@venizia/ignis 0.0.7-2 → 0.0.7-21

package/dist/components/auth/authorize/enforcers/casbin.enforcer.js

@@ -0,0 +1,254 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var CasbinAuthorizationEnforcer_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CasbinAuthorizationEnforcer = void 0;
+const injectors_1 = require("../../../../base/metadata/injectors");
+const ignis_helpers_1 = require("@venizia/ignis-helpers");
+const common_1 = require("../common");
+// Casbin Authorization Enforcer — wraps casbin (optional peer dep)
+let CasbinAuthorizationEnforcer = CasbinAuthorizationEnforcer_1 = class CasbinAuthorizationEnforcer extends ignis_helpers_1.BaseHelper {
+    constructor(options) {
+        super({ scope: CasbinAuthorizationEnforcer_1.name });
+        this.options = options;
+        this.name = CasbinAuthorizationEnforcer_1.name;
+        this.MIN_EXPIRES_IN = 10_000;
+        this.enforcer = null;
+        this.inMemoryInvalidationTimer = null;
+    }
+    // Lifecycle
+    async configure() {
+        let casbin;
+        try {
+            casbin = await import('casbin');
+        }
+        catch {
+            throw (0, ignis_helpers_1.getError)({
+                message: '[CasbinAuthorizationEnforcer] "casbin" is not installed',
+            });
+        }
+        if (!this.options.model) {
+            throw (0, ignis_helpers_1.getError)({
+                message: '[CasbinAuthorizationEnforcer] options.model is required.',
+            });
+        }
+        const model = this.resolveModel({ casbin, model: this.options.model });
+        const { cached } = this.options;
+        this.enforcer = await this.resolveCasbinEnforcer({
+            casbin,
+            model,
+            adapter: this.options.adapter,
+            cached,
+        });
+        this.logger
+            .for(this.configure.name)
+            .info('Casbin enforcer initialized (cached: %s, driver: %s)', cached.use, cached.use ? cached.driver : 'none');
+    }
+    destroy() {
+        if (!this.inMemoryInvalidationTimer) {
+            return;
+        }
+        clearInterval(this.inMemoryInvalidationTimer);
+        this.inMemoryInvalidationTimer = null;
+    }
+    // IAuthorizationEnforcer — public API
+    async buildRules(opts) {
+        const { user } = opts;
+        if (!this.enforcer) {
+            throw (0, ignis_helpers_1.getError)({
+                message: '[CasbinAuthorizationEnforcer] Enforcer not initialized. Call configure() first.',
+            });
+        }
+        if (!this.enforcer.loadFilteredPolicy) {
+            throw (0, ignis_helpers_1.getError)({
+                message: '[CasbinAuthorizationEnforcer] Adapter does not support loadFilteredPolicy.',
+            });
+        }
+        const cached = this.options.cached;
+        if (!cached.use) {
+            await this.loadPoliciesFromAdapter({ user });
+            return user;
+        }
+        switch (cached.driver) {
+            case common_1.CasbinEnforcerCachedDrivers.IN_MEMORY: {
+                await this.loadPoliciesFromAdapter({ user });
+                break;
+            }
+            case common_1.CasbinEnforcerCachedDrivers.REDIS: {
+                await this.loadPoliciesWithRedisCache({ user, cached });
+                break;
+            }
+            default: {
+                throw (0, ignis_helpers_1.getError)({
+                    message: `[buildRules] Invalid cached.driver | Valids: [${common_1.CasbinEnforcerCachedDrivers.IN_MEMORY}, ${common_1.CasbinEnforcerCachedDrivers.REDIS}]`,
+                });
+            }
+        }
+        return user;
+    }
+    async evaluate(opts) {
+        if (!this.enforcer) {
