureContextFilteredInput,\r\n  ServiceProcedureContextFilterScope,\r\n  ServiceProcedureEntityStepName,\r\n  ServiceProcedureInputMapper,\r\n} from \"./base.procedure\";\r\n\r\nexport class BaseService<\r\n  Repositories extends Record<string, Base>,\r\n  Services extends Record<string, Base>,\r\n  DefaultContext extends ServiceProcedureContext = ServiceProcedureContext,\r\n> extends Base {\r\n  constructor(\r\n    public repository: Repositories = {} as Repositories,\r\n    public service: Services = {} as Services\r\n  ) {\r\n    super(\"service\");\r\n    this.repository = repository;\r\n    this.service = service;\r\n  }\r\n\r\n  addUserFilter(\r\n    value: string,\r\n    query?: undefined,\r\n    columnId?: string,\r\n    method?: QueryFilter[\"method\"]\r\n  ): QueryInput;\r\n  addUserFilter<TQuery extends QueryInput>(\r\n    value: string,\r\n    query: TQuery,\r\n    columnId?: string,\r\n    method?: QueryFilter[\"method\"]\r\n  ): TQuery;\r\n  addUserFilter(\r\n    value: string,\r\n    query?: QueryInput,\r\n    columnId = \"userId\",\r\n    method: QueryFilter[\"method\"] = \"equals\"\r\n  ): QueryInput {\r\n    const userFilter: QueryFilter = {\r\n      columnId,\r\n      type: \"string\",\r\n      method,\r\n      value,\r\n    };\r\n    return query\r\n      ? { ...query, filters: [...(query?.filters ?? []), userFilter] }\r\n      : { filters: [userFilter] };\r\n  }\r\n\r\n  protected procedure<TInput, TCtx extends ServiceProcedureContext = DefaultContext>(\r\n    name: string\r\n  ): ServiceProcedureBuilder<TInput, TCtx, Repositories, Services> {\r\n    return createServiceProcedureBuilder(this, { name, steps: [] });\r\n  }\r\n\r\n  addContextFilter(\r\n    actor: AuthenticatedActor,\r\n    include?: { user?: boolean; organization?: boolean; team?: boolean },\r\n    query?: undefined,\r\n    map?: Record<string, { columnId: string; method: QueryFilter[\"method\"] }>\r\n  ): QueryInput;\r\n  addContextFilter<TQuery extends QueryInput>(\r\n    actor: AuthenticatedActor,\r\n    include: { user?: boolean; organization?: boolean; team?: boolean } | undefined,\r\n    query: TQuery,\r\n    map?: Record<string, { columnId: string; method: QueryFilter[\"method\"] }>\r\n  ): TQuery;\r\n  addContextFilter(\r\n    actor: AuthenticatedActor,\r\n    include: { user?: boolean; organization?: boolean; team?: boolean } = {\r\n      user: true,\r\n      organization: false,\r\n      team: false,\r\n    },\r\n    query?: QueryInput,\r\n    map: Record<string, { columnId: string; method: QueryFilter[\"method\"] }> = {\r\n      userId: {\r\n        columnId: \"userId\",\r\n        method: \"equals\",\r\n      },\r\n      organizationId: {\r\n        columnId: \"organizationId\",\r\n        method: \"equals\",\r\n      },\r\n      teamId: {\r\n        columnId: \"teamId\",\r\n        method: \"equals\",\r\n      },\r\n    }\r\n  ): QueryInput {\r\n    const filters: QueryFilter[] = [];\r\n\r\n    if (include.user) {\r\n      filters.push({\r\n        columnId: map.userId.columnId,\r\n        type: \"string\",\r\n        method: map.userId.method,\r\n        value: actor.userId,\r\n      });\r\n    }\r\n    if (include.organization) {\r\n      if (!validateActor(actor, \"organization\")) {\r\n        throw new Error(\"Organization-scoped context filter requires an organization actor\");\r\n      }\r\n      filters.push({\r\n        columnId: map.organizationId.columnId,\r\n        type: \"string\",\r\n        method: map.organizationId.method,\r\n        value: actor.organizationId!,\r\n      });\r\n    }\r\n    if (include.team) {\r\n      if (!validateActor(actor, \"team\")) {\r\n        throw new Error(\"Team-scoped context filter requires a team actor\");\r\n      }\r\n      filters.push({\r\n        columnId: map.teamId.columnId,\r\n        type: \"string\",\r\n        method: map.teamId.method,\r\n        value: actor.teamId!,\r\n      });\r\n    }\r\n    return query ? { ...query, filters: [...(query?.filters ?? []), ...filters] } : { filters };\r\n  }\r\n}\r\n\r\nexport class BasePermissionService<\r\n  Repositories extends Record<string, Base>,\r\n  Services extends Record<string, Base>,\r\n  DefaultContext extends ServiceProcedureContext = ServiceProcedureContext,\r\n> extends BaseService<Repositories, Services, DefaultContext> {\r\n  grants: ResourceGrant[];\r\n  constructor(repository: Repositories, service: Services, grants: ResourceGrant[] = []) {\r\n    super(repository, service);\r\n    this.grants = grants;\r\n  }\r\n\r\n  accessGuard<T extends Entity>(\r\n    actor: AuthenticatedActor,\r\n    action: string,\r\n    entities?: T | T[],\r\n    grants?: ResourceActionGrant[]\r\n  ): ServerResult<true> {\r\n    const hasPermission = this.checkPermission(actor, action, entities, grants);\r\n    if (!hasPermission) return this.error(\"FORBIDDEN\");\r\n    return ok(true);\r\n  }\r\n\r\n  async accessGuardAsync<T extends Entity>(\r\n    actor: AuthenticatedActor,\r\n    action: string,\r\n    getEntities: () => ServerResultAsync<T | T[] | undefined>,\r\n    grants?: ResourceActionGrant[]\r\n  ): ServerResultAsync<true> {\r\n    const hasPermission = await this.checkPermissionAsync(actor, action, getEntities, grants);\r\n    if (hasPermission.isErr()) return err(hasPermission.error);\r\n    if (!hasPermission.value) return this.error(\"FORBIDDEN\");\r\n    return ok(true);\r\n  }\r\n\r\n  protected override procedure<TInput, TCtx extends ServiceProcedureContext = DefaultContext>(\r\n    name: string\r\n  ): PermissionServiceProcedureBuilder<TInput, TCtx, Repositories, Services> {\r\n    return createPermissionServiceProcedureBuilder(this, { name, steps: [] });\r\n  }\r\n\r\n  checkPermission<T extends Entity>(\r\n    actor: AuthenticatedActor,\r\n    action: string,\r\n    entities?: T | T[],\r\n    grants?: ResourceActionGrant[]\r\n  ): boolean {\r\n    const actionGrants = grants ?? this.grants.filter((grant) => grant.action === action);\r\n    return checkPermissionSync(actor, actionGrants, entities);\r\n  }\r\n\r\n  async checkPermissionAsync<T extends Entity>(\r\n    actor: AuthenticatedActor,\r\n    action: string,\r\n    getEntities: () => ServerResultAsync<T | T[] | undefined>,\r\n    grants?: ResourceActionGrant[]\r\n  ): ServerResultAsync<boolean> {\r\n    const actionGrants = grants ?? this.grants.filter((grant) => grant.action === action);\r\n    const permission = await checkPermissionAsync(actor, actionGrants, getEntities);\r\n    if (permission.isErr())\r\n      return this.error(\"INTERNAL_SERVER_ERROR\", \"Failed to check permission\", {\r\n        cause: permission.error,\r\n      });\r\n    return ok(permission.value);\r\n  }\r\n}\r\n"],"mappings":";;;;;;;;AAmCA,IAAa,cAAb,cAIUA,uCAAAA,KAAK;CACb,YACE,aAAkC,EAAE,EACpC,UAA2B,EAAE,EAC7B;AACA,QAAM,UAAU;AAHT,OAAA,aAAA;AACA,OAAA,UAAA;AAGP,OAAK,aAAa;AAClB,OAAK,UAAU;;CAejB,cACE,OACA,OACA,WAAW,UACX,SAAgC,UACpB;EACZ,MAAM,aAA0B;GAC9B;GACA,MAAM;GACN;GACA;GACD;AACD,SAAO,QACH;GAAE,GAAG;GAAO,SAAS,CAAC,GAAI,OAAO,WAAW,EAAE,EAAG,WAAW;GAAE,GAC9D,EAAE,SAAS,CAAC,WAAW,EAAE;;CAG/B,UACE,MAC+D;AAC/D,SAAOC,wCAAAA,8BAA8B,MAAM;GAAE;GAAM,OAAO,EAAE;GAAE,CAAC;;CAejE,iBACE,OACA,UAAsE;EACpE,MAAM;EACN,cAAc;EACd,MAAM;EACP,EACD,OACA,MAA2E;EACzE,QAAQ;GACN,UAAU;GACV,QAAQ;GACT;EACD,gBAAgB;GACd,UAAU;GACV,QAAQ;GACT;EACD,QAAQ;GACN,UAAU;GACV,QAAQ;GACT;EACF,EACW;EACZ,MAAM,UAAyB,EAAE;AAEjC,MAAI,QAAQ,KACV,SAAQ,KAAK;GACX,UAAU,IAAI,OAAO;GACrB,MAAM;GACN,QAAQ,IAAI,OAAO;GACnB,OAAO,MAAM;GACd,CAAC;AAEJ,MAAI,QAAQ,cAAc;AACxB,OAAI,CAACC,oCAAAA,cAAc,OAAO,eAAe,CACvC,OAAM,IAAI,MAAM,oEAAoE;AAEtF,WAAQ,KAAK;IACX,UAAU,IAAI,eAAe;IAC7B,MAAM;IACN,QAAQ,IAAI,eAAe;IAC3B,OAAO,MAAM;IACd,CAAC;;AAEJ,MAAI,QAAQ,MAAM;AAChB,OAAI,CAACA,oCAAAA,cAAc,OAAO,OAAO,CAC/B,OAAM,IAAI,MAAM,mDAAmD;AAErE,WAAQ,KAAK;IACX,UAAU,IAAI,OAAO;IACrB,MAAM;IACN,QAAQ,IAAI,OAAO;IACnB,OAAO,MAAM;IACd,CAAC;;AAEJ,SAAO,QAAQ;GAAE,GAAG;GAAO,SAAS,CAAC,GAAI,OAAO,WAAW,EAAE,EAAG,GAAG,QAAQ;GAAE,GAAG,EAAE,SAAS;;;AAI/F,IAAa,wBAAb,cAIU,YAAoD;CAC5D;CACA,YAAY,YAA0B,SAAmB,SAA0B,EAAE,EAAE;AACrF,QAAM,YAAY,QAAQ;AAC1B,OAAK,SAAS;;CAGhB,YACE,OACA,QACA,UACA,QACoB;AAEpB,MAAI,CADkB,KAAK,gBAAgB,OAAO,QAAQ,UAAU,OAAO,CACvD,QAAO,KAAK,MAAM,YAAY;AAClD,UAAA,GAAA,WAAA,IAAU,KAAK;;CAGjB,MAAM,iBACJ,OACA,QACA,aACA,QACyB;EACzB,MAAM,gBAAgB,MAAM,KAAK,qBAAqB,OAAO,QAAQ,aAAa,OAAO;AACzF,MAAI,cAAc,OAAO,CAAE,SAAA,GAAA,WAAA,KAAW,cAAc,MAAM;AAC1D,MAAI,CAAC,cAAc,MAAO,QAAO,KAAK,MAAM,YAAY;AACxD,UAAA,GAAA,WAAA,IAAU,KAAK;;CAGjB,UACE,MACyE;AACzE,SAAOC,wCAAAA,wCAAwC,MAAM;GAAE;GAAM,OAAO,EAAE;GAAE,CAAC;;CAG3E,gBACE,OACA,QACA,UACA,QACS;AAET,SAAOC,qCAAAA,oBAAoB,OADN,UAAU,KAAK,OAAO,QAAQ,UAAU,MAAM,WAAW,OAAO,EACrC,SAAS;;CAG3D,MAAM,qBACJ,OACA,QACA,aACA,QAC4B;EAE5B,MAAM,aAAa,MAAMC,qCAAAA,qBAAqB,OADzB,UAAU,KAAK,OAAO,QAAQ,UAAU,MAAM,WAAW,OAAO,EAClB,YAAY;AAC/E,MAAI,WAAW,OAAO,CACpB,QAAO,KAAK,MAAM,yBAAyB,8BAA8B,EACvE,OAAO,WAAW,OACnB,CAAC;AACJ,UAAA,GAAA,WAAA,IAAU,WAAW,MAAM"}
