@venizia/ignis-kernel 0.4.7-0 → 0.4.7-2

package/dist/esm/base/auth/authorize/providers/authorization.provider.js

@@ -1,11 +1,11 @@
-import { asTypedContext } from '../../../controllers/context.js';
+import { ContextUtility } from '../../../controllers/context.js';
 import { BaseHelper, getError } from '@venizia/ignis-helpers/core';
 import { createMiddleware } from 'hono/factory';
 // Deep import (not the authenticate barrel): the barrel re-exports ./controllers, whose factory extends BaseRestController - a value import here forms the base/controllers <-> auth init cycle.
 import { Authentication } from '../../authenticate/common/constants/index.js';
 import { Authorization, AuthorizationDecisions, AuthorizationErrors } from '../common/index.js';
 import { AuthorizationEnforcerRegistry } from '../enforcers/enforcer-registry.js';
-import { resolveRequestDomain } from './request-domain.js';
+import { RequestDomainResolver } from './request-domain.js';
 export class AuthorizationProvider extends BaseHelper {
     constructor() {
         super({ scope: AuthorizationProvider.name });
@@ -52,7 +52,7 @@ export class AuthorizationProvider extends BaseHelper {
                     user,
                     action: spec.action,
                     resource: spec.resource,
-                    context: asTypedContext(context),
+                    context: ContextUtility.asTypedContext({ context }),
                 });
                 if (decision === AuthorizationDecisions.DENY) {
                     throw getError({
@@ -89,9 +89,9 @@ export class AuthorizationProvider extends BaseHelper {
             // observability, but nothing decides on it.
             let domainScope;
             if (spec.domain || options?.domainResolver) {
-                const resolvedDomain = await resolveRequestDomain({
+                const resolvedDomain = await RequestDomainResolver.resolveRequestDomain({
                     spec,
-                    context: asTypedContext(context),
+                    context: ContextUtility.asTypedContext({ context }),
                     options,
                 });
                 domainScope = resolvedDomain;
@@ -116,7 +116,7 @@ export class AuthorizationProvider extends BaseHelper {
                 }
                 const result = await enforcer.buildRules({
                     user: user,
-                    context: asTypedContext(context),
+                    context: ContextUtility.asTypedContext({ context }),
                 });
                 rules = result;
                 rulesByEnforcer.set(resolvedName, rules);
@@ -130,7 +130,7 @@ export class AuthorizationProvider extends BaseHelper {
                     conditions: spec.conditions,
                     domain: domainScope,
                 },
-                context: asTypedContext(context),
+                context: ContextUtility.asTypedContext({ context }),
             });
             if (decision === AuthorizationDecisions.ABSTAIN) {
                 decision = options?.defaultDecision ?? AuthorizationDecisions.DENY;