+            throw (0, ignis_helpers_1.getError)({
+                message: '[CasbinAuthorizationEnforcer] Enforcer not initialized. Call configure() first.',
+            });
+        }
+        if (!opts.request?.action || !opts.request?.resource) {
+            throw (0, ignis_helpers_1.getError)({
+                message: '[CasbinAuthorizationEnforcer] request.action and request.resource are required.',
+            });
+        }
+        const { rules: user, request, context } = opts;
+        const normalizePayloadFn = this.options.normalizePayloadFn;
+        let isAllowed;
+        if (!normalizePayloadFn) {
+            const subject = `${user.principalType}_${user.userId}`;
+            isAllowed = this.enforcer.enforceSync(subject, request.resource, request.action);
+            return isAllowed ? common_1.AuthorizationDecisions.ALLOW : common_1.AuthorizationDecisions.DENY;
+        }
+        const normalized = normalizePayloadFn({
+            user,
+            action: request.action,
+            resource: request.resource,
+            context,
+        });
+        // Domain-aware enforcement: enforceSync(sub, dom, obj, act)
+        if (normalized.domain) {
+            isAllowed = this.enforcer.enforceSync(normalized.subject, normalized.domain, normalized.resource, normalized.action);
+        }
+        else {
+            isAllowed = this.enforcer.enforceSync(normalized.subject, normalized.resource, normalized.action);
+        }
+        return isAllowed ? common_1.AuthorizationDecisions.ALLOW : common_1.AuthorizationDecisions.DENY;
+    }
+    // Enforcer & model resolvers
+    async resolveCasbinEnforcer(opts) {
+        const { casbin, model, adapter, cached } = opts;
+        if (!cached.use) {
+            return casbin.newEnforcer(model, adapter);
+        }
+        switch (cached.driver) {
+            case common_1.CasbinEnforcerCachedDrivers.IN_MEMORY: {
+                this.validateExpiresIn({ expiresIn: cached.options.expiresIn });
+                const enforcer = await casbin.newCachedEnforcer(model, adapter);
+                this.inMemoryInvalidationTimer = setInterval(() => {
+                    enforcer.invalidateCache();
+                    this.logger.info('[resolveCasbinEnforcer] Enforcer cache INVALIDATED | name: %s', this.name);
+                }, cached.options.expiresIn);
+                return enforcer;
+            }
+            case common_1.CasbinEnforcerCachedDrivers.REDIS: {
+                this.validateExpiresIn({ expiresIn: cached.options.expiresIn });
+                return casbin.newEnforcer(model, adapter);
+            }
+            default: {
+                throw (0, ignis_helpers_1.getError)({
+                    message: `[resolveCasbinEnforcer] Invalid cached.driver | Valids: [${common_1.CasbinEnforcerCachedDrivers.IN_MEMORY}, ${common_1.CasbinEnforcerCachedDrivers.REDIS}]`,
+                });
+            }
+        }
+    }
+    resolveModel(opts) {
+        const { casbin, model } = opts;
+        switch (model.driver) {
+            case common_1.CasbinEnforcerModelDrivers.FILE: {
+                return casbin.newModelFromFile(model.definition);
+            }
+            case common_1.CasbinEnforcerModelDrivers.TEXT: {
+                return casbin.newModelFromString(model.definition);
+            }
+            default: {
+                throw (0, ignis_helpers_1.getError)({
+                    message: `[resolveModel] Invalid model.driver | Valids: [${common_1.CasbinEnforcerModelDrivers.FILE}, ${common_1.CasbinEnforcerModelDrivers.TEXT}]`,
+                });
+            }
+        }
+    }
+    validateExpiresIn(opts) {