+{"version":3,"file":"base.service.cjs","names":["Base","createServiceProcedureBuilder","validateActor","createPermissionServiceProcedureBuilder","checkPermissionSync","checkPermissionAsync"],"sources":["../../../../src/modules/base/base.service.ts"],"sourcesContent":["import type { QueryFilter, QueryInput } from \"@m5kdev/commons/modules/schemas/query.schema\";\r\nimport { err, ok } from \"neverthrow\";\r\nimport { Base } from \"./base.abstract\";\r\nimport { type AuthenticatedActor, validateActor } from \"./base.actor\";\r\nimport type { ServerResult, ServerResultAsync } from \"./base.dto\";\r\nimport {\r\n  checkPermissionAsync,\r\n  checkPermissionSync,\r\n  type Entity,\r\n  type ResourceActionGrant,\r\n  type ResourceGrant,\r\n} from \"./base.grants\";\r\nimport {\r\n  createPermissionServiceProcedureBuilder,\r\n  createServiceProcedureBuilder,\r\n  type PermissionServiceProcedureBuilder,\r\n  type ServiceProcedureBuilder,\r\n  type ServiceProcedureContext,\r\n} from \"./base.procedure\";\r\n\r\nexport type {\r\n  PermissionServiceProcedureBuilder,\r\n  ServiceProcedure,\r\n  ServiceProcedureAccessConfig,\r\n  ServiceProcedureAccessEntitiesConfig,\r\n  ServiceProcedureAccessStateConfig,\r\n  ServiceProcedureArgs,\r\n  ServiceProcedureBuilder,\r\n  ServiceProcedureContext,\r\n  ServiceProcedureContextFilteredInput,\r\n  ServiceProcedureContextFilterScope,\r\n  ServiceProcedureEntityStepName,\r\n  ServiceProcedureInputMapper,\r\n  ServiceProcedureLoadedResource,\r\n} from \"./base.procedure\";\r\n\r\nexport class BaseService<\r\n  Repositories extends Record<string, Base>,\r\n  Services extends Record<string, Base>,\r\n  DefaultContext extends ServiceProcedureContext = ServiceProcedureContext,\r\n> extends Base {\r\n  constructor(\r\n    public repository: Repositories = {} as Repositories,\r\n    public service: Services = {} as Services\r\n  ) {\r\n    super(\"service\");\r\n    this.repository = repository;\r\n    this.service = service;\r\n  }\r\n\r\n  addUserFilter(\r\n    value: string,\r\n    query?: undefined,\r\n    columnId?: string,\r\n    method?: QueryFilter[\"method\"]\r\n  ): QueryInput;\r\n  addUserFilter<TQuery extends QueryInput>(\r\n    value: string,\r\n    query: TQuery,\r\n    columnId?: string,\r\n    method?: QueryFilter[\"method\"]\r\n  ): TQuery;\r\n  addUserFilter(\r\n    value: string,\r\n    query?: QueryInput,\r\n    columnId = \"userId\",\r\n    method: QueryFilter[\"method\"] = \"equals\"\r\n  ): QueryInput {\r\n    const userFilter: QueryFilter = {\r\n      columnId,\r\n      type: \"string\",\r\n      method,\r\n      value,\r\n    };\r\n    return query\r\n      ? { ...query, filters: [...(query?.filters ?? []), userFilter] }\r\n      : { filters: [userFilter] };\r\n  }\r\n\r\n  protected procedure<TInput, TCtx extends ServiceProcedureContext = DefaultContext>(\r\n    name: string\r\n  ): ServiceProcedureBuilder<TInput, TCtx, Repositories, Services> {\r\n    return createServiceProcedureBuilder(this, { name, steps: [] });\r\n  }\r\n\r\n  addContextFilter(\r\n    actor: AuthenticatedActor,\r\n    include?: { user?: boolean; organization?: boolean; team?: boolean },\r\n    query?: undefined,\r\n    map?: Record<string, { columnId: string; method: QueryFilter[\"method\"] }>\r\n  ): QueryInput;\r\n  addContextFilter<TQuery extends QueryInput>(\r\n    actor: AuthenticatedActor,\r\n    include: { user?: boolean; organization?: boolean; team?: boolean } | undefined,\r\n    query: TQuery,\r\n    map?: Record<string, { columnId: string; method: QueryFilter[\"method\"] }>\r\n  ): TQuery;\r\n  addContextFilter(\r\n    actor: AuthenticatedActor,\r\n    include: { user?: boolean; organization?: boolean; team?: boolean } = {\r\n      user: true,\r\n      organization: false,\r\n      team: false,\r\n    },\r\n    query?: QueryInput,\r\n    map: Record<string, { columnId: string; method: QueryFilter[\"method\"] }> = {\r\n      userId: {\r\n        columnId: \"userId\",\r\n        method: \"equals\",\r\n      },\r\n      organizationId: {\r\n        columnId: \"organizationId\",\r\n        method: \"equals\",\r\n      },\r\n      teamId: {\r\n        columnId: \"teamId\",\r\n        method: \"equals\",\r\n      },\r\n    }\r\n  ): QueryInput {\r\n    const filters: QueryFilter[] = [];\r\n\r\n    if (include.user) {\r\n      filters.push({\r\n        columnId: map.userId.columnId,\r\n        type: \"string\",\r\n        method: map.userId.method,\r\n        value: actor.userId,\r\n      });\r\n    }\r\n    if (include.organization) {\r\n      if (!validateActor(actor, \"organization\")) {\r\n        throw new Error(\"Organization-scoped context filter requires an organization actor\");\r\n      }\r\n      filters.push({\r\n        columnId: map.organizationId.columnId,\r\n        type: \"string\",\r\n        method: map.organizationId.method,\r\n        value: actor.organizationId!,\r\n      });\r\n    }\r\n    if (include.team) {\r\n      if (!validateActor(actor, \"team\")) {\r\n        throw new Error(\"Team-scoped context filter requires a team actor\");\r\n      }\r\n      filters.push({\r\n        columnId: map.teamId.columnId,\r\n        type: \"string\",\r\n        method: map.teamId.method,\r\n        value: actor.teamId!,\r\n      });\r\n    }\r\n    return query ? { ...query, filters: [...(query?.filters ?? []), ...filters] } : { filters };\r\n  }\r\n}\r\n\r\nexport class BasePermissionService<\r\n  Repositories extends Record<string, Base>,\r\n  Services extends Record<string, Base>,\r\n  DefaultContext extends ServiceProcedureContext = ServiceProcedureContext,\r\n> extends BaseService<Repositories, Services, DefaultContext> {\r\n  grants: ResourceGrant[];\r\n  constructor(repository: Repositories, service: Services, grants: ResourceGrant[] = []) {\r\n    super(repository, service);\r\n    this.grants = grants;\r\n  }\r\n\r\n  accessGuard<T extends Entity>(\r\n    actor: AuthenticatedActor,\r\n    action: string,\r\n    entities?: T | T[],\r\n    grants?: ResourceActionGrant[]\r\n  ): ServerResult<true> {\r\n    const hasPermission = this.checkPermission(actor, action, entities, grants);\r\n    if (!hasPermission) return this.error(\"FORBIDDEN\");\r\n    return ok(true);\r\n  }\r\n\r\n  async accessGuardAsync<T extends Entity>(\r\n    actor: AuthenticatedActor,\r\n    action: string,\r\n    getEntities: () => ServerResultAsync<T | T[] | undefined>,\r\n    grants?: ResourceActionGrant[]\r\n  ): ServerResultAsync<true> {\r\n    const hasPermission = await this.checkPermissionAsync(actor, action, getEntities, grants);\r\n    if (hasPermission.isErr()) return err(hasPermission.error);\r\n    if (!hasPermission.value) return this.error(\"FORBIDDEN\");\r\n    return ok(true);\r\n  }\r\n\r\n  protected override procedure<TInput, TCtx extends ServiceProcedureContext = DefaultContext>(\r\n    name: string\r\n  ): PermissionServiceProcedureBuilder<TInput, TCtx, Repositories, Services> {\r\n    return createPermissionServiceProcedureBuilder(this, { name, steps: [] });\r\n  }\r\n\r\n  checkPermission<T extends Entity>(\r\n    actor: AuthenticatedActor,\r\n    action: string,\r\n    entities?: T | T[],\r\n    grants?: ResourceActionGrant[]\r\n  ): boolean {\r\n    const actionGrants = grants ?? this.grants.filter((grant) => grant.action === action);\r\n    return checkPermissionSync(actor, actionGrants, entities);\r\n  }\r\n\r\n  async checkPermissionAsync<T extends Entity>(\r\n    actor: AuthenticatedActor,\r\n    action: string,\r\n    getEntities: () => ServerResultAsync<T | T[] | undefined>,\r\n    grants?: ResourceActionGrant[]\r\n  ): ServerResultAsync<boolean> {\r\n    const actionGrants = grants ?? this.grants.filter((grant) => grant.action === action);\r\n    const permission = await checkPermissionAsync(actor, actionGrants, getEntities);\r\n    if (permission.isErr())\r\n      return this.error(\"INTERNAL_SERVER_ERROR\", \"Failed to check permission\", {\r\n        cause: permission.error,\r\n      });\r\n    return ok(permission.value);\r\n  }\r\n}\r\n"],"mappings":";;;;;;;;AAoCA,IAAa,cAAb,cAIUA,uCAAAA,KAAK;CACb,YACE,aAAkC,EAAE,EACpC,UAA2B,EAAE,EAC7B;AACA,QAAM,UAAU;AAHT,OAAA,aAAA;AACA,OAAA,UAAA;AAGP,OAAK,aAAa;AAClB,OAAK,UAAU;;CAejB,cACE,OACA,OACA,WAAW,UACX,SAAgC,UACpB;EACZ,MAAM,aAA0B;GAC9B;GACA,MAAM;GACN;GACA;GACD;AACD,SAAO,QACH;GAAE,GAAG;GAAO,SAAS,CAAC,GAAI,OAAO,WAAW,EAAE,EAAG,WAAW;GAAE,GAC9D,EAAE,SAAS,CAAC,WAAW,EAAE;;CAG/B,UACE,MAC+D;AAC/D,SAAOC,wCAAAA,8BAA8B,MAAM;GAAE;GAAM,OAAO,EAAE;GAAE,CAAC;;CAejE,iBACE,OACA,UAAsE;EACpE,MAAM;EACN,cAAc;EACd,MAAM;EACP,EACD,OACA,MAA2E;EACzE,QAAQ;GACN,UAAU;GACV,QAAQ;GACT;EACD,gBAAgB;GACd,UAAU;GACV,QAAQ;GACT;EACD,QAAQ;GACN,UAAU;GACV,QAAQ;GACT;EACF,EACW;EACZ,MAAM,UAAyB,EAAE;AAEjC,MAAI,QAAQ,KACV,SAAQ,KAAK;GACX,UAAU,IAAI,OAAO;GACrB,MAAM;GACN,QAAQ,IAAI,OAAO;GACnB,OAAO,MAAM;GACd,CAAC;AAEJ,MAAI,QAAQ,cAAc;AACxB,OAAI,CAACC,oCAAAA,cAAc,OAAO,eAAe,CACvC,OAAM,IAAI,MAAM,oEAAoE;AAEtF,WAAQ,KAAK;IACX,UAAU,IAAI,eAAe;IAC7B,MAAM;IACN,QAAQ,IAAI,eAAe;IAC3B,OAAO,MAAM;IACd,CAAC;;AAEJ,MAAI,QAAQ,MAAM;AAChB,OAAI,CAACA,oCAAAA,cAAc,OAAO,OAAO,CAC/B,OAAM,IAAI,MAAM,mDAAmD;AAErE,WAAQ,KAAK;IACX,UAAU,IAAI,OAAO;IACrB,MAAM;IACN,QAAQ,IAAI,OAAO;IACnB,OAAO,MAAM;IACd,CAAC;;AAEJ,SAAO,QAAQ;GAAE,GAAG;GAAO,SAAS,CAAC,GAAI,OAAO,WAAW,EAAE,EAAG,GAAG,QAAQ;GAAE,GAAG,EAAE,SAAS;;;AAI/F,IAAa,wBAAb,cAIU,YAAoD;CAC5D;CACA,YAAY,YAA0B,SAAmB,SAA0B,EAAE,EAAE;AACrF,QAAM,YAAY,QAAQ;AAC1B,OAAK,SAAS;;CAGhB,YACE,OACA,QACA,UACA,QACoB;AAEpB,MAAI,CADkB,KAAK,gBAAgB,OAAO,QAAQ,UAAU,OAAO,CACvD,QAAO,KAAK,MAAM,YAAY;AAClD,UAAA,GAAA,WAAA,IAAU,KAAK;;CAGjB,MAAM,iBACJ,OACA,QACA,aACA,QACyB;EACzB,MAAM,gBAAgB,MAAM,KAAK,qBAAqB,OAAO,QAAQ,aAAa,OAAO;AACzF,MAAI,cAAc,OAAO,CAAE,SAAA,GAAA,WAAA,KAAW,cAAc,MAAM;AAC1D,MAAI,CAAC,cAAc,MAAO,QAAO,KAAK,MAAM,YAAY;AACxD,UAAA,GAAA,WAAA,IAAU,KAAK;;CAGjB,UACE,MACyE;AACzE,SAAOC,wCAAAA,wCAAwC,MAAM;GAAE;GAAM,OAAO,EAAE;GAAE,CAAC;;CAG3E,gBACE,OACA,QACA,UACA,QACS;AAET,SAAOC,qCAAAA,oBAAoB,OADN,UAAU,KAAK,OAAO,QAAQ,UAAU,MAAM,WAAW,OAAO,EACrC,SAAS;;CAG3D,MAAM,qBACJ,OACA,QACA,aACA,QAC4B;EAE5B,MAAM,aAAa,MAAMC,qCAAAA,qBAAqB,OADzB,UAAU,KAAK,OAAO,QAAQ,UAAU,MAAM,WAAW,OAAO,EAClB,YAAY;AAC/E,MAAI,WAAW,OAAO,CACpB,QAAO,KAAK,MAAM,yBAAyB,8BAA8B,EACvE,OAAO,WAAW,OACnB,CAAC;AACJ,UAAA,GAAA,WAAA,IAAU,WAAW,MAAM"}