package/dist/esm/base/auth/authorize/providers/authorization.provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorization.provider.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authorize/providers/authorization.provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAEnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,iMAAiM;AACjM,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAErE,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACvF,OAAO,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,MAAM,OAAO,qBAAsB,SAAQ,UAAU;IACnD;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK;QACH,OAAO,CAAC,IAAI,EAAE,EAAE;YACd,OAAO,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC,CAAC;IACJ,CAAC;IAEO,yBAAyB,CAAC,IAAyD;QACzF,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;QAEpE,OAAO,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC9C,MAAM,QAAQ,GAAG,6BAA6B,CAAC,WAAW,EAAE,CAAC;YAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;YAE1C,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;YACtE,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACxE,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,YAAY,CAA0B,CAAC;YAC/E,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,QAAQ,CAAC;oBACb,KAAK,EAAE,mBAAmB,CAAC,eAAe;oBAC1C,OAAO,EAAE,mDAAmD;iBAC7D,CAAC,CAAC;YACL,CAAC;YAED,MAAM,cAAc,GAClB,OAAO,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACnF,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;gBAElD,IACE,OAAO,EAAE,gBAAgB,EAAE,MAAM;oBACjC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAC5D,CAAC;oBACD,MAAM,CAAC,IAAI,CACT,0EAA0E,EAC1E,SAAS,CACV,CAAC;oBACF,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;gBAED,IAAI,IAAI,CAAC,YAAY,EAAE,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,YAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvF,MAAM,CAAC,IAAI,CAAC,gEAAgE,EAAE,SAAS,CAAC,CAAC;oBACzF,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;YACrC,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC;oBAC3B,IAAI;oBACJ,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;iBACjC,CAAC,CAAC;gBAEH,IAAI,QAAQ,KAAK,sBAAsB,CAAC,IAAI,EAAE,CAAC;oBAC7C,MAAM,QAAQ,CAAC;wBACb,KAAK,EAAE,mBAAmB,CAAC,eAAe;wBAC1C,OAAO,EAAE,2CAA2C,IAAI,CAAC,MAAM,gBAAgB,IAAI,CAAC,QAAQ,EAAE;wBAC9F,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;qBAC9D,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,QAAQ,KAAK,sBAAsB,CAAC,KAAK,EAAE,CAAC;oBAC9C,MAAM,IAAI,EAAE,CAAC;oBACb,OAAO;gBACT,CAAC;gBAED,iCAAiC;YACnC,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC7B,MAAM,kBAAkB,GAAG,OAAO,EAAE,eAAe,IAAI,sBAAsB,CAAC,IAAI,CAAC;gBAEnF,IAAI,kBAAkB,KAAK,sBAAsB,CAAC,KAAK,EAAE,CAAC;oBACxD,MAAM,CAAC,IAAI,CACT,mEAAmE,EACnE,OAAO,CAAC,GAAG,CAAC,IAAI,CACjB,CAAC;oBACF,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;gBAED,MAAM,QAAQ,CAAC;oBACb,KAAK,EAAE,mBAAmB,CAAC,uBAAuB;oBAClD,OAAO,EAAE,uGAAuG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE;iBACnI,CAAC,CAAC;YACL,CAAC;YAED,MAAM,YAAY,GAAG,YAAY,IAAI,QAAQ,CAAC,sBAAsB,EAAE,CAAC;YACvE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YAExE,4KAA4K;YAC5K,EAAE;YACF,4FAA4F;YAC5F,oFAAoF;YACpF,sFAAsF;YACtF,sFAAsF;YACtF,4CAA4C;YAC5C,IAAI,WAAyE,CAAC;YAC9E,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,EAAE,cAAc,EAAE,CAAC;gBAC3C,MAAM,cAAc,GAAG,MAAM,oBAAoB,CAAC;oBAChD,IAAI;oBACJ,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;oBAChC,OAAO;iBACR,CAAC,CAAC;gBACH,WAAW,GAAG,cAAc,CAAC;YAC/B,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAE/C,2FAA2F;YAC3F,2FAA2F;YAC3F,4CAA4C;YAC5C,EAAE;YACF,wFAAwF;YACxF,4FAA4F;YAC5F,sEAAsE;YACtE,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,eAAe,GACnB,aAAa,YAAY,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,GAAG,EAAmB,CAAC;YAC5E,IAAI,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAE9C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;oBACxB,MAAM,QAAQ,CAAC;wBACb,KAAK,EAAE,mBAAmB,CAAC,sBAAsB;wBACjD,OAAO,EACL,uFAAuF;qBAC1F,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC;oBACvC,IAAI,EAAE,IAA6C;oBACnD,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;iBACjC,CAAC,CAAC;gBACH,KAAK,GAAG,MAAM,CAAC;gBACf,eAAe,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;gBACzC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;YACpD,CAAC;YAED,IAAI,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC;gBACrC,KAAK;gBACL,OAAO,EAAE;oBACP,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,MAAM,EAAE,WAAW;iBACpB;gBACD,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;aACjC,CAAC,CAAC;YAEH,IAAI,QAAQ,KAAK,sBAAsB,CAAC,OAAO,EAAE,CAAC;gBAChD,QAAQ,GAAG,OAAO,EAAE,eAAe,IAAI,sBAAsB,CAAC,IAAI,CAAC;YACrE,CAAC;YAED,IAAI,QAAQ,KAAK,sBAAsB,CAAC,KAAK,EAAE,CAAC;gBAC9C,MAAM,QAAQ,CAAC;oBACb,KAAK,EAAE,mBAAmB,CAAC,MAAM;oBACjC,OAAO,EAAE,kCAAkC,IAAI,CAAC,MAAM,gBAAgB,IAAI,CAAC,QAAQ,EAAE;oBACrF,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;iBAC9D,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,EAAE,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,gBAAgB,CAAC,IAAyB;QAChD,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAEzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAgE,EAAE,EAAE;YACpF,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC1B,OAAO,CAAC,CAAC;YACX,CAAC;YACD,OAAO,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import { asTypedContext } from '@/base/controllers/context';\nimport { BaseHelper, getError } from '@venizia/ignis-helpers/core';\nimport type { IProvider } from '@venizia/ignis-inversion';\nimport { createMiddleware } from 'hono/factory';\nimport type { IAuthUser } from '../../authenticate/common/types';\n// Deep import (not the authenticate barrel): the barrel re-exports ./controllers, whose factory extends BaseRestController - a value import here forms the base/controllers <-> auth init cycle.\nimport { Authentication } from '../../authenticate/common/constants';\nimport type { IAuthorizationSpec, TAuthorizeFn } from '../common';\nimport { Authorization, AuthorizationDecisions, AuthorizationErrors } from '../common';\nimport { AuthorizationEnforcerRegistry } from '../enforcers/enforcer-registry';\nimport { resolveRequestDomain } from './request-domain';\n\nexport class AuthorizationProvider extends BaseHelper implements IProvider<TAuthorizeFn> {\n  constructor() {\n    super({ scope: AuthorizationProvider.name });\n  }\n\n  value(): TAuthorizeFn {\n    return (opts) => {\n      return this.createAuthorizeMiddleware(opts);\n    };\n  }\n\n  private createAuthorizeMiddleware(opts: { spec: IAuthorizationSpec; enforcerName?: string }) {\n    const { spec, enforcerName } = opts;\n    const logger = this.logger.for(this.createAuthorizeMiddleware.name);\n\n    return createMiddleware(async (context, next) => {\n      const registry = AuthorizationEnforcerRegistry.getInstance();\n      const options = registry.resolveOptions();\n\n      const isSkipAuthorize = context.get(Authorization.SKIP_AUTHORIZATION);\n      if (isSkipAuthorize) {\n        logger.warn('SKIP checking authorization | path: %s', context.req.path);\n        return next();\n      }\n\n      const user = context.get(Authentication.CURRENT_USER) as IAuthUser | undefined;\n      if (!user) {\n        throw getError({\n          error: AuthorizationErrors.UNAUTHENTICATED,\n          message: 'Authorization failed: No authenticated user found',\n        });\n      }\n\n      const needsRoleCheck =\n        Boolean(options?.alwaysAllowRoles?.length) || Boolean(spec.allowedRoles?.length);\n      if (needsRoleCheck) {\n        const userRoles = this.extractUserRoles({ user });\n\n        if (\n          options?.alwaysAllowRoles?.length &&\n          userRoles.some((r) => options.alwaysAllowRoles!.includes(r))\n        ) {\n          logger.warn(\n            'SKIP checking authorization | User has always-allow role | userRoles: %s',\n            userRoles,\n          );\n          return next();\n        }\n\n        if (spec.allowedRoles?.length && userRoles.some((r) => spec.allowedRoles!.includes(r))) {\n          logger.warn('GRANT access | User has allowed role for route | userRoles: %s', userRoles);\n          return next();\n        }\n      }\n\n      const votersList = spec.voters ?? [];\n      for (const voter of votersList) {\n        const decision = await voter({\n          user,\n          action: spec.action,\n          resource: spec.resource,\n          context: asTypedContext(context),\n        });\n\n        if (decision === AuthorizationDecisions.DENY) {\n          throw getError({\n            error: AuthorizationErrors.DENIED_BY_VOTER,\n            message: `Authorization denied by voter | action: ${spec.action} | resource: ${spec.resource}`,\n            messageArgs: { action: spec.action, resource: spec.resource },\n          });\n        }\n\n        if (decision === AuthorizationDecisions.ALLOW) {\n          await next();\n          return;\n        }\n\n        // ABSTAIN → continue to enforcer\n      }\n\n      if (!registry.hasEnforcers()) {\n        const noEnforcerDecision = options?.defaultDecision ?? AuthorizationDecisions.DENY;\n\n        if (noEnforcerDecision === AuthorizationDecisions.ALLOW) {\n          logger.warn(\n            'ALLOW checking authorization | No enforcers registered | path: %s',\n            context.req.path,\n          );\n          return next();\n        }\n\n        throw getError({\n          error: AuthorizationErrors.ENFORCER_NOT_REGISTERED,\n          message: `Authorization failed: authorize() was declared for this route but no enforcer is registered | path: ${context.req.path}`,\n        });\n      }\n\n      const resolvedName = enforcerName ?? registry.getDefaultEnforcerName();\n      const enforcer = await registry.resolveEnforcer({ name: resolvedName });\n\n      // Only resolve domain scope when it is actually in play (per-route domain OR a configured global resolver) - avoids a resolver call (possible DB hit) for legacy enforcers.\n      //\n      // Held in a LOCAL, not read back out of the context. One middleware is pushed per spec onto\n      // the same Hono context, so reading `Authorization.DOMAIN` at decision time meant a\n      // domain-less spec inherited the tenant domain a PREVIOUS spec had written - silently\n      // widening a check that should have run at SYSTEM_WIDE. The context is still set, for\n      // observability, but nothing decides on it.\n      let domainScope: Awaited<ReturnType<typeof resolveRequestDomain>> | undefined;\n      if (spec.domain || options?.domainResolver) {\n        const resolvedDomain = await resolveRequestDomain({\n          spec,\n          context: asTypedContext(context),\n          options,\n        });\n        domainScope = resolvedDomain;\n      }\n      context.set(Authorization.DOMAIN, domainScope);\n\n      // Keyed by enforcer. The slot used to hold one rule set for the whole request, so a second\n      // `authorize()` naming a DIFFERENT enforcer evaluated against the first enforcer's rules -\n      // granting where its own policy set denies.\n      //\n      // `instanceof Map`, not a truthiness test: the slot previously held a bare rule set, so\n      // anything that pre-populates it with the old shape would otherwise reach `.get` on a value\n      // that has no such method and take the request down with a TypeError.\n      const existingRules = context.get(Authorization.RULES);\n      const rulesByEnforcer =\n        existingRules instanceof Map ? existingRules : new Map<string, unknown>();\n      let rules = rulesByEnforcer.get(resolvedName);\n\n      if (!rules) {\n        if (!user.principalType) {\n          throw getError({\n            error: AuthorizationErrors.PRINCIPAL_TYPE_MISSING,\n            message:\n              'Authorization failed: user.principalType is required for enforcer-based authorization',\n          });\n        }\n\n        const result = await enforcer.buildRules({\n          user: user as { principalType: string } & IAuthUser,\n          context: asTypedContext(context),\n        });\n        rules = result;\n        rulesByEnforcer.set(resolvedName, rules);\n        context.set(Authorization.RULES, rulesByEnforcer);\n      }\n\n      let decision = await enforcer.evaluate({\n        rules,\n        request: {\n          action: spec.action,\n          resource: spec.resource,\n          conditions: spec.conditions,\n          domain: domainScope,\n        },\n        context: asTypedContext(context),\n      });\n\n      if (decision === AuthorizationDecisions.ABSTAIN) {\n        decision = options?.defaultDecision ?? AuthorizationDecisions.DENY;\n      }\n\n      if (decision !== AuthorizationDecisions.ALLOW) {\n        throw getError({\n          error: AuthorizationErrors.DENIED,\n          message: `Authorization denied | action: ${spec.action} | resource: ${spec.resource}`,\n          messageArgs: { action: spec.action, resource: spec.resource },\n        });\n      }\n\n      await next();\n    });\n  }\n\n  private extractUserRoles(opts: { user: IAuthUser }): string[] {\n    const { user } = opts;\n    const roles = user.roles;\n\n    if (!Array.isArray(roles)) {\n      return [];\n    }\n\n    return roles.map((r: string | { identifier?: string; name?: string; id?: unknown }) => {\n      if (typeof r === 'string') {\n        return r;\n      }\n      return r.identifier ?? r.name ?? String(r.id ?? '');\n    });\n  }\n}\n"]}
+{"version":3,"file":"authorization.provider.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authorize/providers/authorization.provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAEnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,iMAAiM;AACjM,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAErE,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACvF,OAAO,EAAE,6BAA6B,EAAE,MAAM,gCAAgC,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,MAAM,OAAO,qBAAsB,SAAQ,UAAU;IACnD;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK;QACH,OAAO,CAAC,IAAI,EAAE,EAAE;YACd,OAAO,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC,CAAC;IACJ,CAAC;IAEO,yBAAyB,CAAC,IAAyD;QACzF,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;QAEpE,OAAO,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC9C,MAAM,QAAQ,GAAG,6BAA6B,CAAC,WAAW,EAAE,CAAC;YAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;YAE1C,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAAC;YACtE,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACxE,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,YAAY,CAA0B,CAAC;YAC/E,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,QAAQ,CAAC;oBACb,KAAK,EAAE,mBAAmB,CAAC,eAAe;oBAC1C,OAAO,EAAE,mDAAmD;iBAC7D,CAAC,CAAC;YACL,CAAC;YAED,MAAM,cAAc,GAClB,OAAO,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACnF,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;gBAElD,IACE,OAAO,EAAE,gBAAgB,EAAE,MAAM;oBACjC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAC5D,CAAC;oBACD,MAAM,CAAC,IAAI,CACT,0EAA0E,EAC1E,SAAS,CACV,CAAC;oBACF,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;gBAED,IAAI,IAAI,CAAC,YAAY,EAAE,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,YAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvF,MAAM,CAAC,IAAI,CAAC,gEAAgE,EAAE,SAAS,CAAC,CAAC;oBACzF,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;YACrC,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC;oBAC3B,IAAI;oBACJ,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,OAAO,EAAE,cAAc,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC;iBACpD,CAAC,CAAC;gBAEH,IAAI,QAAQ,KAAK,sBAAsB,CAAC,IAAI,EAAE,CAAC;oBAC7C,MAAM,QAAQ,CAAC;wBACb,KAAK,EAAE,mBAAmB,CAAC,eAAe;wBAC1C,OAAO,EAAE,2CAA2C,IAAI,CAAC,MAAM,gBAAgB,IAAI,CAAC,QAAQ,EAAE;wBAC9F,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;qBAC9D,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,QAAQ,KAAK,sBAAsB,CAAC,KAAK,EAAE,CAAC;oBAC9C,MAAM,IAAI,EAAE,CAAC;oBACb,OAAO;gBACT,CAAC;gBAED,iCAAiC;YACnC,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC7B,MAAM,kBAAkB,GAAG,OAAO,EAAE,eAAe,IAAI,sBAAsB,CAAC,IAAI,CAAC;gBAEnF,IAAI,kBAAkB,KAAK,sBAAsB,CAAC,KAAK,EAAE,CAAC;oBACxD,MAAM,CAAC,IAAI,CACT,mEAAmE,EACnE,OAAO,CAAC,GAAG,CAAC,IAAI,CACjB,CAAC;oBACF,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;gBAED,MAAM,QAAQ,CAAC;oBACb,KAAK,EAAE,mBAAmB,CAAC,uBAAuB;oBAClD,OAAO,EAAE,uGAAuG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE;iBACnI,CAAC,CAAC;YACL,CAAC;YAED,MAAM,YAAY,GAAG,YAAY,IAAI,QAAQ,CAAC,sBAAsB,EAAE,CAAC;YACvE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YAExE,4KAA4K;YAC5K,EAAE;YACF,4FAA4F;YAC5F,oFAAoF;YACpF,sFAAsF;YACtF,sFAAsF;YACtF,4CAA4C;YAC5C,IAAI,WAA+B,CAAC;YACpC,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,EAAE,cAAc,EAAE,CAAC;gBAC3C,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC,oBAAoB,CAAC;oBACtE,IAAI;oBACJ,OAAO,EAAE,cAAc,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC;oBACnD,OAAO;iBACR,CAAC,CAAC;gBACH,WAAW,GAAG,cAAc,CAAC;YAC/B,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAE/C,2FAA2F;YAC3F,2FAA2F;YAC3F,4CAA4C;YAC5C,EAAE;YACF,wFAAwF;YACxF,4FAA4F;YAC5F,sEAAsE;YACtE,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,eAAe,GACnB,aAAa,YAAY,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,GAAG,EAAmB,CAAC;YAC5E,IAAI,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAE9C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;oBACxB,MAAM,QAAQ,CAAC;wBACb,KAAK,EAAE,mBAAmB,CAAC,sBAAsB;wBACjD,OAAO,EACL,uFAAuF;qBAC1F,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC;oBACvC,IAAI,EAAE,IAA6C;oBACnD,OAAO,EAAE,cAAc,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC;iBACpD,CAAC,CAAC;gBACH,KAAK,GAAG,MAAM,CAAC;gBACf,eAAe,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;gBACzC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;YACpD,CAAC;YAED,IAAI,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC;gBACrC,KAAK;gBACL,OAAO,EAAE;oBACP,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,MAAM,EAAE,WAAW;iBACpB;gBACD,OAAO,EAAE,cAAc,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC;aACpD,CAAC,CAAC;YAEH,IAAI,QAAQ,KAAK,sBAAsB,CAAC,OAAO,EAAE,CAAC;gBAChD,QAAQ,GAAG,OAAO,EAAE,eAAe,IAAI,sBAAsB,CAAC,IAAI,CAAC;YACrE,CAAC;YAED,IAAI,QAAQ,KAAK,sBAAsB,CAAC,KAAK,EAAE,CAAC;gBAC9C,MAAM,QAAQ,CAAC;oBACb,KAAK,EAAE,mBAAmB,CAAC,MAAM;oBACjC,OAAO,EAAE,kCAAkC,IAAI,CAAC,MAAM,gBAAgB,IAAI,CAAC,QAAQ,EAAE;oBACrF,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;iBAC9D,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,EAAE,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,gBAAgB,CAAC,IAAyB;QAChD,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAEzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAgE,EAAE,EAAE;YACpF,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC1B,OAAO,CAAC,CAAC;YACX,CAAC;YACD,OAAO,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import { ContextUtility } from '@/base/controllers/context';\nimport { BaseHelper, getError } from '@venizia/ignis-helpers/core';\nimport type { IProvider } from '@venizia/ignis-inversion';\nimport { createMiddleware } from 'hono/factory';\nimport type { IAuthUser } from '../../authenticate/common/types';\n// Deep import (not the authenticate barrel): the barrel re-exports ./controllers, whose factory extends BaseRestController - a value import here forms the base/controllers <-> auth init cycle.\nimport { Authentication } from '../../authenticate/common/constants';\nimport type { IAuthorizationSpec, TAuthorizeFn } from '../common';\nimport { Authorization, AuthorizationDecisions, AuthorizationErrors } from '../common';\nimport { AuthorizationEnforcerRegistry } from '../enforcers/enforcer-registry';\nimport { RequestDomainResolver } from './request-domain';\n\nexport class AuthorizationProvider extends BaseHelper implements IProvider<TAuthorizeFn> {\n  constructor() {\n    super({ scope: AuthorizationProvider.name });\n  }\n\n  value(): TAuthorizeFn {\n    return (opts) => {\n      return this.createAuthorizeMiddleware(opts);\n    };\n  }\n\n  private createAuthorizeMiddleware(opts: { spec: IAuthorizationSpec; enforcerName?: string }) {\n    const { spec, enforcerName } = opts;\n    const logger = this.logger.for(this.createAuthorizeMiddleware.name);\n\n    return createMiddleware(async (context, next) => {\n      const registry = AuthorizationEnforcerRegistry.getInstance();\n      const options = registry.resolveOptions();\n\n      const isSkipAuthorize = context.get(Authorization.SKIP_AUTHORIZATION);\n      if (isSkipAuthorize) {\n        logger.warn('SKIP checking authorization | path: %s', context.req.path);\n        return next();\n      }\n\n      const user = context.get(Authentication.CURRENT_USER) as IAuthUser | undefined;\n      if (!user) {\n        throw getError({\n          error: AuthorizationErrors.UNAUTHENTICATED,\n          message: 'Authorization failed: No authenticated user found',\n        });\n      }\n\n      const needsRoleCheck =\n        Boolean(options?.alwaysAllowRoles?.length) || Boolean(spec.allowedRoles?.length);\n      if (needsRoleCheck) {\n        const userRoles = this.extractUserRoles({ user });\n\n        if (\n          options?.alwaysAllowRoles?.length &&\n          userRoles.some((r) => options.alwaysAllowRoles!.includes(r))\n        ) {\n          logger.warn(\n            'SKIP checking authorization | User has always-allow role | userRoles: %s',\n            userRoles,\n          );\n          return next();\n        }\n\n        if (spec.allowedRoles?.length && userRoles.some((r) => spec.allowedRoles!.includes(r))) {\n          logger.warn('GRANT access | User has allowed role for route | userRoles: %s', userRoles);\n          return next();\n        }\n      }\n\n      const votersList = spec.voters ?? [];\n      for (const voter of votersList) {\n        const decision = await voter({\n          user,\n          action: spec.action,\n          resource: spec.resource,\n          context: ContextUtility.asTypedContext({ context }),\n        });\n\n        if (decision === AuthorizationDecisions.DENY) {\n          throw getError({\n            error: AuthorizationErrors.DENIED_BY_VOTER,\n            message: `Authorization denied by voter | action: ${spec.action} | resource: ${spec.resource}`,\n            messageArgs: { action: spec.action, resource: spec.resource },\n          });\n        }\n\n        if (decision === AuthorizationDecisions.ALLOW) {\n          await next();\n          return;\n        }\n\n        // ABSTAIN → continue to enforcer\n      }\n\n      if (!registry.hasEnforcers()) {\n        const noEnforcerDecision = options?.defaultDecision ?? AuthorizationDecisions.DENY;\n\n        if (noEnforcerDecision === AuthorizationDecisions.ALLOW) {\n          logger.warn(\n            'ALLOW checking authorization | No enforcers registered | path: %s',\n            context.req.path,\n          );\n          return next();\n        }\n\n        throw getError({\n          error: AuthorizationErrors.ENFORCER_NOT_REGISTERED,\n          message: `Authorization failed: authorize() was declared for this route but no enforcer is registered | path: ${context.req.path}`,\n        });\n      }\n\n      const resolvedName = enforcerName ?? registry.getDefaultEnforcerName();\n      const enforcer = await registry.resolveEnforcer({ name: resolvedName });\n\n      // Only resolve domain scope when it is actually in play (per-route domain OR a configured global resolver) - avoids a resolver call (possible DB hit) for legacy enforcers.\n      //\n      // Held in a LOCAL, not read back out of the context. One middleware is pushed per spec onto\n      // the same Hono context, so reading `Authorization.DOMAIN` at decision time meant a\n      // domain-less spec inherited the tenant domain a PREVIOUS spec had written - silently\n      // widening a check that should have run at SYSTEM_WIDE. The context is still set, for\n      // observability, but nothing decides on it.\n      let domainScope: string | undefined;\n      if (spec.domain || options?.domainResolver) {\n        const resolvedDomain = await RequestDomainResolver.resolveRequestDomain({\n          spec,\n          context: ContextUtility.asTypedContext({ context }),\n          options,\n        });\n        domainScope = resolvedDomain;\n      }\n      context.set(Authorization.DOMAIN, domainScope);\n\n      // Keyed by enforcer. The slot used to hold one rule set for the whole request, so a second\n      // `authorize()` naming a DIFFERENT enforcer evaluated against the first enforcer's rules -\n      // granting where its own policy set denies.\n      //\n      // `instanceof Map`, not a truthiness test: the slot previously held a bare rule set, so\n      // anything that pre-populates it with the old shape would otherwise reach `.get` on a value\n      // that has no such method and take the request down with a TypeError.\n      const existingRules = context.get(Authorization.RULES);\n      const rulesByEnforcer =\n        existingRules instanceof Map ? existingRules : new Map<string, unknown>();\n      let rules = rulesByEnforcer.get(resolvedName);\n\n      if (!rules) {\n        if (!user.principalType) {\n          throw getError({\n            error: AuthorizationErrors.PRINCIPAL_TYPE_MISSING,\n            message:\n              'Authorization failed: user.principalType is required for enforcer-based authorization',\n          });\n        }\n\n        const result = await enforcer.buildRules({\n          user: user as { principalType: string } & IAuthUser,\n          context: ContextUtility.asTypedContext({ context }),\n        });\n        rules = result;\n        rulesByEnforcer.set(resolvedName, rules);\n        context.set(Authorization.RULES, rulesByEnforcer);\n      }\n\n      let decision = await enforcer.evaluate({\n        rules,\n        request: {\n          action: spec.action,\n          resource: spec.resource,\n          conditions: spec.conditions,\n          domain: domainScope,\n        },\n        context: ContextUtility.asTypedContext({ context }),\n      });\n\n      if (decision === AuthorizationDecisions.ABSTAIN) {\n        decision = options?.defaultDecision ?? AuthorizationDecisions.DENY;\n      }\n\n      if (decision !== AuthorizationDecisions.ALLOW) {\n        throw getError({\n          error: AuthorizationErrors.DENIED,\n          message: `Authorization denied | action: ${spec.action} | resource: ${spec.resource}`,\n          messageArgs: { action: spec.action, resource: spec.resource },\n        });\n      }\n\n      await next();\n    });\n  }\n\n  private extractUserRoles(opts: { user: IAuthUser }): string[] {\n    const { user } = opts;\n    const roles = user.roles;\n\n    if (!Array.isArray(roles)) {\n      return [];\n    }\n\n    return roles.map((r: string | { identifier?: string; name?: string; id?: unknown }) => {\n      if (typeof r === 'string') {\n        return r;\n      }\n      return r.identifier ?? r.name ?? String(r.id ?? '');\n    });\n  }\n}\n"]}