+        if (opts.expiresIn >= this.MIN_EXPIRES_IN) {
+            return;
+        }
+        throw (0, ignis_helpers_1.getError)({
+            message: `[CasbinAuthorizationEnforcer] cached.options.expiresIn must be >= ${this.MIN_EXPIRES_IN} (ms) | Received: ${opts.expiresIn}`,
+        });
+    }
+    // Policy loading internals
+    async loadPoliciesFromAdapter(opts) {
+        if (!this.enforcer) {
+            throw (0, ignis_helpers_1.getError)({
+                message: '[loadPoliciesFromAdapter] Invalid state of enforcer | Enforcer is not initialized!',
+            });
+        }
+        await this.enforcer.loadFilteredPolicy({
+            principalType: opts.user.principalType,
+            principalValue: opts.user.userId,
+        });
+    }
+    async loadPoliciesWithRedisCache(opts) {
+        const logger = this.logger.for(this.loadPoliciesWithRedisCache.name);
+        const { user, cached: { options }, } = opts;
+        const cacheKey = await options.keyFn({ user });
+        if (!cacheKey) {
+            throw (0, ignis_helpers_1.getError)({
+                statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_4.BadRequest,
+                message: '[loadPoliciesWithRedisCache] Invalid cachedKey to start validate user authorization!',
+            });
+        }
+        const redisClient = options.connection.client;
+        // Cache hit — load lines directly into model
+        const cachedData = await redisClient.get(cacheKey);
+        if (cachedData) {
+            const lines = JSON.parse(cachedData);
+            await this.loadPolicyLinesIntoModel({ lines });
+            logger.info('Loaded CACHED Policies into model | user: %s', user.userId);
+            return;
+        }
+        // Cache miss — load from adapter, extract lines, cache in Redis
+        await this.loadPoliciesFromAdapter({ user });
+        const lines = await this.extractPolicyLines();
+        await redisClient.set(cacheKey, JSON.stringify(lines), 'PX', options.expiresIn);
+        logger.info('Loaded ADAPTER + CACHED Policies into model | user: %s', user.userId);
+    }
+    async extractPolicyLines() {
+        if (!this.enforcer) {
+            throw (0, ignis_helpers_1.getError)({
+                message: '[extractPolicyLines] Invalid state of enforcer | Enforcer is not initialized!',
+            });
+        }
+        const pRules = await this.enforcer.getPolicy();
+        const ps = pRules.map(r => [common_1.CasbinRuleVariants.P, ...r].join(', '));
+        const gRules = await this.enforcer.getGroupingPolicy();
+        const gs = gRules.map(r => [common_1.CasbinRuleVariants.G, ...r].join(', '));
+        return [...ps, ...gs];
+    }
+    async loadPolicyLinesIntoModel(opts) {
+        if (!this.enforcer) {
+            throw (0, ignis_helpers_1.getError)({
+                message: '[loadPolicyLinesIntoModel] Enforcer not initialized. Call configure() first.',
+            });
+        }
+        const { Helper } = await import('casbin');
+        const model = this.enforcer.getModel();
+        model.clearPolicy();
+        for (const line of opts.lines) {
+            Helper.loadPolicyLine(line, model);
+        }
+        await this.enforcer.buildRoleLinks();
+    }
+};
+exports.CasbinAuthorizationEnforcer = CasbinAuthorizationEnforcer;
+exports.CasbinAuthorizationEnforcer = CasbinAuthorizationEnforcer = CasbinAuthorizationEnforcer_1 = __decorate([
+    __param(0, (0, injectors_1.inject)({ key: common_1.AuthorizeBindingKeys.enforcerOptions(common_1.AuthorizationEnforcerTypes.CASBIN) })),
+    __metadata("design:paramtypes", [Object])
+], CasbinAuthorizationEnforcer);
+//# sourceMappingURL=casbin.enforcer.js.map