package/dist/src/modules/base/base.service.d.cts

@@ -2,7 +2,7 @@ import { ServerResult, ServerResultAsync } from "./base.dto.cjs";
 import { Base } from "./base.abstract.cjs";
 import { AuthenticatedActor } from "./base.actor.cjs";
 import { Entity, ResourceActionGrant, ResourceGrant } from "./base.grants.cjs";
-import { PermissionServiceProcedureBuilder, ServiceProcedure, ServiceProcedureAccessConfig, ServiceProcedureAccessEntitiesConfig, ServiceProcedureAccessStateConfig, ServiceProcedureArgs, ServiceProcedureBuilder, ServiceProcedureContext, ServiceProcedureContextFilterScope, ServiceProcedureContextFilteredInput, ServiceProcedureEntityStepName, ServiceProcedureInputMapper } from "./base.procedure.cjs";
+import { PermissionServiceProcedureBuilder, ServiceProcedure, ServiceProcedureAccessConfig, ServiceProcedureAccessEntitiesConfig, ServiceProcedureAccessStateConfig, ServiceProcedureArgs, ServiceProcedureBuilder, ServiceProcedureContext, ServiceProcedureContextFilterScope, ServiceProcedureContextFilteredInput, ServiceProcedureEntityStepName, ServiceProcedureInputMapper, ServiceProcedureLoadedResource } from "./base.procedure.cjs";
 import { QueryFilter, QueryInput } from "@m5kdev/commons/modules/schemas/query.schema";
 
 //#region src/modules/base/base.service.d.ts
@@ -40,5 +40,5 @@ declare class BasePermissionService<Repositories extends Record<string, Base>, S
   checkPermissionAsync<T extends Entity>(actor: AuthenticatedActor, action: string, getEntities: () => ServerResultAsync<T | T[] | undefined>, grants?: ResourceActionGrant[]): ServerResultAsync<boolean>;
 }
 //#endregion
-export { BasePermissionService, BaseService, type PermissionServiceProcedureBuilder, type ServiceProcedure, type ServiceProcedureAccessConfig, type ServiceProcedureAccessEntitiesConfig, type ServiceProcedureAccessStateConfig, type ServiceProcedureArgs, type ServiceProcedureBuilder, type ServiceProcedureContext, type ServiceProcedureContextFilterScope, type ServiceProcedureContextFilteredInput, type ServiceProcedureEntityStepName, type ServiceProcedureInputMapper };
+export { BasePermissionService, BaseService, type PermissionServiceProcedureBuilder, type ServiceProcedure, type ServiceProcedureAccessConfig, type ServiceProcedureAccessEntitiesConfig, type ServiceProcedureAccessStateConfig, type ServiceProcedureArgs, type ServiceProcedureBuilder, type ServiceProcedureContext, type ServiceProcedureContextFilterScope, type ServiceProcedureContextFilteredInput, type ServiceProcedureEntityStepName, type ServiceProcedureInputMapper, type ServiceProcedureLoadedResource };
 //# sourceMappingURL=base.service.d.cts.map

package/dist/src/modules/base/base.service.d.mts

@@ -2,7 +2,7 @@ import { ServerResult, ServerResultAsync } from "./base.dto.mjs";
 import { Base } from "./base.abstract.mjs";
 import { AuthenticatedActor } from "./base.actor.mjs";
 import { Entity, ResourceActionGrant, ResourceGrant } from "./base.grants.mjs";
-import { PermissionServiceProcedureBuilder, ServiceProcedure, ServiceProcedureAccessConfig, ServiceProcedureAccessEntitiesConfig, ServiceProcedureAccessStateConfig, ServiceProcedureArgs, ServiceProcedureBuilder, ServiceProcedureContext, ServiceProcedureContextFilterScope, ServiceProcedureContextFilteredInput, ServiceProcedureEntityStepName, ServiceProcedureInputMapper } from "./base.procedure.mjs";
+import { PermissionServiceProcedureBuilder, ServiceProcedure, ServiceProcedureAccessConfig, ServiceProcedureAccessEntitiesConfig, ServiceProcedureAccessStateConfig, ServiceProcedureArgs, ServiceProcedureBuilder, ServiceProcedureContext, ServiceProcedureContextFilterScope, ServiceProcedureContextFilteredInput, ServiceProcedureEntityStepName, ServiceProcedureInputMapper, ServiceProcedureLoadedResource } from "./base.procedure.mjs";
 import { QueryFilter, QueryInput } from "@m5kdev/commons/modules/schemas/query.schema";
 