package/dist/esm/base/auth/authorize/providers/request-domain.d.ts

@@ -2,15 +2,18 @@ import type { TContext } from '../../../controllers/common/types/index.js';
 import type { TNullable } from '@venizia/ignis-helpers/common';
 import type { Env } from 'hono';
 import type { IAuthorizationDomainSource, IAuthorizationSpec, IAuthorizeOptions } from '../common/types/index.js';
-/** Read a domain value from a declarative source on the Hono context. */
-export declare const readDeclarative: (opts: {
-    source: IAuthorizationDomainSource;
-    context: TContext<Env, string>;
-}) => TNullable<string>;
-/** Resolve the request domain, precedence spec.domain (method | declarative) -> options.domainResolver -> SYSTEM_WIDE, as a casbin domain string ("<type>_<id>") or the SYSTEM_WIDE sentinel. */
-export declare const resolveRequestDomain: (opts: {
-    spec: IAuthorizationSpec;
-    context: TContext<Env, string>;
-    options: TNullable<IAuthorizeOptions>;
-}) => Promise<string>;
+/** Reads the domain of an authorization check off the request. */
+export declare class RequestDomainResolver {
+    /** Read a domain value from a declarative source on the Hono context. */
+    static readDeclarative(opts: {
+        source: IAuthorizationDomainSource;
+        context: TContext<Env, string>;
+    }): TNullable<string>;
+    /** Resolve the request domain, precedence spec.domain (method | declarative) -> options.domainResolver -> SYSTEM_WIDE, as a casbin domain string ("<type>_<id>") or the SYSTEM_WIDE sentinel. */
+    static resolveRequestDomain(opts: {
+        spec: IAuthorizationSpec;
+        context: TContext<Env, string>;
+        options: TNullable<IAuthorizeOptions>;
+    }): Promise<string>;
+}
 //# sourceMappingURL=request-domain.d.ts.map