package/dist/components/auth/authorize/enforcers/casbin.enforcer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"casbin.enforcer.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/enforcers/casbin.enforcer.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AACA,yDAAmD;AACnD,0DAA+E;AAO/E,sCAamB;AAEnB,mEAAmE;AAEnE,IAAa,2BAA2B,mCAAxC,MAAa,2BAKX,SAAQ,0BAAU;IASlB,YAEE,OAA8D;QAE9D,KAAK,CAAC,EAAE,KAAK,EAAE,6BAA2B,CAAC,IAAI,EAAE,CAAC,CAAC;QAF3C,YAAO,GAAP,OAAO,CAA+C;QARhE,SAAI,GAAG,6BAA2B,CAAC,IAAI,CAAC;QACvB,mBAAc,GAAG,MAAM,CAAC;QAEjC,aAAQ,GAA6D,IAAI,CAAC;QAC1E,8BAAyB,GAA8B,IAAI,CAAC;IAOpE,CAAC;IAED,YAAY;IAEZ,KAAK,CAAC,SAAS;QACb,IAAI,MAA+B,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,yDAAyD;aACnE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACxB,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,0DAA0D;aACpE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACvE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAEhC,IAAI,CAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC;YAC/C,MAAM;YACN,KAAK;YACL,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;YAC7B,MAAM;SACP,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM;aACR,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aACxB,IAAI,CACH,sDAAsD,EACtD,MAAM,CAAC,GAAG,EACV,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CACpC,CAAC;IACN,CAAC;IAED,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACpC,OAAO;QACT,CAAC;QAED,aAAa,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC9C,IAAI,CAAC,yBAAyB,GAAG,IAAI,CAAC;IACxC,CAAC;IAED,sCAAsC;IAEtC,KAAK,CAAC,UAAU,CAAC,IAGhB;QACC,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAEtB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,iFAAiF;aAC3F,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;YACtC,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,4EAA4E;aACtF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAEnC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,KAAK,oCAA2B,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC3C,MAAM,IAAI,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7C,MAAM;YACR,CAAC;YACD,KAAK,oCAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;gBACvC,MAAM,IAAI,CAAC,0BAA0B,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;gBACxD,MAAM;YACR,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAA,wBAAQ,EAAC;oBACb,OAAO,EAAE,iDAAiD,oCAA2B,CAAC,SAAS,KAAK,oCAA2B,CAAC,KAAK,GAAG;iBACzI,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAId;QACC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,iFAAiF;aAC3F,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;YACrD,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,iFAAiF;aAC3F,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QAC/C,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;QAE3D,IAAI,SAAkB,CAAC;QAEvB,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACvD,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YACjF,OAAO,SAAS,CAAC,CAAC,CAAC,+BAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,+BAAsB,CAAC,IAAI,CAAC;QAChF,CAAC;QAED,MAAM,UAAU,GAAG,kBAAkB,CAAC;YACpC,IAAI;YACJ,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO;SACR,CAAC,CAAC;QAEH,4DAA4D;QAC5D,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACtB,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CACnC,UAAU,CAAC,OAAO,EAClB,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,QAAQ,EACnB,UAAU,CAAC,MAAM,CAClB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CACnC,UAAU,CAAC,OAAO,EAClB,UAAU,CAAC,QAAQ,EACnB,UAAU,CAAC,MAAM,CAClB,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC,CAAC,CAAC,+BAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,+BAAsB,CAAC,IAAI,CAAC;IAChF,CAAC;IAED,6BAA6B;IAEnB,KAAK,CAAC,qBAAqB,CAAC,IAKrC;QACC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAEhD,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAChB,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QAED,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,KAAK,oCAA2B,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC3C,IAAI,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;gBAEhE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBAEhE,IAAI,CAAC,yBAAyB,GAAG,WAAW,CAAC,GAAG,EAAE;oBAChD,QAAQ,CAAC,eAAe,EAAE,CAAC;oBAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,+DAA+D,EAC/D,IAAI,CAAC,IAAI,CACV,CAAC;gBACJ,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAE7B,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,KAAK,oCAA2B,CAAC,KAAK,CAAC,CAAC,CAAC;gBACvC,IAAI,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;gBAChE,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC5C,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAA,wBAAQ,EAAC;oBACb,OAAO,EAAE,4DAA4D,oCAA2B,CAAC,SAAS,KAAK,oCAA2B,CAAC,KAAK,GAAG;iBACpJ,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAES,YAAY,CAAC,IAGtB;QACC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAE/B,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;YACrB,KAAK,mCAA0B,CAAC,IAAI,CAAC,CAAC,CAAC;gBACrC,OAAO,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACnD,CAAC;YACD,KAAK,mCAA0B,CAAC,IAAI,CAAC,CAAC,CAAC;gBACrC,OAAO,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACrD,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAA,wBAAQ,EAAC;oBACb,OAAO,EAAE,kDAAkD,mCAA0B,CAAC,IAAI,KAAK,mCAA0B,CAAC,IAAI,GAAG;iBAClI,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAES,iBAAiB,CAAC,IAA2B;QACrD,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,MAAM,IAAA,wBAAQ,EAAC;YACb,OAAO,EAAE,qEAAqE,IAAI,CAAC,cAAc,qBAAqB,IAAI,CAAC,SAAS,EAAE;SACvI,CAAC,CAAC;IACL,CAAC;IAED,2BAA2B;IAEjB,KAAK,CAAC,uBAAuB,CAAC,IAAqD;QAC3F,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EACL,oFAAoF;aACvF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YACrC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa;YACtC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;SACjC,CAAC,CAAC;IACL,CAAC;IAES,KAAK,CAAC,0BAA0B,CAAC,IAG1C;QACC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,EACJ,IAAI,EACJ,MAAM,EAAE,EAAE,OAAO,EAAE,GACpB,GAAG,IAAI,CAAC;QAET,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAE/C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAA,wBAAQ,EAAC;gBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU;gBAC5C,OAAO,EACL,sFAAsF;aACzF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QAE9C,6CAA6C;QAC7C,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACrC,MAAM,IAAI,CAAC,wBAAwB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/C,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,gEAAgE;QAChE,MAAM,IAAI,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC9C,MAAM,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAChF,MAAM,CAAC,IAAI,CAAC,wDAAwD,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACrF,CAAC;IAES,KAAK,CAAC,kBAAkB;QAChC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,+EAA+E;aACzF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC/C,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,2BAAkB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAEpE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QACvD,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,2BAAkB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAEpE,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACxB,CAAC;IAES,KAAK,CAAC,wBAAwB,CAAC,IAAyB;QAChE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,8EAA8E;aACxF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE1C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvC,KAAK,CAAC,WAAW,EAAE,CAAC;QAEpB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;IACvC,CAAC;CACF,CAAA;AAxUY,kEAA2B;sCAA3B,2BAA2B;IAenC,WAAA,IAAA,kBAAM,EAAC,EAAE,GAAG,EAAE,6BAAoB,CAAC,eAAe,CAAC,mCAA0B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;;GAfhF,2BAA2B,CAwUvC"}