 //#region src/modules/base/base.service.d.ts
@@ -40,5 +40,5 @@ declare class BasePermissionService<Repositories extends Record<string, Base>, S
   checkPermissionAsync<T extends Entity>(actor: AuthenticatedActor, action: string, getEntities: () => ServerResultAsync<T | T[] | undefined>, grants?: ResourceActionGrant[]): ServerResultAsync<boolean>;
 }
 //#endregion
-export { BasePermissionService, BaseService, type PermissionServiceProcedureBuilder, type ServiceProcedure, type ServiceProcedureAccessConfig, type ServiceProcedureAccessEntitiesConfig, type ServiceProcedureAccessStateConfig, type ServiceProcedureArgs, type ServiceProcedureBuilder, type ServiceProcedureContext, type ServiceProcedureContextFilterScope, type ServiceProcedureContextFilteredInput, type ServiceProcedureEntityStepName, type ServiceProcedureInputMapper };
+export { BasePermissionService, BaseService, type PermissionServiceProcedureBuilder, type ServiceProcedure, type ServiceProcedureAccessConfig, type ServiceProcedureAccessEntitiesConfig, type ServiceProcedureAccessStateConfig, type ServiceProcedureArgs, type ServiceProcedureBuilder, type ServiceProcedureContext, type ServiceProcedureContextFilterScope, type ServiceProcedureContextFilteredInput, type ServiceProcedureEntityStepName, type ServiceProcedureInputMapper, type ServiceProcedureLoadedResource };
 //# sourceMappingURL=base.service.d.mts.map