package/dist/esm/base/auth/authorize/providers/request-domain.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request-domain.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authorize/providers/request-domain.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAEhC,OAAO,KAAK,EACV,0BAA0B,EAC1B,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,iBAAiB,CAAC;AAEzB,yEAAyE;AACzE,eAAO,MAAM,eAAe,GAAI,MAAM;IACpC,MAAM,EAAE,0BAA0B,CAAC;IACnC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;CAChC,KAAG,SAAS,CAAC,MAAM,CAoBnB,CAAC;AAEF,iMAAiM;AACjM,eAAO,MAAM,oBAAoB,GAAU,MAAM;IAC/C,IAAI,EAAE,kBAAkB,CAAC;IACzB,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC/B,OAAO,EAAE,SAAS,CAAC,iBAAiB,CAAC,CAAC;CACvC,KAAG,OAAO,CAAC,MAAM,CAwBjB,CAAC"}
+{"version":3,"file":"request-domain.d.ts","sourceRoot":"","sources":["../../../../../../src/base/auth/authorize/providers/request-domain.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAEhC,OAAO,KAAK,EACV,0BAA0B,EAC1B,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,iBAAiB,CAAC;AAEzB,kEAAkE;AAClE,qBAAa,qBAAqB;IAChC,yEAAyE;IACzE,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE;QAC3B,MAAM,EAAE,0BAA0B,CAAC;QACnC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;KAChC,GAAG,SAAS,CAAC,MAAM,CAAC;IAsBrB,iMAAiM;WACpL,oBAAoB,CAAC,IAAI,EAAE;QACtC,IAAI,EAAE,kBAAkB,CAAC;QACzB,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/B,OAAO,EAAE,SAAS,CAAC,iBAAiB,CAAC,CAAC;KACvC,GAAG,OAAO,CAAC,MAAM,CAAC;CAyBpB"}

package/dist/esm/base/auth/authorize/providers/request-domain.js

@@ -1,46 +1,49 @@
 import { AuthorizationDomainScopes, AuthorizationDomainSources } from '../common/constants/index.js';
-/** Read a domain value from a declarative source on the Hono context. */
-export const readDeclarative = (opts) => {
-    const { source, context } = opts;
-    switch (source.from) {
-        case AuthorizationDomainSources.PARAM: {
-            return context.req.param(source.key) ?? null;
+/** Reads the domain of an authorization check off the request. */
+export class RequestDomainResolver {
+    /** Read a domain value from a declarative source on the Hono context. */
+    static readDeclarative(opts) {
+        const { source, context } = opts;
+        switch (source.from) {
+            case AuthorizationDomainSources.PARAM: {
+                return context.req.param(source.key) ?? null;
+            }
+            case AuthorizationDomainSources.HEADER: {
+                return context.req.header(source.key) ?? null;
+            }
+            case AuthorizationDomainSources.QUERY: {
+                return context.req.query(source.key) ?? null;
+            }
+            case AuthorizationDomainSources.CONTEXT: {
+                const value = context.get(source.key);
+                return value == null ? null : String(value);
+            }
+            default: {
+                return null;
+            }
         }
-        case AuthorizationDomainSources.HEADER: {
-            return context.req.header(source.key) ?? null;
-        }
-        case AuthorizationDomainSources.QUERY: {
-            return context.req.query(source.key) ?? null;
+    }
+    /** Resolve the request domain, precedence spec.domain (method | declarative) -> options.domainResolver -> SYSTEM_WIDE, as a casbin domain string ("<type>_<id>") or the SYSTEM_WIDE sentinel. */
+    static async resolveRequestDomain(opts) {
+        const { spec, context, options } = opts;
+        if (typeof spec.domain === 'function') {
+            const resolved = await spec.domain({ context });
+            return resolved
+                ? [resolved.type, resolved.id].join('_')
+                : AuthorizationDomainScopes.SYSTEM_WIDE;
         }
-        case AuthorizationDomainSources.CONTEXT: {
-            const value = context.get(source.key);
-            return value == null ? null : String(value);
+        if (spec.domain) {
+            const id = RequestDomainResolver.readDeclarative({ source: spec.domain, context });
+            return id ? [spec.domain.type, id].join('_') : AuthorizationDomainScopes.SYSTEM_WIDE;
         }
-        default: {
-            return null;
+        const globalResolver = options?.domainResolver ?? null;
+        if (globalResolver) {
+            const resolved = await globalResolver({ context });
+            return resolved
+                ? [resolved.type, resolved.id].join('_')
+                : AuthorizationDomainScopes.SYSTEM_WIDE;
         }
+        return AuthorizationDomainScopes.SYSTEM_WIDE;
     }
-};
-/** Resolve the request domain, precedence spec.domain (method | declarative) -> options.domainResolver -> SYSTEM_WIDE, as a casbin domain string ("<type>_<id>") or the SYSTEM_WIDE sentinel. */
-export const resolveRequestDomain = async (opts) => {
-    const { spec, context, options } = opts;
-    if (typeof spec.domain === 'function') {
-        const resolved = await spec.domain({ context });
-        return resolved
-            ? [resolved.type, resolved.id].join('_')
-            : AuthorizationDomainScopes.SYSTEM_WIDE;
-    }
-    if (spec.domain) {
-        const id = readDeclarative({ source: spec.domain, context });
-        return id ? [spec.domain.type, id].join('_') : AuthorizationDomainScopes.SYSTEM_WIDE;
-    }
-    const globalResolver = options?.domainResolver ?? null;
-    if (globalResolver) {
-        const resolved = await globalResolver({ context });
-        return resolved
-            ? [resolved.type, resolved.id].join('_')
-            : AuthorizationDomainScopes.SYSTEM_WIDE;
-    }
-    return AuthorizationDomainScopes.SYSTEM_WIDE;
-};
+}
 //# sourceMappingURL=request-domain.js.map

package/dist/esm/base/auth/authorize/providers/request-domain.js.map

@@ -1 +1 @@
-{"version":3,"file":"request-domain.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authorize/providers/request-domain.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAO5F,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAG/B,EAAqB,EAAE;IACtB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACjC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC;YACtC,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;QAC/C,CAAC;QACD,KAAK,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC;YACvC,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;QAChD,CAAC;QACD,KAAK,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC;YACtC,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;QAC/C,CAAC;QACD,KAAK,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAU,CAAC,CAAC;YAC7C,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,iMAAiM;AACjM,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,EAAE,IAI1C,EAAmB,EAAE;IACpB,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAExC,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAChD,OAAO,QAAQ;YACb,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YACxC,CAAC,CAAC,yBAAyB,CAAC,WAAW,CAAC;IAC5C,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7D,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,WAAW,CAAC;IACvF,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,IAAI,CAAC;IACvD,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACnD,OAAO,QAAQ;YACb,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YACxC,CAAC,CAAC,yBAAyB,CAAC,WAAW,CAAC;IAC5C,CAAC;IAED,OAAO,yBAAyB,CAAC,WAAW,CAAC;AAC/C,CAAC,CAAC","sourcesContent":["import type { TContext } from '@/base/controllers/common/types';\nimport type { TNullable } from '@venizia/ignis-helpers/common';\nimport type { Env } from 'hono';\nimport { AuthorizationDomainScopes, AuthorizationDomainSources } from '../common/constants';\nimport type {\n  IAuthorizationDomainSource,\n  IAuthorizationSpec,\n  IAuthorizeOptions,\n} from '../common/types';\n\n/** Read a domain value from a declarative source on the Hono context. */\nexport const readDeclarative = (opts: {\n  source: IAuthorizationDomainSource;\n  context: TContext<Env, string>;\n}): TNullable<string> => {\n  const { source, context } = opts;\n  switch (source.from) {\n    case AuthorizationDomainSources.PARAM: {\n      return context.req.param(source.key) ?? null;\n    }\n    case AuthorizationDomainSources.HEADER: {\n      return context.req.header(source.key) ?? null;\n    }\n    case AuthorizationDomainSources.QUERY: {\n      return context.req.query(source.key) ?? null;\n    }\n    case AuthorizationDomainSources.CONTEXT: {\n      const value = context.get(source.key as any);\n      return value == null ? null : String(value);\n    }\n    default: {\n      return null;\n    }\n  }\n};\n\n/** Resolve the request domain, precedence spec.domain (method | declarative) -> options.domainResolver -> SYSTEM_WIDE, as a casbin domain string (\"<type>_<id>\") or the SYSTEM_WIDE sentinel. */\nexport const resolveRequestDomain = async (opts: {\n  spec: IAuthorizationSpec;\n  context: TContext<Env, string>;\n  options: TNullable<IAuthorizeOptions>;\n}): Promise<string> => {\n  const { spec, context, options } = opts;\n\n  if (typeof spec.domain === 'function') {\n    const resolved = await spec.domain({ context });\n    return resolved\n      ? [resolved.type, resolved.id].join('_')\n      : AuthorizationDomainScopes.SYSTEM_WIDE;\n  }\n\n  if (spec.domain) {\n    const id = readDeclarative({ source: spec.domain, context });\n    return id ? [spec.domain.type, id].join('_') : AuthorizationDomainScopes.SYSTEM_WIDE;\n  }\n\n  const globalResolver = options?.domainResolver ?? null;\n  if (globalResolver) {\n    const resolved = await globalResolver({ context });\n    return resolved\n      ? [resolved.type, resolved.id].join('_')\n      : AuthorizationDomainScopes.SYSTEM_WIDE;\n  }\n\n  return AuthorizationDomainScopes.SYSTEM_WIDE;\n};\n"]}
+{"version":3,"file":"request-domain.js","sourceRoot":"","sources":["../../../../../../src/base/auth/authorize/providers/request-domain.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAO5F,kEAAkE;AAClE,MAAM,OAAO,qBAAqB;IAChC,yEAAyE;IACzE,MAAM,CAAC,eAAe,CAAC,IAGtB;QACC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QACjC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtC,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;YAC/C,CAAC;YACD,KAAK,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC;gBACvC,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;YAChD,CAAC;YACD,KAAK,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtC,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;YAC/C,CAAC;YACD,KAAK,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC;gBACxC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAU,CAAC,CAAC;gBAC7C,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9C,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,iMAAiM;IACjM,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAIjC;QACC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QAExC,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;YAChD,OAAO,QAAQ;gBACb,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBACxC,CAAC,CAAC,yBAAyB,CAAC,WAAW,CAAC;QAC5C,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,EAAE,GAAG,qBAAqB,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YACnF,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,WAAW,CAAC;QACvF,CAAC;QAED,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,IAAI,CAAC;QACvD,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;YACnD,OAAO,QAAQ;gBACb,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBACxC,CAAC,CAAC,yBAAyB,CAAC,WAAW,CAAC;QAC5C,CAAC;QAED,OAAO,yBAAyB,CAAC,WAAW,CAAC;IAC/C,CAAC;CACF","sourcesContent":["import type { TContext } from '@/base/controllers/common/types';\nimport type { TNullable } from '@venizia/ignis-helpers/common';\nimport type { Env } from 'hono';\nimport { AuthorizationDomainScopes, AuthorizationDomainSources } from '../common/constants';\nimport type {\n  IAuthorizationDomainSource,\n  IAuthorizationSpec,\n  IAuthorizeOptions,\n} from '../common/types';\n\n/** Reads the domain of an authorization check off the request. */\nexport class RequestDomainResolver {\n  /** Read a domain value from a declarative source on the Hono context. */\n  static readDeclarative(opts: {\n    source: IAuthorizationDomainSource;\n    context: TContext<Env, string>;\n  }): TNullable<string> {\n    const { source, context } = opts;\n    switch (source.from) {\n      case AuthorizationDomainSources.PARAM: {\n        return context.req.param(source.key) ?? null;\n      }\n      case AuthorizationDomainSources.HEADER: {\n        return context.req.header(source.key) ?? null;\n      }\n      case AuthorizationDomainSources.QUERY: {\n        return context.req.query(source.key) ?? null;\n      }\n      case AuthorizationDomainSources.CONTEXT: {\n        const value = context.get(source.key as any);\n        return value == null ? null : String(value);\n      }\n      default: {\n        return null;\n      }\n    }\n  }\n\n  /** Resolve the request domain, precedence spec.domain (method | declarative) -> options.domainResolver -> SYSTEM_WIDE, as a casbin domain string (\"<type>_<id>\") or the SYSTEM_WIDE sentinel. */\n  static async resolveRequestDomain(opts: {\n    spec: IAuthorizationSpec;\n    context: TContext<Env, string>;\n    options: TNullable<IAuthorizeOptions>;\n  }): Promise<string> {\n    const { spec, context, options } = opts;\n\n    if (typeof spec.domain === 'function') {\n      const resolved = await spec.domain({ context });\n      return resolved\n        ? [resolved.type, resolved.id].join('_')\n        : AuthorizationDomainScopes.SYSTEM_WIDE;\n    }\n\n    if (spec.domain) {\n      const id = RequestDomainResolver.readDeclarative({ source: spec.domain, context });\n      return id ? [spec.domain.type, id].join('_') : AuthorizationDomainScopes.SYSTEM_WIDE;\n    }\n\n    const globalResolver = options?.domainResolver ?? null;\n    if (globalResolver) {\n      const resolved = await globalResolver({ context });\n      return resolved\n        ? [resolved.type, resolved.id].join('_')\n        : AuthorizationDomainScopes.SYSTEM_WIDE;\n    }\n\n    return AuthorizationDomainScopes.SYSTEM_WIDE;\n  }\n}\n"]}