package/dist/components/auth/authorize/enforcers/enforcer-registry.d.ts

@@ -0,0 +1,33 @@
+import { Container } from '../../../../helpers/inversion/container';
+import { TClass } from '@venizia/ignis-helpers';
+import { AbstractAuthRegistry } from '../../base';
+import { AuthorizationEnforcerTypes, IAuthorizationEnforcer, IAuthorizeOptions, ICasbinEnforcerOptions } from '../common';
+export declare class AuthorizationEnforcerRegistry extends AbstractAuthRegistry<IAuthorizationEnforcer> {
+    private static instance;
+    private configuredEnforcers;
+    constructor();
+    static getInstance(): AuthorizationEnforcerRegistry;
+    reset(): void;
+    protected getBindingPrefix(): string;
+    register(opts: {
+        container: Container;
+        enforcers: Array<{
+            enforcer: TClass<IAuthorizationEnforcer>;
+            name: string;
+            type: typeof AuthorizationEnforcerTypes.CASBIN;
+            options?: ICasbinEnforcerOptions;
+        } | {
+            enforcer: TClass<IAuthorizationEnforcer>;
+            name: string;
+            type: typeof AuthorizationEnforcerTypes.CUSTOM;
+            options?: unknown;
+        }>;
+    }): this;
+    hasEnforcers(): boolean;
+    getDefaultEnforcerName(): string;
+    resolveEnforcer(opts: {
+        name: string;
+    }): Promise<IAuthorizationEnforcer>;
+    resolveOptions(): IAuthorizeOptions | undefined;
+}
+//# sourceMappingURL=enforcer-registry.d.ts.map