package/dist/src/modules/base/base.service.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"base.service.mjs","names":[],"sources":["../../../../src/modules/base/base.service.ts"],"sourcesContent":["import type { QueryFilter, QueryInput } from \"@m5kdev/commons/modules/schemas/query.schema\";\r\nimport { err, ok } from \"neverthrow\";\r\nimport { Base } from \"./base.abstract\";\r\nimport { type AuthenticatedActor, validateActor } from \"./base.actor\";\r\nimport type { ServerResult, ServerResultAsync } from \"./base.dto\";\r\nimport {\r\n  checkPermissionAsync,\r\n  checkPermissionSync,\r\n  type Entity,\r\n  type ResourceActionGrant,\r\n  type ResourceGrant,\r\n} from \"./base.grants\";\r\nimport {\r\n  createPermissionServiceProcedureBuilder,\r\n  createServiceProcedureBuilder,\r\n  type PermissionServiceProcedureBuilder,\r\n  type ServiceProcedureBuilder,\r\n  type ServiceProcedureContext,\r\n} from \"./base.procedure\";\r\n\r\nexport type {\r\n  PermissionServiceProcedureBuilder,\r\n  ServiceProcedure,\r\n  ServiceProcedureAccessConfig,\r\n  ServiceProcedureAccessEntitiesConfig,\r\n  ServiceProcedureAccessStateConfig,\r\n  ServiceProcedureArgs,\r\n  ServiceProcedureBuilder,\r\n  ServiceProcedureContext,\r\n  ServiceProcedureContextFilteredInput,\r\n  ServiceProcedureContextFilterScope,\r\n  ServiceProcedureEntityStepName,\r\n  ServiceProcedureInputMapper,\r\n} from \"./base.procedure\";\r\n\r\nexport class BaseService<\r\n  Repositories extends Record<string, Base>,\r\n  Services extends Record<string, Base>,\r\n  DefaultContext extends ServiceProcedureContext = ServiceProcedureContext,\r\n> extends Base {\r\n  constructor(\r\n    public repository: Repositories = {} as Repositories,\r\n    public service: Services = {} as Services\r\n  ) {\r\n    super(\"service\");\r\n    this.repository = repository;\r\n    this.service = service;\r\n  }\r\n\r\n  addUserFilter(\r\n    value: string,\r\n    query?: undefined,\r\n    columnId?: string,\r\n    method?: QueryFilter[\"method\"]\r\n  ): QueryInput;\r\n  addUserFilter<TQuery extends QueryInput>(\r\n    value: string,\r\n    query: TQuery,\r\n    columnId?: string,\r\n    method?: QueryFilter[\"method\"]\r\n  ): TQuery;\r\n  addUserFilter(\r\n    value: string,\r\n    query?: QueryInput,\r\n    columnId = \"userId\",\r\n    method: QueryFilter[\"method\"] = \"equals\"\r\n  ): QueryInput {\r\n    const userFilter: QueryFilter = {\r\n      columnId,\r\n      type: \"string\",\r\n      method,\r\n      value,\r\n    };\r\n    return query\r\n      ? { ...query, filters: [...(query?.filters ?? []), userFilter] }\r\n      : { filters: [userFilter] };\r\n  }\r\n\r\n  protected procedure<TInput, TCtx extends ServiceProcedureContext = DefaultContext>(\r\n    name: string\r\n  ): ServiceProcedureBuilder<TInput, TCtx, Repositories, Services> {\r\n    return createServiceProcedureBuilder(this, { name, steps: [] });\r\n  }\r\n\r\n  addContextFilter(\r\n    actor: AuthenticatedActor,\r\n    include?: { user?: boolean; organization?: boolean; team?: boolean },\r\n    query?: undefined,\r\n    map?: Record<string, { columnId: string; method: QueryFilter[\"method\"] }>\r\n  ): QueryInput;\r\n  addContextFilter<TQuery extends QueryInput>(\r\n    actor: AuthenticatedActor,\r\n    include: { user?: boolean; organization?: boolean; team?: boolean } | undefined,\r\n    query: TQuery,\r\n    map?: Record<string, { columnId: string; method: QueryFilter[\"method\"] }>\r\n  ): TQuery;\r\n  addContextFilter(\r\n    actor: AuthenticatedActor,\r\n    include: { user?: boolean; organization?: boolean; team?: boolean } = {\r\n      user: true,\r\n      organization: false,\r\n      team: false,\r\n    },\r\n    query?: QueryInput,\r\n    map: Record<string, { columnId: string; method: QueryFilter[\"method\"] }> = {\r\n      userId: {\r\n        columnId: \"userId\",\r\n        method: \"equals\",\r\n      },\r\n      organizationId: {\r\n        columnId: \"organizationId\",\r\n        method: \"equals\",\r\n      },\r\n      teamId: {\r\n        columnId: \"teamId\",\r\n        method: \"equals\",\r\n      },\r\n    }\r\n  ): QueryInput {\r\n    const filters: QueryFilter[] = [];\r\n\r\n    if (include.user) {\r\n      filters.push({\r\n        columnId: map.userId.columnId,\r\n        type: \"string\",\r\n        method: map.userId.method,\r\n        value: actor.userId,\r\n      });\r\n    }\r\n    if (include.organization) {\r\n      if (!validateActor(actor, \"organization\")) {\r\n        throw new Error(\"Organization-scoped context filter requires an organization actor\");\r\n      }\r\n      filters.push({\r\n        columnId: map.organizationId.columnId,\r\n        type: \"string\",\r\n        method: map.organizationId.method,\r\n        value: actor.organizationId!,\r\n      });\r\n    }\r\n    if (include.team) {\r\n      if (!validateActor(actor, \"team\")) {\r\n        throw new Error(\"Team-scoped context filter requires a team actor\");\r\n      }\r\n      filters.push({\r\n        columnId: map.teamId.columnId,\r\n        type: \"string\",\r\n        method: map.teamId.method,\r\n        value: actor.teamId!,\r\n      });\r\n    }\r\n    return query ? { ...query, filters: [...(query?.filters ?? []), ...filters] } : { filters };\r\n  }\r\n}\r\n\r\nexport class BasePermissionService<\r\n  Repositories extends Record<string, Base>,\r\n  Services extends Record<string, Base>,\r\n  DefaultContext extends ServiceProcedureContext = ServiceProcedureContext,\r\n> extends BaseService<Repositories, Services, DefaultContext> {\r\n  grants: ResourceGrant[];\r\n  constructor(repository: Repositories, service: Services, grants: ResourceGrant[] = []) {\r\n    super(repository, service);\r\n    this.grants = grants;\r\n  }\r\n\r\n  accessGuard<T extends Entity>(\r\n    actor: AuthenticatedActor,\r\n    action: string,\r\n    entities?: T | T[],\r\n    grants?: ResourceActionGrant[]\r\n  ): ServerResult<true> {\r\n    const hasPermission = this.checkPermission(actor, action, entities, grants);\r\n    if (!hasPermission) return this.error(\"FORBIDDEN\");\r\n    return ok(true);\r\n  }\r\n\r\n  async accessGuardAsync<T extends Entity>(\r\n    actor: AuthenticatedActor,\r\n    action: string,\r\n    getEntities: () => ServerResultAsync<T | T[] | undefined>,\r\n    grants?: ResourceActionGrant[]\r\n  ): ServerResultAsync<true> {\r\n    const hasPermission = await this.checkPermissionAsync(actor, action, getEntities, grants);\r\n    if (hasPermission.isErr()) return err(hasPermission.error);\r\n    if (!hasPermission.value) return this.error(\"FORBIDDEN\");\r\n    return ok(true);\r\n  }\r\n\r\n  protected override procedure<TInput, TCtx extends ServiceProcedureContext = DefaultContext>(\r\n    name: string\r\n  ): PermissionServiceProcedureBuilder<TInput, TCtx, Repositories, Services> {\r\n    return createPermissionServiceProcedureBuilder(this, { name, steps: [] });\r\n  }\r\n\r\n  checkPermission<T extends Entity>(\r\n    actor: AuthenticatedActor,\r\n    action: string,\r\n    entities?: T | T[],\r\n    grants?: ResourceActionGrant[]\r\n  ): boolean {\r\n    const actionGrants = grants ?? this.grants.filter((grant) => grant.action === action);\r\n    return checkPermissionSync(actor, actionGrants, entities);\r\n  }\r\n\r\n  async checkPermissionAsync<T extends Entity>(\r\n    actor: AuthenticatedActor,\r\n    action: string,\r\n    getEntities: () => ServerResultAsync<T | T[] | undefined>,\r\n    grants?: ResourceActionGrant[]\r\n  ): ServerResultAsync<boolean> {\r\n    const actionGrants = grants ?? this.grants.filter((grant) => grant.action === action);\r\n    const permission = await checkPermissionAsync(actor, actionGrants, getEntities);\r\n    if (permission.isErr())\r\n      return this.error(\"INTERNAL_SERVER_ERROR\", \"Failed to check permission\", {\r\n        cause: permission.error,\r\n      });\r\n    return ok(permission.value);\r\n  }\r\n}\r\n"],"mappings":";;;;;;AAmCA,IAAa,cAAb,cAIU,KAAK;CACb,YACE,aAAkC,EAAE,EACpC,UAA2B,EAAE,EAC7B;AACA,QAAM,UAAU;AAHT,OAAA,aAAA;AACA,OAAA,UAAA;AAGP,OAAK,aAAa;AAClB,OAAK,UAAU;;CAejB,cACE,OACA,OACA,WAAW,UACX,SAAgC,UACpB;EACZ,MAAM,aAA0B;GAC9B;GACA,MAAM;GACN;GACA;GACD;AACD,SAAO,QACH;GAAE,GAAG;GAAO,SAAS,CAAC,GAAI,OAAO,WAAW,EAAE,EAAG,WAAW;GAAE,GAC9D,EAAE,SAAS,CAAC,WAAW,EAAE;;CAG/B,UACE,MAC+D;AAC/D,SAAO,8BAA8B,MAAM;GAAE;GAAM,OAAO,EAAE;GAAE,CAAC;;CAejE,iBACE,OACA,UAAsE;EACpE,MAAM;EACN,cAAc;EACd,MAAM;EACP,EACD,OACA,MAA2E;EACzE,QAAQ;GACN,UAAU;GACV,QAAQ;GACT;EACD,gBAAgB;GACd,UAAU;GACV,QAAQ;GACT;EACD,QAAQ;GACN,UAAU;GACV,QAAQ;GACT;EACF,EACW;EACZ,MAAM,UAAyB,EAAE;AAEjC,MAAI,QAAQ,KACV,SAAQ,KAAK;GACX,UAAU,IAAI,OAAO;GACrB,MAAM;GACN,QAAQ,IAAI,OAAO;GACnB,OAAO,MAAM;GACd,CAAC;AAEJ,MAAI,QAAQ,cAAc;AACxB,OAAI,CAAC,cAAc,OAAO,eAAe,CACvC,OAAM,IAAI,MAAM,oEAAoE;AAEtF,WAAQ,KAAK;IACX,UAAU,IAAI,eAAe;IAC7B,MAAM;IACN,QAAQ,IAAI,eAAe;IAC3B,OAAO,MAAM;IACd,CAAC;;AAEJ,MAAI,QAAQ,MAAM;AAChB,OAAI,CAAC,cAAc,OAAO,OAAO,CAC/B,OAAM,IAAI,MAAM,mDAAmD;AAErE,WAAQ,KAAK;IACX,UAAU,IAAI,OAAO;IACrB,MAAM;IACN,QAAQ,IAAI,OAAO;IACnB,OAAO,MAAM;IACd,CAAC;;AAEJ,SAAO,QAAQ;GAAE,GAAG;GAAO,SAAS,CAAC,GAAI,OAAO,WAAW,EAAE,EAAG,GAAG,QAAQ;GAAE,GAAG,EAAE,SAAS;;;AAI/F,IAAa,wBAAb,cAIU,YAAoD;CAC5D;CACA,YAAY,YAA0B,SAAmB,SAA0B,EAAE,EAAE;AACrF,QAAM,YAAY,QAAQ;AAC1B,OAAK,SAAS;;CAGhB,YACE,OACA,QACA,UACA,QACoB;AAEpB,MAAI,CADkB,KAAK,gBAAgB,OAAO,QAAQ,UAAU,OAAO,CACvD,QAAO,KAAK,MAAM,YAAY;AAClD,SAAO,GAAG,KAAK;;CAGjB,MAAM,iBACJ,OACA,QACA,aACA,QACyB;EACzB,MAAM,gBAAgB,MAAM,KAAK,qBAAqB,OAAO,QAAQ,aAAa,OAAO;AACzF,MAAI,cAAc,OAAO,CAAE,QAAO,IAAI,cAAc,MAAM;AAC1D,MAAI,CAAC,cAAc,MAAO,QAAO,KAAK,MAAM,YAAY;AACxD,SAAO,GAAG,KAAK;;CAGjB,UACE,MACyE;AACzE,SAAO,wCAAwC,MAAM;GAAE;GAAM,OAAO,EAAE;GAAE,CAAC;;CAG3E,gBACE,OACA,QACA,UACA,QACS;AAET,SAAO,oBAAoB,OADN,UAAU,KAAK,OAAO,QAAQ,UAAU,MAAM,WAAW,OAAO,EACrC,SAAS;;CAG3D,MAAM,qBACJ,OACA,QACA,aACA,QAC4B;EAE5B,MAAM,aAAa,MAAM,qBAAqB,OADzB,UAAU,KAAK,OAAO,QAAQ,UAAU,MAAM,WAAW,OAAO,EAClB,YAAY;AAC/E,MAAI,WAAW,OAAO,CACpB,QAAO,KAAK,MAAM,yBAAyB,8BAA8B,EACvE,OAAO,WAAW,OACnB,CAAC;AACJ,SAAO,GAAG,WAAW,MAAM"}