package/dist/esm/base/auth/base/abstract-auth-registry.js

@@ -1,4 +1,4 @@
-import { isEmpty } from '@venizia/ignis-helpers/common';
+import { ObjectUtility } from '@venizia/ignis-helpers/common';
 import { BindingScopes } from '@venizia/ignis-inversion';
 import { BaseHelper, getError } from '@venizia/ignis-helpers/core';
 export class AbstractAuthRegistry extends BaseHelper {
@@ -7,7 +7,7 @@ export class AbstractAuthRegistry extends BaseHelper {
         this.descriptors = new Map();
     }
     getKey(opts) {
-        if (!opts?.name || isEmpty({ value: opts.name })) {
+        if (!opts?.name || ObjectUtility.isEmpty({ value: opts.name })) {
             throw getError({ message: `[getKey] Invalid name | name: ${opts.name}` });
         }
         return [this.getBindingPrefix(), opts.name].join('.');

package/dist/esm/base/auth/base/abstract-auth-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"abstract-auth-registry.js","sourceRoot":"","sources":["../../../../../src/base/auth/base/abstract-auth-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGzD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAOnE,MAAM,OAAgB,oBAA4B,SAAQ,UAAU;IAGlE,YAAY,IAAuB;QACjC,KAAK,CAAC,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,EAAE,CAAC;IAC/B,CAAC;IAID,MAAM,CAAC,IAAsB;QAC3B,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACjD,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,iCAAiC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;IAED;;;;OAIG;IACH,GAAG,CAAC,IAAsB;QACxB,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,8FAA8F;IAC9F,QAAQ;QACN,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,cAAc;QACZ,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QACvD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,uBAAuB;aAC1D,CAAC,CAAC;QACL,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAES,kBAAkB,CAAC,IAI5B;QACC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAEzC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/D,SAAS;aACN,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;aACpC,OAAO,CAAC,MAAM,CAAC;aACf,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAES,iBAAiB,CAAC,IAAsB;QAChD,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE5C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,2BAA2B,IAAI,EAAE;aACpE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;QAC/B,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAQ;YACpC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,wBAAwB,IAAI,EAAE;aACjE,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF","sourcesContent":["import { isEmpty } from '@venizia/ignis-helpers/common';\nimport { BindingScopes } from '@venizia/ignis-inversion';\nimport type { Container } from '@/helpers/inversion/container';\nimport type { TClass } from '@venizia/ignis-helpers/common';\nimport { BaseHelper, getError } from '@venizia/ignis-helpers/core';\n\nexport type TRegistryDescriptor<TItem> = {\n  container: Container;\n  targetClass: TClass<TItem>;\n};\n\nexport abstract class AbstractAuthRegistry<TItem> extends BaseHelper {\n  protected descriptors: Map<string, TRegistryDescriptor<TItem>>;\n\n  constructor(opts: { scope: string }) {\n    super(opts);\n    this.descriptors = new Map();\n  }\n\n  protected abstract getBindingPrefix(): string;\n\n  getKey(opts: { name: string }): string {\n    if (!opts?.name || isEmpty({ value: opts.name })) {\n      throw getError({ message: `[getKey] Invalid name | name: ${opts.name}` });\n    }\n\n    return [this.getBindingPrefix(), opts.name].join('.');\n  }\n\n  /**\n   * Whether a name resolves. The registry is the only source of truth for that: the strategy type is\n   * open (`TAuthStrategy` accepts any string), so nothing upstream can tell a registered name from a\n   * typo. `AuthenticateStrategy.isValid` knows the two built-ins only and must not be used here.\n   */\n  has(opts: { name: string }): boolean {\n    return this.descriptors.has(opts.name);\n  }\n\n  /** Every registered name, for a caller building its own startup check or an error message. */\n  getNames(): string[] {\n    return [...this.descriptors.keys()];\n  }\n\n  getDefaultName(): string {\n    const firstName = this.descriptors.keys().next().value;\n    if (!firstName) {\n      throw getError({\n        message: `[${this.constructor.name}] No items registered`,\n      });\n    }\n    return firstName;\n  }\n\n  protected registerDescriptor(opts: {\n    container: Container;\n    target: TClass<TItem>;\n    name: string;\n  }): void {\n    const { container, target, name } = opts;\n\n    this.descriptors.set(name, { container, targetClass: target });\n    container\n      .bind({ key: this.getKey({ name }) })\n      .toClass(target)\n      .setScope(BindingScopes.SINGLETON);\n  }\n\n  reset(): void {\n    this.descriptors.clear();\n  }\n\n  protected resolveDescriptor(opts: { name: string }): TItem {\n    const { name } = opts;\n    const metadata = this.descriptors.get(name);\n\n    if (!metadata) {\n      throw getError({\n        message: `[${this.constructor.name}] Descriptor not found: ${name}`,\n      });\n    }\n\n    const { container } = metadata;\n    const instance = container.get<TItem>({\n      key: this.getKey({ name }),\n    });\n\n    if (!instance) {\n      throw getError({\n        message: `[${this.constructor.name}] Failed to resolve: ${name}`,\n      });\n    }\n\n    return instance;\n  }\n}\n"]}
+{"version":3,"file":"abstract-auth-registry.js","sourceRoot":"","sources":["../../../../../src/base/auth/base/abstract-auth-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGzD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAOnE,MAAM,OAAgB,oBAA4B,SAAQ,UAAU;IAGlE,YAAY,IAAuB;QACjC,KAAK,CAAC,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,EAAE,CAAC;IAC/B,CAAC;IAID,MAAM,CAAC,IAAsB;QAC3B,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/D,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,iCAAiC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;IAED;;;;OAIG;IACH,GAAG,CAAC,IAAsB;QACxB,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,8FAA8F;IAC9F,QAAQ;QACN,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,cAAc;QACZ,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QACvD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,uBAAuB;aAC1D,CAAC,CAAC;QACL,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAES,kBAAkB,CAAC,IAI5B;QACC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAEzC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/D,SAAS;aACN,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;aACpC,OAAO,CAAC,MAAM,CAAC;aACf,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAES,iBAAiB,CAAC,IAAsB;QAChD,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE5C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,2BAA2B,IAAI,EAAE;aACpE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;QAC/B,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAQ;YACpC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,wBAAwB,IAAI,EAAE;aACjE,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF","sourcesContent":["import { ObjectUtility } from '@venizia/ignis-helpers/common';\nimport { BindingScopes } from '@venizia/ignis-inversion';\nimport type { Container } from '@/helpers/inversion/container';\nimport type { TClass } from '@venizia/ignis-helpers/common';\nimport { BaseHelper, getError } from '@venizia/ignis-helpers/core';\n\nexport type TRegistryDescriptor<TItem> = {\n  container: Container;\n  targetClass: TClass<TItem>;\n};\n\nexport abstract class AbstractAuthRegistry<TItem> extends BaseHelper {\n  protected descriptors: Map<string, TRegistryDescriptor<TItem>>;\n\n  constructor(opts: { scope: string }) {\n    super(opts);\n    this.descriptors = new Map();\n  }\n\n  protected abstract getBindingPrefix(): string;\n\n  getKey(opts: { name: string }): string {\n    if (!opts?.name || ObjectUtility.isEmpty({ value: opts.name })) {\n      throw getError({ message: `[getKey] Invalid name | name: ${opts.name}` });\n    }\n\n    return [this.getBindingPrefix(), opts.name].join('.');\n  }\n\n  /**\n   * Whether a name resolves. The registry is the only source of truth for that: the strategy type is\n   * open (`TAuthStrategy` accepts any string), so nothing upstream can tell a registered name from a\n   * typo. `AuthenticateStrategy.isValid` knows the two built-ins only and must not be used here.\n   */\n  has(opts: { name: string }): boolean {\n    return this.descriptors.has(opts.name);\n  }\n\n  /** Every registered name, for a caller building its own startup check or an error message. */\n  getNames(): string[] {\n    return [...this.descriptors.keys()];\n  }\n\n  getDefaultName(): string {\n    const firstName = this.descriptors.keys().next().value;\n    if (!firstName) {\n      throw getError({\n        message: `[${this.constructor.name}] No items registered`,\n      });\n    }\n    return firstName;\n  }\n\n  protected registerDescriptor(opts: {\n    container: Container;\n    target: TClass<TItem>;\n    name: string;\n  }): void {\n    const { container, target, name } = opts;\n\n    this.descriptors.set(name, { container, targetClass: target });\n    container\n      .bind({ key: this.getKey({ name }) })\n      .toClass(target)\n      .setScope(BindingScopes.SINGLETON);\n  }\n\n  reset(): void {\n    this.descriptors.clear();\n  }\n\n  protected resolveDescriptor(opts: { name: string }): TItem {\n    const { name } = opts;\n    const metadata = this.descriptors.get(name);\n\n    if (!metadata) {\n      throw getError({\n        message: `[${this.constructor.name}] Descriptor not found: ${name}`,\n      });\n    }\n\n    const { container } = metadata;\n    const instance = container.get<TItem>({\n      key: this.getKey({ name }),\n    });\n\n    if (!instance) {\n      throw getError({\n        message: `[${this.constructor.name}] Failed to resolve: ${name}`,\n      });\n    }\n\n    return instance;\n  }\n}\n"]}