package/dist/components/auth/authorize/enforcers/enforcer-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enforcer-registry.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/enforcers/enforcer-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAY,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAEL,0BAA0B,EAE1B,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,EACvB,MAAM,WAAW,CAAC;AAInB,qBAAa,6BAA8B,SAAQ,oBAAoB,CAAC,sBAAsB,CAAC;IAC7F,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAgC;IAEvD,OAAO,CAAC,mBAAmB,CAAc;;IAOzC,MAAM,CAAC,WAAW;IAQT,KAAK,IAAI,IAAI;IAKtB,SAAS,CAAC,gBAAgB,IAAI,MAAM;IAIpC,QAAQ,CAAC,IAAI,EAAE;QACb,SAAS,EAAE,SAAS,CAAC;QACrB,SAAS,EAAE,KAAK,CACZ;YACE,QAAQ,EAAE,MAAM,CAAC,sBAAsB,CAAC,CAAC;YACzC,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,EAAE,OAAO,0BAA0B,CAAC,MAAM,CAAC;YAC/C,OAAO,CAAC,EAAE,sBAAsB,CAAC;SAClC,GACD;YACE,QAAQ,EAAE,MAAM,CAAC,sBAAsB,CAAC,CAAC;YACzC,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,EAAE,OAAO,0BAA0B,CAAC,MAAM,CAAC;YAC/C,OAAO,CAAC,EAAE,OAAO,CAAC;SACnB,CACJ,CAAC;KACH;IA8BD,YAAY,IAAI,OAAO;IAIvB,sBAAsB,IAAI,MAAM;IAI1B,eAAe,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAW9E,cAAc,IAAI,iBAAiB,GAAG,SAAS;CAahD"}

package/dist/components/auth/authorize/enforcers/enforcer-registry.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizationEnforcerRegistry = void 0;
+const ignis_helpers_1 = require("@venizia/ignis-helpers");
+const base_1 = require("../../base");
+const common_1 = require("../common");
+// Authorization Enforcer Registry — manages enforcer registration and resolution
+class AuthorizationEnforcerRegistry extends base_1.AbstractAuthRegistry {
+    constructor() {
+        super({ scope: AuthorizationEnforcerRegistry.name });
+        this.configuredEnforcers = new Set();
+    }
+    static getInstance() {
+        if (!AuthorizationEnforcerRegistry.instance) {
+            AuthorizationEnforcerRegistry.instance = new AuthorizationEnforcerRegistry();
+        }
+        return AuthorizationEnforcerRegistry.instance;
+    }
+    reset() {
+        super.reset();
+        this.configuredEnforcers.clear();
+    }
+    getBindingPrefix() {
+        return common_1.Authorization.ENFORCER;
+    }
+    register(opts) {
+        const { container, enforcers } = opts;
+        // Validate no duplicate names in this batch
+        const names = enforcers.map(e => e.name);
+        const duplicateNames = names.filter((n, i) => names.indexOf(n) !== i);
+        if (duplicateNames.length) {
+            throw (0, ignis_helpers_1.getError)({
+                message: `[AuthorizationEnforcerRegistry] Duplicate enforcer name(s): ${[...new Set(duplicateNames)].join(', ')}`,
+            });
+        }
+        for (const { enforcer, name, options } of enforcers) {
+            // Validate name not already registered
+            if (this.descriptors.has(name)) {
+                throw (0, ignis_helpers_1.getError)({
+                    message: `[AuthorizationEnforcerRegistry] Enforcer already registered: ${name}`,
+                });
+            }
+            this.registerDescriptor({ container, target: enforcer, name });
+            if (options) {
+                container.bind({ key: common_1.AuthorizeBindingKeys.enforcerOptions(name) }).toValue(options);
+            }
+        }
+        return this;
+    }
+    hasEnforcers() {
+        return this.descriptors.size > 0;
+    }
+    getDefaultEnforcerName() {
+        return this.getDefaultName();
+    }
+    async resolveEnforcer(opts) {
+        const enforcer = this.resolveDescriptor(opts);
+        if (!this.configuredEnforcers.has(opts.name)) {
+            await enforcer.configure();
+            this.configuredEnforcers.add(opts.name);
+        }
+        return enforcer;
+    }
+    resolveOptions() {
+        for (const [, metadata] of this.descriptors) {
+            const { container } = metadata;
+            const options = container.get({
+                key: common_1.AuthorizeBindingKeys.OPTIONS,
+                isOptional: true,
+            });
+            if (options) {
+                return options;
+            }
+        }
+        return undefined;
+    }
+}
+exports.AuthorizationEnforcerRegistry = AuthorizationEnforcerRegistry;
+//# sourceMappingURL=enforcer-registry.js.map