+{"version":3,"file":"base.service.mjs","names":[],"sources":["../../../../src/modules/base/base.service.ts"],"sourcesContent":["import type { QueryFilter, QueryInput } from \"@m5kdev/commons/modules/schemas/query.schema\";\r\nimport { err, ok } from \"neverthrow\";\r\nimport { Base } from \"./base.abstract\";\r\nimport { type AuthenticatedActor, validateActor } from \"./base.actor\";\r\nimport type { ServerResult, ServerResultAsync } from \"./base.dto\";\r\nimport {\r\n  checkPermissionAsync,\r\n  checkPermissionSync,\r\n  type Entity,\r\n  type ResourceActionGrant,\r\n  type ResourceGrant,\r\n} from \"./base.grants\";\r\nimport {\r\n  createPermissionServiceProcedureBuilder,\r\n  createServiceProcedureBuilder,\r\n  type PermissionServiceProcedureBuilder,\r\n  type ServiceProcedureBuilder,\r\n  type ServiceProcedureContext,\r\n} from \"./base.procedure\";\r\n\r\nexport type {\r\n  PermissionServiceProcedureBuilder,\r\n  ServiceProcedure,\r\n  ServiceProcedureAccessConfig,\r\n  ServiceProcedureAccessEntitiesConfig,\r\n  ServiceProcedureAccessStateConfig,\r\n  ServiceProcedureArgs,\r\n  ServiceProcedureBuilder,\r\n  ServiceProcedureContext,\r\n  ServiceProcedureContextFilteredInput,\r\n  ServiceProcedureContextFilterScope,\r\n  ServiceProcedureEntityStepName,\r\n  ServiceProcedureInputMapper,\r\n  ServiceProcedureLoadedResource,\r\n} from \"./base.procedure\";\r\n\r\nexport class BaseService<\r\n  Repositories extends Record<string, Base>,\r\n  Services extends Record<string, Base>,\r\n  DefaultContext extends ServiceProcedureContext = ServiceProcedureContext,\r\n> extends Base {\r\n  constructor(\r\n    public repository: Repositories = {} as Repositories,\r\n    public service: Services = {} as Services\r\n  ) {\r\n    super(\"service\");\r\n    this.repository = repository;\r\n    this.service = service;\r\n  }\r\n\r\n  addUserFilter(\r\n    value: string,\r\n    query?: undefined,\r\n    columnId?: string,\r\n    method?: QueryFilter[\"method\"]\r\n  ): QueryInput;\r\n  addUserFilter<TQuery extends QueryInput>(\r\n    value: string,\r\n    query: TQuery,\r\n    columnId?: string,\r\n    method?: QueryFilter[\"method\"]\r\n  ): TQuery;\r\n  addUserFilter(\r\n    value: string,\r\n    query?: QueryInput,\r\n    columnId = \"userId\",\r\n    method: QueryFilter[\"method\"] = \"equals\"\r\n  ): QueryInput {\r\n    const userFilter: QueryFilter = {\r\n      columnId,\r\n      type: \"string\",\r\n      method,\r\n      value,\r\n    };\r\n    return query\r\n      ? { ...query, filters: [...(query?.filters ?? []), userFilter] }\r\n      : { filters: [userFilter] };\r\n  }\r\n\r\n  protected procedure<TInput, TCtx extends ServiceProcedureContext = DefaultContext>(\r\n    name: string\r\n  ): ServiceProcedureBuilder<TInput, TCtx, Repositories, Services> {\r\n    return createServiceProcedureBuilder(this, { name, steps: [] });\r\n  }\r\n\r\n  addContextFilter(\r\n    actor: AuthenticatedActor,\r\n    include?: { user?: boolean; organization?: boolean; team?: boolean },\r\n    query?: undefined,\r\n    map?: Record<string, { columnId: string; method: QueryFilter[\"method\"] }>\r\n  ): QueryInput;\r\n  addContextFilter<TQuery extends QueryInput>(\r\n    actor: AuthenticatedActor,\r\n    include: { user?: boolean; organization?: boolean; team?: boolean } | undefined,\r\n    query: TQuery,\r\n    map?: Record<string, { columnId: string; method: QueryFilter[\"method\"] }>\r\n  ): TQuery;\r\n  addContextFilter(\r\n    actor: AuthenticatedActor,\r\n    include: { user?: boolean; organization?: boolean; team?: boolean } = {\r\n      user: true,\r\n      organization: false,\r\n      team: false,\r\n    },\r\n    query?: QueryInput,\r\n    map: Record<string, { columnId: string; method: QueryFilter[\"method\"] }> = {\r\n      userId: {\r\n        columnId: \"userId\",\r\n        method: \"equals\",\r\n      },\r\n      organizationId: {\r\n        columnId: \"organizationId\",\r\n        method: \"equals\",\r\n      },\r\n      teamId: {\r\n        columnId: \"teamId\",\r\n        method: \"equals\",\r\n      },\r\n    }\r\n  ): QueryInput {\r\n    const filters: QueryFilter[] = [];\r\n\r\n    if (include.user) {\r\n      filters.push({\r\n        columnId: map.userId.columnId,\r\n        type: \"string\",\r\n        method: map.userId.method,\r\n        value: actor.userId,\r\n      });\r\n    }\r\n    if (include.organization) {\r\n      if (!validateActor(actor, \"organization\")) {\r\n        throw new Error(\"Organization-scoped context filter requires an organization actor\");\r\n      }\r\n      filters.push({\r\n        columnId: map.organizationId.columnId,\r\n        type: \"string\",\r\n        method: map.organizationId.method,\r\n        value: actor.organizationId!,\r\n      });\r\n    }\r\n    if (include.team) {\r\n      if (!validateActor(actor, \"team\")) {\r\n        throw new Error(\"Team-scoped context filter requires a team actor\");\r\n      }\r\n      filters.push({\r\n        columnId: map.teamId.columnId,\r\n        type: \"string\",\r\n        method: map.teamId.method,\r\n        value: actor.teamId!,\r\n      });\r\n    }\r\n    return query ? { ...query, filters: [...(query?.filters ?? []), ...filters] } : { filters };\r\n  }\r\n}\r\n\r\nexport class BasePermissionService<\r\n  Repositories extends Record<string, Base>,\r\n  Services extends Record<string, Base>,\r\n  DefaultContext extends ServiceProcedureContext = ServiceProcedureContext,\r\n> extends BaseService<Repositories, Services, DefaultContext> {\r\n  grants: ResourceGrant[];\r\n  constructor(repository: Repositories, service: Services, grants: ResourceGrant[] = []) {\r\n    super(repository, service);\r\n    this.grants = grants;\r\n  }\r\n\r\n  accessGuard<T extends Entity>(\r\n    actor: AuthenticatedActor,\r\n    action: string,\r\n    entities?: T | T[],\r\n    grants?: ResourceActionGrant[]\r\n  ): ServerResult<true> {\r\n    const hasPermission = this.checkPermission(actor, action, entities, grants);\r\n    if (!hasPermission) return this.error(\"FORBIDDEN\");\r\n    return ok(true);\r\n  }\r\n\r\n  async accessGuardAsync<T extends Entity>(\r\n    actor: AuthenticatedActor,\r\n    action: string,\r\n    getEntities: () => ServerResultAsync<T | T[] | undefined>,\r\n    grants?: ResourceActionGrant[]\r\n  ): ServerResultAsync<true> {\r\n    const hasPermission = await this.checkPermissionAsync(actor, action, getEntities, grants);\r\n    if (hasPermission.isErr()) return err(hasPermission.error);\r\n    if (!hasPermission.value) return this.error(\"FORBIDDEN\");\r\n    return ok(true);\r\n  }\r\n\r\n  protected override procedure<TInput, TCtx extends ServiceProcedureContext = DefaultContext>(\r\n    name: string\r\n  ): PermissionServiceProcedureBuilder<TInput, TCtx, Repositories, Services> {\r\n    return createPermissionServiceProcedureBuilder(this, { name, steps: [] });\r\n  }\r\n\r\n  checkPermission<T extends Entity>(\r\n    actor: AuthenticatedActor,\r\n    action: string,\r\n    entities?: T | T[],\r\n    grants?: ResourceActionGrant[]\r\n  ): boolean {\r\n    const actionGrants = grants ?? this.grants.filter((grant) => grant.action === action);\r\n    return checkPermissionSync(actor, actionGrants, entities);\r\n  }\r\n\r\n  async checkPermissionAsync<T extends Entity>(\r\n    actor: AuthenticatedActor,\r\n    action: string,\r\n    getEntities: () => ServerResultAsync<T | T[] | undefined>,\r\n    grants?: ResourceActionGrant[]\r\n  ): ServerResultAsync<boolean> {\r\n    const actionGrants = grants ?? this.grants.filter((grant) => grant.action === action);\r\n    const permission = await checkPermissionAsync(actor, actionGrants, getEntities);\r\n    if (permission.isErr())\r\n      return this.error(\"INTERNAL_SERVER_ERROR\", \"Failed to check permission\", {\r\n        cause: permission.error,\r\n      });\r\n    return ok(permission.value);\r\n  }\r\n}\r\n"],"mappings":";;;;;;AAoCA,IAAa,cAAb,cAIU,KAAK;CACb,YACE,aAAkC,EAAE,EACpC,UAA2B,EAAE,EAC7B;AACA,QAAM,UAAU;AAHT,OAAA,aAAA;AACA,OAAA,UAAA;AAGP,OAAK,aAAa;AAClB,OAAK,UAAU;;CAejB,cACE,OACA,OACA,WAAW,UACX,SAAgC,UACpB;EACZ,MAAM,aAA0B;GAC9B;GACA,MAAM;GACN;GACA;GACD;AACD,SAAO,QACH;GAAE,GAAG;GAAO,SAAS,CAAC,GAAI,OAAO,WAAW,EAAE,EAAG,WAAW;GAAE,GAC9D,EAAE,SAAS,CAAC,WAAW,EAAE;;CAG/B,UACE,MAC+D;AAC/D,SAAO,8BAA8B,MAAM;GAAE;GAAM,OAAO,EAAE;GAAE,CAAC;;CAejE,iBACE,OACA,UAAsE;EACpE,MAAM;EACN,cAAc;EACd,MAAM;EACP,EACD,OACA,MAA2E;EACzE,QAAQ;GACN,UAAU;GACV,QAAQ;GACT;EACD,gBAAgB;GACd,UAAU;GACV,QAAQ;GACT;EACD,QAAQ;GACN,UAAU;GACV,QAAQ;GACT;EACF,EACW;EACZ,MAAM,UAAyB,EAAE;AAEjC,MAAI,QAAQ,KACV,SAAQ,KAAK;GACX,UAAU,IAAI,OAAO;GACrB,MAAM;GACN,QAAQ,IAAI,OAAO;GACnB,OAAO,MAAM;GACd,CAAC;AAEJ,MAAI,QAAQ,cAAc;AACxB,OAAI,CAAC,cAAc,OAAO,eAAe,CACvC,OAAM,IAAI,MAAM,oEAAoE;AAEtF,WAAQ,KAAK;IACX,UAAU,IAAI,eAAe;IAC7B,MAAM;IACN,QAAQ,IAAI,eAAe;IAC3B,OAAO,MAAM;IACd,CAAC;;AAEJ,MAAI,QAAQ,MAAM;AAChB,OAAI,CAAC,cAAc,OAAO,OAAO,CAC/B,OAAM,IAAI,MAAM,mDAAmD;AAErE,WAAQ,KAAK;IACX,UAAU,IAAI,OAAO;IACrB,MAAM;IACN,QAAQ,IAAI,OAAO;IACnB,OAAO,MAAM;IACd,CAAC;;AAEJ,SAAO,QAAQ;GAAE,GAAG;GAAO,SAAS,CAAC,GAAI,OAAO,WAAW,EAAE,EAAG,GAAG,QAAQ;GAAE,GAAG,EAAE,SAAS;;;AAI/F,IAAa,wBAAb,cAIU,YAAoD;CAC5D;CACA,YAAY,YAA0B,SAAmB,SAA0B,EAAE,EAAE;AACrF,QAAM,YAAY,QAAQ;AAC1B,OAAK,SAAS;;CAGhB,YACE,OACA,QACA,UACA,QACoB;AAEpB,MAAI,CADkB,KAAK,gBAAgB,OAAO,QAAQ,UAAU,OAAO,CACvD,QAAO,KAAK,MAAM,YAAY;AAClD,SAAO,GAAG,KAAK;;CAGjB,MAAM,iBACJ,OACA,QACA,aACA,QACyB;EACzB,MAAM,gBAAgB,MAAM,KAAK,qBAAqB,OAAO,QAAQ,aAAa,OAAO;AACzF,MAAI,cAAc,OAAO,CAAE,QAAO,IAAI,cAAc,MAAM;AAC1D,MAAI,CAAC,cAAc,MAAO,QAAO,KAAK,MAAM,YAAY;AACxD,SAAO,GAAG,KAAK;;CAGjB,UACE,MACyE;AACzE,SAAO,wCAAwC,MAAM;GAAE;GAAM,OAAO,EAAE;GAAE,CAAC;;CAG3E,gBACE,OACA,QACA,UACA,QACS;AAET,SAAO,oBAAoB,OADN,UAAU,KAAK,OAAO,QAAQ,UAAU,MAAM,WAAW,OAAO,EACrC,SAAS;;CAG3D,MAAM,qBACJ,OACA,QACA,aACA,QAC4B;EAE5B,MAAM,aAAa,MAAM,qBAAqB,OADzB,UAAU,KAAK,OAAO,QAAQ,UAAU,MAAM,WAAW,OAAO,EAClB,YAAY;AAC/E,MAAI,WAAW,OAAO,CACpB,QAAO,KAAK,MAAM,yBAAyB,8BAA8B,EACvE,OAAO,WAAW,OACnB,CAAC;AACJ,SAAO,GAAG,WAAW,MAAM"}