package/dist/esm/base/auth/models/requests/change-password.schema.js

@@ -1,10 +1,10 @@
-import { requiredString } from '../../../controllers/common/schema-builders.js';
+import { OpenApiSchemas } from '../../../models/common/index.js';
 import { z } from '@hono/zod-openapi';
 export const ChangePasswordRequestSchema = z
     .object({
     scheme: z.string(),
-    oldCredential: requiredString({ min: 8 }),
-    newCredential: requiredString({ min: 8 }),
+    oldCredential: OpenApiSchemas.requiredString({ min: 8 }),
+    newCredential: OpenApiSchemas.requiredString({ min: 8 }),
     userId: z.string().or(z.number()),
 })
     .openapi({

package/dist/esm/base/auth/models/requests/change-password.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"change-password.schema.js","sourceRoot":"","sources":["../../../../../../src/base/auth/models/requests/change-password.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAC3E,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AAEtC,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,aAAa,EAAE,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IACzC,aAAa,EAAE,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IACzC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAClC,CAAC;KACD,OAAO,CAAC;IACP,QAAQ,EAAE;QACR;YACE,MAAM,EAAE,OAAO;YACf,aAAa,EAAE,cAAc;YAC7B,aAAa,EAAE,cAAc;YAC7B,MAAM,EAAE,SAAS;SAClB;KACF;CACF,CAAC,CAAC","sourcesContent":["import { requiredString } from '@/base/controllers/common/schema-builders';\nimport { z } from '@hono/zod-openapi';\n\nexport const ChangePasswordRequestSchema = z\n  .object({\n    scheme: z.string(),\n    oldCredential: requiredString({ min: 8 }),\n    newCredential: requiredString({ min: 8 }),\n    userId: z.string().or(z.number()),\n  })\n  .openapi({\n    examples: [\n      {\n        scheme: 'basic',\n        oldCredential: 'old_password',\n        newCredential: 'new_password',\n        userId: 'user-id',\n      },\n    ],\n  });\n\nexport type TChangePasswordRequest = z.infer<typeof ChangePasswordRequestSchema>;\n"]}
+{"version":3,"file":"change-password.schema.js","sourceRoot":"","sources":["../../../../../../src/base/auth/models/requests/change-password.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AAEtC,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,aAAa,EAAE,cAAc,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IACxD,aAAa,EAAE,cAAc,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IACxD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAClC,CAAC;KACD,OAAO,CAAC;IACP,QAAQ,EAAE;QACR;YACE,MAAM,EAAE,OAAO;YACf,aAAa,EAAE,cAAc;YAC7B,aAAa,EAAE,cAAc;YAC7B,MAAM,EAAE,SAAS;SAClB;KACF;CACF,CAAC,CAAC","sourcesContent":["import { OpenApiSchemas } from '@/base/models/common';\nimport { z } from '@hono/zod-openapi';\n\nexport const ChangePasswordRequestSchema = z\n  .object({\n    scheme: z.string(),\n    oldCredential: OpenApiSchemas.requiredString({ min: 8 }),\n    newCredential: OpenApiSchemas.requiredString({ min: 8 }),\n    userId: z.string().or(z.number()),\n  })\n  .openapi({\n    examples: [\n      {\n        scheme: 'basic',\n        oldCredential: 'old_password',\n        newCredential: 'new_password',\n        userId: 'user-id',\n      },\n    ],\n  });\n\nexport type TChangePasswordRequest = z.infer<typeof ChangePasswordRequestSchema>;\n"]}

package/dist/esm/base/auth/models/requests/sign-in.schema.js

@@ -1,11 +1,11 @@
-import { requiredString } from '../../../controllers/common/schema-builders.js';
+import { OpenApiSchemas } from '../../../models/common/index.js';
 import { z } from '@hono/zod-openapi';
 export const SignInRequestSchema = z
     .object({
     identifier: z
         .object({
-        scheme: requiredString({ min: 4 }),
-        value: requiredString({ min: 8 }),
+        scheme: OpenApiSchemas.requiredString({ min: 4 }),
+        value: OpenApiSchemas.requiredString({ min: 8 }),
     })
         .openapi({
         required: ['scheme', 'value'],
@@ -13,8 +13,8 @@ export const SignInRequestSchema = z
     }),
     credential: z
         .object({
-        scheme: requiredString(),
-        value: requiredString({ min: 8 }),
+        scheme: OpenApiSchemas.requiredString(),
+        value: OpenApiSchemas.requiredString({ min: 8 }),
     })
         .openapi({
         required: ['scheme', 'value'],

package/dist/esm/base/auth/models/requests/sign-in.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"sign-in.schema.js","sourceRoot":"","sources":["../../../../../../src/base/auth/models/requests/sign-in.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAC3E,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AAEtC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,UAAU,EAAE,CAAC;SACV,MAAM,CAAC;QACN,MAAM,EAAE,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QAClC,KAAK,EAAE,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;KAClC,CAAC;SACD,OAAO,CAAC;QACP,QAAQ,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC7B,WAAW,EAAE,oBAAoB;KAClC,CAAC;IACJ,UAAU,EAAE,CAAC;SACV,MAAM,CAAC;QACN,MAAM,EAAE,cAAc,EAAE;QACxB,KAAK,EAAE,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;KAClC,CAAC;SACD,OAAO,CAAC;QACP,QAAQ,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC7B,WAAW,EAAE,oBAAoB;KAClC,CAAC;IACJ,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC;QACtC,WAAW,EAAE,uBAAuB;KACrC,CAAC;CACH,CAAC;KACD,OAAO,CAAC;IACP,QAAQ,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;IACtC,QAAQ,EAAE;QACR;YACE,UAAU,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,eAAe,EAAE;YAC1D,UAAU,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE;SACxD;QACD;YACE,UAAU,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,eAAe,EAAE;YAC1D,UAAU,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE;YACvD,QAAQ,EAAE,eAAe;SAC1B;KACF;CACF,CAAC,CAAC","sourcesContent":["import { requiredString } from '@/base/controllers/common/schema-builders';\nimport { z } from '@hono/zod-openapi';\n\nexport const SignInRequestSchema = z\n  .object({\n    identifier: z\n      .object({\n        scheme: requiredString({ min: 4 }),\n        value: requiredString({ min: 8 }),\n      })\n      .openapi({\n        required: ['scheme', 'value'],\n        description: 'Sign-In Identifier',\n      }),\n    credential: z\n      .object({\n        scheme: requiredString(),\n        value: requiredString({ min: 8 }),\n      })\n      .openapi({\n        required: ['scheme', 'value'],\n        description: 'Sign-In Credential',\n      }),\n    clientId: z.string().optional().openapi({\n      description: 'Authenticate Provider',\n    }),\n  })\n  .openapi({\n    required: ['identifier', 'credential'],\n    examples: [\n      {\n        identifier: { scheme: 'username', value: 'test_username' },\n        credential: { scheme: 'basic', value: 'test_password' },\n      },\n      {\n        identifier: { scheme: 'username', value: 'test_username' },\n        credential: { scheme: 'basic', value: 'test_password' },\n        clientId: 'auth-provider',\n      },\n    ],\n  });\n\nexport type TSignInRequest = z.infer<typeof SignInRequestSchema>;\n"]}
+{"version":3,"file":"sign-in.schema.js","sourceRoot":"","sources":["../../../../../../src/base/auth/models/requests/sign-in.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AAEtC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,UAAU,EAAE,CAAC;SACV,MAAM,CAAC;QACN,MAAM,EAAE,cAAc,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QACjD,KAAK,EAAE,cAAc,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;KACjD,CAAC;SACD,OAAO,CAAC;QACP,QAAQ,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC7B,WAAW,EAAE,oBAAoB;KAClC,CAAC;IACJ,UAAU,EAAE,CAAC;SACV,MAAM,CAAC;QACN,MAAM,EAAE,cAAc,CAAC,cAAc,EAAE;QACvC,KAAK,EAAE,cAAc,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;KACjD,CAAC;SACD,OAAO,CAAC;QACP,QAAQ,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC7B,WAAW,EAAE,oBAAoB;KAClC,CAAC;IACJ,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC;QACtC,WAAW,EAAE,uBAAuB;KACrC,CAAC;CACH,CAAC;KACD,OAAO,CAAC;IACP,QAAQ,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;IACtC,QAAQ,EAAE;QACR;YACE,UAAU,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,eAAe,EAAE;YAC1D,UAAU,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE;SACxD;QACD;YACE,UAAU,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,eAAe,EAAE;YAC1D,UAAU,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE;YACvD,QAAQ,EAAE,eAAe;SAC1B;KACF;CACF,CAAC,CAAC","sourcesContent":["import { OpenApiSchemas } from '@/base/models/common';\nimport { z } from '@hono/zod-openapi';\n\nexport const SignInRequestSchema = z\n  .object({\n    identifier: z\n      .object({\n        scheme: OpenApiSchemas.requiredString({ min: 4 }),\n        value: OpenApiSchemas.requiredString({ min: 8 }),\n      })\n      .openapi({\n        required: ['scheme', 'value'],\n        description: 'Sign-In Identifier',\n      }),\n    credential: z\n      .object({\n        scheme: OpenApiSchemas.requiredString(),\n        value: OpenApiSchemas.requiredString({ min: 8 }),\n      })\n      .openapi({\n        required: ['scheme', 'value'],\n        description: 'Sign-In Credential',\n      }),\n    clientId: z.string().optional().openapi({\n      description: 'Authenticate Provider',\n    }),\n  })\n  .openapi({\n    required: ['identifier', 'credential'],\n    examples: [\n      {\n        identifier: { scheme: 'username', value: 'test_username' },\n        credential: { scheme: 'basic', value: 'test_password' },\n      },\n      {\n        identifier: { scheme: 'username', value: 'test_username' },\n        credential: { scheme: 'basic', value: 'test_password' },\n        clientId: 'auth-provider',\n      },\n    ],\n  });\n\nexport type TSignInRequest = z.infer<typeof SignInRequestSchema>;\n"]}