package/dist/components/auth/authorize/enforcers/enforcer-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enforcer-registry.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/enforcers/enforcer-registry.ts"],"names":[],"mappings":";;;AACA,0DAA0D;AAC1D,qCAAkD;AAClD,sCAOmB;AAEnB,iFAAiF;AAEjF,MAAa,6BAA8B,SAAQ,2BAA4C;IAK7F;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,6BAA6B,CAAC,IAAI,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,mBAAmB,GAAG,IAAI,GAAG,EAAE,CAAC;IACvC,CAAC;IAED,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,6BAA6B,CAAC,QAAQ,EAAE,CAAC;YAC5C,6BAA6B,CAAC,QAAQ,GAAG,IAAI,6BAA6B,EAAE,CAAC;QAC/E,CAAC;QAED,OAAO,6BAA6B,CAAC,QAAQ,CAAC;IAChD,CAAC;IAEQ,KAAK;QACZ,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC;IACnC,CAAC;IAES,gBAAgB;QACxB,OAAO,sBAAa,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,QAAQ,CAAC,IAgBR;QACC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;QAEtC,4CAA4C;QAC5C,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,IAAI,cAAc,CAAC,MAAM,EAAE,CAAC;YAC1B,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,+DAA+D,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAClH,CAAC,CAAC;QACL,CAAC;QAED,KAAK,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,SAAS,EAAE,CAAC;YACpD,uCAAuC;YACvC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAA,wBAAQ,EAAC;oBACb,OAAO,EAAE,gEAAgE,IAAI,EAAE;iBAChF,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAE/D,IAAI,OAAO,EAAE,CAAC;gBACZ,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,6BAAoB,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,sBAAsB;QACpB,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,IAAsB;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAE9C,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,cAAc;QACZ,KAAK,MAAM,CAAC,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;YAC/B,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAoB;gBAC/C,GAAG,EAAE,6BAAoB,CAAC,OAAO;gBACjC,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;YACH,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAzGD,sEAyGC"}

package/dist/components/auth/authorize/enforcers/index.d.ts

@@ -0,0 +1,3 @@
+export * from './casbin.enforcer';
+export * from './enforcer-registry';
+//# sourceMappingURL=index.d.ts.map

package/dist/components/auth/authorize/enforcers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/enforcers/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC"}

package/dist/components/auth/authorize/enforcers/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./casbin.enforcer"), exports);
+__exportStar(require("./enforcer-registry"), exports);
+//# sourceMappingURL=index.js.map

package/dist/components/auth/authorize/enforcers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/enforcers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,sDAAoC"}

package/dist/components/auth/authorize/index.d.ts

@@ -1,2 +1,8 @@
-export {};
+export * from './adapters';
+export * from './common';
+export * from './component';
+export * from './enforcers';
+export * from './middlewares';
+export * from './models';
+export * from './providers';
 //# sourceMappingURL=index.d.ts.map

package/dist/components/auth/authorize/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/authorize/index.ts"],"names":[],"mappings":""}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/authorize/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC"}

package/dist/components/auth/authorize/index.js

@@ -1,3 +1,24 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./adapters"), exports);
+__exportStar(require("./common"), exports);
+__exportStar(require("./component"), exports);
+__exportStar(require("./enforcers"), exports);
+__exportStar(require("./middlewares"), exports);
+__exportStar(require("./models"), exports);
+__exportStar(require("./providers"), exports);
 //# sourceMappingURL=index.js.map