package/dist/src/modules/billing/billing.repository.d.cts

@@ -4,7 +4,7 @@ import * as _$drizzle_orm_sqlite_core0 from "drizzle-orm/sqlite-core";
 import { LibSQLDatabase } from "drizzle-orm/libsql";
 import { InferSelectModel } from "drizzle-orm";
 import { BillingSchema } from "@m5kdev/commons/modules/billing/billing.schema";
-import { Stripe as Stripe$1 } from "stripe";
+import { Stripe } from "stripe";
 import { StripePlan } from "@m5kdev/commons/modules/billing/billing.types";
 
 //#region src/modules/billing/billing.repository.d.ts
@@ -2713,7 +2713,7 @@ declare const schema: {
 type Schema = typeof schema;
 type Orm = LibSQLDatabase<Schema>;
 declare class BillingRepository extends BaseTableRepository<Orm, Schema, Record<string, never>, Schema["subscriptions"]> {
-  stripe: Stripe$1;
+  stripe: Stripe;
   plans: StripePlan[];
   trial?: StripePlan;
   constructor(options: {
@@ -2721,7 +2721,7 @@ declare class BillingRepository extends BaseTableRepository<Orm, Schema, Record<
     schema: Schema;
     table: Schema["subscriptions"];
     libs: {
-      stripe: Stripe$1;
+      stripe: Stripe;
     };
     config: {
       trial?: StripePlan;
@@ -2730,7 +2730,7 @@ declare class BillingRepository extends BaseTableRepository<Orm, Schema, Record<
   });
   hasTrial(): boolean;
   getPlanByPriceId(priceId: string): StripePlan | undefined;
-  getCustomerByEmail(email: string): ServerResultAsync<Stripe$1.Customer | null>;
+  getCustomerByEmail(email: string): ServerResultAsync<Stripe.Customer | null>;
   getUserByCustomerId(customerId: string): ServerResultAsync<InferSelectModel<Schema["users"]> | null>;
   createCustomer({
     email,
@@ -2740,8 +2740,8 @@ declare class BillingRepository extends BaseTableRepository<Orm, Schema, Record<
     email: string;
     name?: string;
     userId: string;
-  }): ServerResultAsync<Stripe$1.Customer>;
-  createTrialSubscription(customerId: string): ServerResultAsync<Stripe$1.Subscription>;
+  }): ServerResultAsync<Stripe.Customer>;
+  createTrialSubscription(customerId: string): ServerResultAsync<Stripe.Subscription>;
   createSubscription({
     customerId,
     priceId,
@@ -2752,7 +2752,7 @@ declare class BillingRepository extends BaseTableRepository<Orm, Schema, Record<
     priceId: string;
     quantity?: number;
     trialDays?: number;
-  }): ServerResultAsync<Stripe$1.Subscription>;
+  }): ServerResultAsync<Stripe.Subscription>;
   updateUserCustomerId({
     userId,
     customerId
@@ -2762,7 +2762,7 @@ declare class BillingRepository extends BaseTableRepository<Orm, Schema, Record<
   }): ServerResultAsync<InferSelectModel<Schema["users"]>>;
   getLatestSubscription(referenceId: string): ServerResultAsync<BillingSchema | null>;
   getActiveSubscription(referenceId: string): ServerResultAsync<BillingSchema | null>;
-  listInvoices(customerId: string): ServerResultAsync<Stripe$1.Invoice[]>;
+  listInvoices(customerId: string): ServerResultAsync<Stripe.Invoice[]>;
   createCheckoutSession({
     customerId,
     priceId,
@@ -2771,8 +2771,8 @@ declare class BillingRepository extends BaseTableRepository<Orm, Schema, Record<
     customerId: string;
     priceId: string;
     userId: string;
-  }): ServerResultAsync<Stripe$1.Checkout.Session>;
-  createBillingPortalSession(customerId: string): ServerResultAsync<Stripe$1.BillingPortal.Session>;
+  }): ServerResultAsync<Stripe.Checkout.Session>;
+  createBillingPortalSession(customerId: string): ServerResultAsync<Stripe.BillingPortal.Session>;
   syncStripeData({
     customerId,
     userId
@@ -2780,7 +2780,7 @@ declare class BillingRepository extends BaseTableRepository<Orm, Schema, Record<
     customerId: string;
     userId: string;
   }): ServerResultAsync<boolean>;
-  constructEvent(body: Buffer | string, signature: string, secret: string): ServerResult<Stripe$1.Event>;
+  constructEvent(body: Buffer | string, signature: string, secret: string): ServerResult<Stripe.Event>;
 }
 //#endregion
 export { BillingRepository };

package/dist/src/modules/billing/billing.repository.d.mts

@@ -1,10 +1,10 @@
 import { ServerResult, ServerResultAsync } from "../base/base.dto.mjs";
 import { BaseTableRepository } from "../base/base.repository.mjs";
 import { BillingSchema } from "@m5kdev/commons/modules/billing/billing.schema";
-import { InferSelectModel } from "drizzle-orm";
 import * as _$drizzle_orm_sqlite_core0 from "drizzle-orm/sqlite-core";
+import { InferSelectModel } from "drizzle-orm";
 import { LibSQLDatabase } from "drizzle-orm/libsql";
-import { Stripe as Stripe$1 } from "stripe";
+import { Stripe } from "stripe";
 import { StripePlan } from "@m5kdev/commons/modules/billing/billing.types";
 
 //#region src/modules/billing/billing.repository.d.ts
@@ -2713,7 +2713,7 @@ declare const schema: {
 type Schema = typeof schema;
 type Orm = LibSQLDatabase<Schema>;
 declare class BillingRepository extends BaseTableRepository<Orm, Schema, Record<string, never>, Schema["subscriptions"]> {
-  stripe: Stripe$1;
+  stripe: Stripe;
   plans: StripePlan[];
   trial?: StripePlan;
   constructor(options: {
@@ -2721,7 +2721,7 @@ declare class BillingRepository extends BaseTableRepository<Orm, Schema, Record<
     schema: Schema;
     table: Schema["subscriptions"];
     libs: {
-      stripe: Stripe$1;
+      stripe: Stripe;
     };
     config: {
       trial?: StripePlan;
@@ -2730,7 +2730,7 @@ declare class BillingRepository extends BaseTableRepository<Orm, Schema, Record<
   });
   hasTrial(): boolean;
   getPlanByPriceId(priceId: string): StripePlan | undefined;
-  getCustomerByEmail(email: string): ServerResultAsync<Stripe$1.Customer | null>;
+  getCustomerByEmail(email: string): ServerResultAsync<Stripe.Customer | null>;
   getUserByCustomerId(customerId: string): ServerResultAsync<InferSelectModel<Schema["users"]> | null>;
   createCustomer({
     email,
@@ -2740,8 +2740,8 @@ declare class BillingRepository extends BaseTableRepository<Orm, Schema, Record<
     email: string;
     name?: string;
     userId: string;
-  }): ServerResultAsync<Stripe$1.Customer>;
-  createTrialSubscription(customerId: string): ServerResultAsync<Stripe$1.Subscription>;
+  }): ServerResultAsync<Stripe.Customer>;
+  createTrialSubscription(customerId: string): ServerResultAsync<Stripe.Subscription>;
   createSubscription({
     customerId,
     priceId,
@@ -2752,7 +2752,7 @@ declare class BillingRepository extends BaseTableRepository<Orm, Schema, Record<
     priceId: string;
     quantity?: number;
     trialDays?: number;
-  }): ServerResultAsync<Stripe$1.Subscription>;
+  }): ServerResultAsync<Stripe.Subscription>;
   updateUserCustomerId({
     userId,
     customerId
@@ -2762,7 +2762,7 @@ declare class BillingRepository extends BaseTableRepository<Orm, Schema, Record<
   }): ServerResultAsync<InferSelectModel<Schema["users"]>>;
   getLatestSubscription(referenceId: string): ServerResultAsync<BillingSchema | null>;
   getActiveSubscription(referenceId: string): ServerResultAsync<BillingSchema | null>;
-  listInvoices(customerId: string): ServerResultAsync<Stripe$1.Invoice[]>;
+  listInvoices(customerId: string): ServerResultAsync<Stripe.Invoice[]>;
   createCheckoutSession({
     customerId,
     priceId,
@@ -2771,8 +2771,8 @@ declare class BillingRepository extends BaseTableRepository<Orm, Schema, Record<
     customerId: string;
     priceId: string;
     userId: string;
-  }): ServerResultAsync<Stripe$1.Checkout.Session>;
-  createBillingPortalSession(customerId: string): ServerResultAsync<Stripe$1.BillingPortal.Session>;
+  }): ServerResultAsync<Stripe.Checkout.Session>;
+  createBillingPortalSession(customerId: string): ServerResultAsync<Stripe.BillingPortal.Session>;
   syncStripeData({
     customerId,
     userId
@@ -2780,7 +2780,7 @@ declare class BillingRepository extends BaseTableRepository<Orm, Schema, Record<
     customerId: string;
     userId: string;
   }): ServerResultAsync<boolean>;
-  constructEvent(body: Buffer | string, signature: string, secret: string): ServerResult<Stripe$1.Event>;
+  constructEvent(body: Buffer | string, signature: string, secret: string): ServerResult<Stripe.Event>;
 }
 //#endregion
 export { BillingRepository };

package/dist/src/modules/billing/billing.service.d.cts

@@ -4,7 +4,7 @@ import { BillingRepository } from "./billing.repository.cjs";
 import { User } from "../auth/auth.lib.cjs";
 import { BaseService } from "../base/base.service.cjs";
 import { BillingSchema } from "@m5kdev/commons/modules/billing/billing.schema";
-import Stripe from "stripe";
+import Stripe$1 from "stripe";
 
 //#region src/modules/billing/billing.service.d.ts
 declare class BillingService extends BaseService<{
@@ -18,7 +18,7 @@ declare class BillingService extends BaseService<{
       email: string;
       name?: string;
     };
-  }): ServerResultAsync<Stripe.Customer>;
+  }): ServerResultAsync<Stripe$1.Customer>;
   createUserHook({
     user
   }: {
@@ -29,7 +29,7 @@ declare class BillingService extends BaseService<{
     };
   }): ServerResultAsync<boolean>;
   getActiveSubscription(ctx: Context): ServerResultAsync<BillingSchema | null>;
-  listInvoices(ctx: Context): ServerResultAsync<Stripe.Invoice[]>;
+  listInvoices(ctx: Context): ServerResultAsync<Stripe$1.Invoice[]>;
   createCheckoutSession({
     priceId
   }: {
@@ -38,15 +38,15 @@ declare class BillingService extends BaseService<{
     user
   }: {
     user: User;
-  }): ServerResultAsync<Stripe.Checkout.Session>;
+  }): ServerResultAsync<Stripe$1.Checkout.Session>;
   createBillingPortalSession({
     user
   }: {
     user: User;
-  }): ServerResultAsync<Stripe.BillingPortal.Session>;
-  constructEvent(body: Buffer | string, signature: string): ServerResult<Stripe.Event>;
+  }): ServerResultAsync<Stripe$1.BillingPortal.Session>;
+  constructEvent(body: Buffer | string, signature: string): ServerResult<Stripe$1.Event>;
   syncStripeData(customerId: string, eventType?: string): ServerResultAsync<boolean>;
-  processEvent(event: Stripe.Event): ServerResultAsync<boolean>;
+  processEvent(event: Stripe$1.Event): ServerResultAsync<boolean>;
 }
 //#endregion
 export { BillingService };

package/dist/src/modules/billing/billing.service.d.mts

@@ -4,7 +4,7 @@ import { BillingRepository } from "./billing.repository.mjs";
 import { User } from "../auth/auth.lib.mjs";
 import { BaseService } from "../base/base.service.mjs";
 import { BillingSchema } from "@m5kdev/commons/modules/billing/billing.schema";
-import Stripe from "stripe";
+import Stripe$1 from "stripe";
 