package/dist/esm/base/components/controller/rest/rest.component.js

@@ -3,7 +3,7 @@ import { BindingNamespaces } from '../../../../common/bindings.js';
 import { Binding, BindingValueTypes, MetadataRegistry } from '../../../../helpers/inversion/index.js';
 import { BaseComponent } from '../../base.js';
 import { getError } from '@venizia/ignis-helpers/core';
-import { HTTP, isEmpty } from '@venizia/ignis-helpers/common';
+import { HTTP, ObjectUtility } from '@venizia/ignis-helpers/common';
 import { RestBindingKeys } from './common/types.js';
 const DEFAULT_OPTIONS = {};
 /**
@@ -42,7 +42,7 @@ export class RestComponent extends BaseComponent {
                 if (metadata?.transport === ControllerTransports.GRPC) {
                     return;
                 }
-                if (!metadata?.path || isEmpty({ value: metadata.path })) {
+                if (!metadata?.path || ObjectUtility.isEmpty({ value: metadata.path })) {
                     throw getError({
                         statusCode: HTTP.ResultCodes.RS_5.InternalServerError,
                         message: `[registerControllers] key: '${binding.key}' | Invalid controller metadata, 'path' is required for controller metadata`,

package/dist/esm/base/components/controller/rest/rest.component.js.map

@@ -1 +1 @@
-{"version":3,"file":"rest.component.js","sourceRoot":"","sources":["../../../../../../src/base/components/controller/rest/rest.component.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAE9D,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,MAAM,eAAe,GAAyB,EAAE,CAAC;AAEjD;;;;;;GAMG;AACH,MAAM,OAAO,aAIX,SAAQ,aAAa;IACrB,YAAoB,WAAyD;QAC3E,KAAK,CAAC;YACJ,KAAK,EAAE,aAAa,CAAC,IAAI;YACzB,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE;YACrD,QAAQ,EAAE;gBACR,CAAC,eAAe,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC,IAAI,CAAuB;oBAC3E,GAAG,EAAE,eAAe,CAAC,sBAAsB;iBAC5C,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;aAC5B;SACF,CAAC,CAAC;QATe,gBAAW,GAAX,WAAW,CAA8C;IAU7E,CAAC;IAEQ,KAAK,CAAC,OAAO;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;QAEhD,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAyB;YACxD,GAAG,EAAE,iBAAiB,CAAC,UAAU;YACjC,UAAU,EAAE,IAAI,GAAG,EAAU;YAC7B,MAAM,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;gBAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,KAAK,EAAE,CAAC,CAAC;gBACzE,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO;gBACT,CAAC;gBAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;gBAElF,+DAA+D;gBAC/D,IAAI,QAAQ,EAAE,SAAS,KAAK,oBAAoB,CAAC,IAAI,EAAE,CAAC;oBACtD,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,OAAO,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;oBACzD,MAAM,QAAQ,CAAC;wBACb,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;wBACrD,OAAO,EAAE,+BAA+B,OAAO,CAAC,GAAG,6EAA6E;qBACjI,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAyB;oBAC5D,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,UAAU,EAAE,KAAK;iBAClB,CAAC,CAAC;gBAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;oBAC3D,OAAO;gBACT,CAAC;gBAED,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAC3B,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;gBAElD,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC7F,CAAC;SACF,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import type { RestApplication } from '@/base/applications/rest';\nimport { ControllerTransports } from '@/base/controllers/common/constants';\nimport type { AbstractRestController } from '@/base/controllers/rest/abstract';\nimport { BindingNamespaces } from '@/common/bindings';\nimport { Binding, BindingValueTypes, MetadataRegistry } from '@/helpers/inversion';\nimport { BaseComponent } from '../../base';\nimport type { Env, Schema } from 'hono';\nimport { getError } from '@venizia/ignis-helpers/core';\nimport { HTTP, isEmpty } from '@venizia/ignis-helpers/common';\nimport type { IRestComponentConfig } from './common/types';\nimport { RestBindingKeys } from './common/types';\n\nconst DEFAULT_OPTIONS: IRestComponentConfig = {};\n\n/**\n * Generic over the same Hono env/schema/base-path `RestApplication` is: a bare `RestApplication`\n * parameter (defaulting to `RestApplication<Env, {}, '/'>`) fails to typecheck when passed `this`\n * from inside a differently-instantiated generic `RestApplication` subclass - `defaultHook`'s\n * contravariance makes the defaulted instantiation incompatible with an arbitrary one. Matching the\n * caller's own instantiation here removes the mismatch instead of widening to `any`.\n */\nexport class RestComponent<\n  AppEnv extends Env = Env,\n  AppSchema extends Schema = {},\n  BasePath extends string = '/',\n> extends BaseComponent {\n  constructor(private application: RestApplication<AppEnv, AppSchema, BasePath>) {\n    super({\n      scope: RestComponent.name,\n      initDefault: { enable: true, container: application },\n      bindings: {\n        [RestBindingKeys.REST_COMPONENT_OPTIONS]: Binding.bind<IRestComponentConfig>({\n          key: RestBindingKeys.REST_COMPONENT_OPTIONS,\n        }).toValue(DEFAULT_OPTIONS),\n      },\n    });\n  }\n\n  override async binding(): Promise<void> {\n    const logger = this.logger.for(this.binding.name);\n    const router = this.application.getRootRouter();\n\n    await this.application.drainByTag<AbstractRestController>({\n      tag: BindingNamespaces.CONTROLLER,\n      configured: new Set<string>(),\n      onEach: async ({ binding }) => {\n        const target = binding.getBindingMeta({ type: BindingValueTypes.CLASS });\n        if (!target) {\n          return;\n        }\n\n        const metadata = MetadataRegistry.getInstance().getControllerMetadata({ target });\n\n        // Skip gRPC controllers - they are configured by GrpcComponent\n        if (metadata?.transport === ControllerTransports.GRPC) {\n          return;\n        }\n\n        if (!metadata?.path || isEmpty({ value: metadata.path })) {\n          throw getError({\n            statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n            message: `[registerControllers] key: '${binding.key}' | Invalid controller metadata, 'path' is required for controller metadata`,\n          });\n        }\n\n        const instance = this.application.get<AbstractRestController>({\n          key: binding.key,\n          isOptional: false,\n        });\n\n        if (!instance) {\n          logger.debug('No binding instance | key: %s', binding.key);\n          return;\n        }\n\n        await instance.configure();\n        router.route(metadata.path, instance.getRouter());\n\n        logger.info('Configured REST controller | key: %s | path: %s', binding.key, metadata.path);\n      },\n    });\n  }\n}\n"]}
+{"version":3,"file":"rest.component.js","sourceRoot":"","sources":["../../../../../../src/base/components/controller/rest/rest.component.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAEpE,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,MAAM,eAAe,GAAyB,EAAE,CAAC;AAEjD;;;;;;GAMG;AACH,MAAM,OAAO,aAIX,SAAQ,aAAa;IACrB,YAAoB,WAAyD;QAC3E,KAAK,CAAC;YACJ,KAAK,EAAE,aAAa,CAAC,IAAI;YACzB,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE;YACrD,QAAQ,EAAE;gBACR,CAAC,eAAe,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC,IAAI,CAAuB;oBAC3E,GAAG,EAAE,eAAe,CAAC,sBAAsB;iBAC5C,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;aAC5B;SACF,CAAC,CAAC;QATe,gBAAW,GAAX,WAAW,CAA8C;IAU7E,CAAC;IAEQ,KAAK,CAAC,OAAO;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;QAEhD,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAyB;YACxD,GAAG,EAAE,iBAAiB,CAAC,UAAU;YACjC,UAAU,EAAE,IAAI,GAAG,EAAU;YAC7B,MAAM,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;gBAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,KAAK,EAAE,CAAC,CAAC;gBACzE,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO;gBACT,CAAC;gBAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;gBAElF,+DAA+D;gBAC/D,IAAI,QAAQ,EAAE,SAAS,KAAK,oBAAoB,CAAC,IAAI,EAAE,CAAC;oBACtD,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;oBACvE,MAAM,QAAQ,CAAC;wBACb,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB;wBACrD,OAAO,EAAE,+BAA+B,OAAO,CAAC,GAAG,6EAA6E;qBACjI,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAyB;oBAC5D,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,UAAU,EAAE,KAAK;iBAClB,CAAC,CAAC;gBAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;oBAC3D,OAAO;gBACT,CAAC;gBAED,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAC3B,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;gBAElD,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC7F,CAAC;SACF,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import type { RestApplication } from '@/base/applications/rest';\nimport { ControllerTransports } from '@/base/controllers/common/constants';\nimport type { AbstractRestController } from '@/base/controllers/rest/abstract';\nimport { BindingNamespaces } from '@/common/bindings';\nimport { Binding, BindingValueTypes, MetadataRegistry } from '@/helpers/inversion';\nimport { BaseComponent } from '../../base';\nimport type { Env, Schema } from 'hono';\nimport { getError } from '@venizia/ignis-helpers/core';\nimport { HTTP, ObjectUtility } from '@venizia/ignis-helpers/common';\nimport type { IRestComponentConfig } from './common/types';\nimport { RestBindingKeys } from './common/types';\n\nconst DEFAULT_OPTIONS: IRestComponentConfig = {};\n\n/**\n * Generic over the same Hono env/schema/base-path `RestApplication` is: a bare `RestApplication`\n * parameter (defaulting to `RestApplication<Env, {}, '/'>`) fails to typecheck when passed `this`\n * from inside a differently-instantiated generic `RestApplication` subclass - `defaultHook`'s\n * contravariance makes the defaulted instantiation incompatible with an arbitrary one. Matching the\n * caller's own instantiation here removes the mismatch instead of widening to `any`.\n */\nexport class RestComponent<\n  AppEnv extends Env = Env,\n  AppSchema extends Schema = {},\n  BasePath extends string = '/',\n> extends BaseComponent {\n  constructor(private application: RestApplication<AppEnv, AppSchema, BasePath>) {\n    super({\n      scope: RestComponent.name,\n      initDefault: { enable: true, container: application },\n      bindings: {\n        [RestBindingKeys.REST_COMPONENT_OPTIONS]: Binding.bind<IRestComponentConfig>({\n          key: RestBindingKeys.REST_COMPONENT_OPTIONS,\n        }).toValue(DEFAULT_OPTIONS),\n      },\n    });\n  }\n\n  override async binding(): Promise<void> {\n    const logger = this.logger.for(this.binding.name);\n    const router = this.application.getRootRouter();\n\n    await this.application.drainByTag<AbstractRestController>({\n      tag: BindingNamespaces.CONTROLLER,\n      configured: new Set<string>(),\n      onEach: async ({ binding }) => {\n        const target = binding.getBindingMeta({ type: BindingValueTypes.CLASS });\n        if (!target) {\n          return;\n        }\n\n        const metadata = MetadataRegistry.getInstance().getControllerMetadata({ target });\n\n        // Skip gRPC controllers - they are configured by GrpcComponent\n        if (metadata?.transport === ControllerTransports.GRPC) {\n          return;\n        }\n\n        if (!metadata?.path || ObjectUtility.isEmpty({ value: metadata.path })) {\n          throw getError({\n            statusCode: HTTP.ResultCodes.RS_5.InternalServerError,\n            message: `[registerControllers] key: '${binding.key}' | Invalid controller metadata, 'path' is required for controller metadata`,\n          });\n        }\n\n        const instance = this.application.get<AbstractRestController>({\n          key: binding.key,\n          isOptional: false,\n        });\n\n        if (!instance) {\n          logger.debug('No binding instance | key: %s', binding.key);\n          return;\n        }\n\n        await instance.configure();\n        router.route(metadata.path, instance.getRouter());\n\n        logger.info('Configured REST controller | key: %s | path: %s', binding.key, metadata.path);\n      },\n    });\n  }\n}\n"]}

package/dist/esm/base/controllers/common/index.d.ts

@@ -1,6 +1,5 @@
 export * from './constants.js';
 export * from './schemas.js';
-export * from './html-response.js';
 export * from './schema-builders.js';
 export * from './types/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/base/controllers/common/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/base/controllers/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAE5B,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/base/controllers/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAE5B,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,cAAc,SAAS,CAAC"}

package/dist/esm/base/controllers/common/index.js

@@ -1,7 +1,6 @@
 export * from './constants.js';
 // Carries zod. Kept out of `constants.ts` so importing `Container` does not pull zod into a bundle.
 export * from './schemas.js';
-export * from './html-response.js';
 export * from './schema-builders.js';
 export * from './types/index.js';
 //# sourceMappingURL=index.js.map

package/dist/esm/base/controllers/common/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/base/controllers/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,oGAAoG;AACpG,cAAc,WAAW,CAAC;AAC1B,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,SAAS,CAAC","sourcesContent":["export * from './constants';\n// Carries zod. Kept out of `constants.ts` so importing `Container` does not pull zod into a bundle.\nexport * from './schemas';\nexport * from './html-response';\nexport * from './schema-builders';\nexport * from './types';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/base/controllers/common/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,oGAAoG;AACpG,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,cAAc,SAAS,CAAC","sourcesContent":["export * from './constants';\n// Carries zod. Kept out of `constants.ts` so importing `Container` does not pull zod into a bundle.\nexport * from './schemas';\nexport * from './schema-builders';\nexport * from './types';\n"]}

package/dist/esm/base/controllers/common/schema-builders.d.ts

@@ -1,9 +1,4 @@
 import { z } from '@hono/zod-openapi';
-export declare const requiredString: (opts?: {
-    min?: number;
-    max?: number;
-    fixed?: number;
-}) => z.ZodString;
 export declare const AnyObjectSchema: z.ZodObject<{}, z.core.$catchall<z.ZodAny>>;
 export type TAnyObjectSchema = z.ZodObject<z.ZodRawShape>;
 export type TInferSchema<T extends z.ZodType> = z.infer<T>;

package/dist/esm/base/controllers/common/schema-builders.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema-builders.d.ts","sourceRoot":"","sources":["../../../../../src/base/controllers/common/schema-builders.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AAEtC,eAAO,MAAM,cAAc,GAAI,OAAO;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,gBAiBnF,CAAC;AAEF,eAAO,MAAM,eAAe,6CAE1B,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;AAC1D,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC"}
+{"version":3,"file":"schema-builders.d.ts","sourceRoot":"","sources":["../../../../../src/base/controllers/common/schema-builders.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AAEtC,eAAO,MAAM,eAAe,6CAE1B,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;AAC1D,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC"}

package/dist/esm/base/controllers/common/schema-builders.js

@@ -1,18 +1,4 @@
 import { z } from '@hono/zod-openapi';
-export const requiredString = (opts) => {
-    const { min, max, fixed } = opts ?? {};
-    let rs = z.string().nonempty();
-    if (min) {
-        rs = rs.min(min);
-    }
-    if (max) {
-        rs = rs.max(max);
-    }
-    if (fixed) {
-        rs = rs.length(fixed);
-    }
-    return rs;
-};
 export const AnyObjectSchema = z.object().catchall(z.any()).openapi({
     description: 'Unknown schema',
 });

package/dist/esm/base/controllers/common/schema-builders.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema-builders.js","sourceRoot":"","sources":["../../../../../src/base/controllers/common/schema-builders.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AAEtC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAqD,EAAE,EAAE;IACtF,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;IACvC,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC;IAE/B,IAAI,GAAG,EAAE,CAAC;QACR,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,IAAI,GAAG,EAAE,CAAC;QACR,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,IAAI,KAAK,EAAE,CAAC;QACV,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC;IAClE,WAAW,EAAE,gBAAgB;CAC9B,CAAC,CAAC","sourcesContent":["import { z } from '@hono/zod-openapi';\n\nexport const requiredString = (opts?: { min?: number; max?: number; fixed?: number }) => {\n  const { min, max, fixed } = opts ?? {};\n  let rs = z.string().nonempty();\n\n  if (min) {\n    rs = rs.min(min);\n  }\n\n  if (max) {\n    rs = rs.max(max);\n  }\n\n  if (fixed) {\n    rs = rs.length(fixed);\n  }\n\n  return rs;\n};\n\nexport const AnyObjectSchema = z.object().catchall(z.any()).openapi({\n  description: 'Unknown schema',\n});\n\nexport type TAnyObjectSchema = z.ZodObject<z.ZodRawShape>;\nexport type TInferSchema<T extends z.ZodType> = z.infer<T>;\n"]}
+{"version":3,"file":"schema-builders.js","sourceRoot":"","sources":["../../../../../src/base/controllers/common/schema-builders.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,mBAAmB,CAAC;AAEtC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC;IAClE,WAAW,EAAE,gBAAgB;CAC9B,CAAC,CAAC","sourcesContent":["import { z } from '@hono/zod-openapi';\n\nexport const AnyObjectSchema = z.object().catchall(z.any()).openapi({\n  description: 'Unknown schema',\n});\n\nexport type TAnyObjectSchema = z.ZodObject<z.ZodRawShape>;\nexport type TInferSchema<T extends z.ZodType> = z.infer<T>;\n"]}

package/dist/esm/base/controllers/context.d.ts

@@ -1,5 +1,10 @@
 import type { TContext } from './common/types/index.js';
 import type { Env } from 'hono';
-/** Casts middleware context to TContext (safe -- structurally identical to Context). */
-export declare const asTypedContext: <E extends Env>(context: unknown) => TContext<E, string>;
+/** Casts of the Hono context that the types cannot prove. */
+export declare class ContextUtility {
+    /** Casts middleware context to TContext (safe -- structurally identical to Context). */
+    static asTypedContext<E extends Env>(opts: {
+        context: unknown;
+    }): TContext<E, string>;
+}
 //# sourceMappingURL=context.d.ts.map

package/dist/esm/base/controllers/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../../src/base/controllers/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAEhC,wFAAwF;AACxF,eAAO,MAAM,cAAc,GAAI,CAAC,SAAS,GAAG,EAAE,SAAS,OAAO,KAAG,QAAQ,CAAC,CAAC,EAAE,MAAM,CAElF,CAAC"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../../src/base/controllers/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAEhC,6DAA6D;AAC7D,qBAAa,cAAc;IACzB,wFAAwF;IACxF,MAAM,CAAC,cAAc,CAAC,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,GAAG,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;CAGtF"}

package/dist/esm/base/controllers/context.js

@@ -1,5 +1,8 @@
-/** Casts middleware context to TContext (safe -- structurally identical to Context). */
-export const asTypedContext = (context) => {
-    return context;
-};
+/** Casts of the Hono context that the types cannot prove. */
+export class ContextUtility {
+    /** Casts middleware context to TContext (safe -- structurally identical to Context). */
+    static asTypedContext(opts) {
+        return opts.context;
+    }
+}
 //# sourceMappingURL=context.js.map

package/dist/esm/base/controllers/context.js.map

@@ -1 +1 @@
-{"version":3,"file":"context.js","sourceRoot":"","sources":["../../../../src/base/controllers/context.ts"],"names":[],"mappings":"AAGA,wFAAwF;AACxF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAgB,OAAgB,EAAuB,EAAE;IACrF,OAAO,OAA8B,CAAC;AACxC,CAAC,CAAC","sourcesContent":["import type { TContext } from './common/types';\nimport type { Env } from 'hono';\n\n/** Casts middleware context to TContext (safe -- structurally identical to Context). */\nexport const asTypedContext = <E extends Env>(context: unknown): TContext<E, string> => {\n  return context as TContext<E, string>;\n};\n"]}
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../../../src/base/controllers/context.ts"],"names":[],"mappings":"AAGA,6DAA6D;AAC7D,MAAM,OAAO,cAAc;IACzB,wFAAwF;IACxF,MAAM,CAAC,cAAc,CAAgB,IAA0B;QAC7D,OAAO,IAAI,CAAC,OAA8B,CAAC;IAC7C,CAAC;CACF","sourcesContent":["import type { TContext } from './common/types';\nimport type { Env } from 'hono';\n\n/** Casts of the Hono context that the types cannot prove. */\nexport class ContextUtility {\n  /** Casts middleware context to TContext (safe -- structurally identical to Context). */\n  static asTypedContext<E extends Env>(opts: { context: unknown }): TContext<E, string> {\n    return opts.context as TContext<E, string>;\n  }\n}\n"]}