 //#region src/modules/billing/billing.service.d.ts
 declare class BillingService extends BaseService<{
@@ -18,7 +18,7 @@ declare class BillingService extends BaseService<{
       email: string;
       name?: string;
     };
-  }): ServerResultAsync<Stripe.Customer>;
+  }): ServerResultAsync<Stripe$1.Customer>;
   createUserHook({
     user
   }: {
@@ -29,7 +29,7 @@ declare class BillingService extends BaseService<{
     };
   }): ServerResultAsync<boolean>;
   getActiveSubscription(ctx: Context): ServerResultAsync<BillingSchema | null>;
-  listInvoices(ctx: Context): ServerResultAsync<Stripe.Invoice[]>;
+  listInvoices(ctx: Context): ServerResultAsync<Stripe$1.Invoice[]>;
   createCheckoutSession({
     priceId
   }: {
@@ -38,15 +38,15 @@ declare class BillingService extends BaseService<{
     user
   }: {
     user: User;
-  }): ServerResultAsync<Stripe.Checkout.Session>;
+  }): ServerResultAsync<Stripe$1.Checkout.Session>;
   createBillingPortalSession({
     user
   }: {
     user: User;
-  }): ServerResultAsync<Stripe.BillingPortal.Session>;
-  constructEvent(body: Buffer | string, signature: string): ServerResult<Stripe.Event>;
+  }): ServerResultAsync<Stripe$1.BillingPortal.Session>;
+  constructEvent(body: Buffer | string, signature: string): ServerResult<Stripe$1.Event>;
   syncStripeData(customerId: string, eventType?: string): ServerResultAsync<boolean>;
-  processEvent(event: Stripe.Event): ServerResultAsync<boolean>;
+  processEvent(event: Stripe$1.Event): ServerResultAsync<boolean>;
 }
 //#endregion
 export { BillingService };

package/dist/src/modules/connect/connect.dto.d.cts

@@ -27,16 +27,16 @@ declare const connectSelectOutputSchema: z.ZodObject<{
   id: z.ZodString;
   createdAt: z.ZodDate;
   updatedAt: z.ZodOptional<z.ZodNullable<z.ZodDate>>;
-  expiresAt: z.ZodOptional<z.ZodNullable<z.ZodDate>>;
   userId: z.ZodString;
   provider: z.ZodString;
+  expiresAt: z.ZodOptional<z.ZodNullable<z.ZodDate>>;
+  scope: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   accountType: z.ZodString;
   providerAccountId: z.ZodString;
   handle: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   displayName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   avatarUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   tokenType: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-  scope: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   parentId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   metadataJson: z.ZodOptional<z.ZodNullable<z.ZodUnknown>>;
   revokedAt: z.ZodOptional<z.ZodNullable<z.ZodDate>>;
@@ -51,16 +51,16 @@ declare const connectListOutputSchema: z.ZodArray<z.ZodObject<{
   id: z.ZodString;
   createdAt: z.ZodDate;
   updatedAt: z.ZodOptional<z.ZodNullable<z.ZodDate>>;
-  expiresAt: z.ZodOptional<z.ZodNullable<z.ZodDate>>;
   userId: z.ZodString;
   provider: z.ZodString;
+  expiresAt: z.ZodOptional<z.ZodNullable<z.ZodDate>>;
+  scope: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   accountType: z.ZodString;
   providerAccountId: z.ZodString;
   handle: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   displayName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   avatarUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   tokenType: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-  scope: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   parentId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   metadataJson: z.ZodOptional<z.ZodNullable<z.ZodUnknown>>;
   revokedAt: z.ZodOptional<z.ZodNullable<z.ZodDate>>;

package/dist/src/modules/connect/connect.dto.d.mts

@@ -27,16 +27,16 @@ declare const connectSelectOutputSchema: z.ZodObject<{
   id: z.ZodString;
   createdAt: z.ZodDate;
   updatedAt: z.ZodOptional<z.ZodNullable<z.ZodDate>>;
-  expiresAt: z.ZodOptional<z.ZodNullable<z.ZodDate>>;
   userId: z.ZodString;
   provider: z.ZodString;
+  expiresAt: z.ZodOptional<z.ZodNullable<z.ZodDate>>;
+  scope: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   accountType: z.ZodString;
   providerAccountId: z.ZodString;
   handle: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   displayName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   avatarUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   tokenType: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-  scope: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   parentId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   metadataJson: z.ZodOptional<z.ZodNullable<z.ZodUnknown>>;
   revokedAt: z.ZodOptional<z.ZodNullable<z.ZodDate>>;
@@ -51,16 +51,16 @@ declare const connectListOutputSchema: z.ZodArray<z.ZodObject<{
   id: z.ZodString;
   createdAt: z.ZodDate;
   updatedAt: z.ZodOptional<z.ZodNullable<z.ZodDate>>;
-  expiresAt: z.ZodOptional<z.ZodNullable<z.ZodDate>>;
   userId: z.ZodString;
   provider: z.ZodString;
+  expiresAt: z.ZodOptional<z.ZodNullable<z.ZodDate>>;
+  scope: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   accountType: z.ZodString;
   providerAccountId: z.ZodString;
   handle: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   displayName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   avatarUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   tokenType: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-  scope: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   parentId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   metadataJson: z.ZodOptional<z.ZodNullable<z.ZodUnknown>>;
   revokedAt: z.ZodOptional<z.ZodNullable<z.ZodDate>>;

package/dist/src/modules/connect/connect.repository.d.cts

@@ -396,18 +396,18 @@ declare class ConnectRepository extends BaseTableRepository<Orm, Schema, Record<
     id: string;
     createdAt: Date;
     updatedAt: Date | null;
-    expiresAt: Date | null;
     userId: string;
     provider: string;
+    expiresAt: Date | null;
+    accessToken: string;
+    refreshToken: string | null;
+    scope: string | null;
     accountType: string;
     providerAccountId: string;
     handle: string | null;
     displayName: string | null;
     avatarUrl: string | null;
-    accessToken: string;
-    refreshToken: string | null;
     tokenType: string | null;
-    scope: string | null;
     parentId: string | null;
     metadataJson: unknown;
     revokedAt: Date | null;

package/dist/src/modules/connect/connect.repository.d.mts

@@ -1,8 +1,8 @@
 import { ServerResult } from "../base/base.dto.mjs";
 import { BaseTableRepository } from "../base/base.repository.mjs";
 import { ConnectListInputSchema } from "./connect.dto.mjs";
-import { InferInsertModel, InferSelectModel } from "drizzle-orm";
 import * as _$drizzle_orm_sqlite_core0 from "drizzle-orm/sqlite-core";
+import { InferInsertModel, InferSelectModel } from "drizzle-orm";
 import { LibSQLDatabase } from "drizzle-orm/libsql";
 
 //#region src/modules/connect/connect.repository.d.ts
@@ -396,18 +396,18 @@ declare class ConnectRepository extends BaseTableRepository<Orm, Schema, Record<
     id: string;
     createdAt: Date;
     updatedAt: Date | null;
-    expiresAt: Date | null;
     userId: string;
     provider: string;
+    expiresAt: Date | null;
+    accessToken: string;
+    refreshToken: string | null;
+    scope: string | null;
     accountType: string;
     providerAccountId: string;
     handle: string | null;
     displayName: string | null;
     avatarUrl: string | null;
-    accessToken: string;
-    refreshToken: string | null;
     tokenType: string | null;
-    scope: string | null;
     parentId: string | null;
     metadataJson: unknown;
     revokedAt: Date | null;

package/dist/src/modules/connect/connect.service.d.cts

@@ -22,18 +22,18 @@ declare class ConnectService extends BaseService<{
     id: string;
     createdAt: Date;
     updatedAt: Date | null;
-    expiresAt: Date | null;
     userId: string;
     provider: string;
+    expiresAt: Date | null;
+    accessToken: string;
+    refreshToken: string | null;
+    scope: string | null;
     accountType: string;
     providerAccountId: string;
     handle: string | null;
     displayName: string | null;
     avatarUrl: string | null;
-    accessToken: string;
-    refreshToken: string | null;
     tokenType: string | null;
-    scope: string | null;
     parentId: string | null;
     metadataJson: unknown;
     revokedAt: Date | null;
@@ -43,18 +43,18 @@ declare class ConnectService extends BaseService<{
     id: string;
     createdAt: Date;
     updatedAt: Date | null;
-    expiresAt: Date | null;
     userId: string;
     provider: string;
+    expiresAt: Date | null;
+    accessToken: string;
+    refreshToken: string | null;
+    scope: string | null;
     accountType: string;
     providerAccountId: string;
     handle: string | null;
     displayName: string | null;
     avatarUrl: string | null;
-    accessToken: string;
-    refreshToken: string | null;
     tokenType: string | null;
-    scope: string | null;
     parentId: string | null;
     metadataJson: unknown;
     revokedAt: Date | null;

package/dist/src/modules/connect/connect.service.d.mts

@@ -22,18 +22,18 @@ declare class ConnectService extends BaseService<{
     id: string;
     createdAt: Date;
     updatedAt: Date | null;
-    expiresAt: Date | null;
     userId: string;
     provider: string;
+    expiresAt: Date | null;
+    accessToken: string;
+    refreshToken: string | null;
+    scope: string | null;
     accountType: string;
     providerAccountId: string;
     handle: string | null;
     displayName: string | null;
     avatarUrl: string | null;
-    accessToken: string;
-    refreshToken: string | null;
     tokenType: string | null;
-    scope: string | null;
     parentId: string | null;
     metadataJson: unknown;
     revokedAt: Date | null;
@@ -43,18 +43,18 @@ declare class ConnectService extends BaseService<{
     id: string;
     createdAt: Date;
     updatedAt: Date | null;
-    expiresAt: Date | null;
     userId: string;
     provider: string;
+    expiresAt: Date | null;
+    accessToken: string;
+    refreshToken: string | null;
+    scope: string | null;
     accountType: string;
     providerAccountId: string;
     handle: string | null;
     displayName: string | null;
     avatarUrl: string | null;
-    accessToken: string;
-    refreshToken: string | null;
     tokenType: string | null;
-    scope: string | null;
     parentId: string | null;
     metadataJson: unknown;
     revokedAt: Date | null;

package/dist/src/modules/connect/connect.trpc.d.cts

@@ -26,11 +26,11 @@ declare function createConnectTRPC({
       providerAccountId: string;
       updatedAt?: Date | null | undefined;
       expiresAt?: Date | null | undefined;
+      scope?: string | null | undefined;
       handle?: string | null | undefined;
       displayName?: string | null | undefined;
       avatarUrl?: string | null | undefined;
       tokenType?: string | null | undefined;
-      scope?: string | null | undefined;
       parentId?: string | null | undefined;
       metadataJson?: unknown;
       revokedAt?: Date | null | undefined;