package/dist/components/auth/authorize/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/components/auth/authorize/index.ts"],"names":[],"mappings":""}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/components/auth/authorize/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAA2B;AAC3B,2CAAyB;AACzB,8CAA4B;AAC5B,8CAA4B;AAC5B,gDAA8B;AAC9B,2CAAyB;AACzB,8CAA4B"}

package/dist/components/auth/authorize/middlewares/authorize.middleware.d.ts

@@ -0,0 +1,6 @@
+import { IAuthorizationSpec } from '../common';
+export declare const authorize: (opts: {
+    spec: IAuthorizationSpec;
+    enforcerName?: string;
+}) => import("hono").MiddlewareHandler;
+//# sourceMappingURL=authorize.middleware.d.ts.map

package/dist/components/auth/authorize/middlewares/authorize.middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize.middleware.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/middlewares/authorize.middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAQ/C,eAAO,MAAM,SAAS,GAAI,MAAM;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,qCAElF,CAAC"}

package/dist/components/auth/authorize/middlewares/authorize.middleware.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authorize = void 0;
+const providers_1 = require("../providers");
+// Convenience function — singleton provider instance
+const authorizationProvider = new providers_1.AuthorizationProvider();
+const authorizeFn = authorizationProvider.value();
+const authorize = (opts) => {
+    return authorizeFn(opts);
+};
+exports.authorize = authorize;
+//# sourceMappingURL=authorize.middleware.js.map

package/dist/components/auth/authorize/middlewares/authorize.middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize.middleware.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/middlewares/authorize.middleware.ts"],"names":[],"mappings":";;;AACA,4CAAqD;AAErD,qDAAqD;AAErD,MAAM,qBAAqB,GAAG,IAAI,iCAAqB,EAAE,CAAC;AAC1D,MAAM,WAAW,GAAG,qBAAqB,CAAC,KAAK,EAAE,CAAC;AAE3C,MAAM,SAAS,GAAG,CAAC,IAAyD,EAAE,EAAE;IACrF,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC,CAAC;AAFW,QAAA,SAAS,aAEpB"}

package/dist/components/auth/authorize/middlewares/index.d.ts

@@ -0,0 +1,2 @@
+export * from './authorize.middleware';
+//# sourceMappingURL=index.d.ts.map

package/dist/components/auth/authorize/middlewares/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/middlewares/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC"}

package/dist/components/auth/authorize/middlewares/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./authorize.middleware"), exports);
+//# sourceMappingURL=index.js.map

package/dist/components/auth/authorize/middlewares/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/middlewares/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yDAAuC"}

package/dist/components/auth/authorize/models/abilities/index.d.ts

@@ -0,0 +1,3 @@
+export * from './string-action.model';
+export * from './string-resource.model';
+//# sourceMappingURL=index.d.ts.map

package/dist/components/auth/authorize/models/abilities/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/authorize/models/abilities/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC"}

package/dist/components/auth/authorize/models/abilities/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./string-action.model"), exports);
+__exportStar(require("./string-resource.model"), exports);
+//# sourceMappingURL=index.js.map

package/dist/components/auth/authorize/models/abilities/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authorize/models/abilities/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAAsC;AACtC,0DAAwC"}

package/dist/components/auth/authorize/models/abilities/string-action.model.d.ts

@@ -0,0 +1,14 @@
+import type { IAuthorizationComparable } from '../../common';
+export declare class StringAuthorizationAction implements IAuthorizationComparable<string> {
+    static readonly WILDCARD = "*";
+    readonly value: string;
+    static build(opts: {
+        value: string;
+    }): StringAuthorizationAction;
+    constructor(opts: {
+        value: string;
+    });
+    compare(other: string): number;
+    isEqual(other: string): boolean;
+}
+//# sourceMappingURL=string-action.model.d.ts.map

package/dist/components/auth/authorize/models/abilities/string-action.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"string-action.model.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/authorize/models/abilities/string-action.model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAE7D,qBAAa,yBAA0B,YAAW,wBAAwB,CAAC,MAAM,CAAC;IAChF,MAAM,CAAC,QAAQ,CAAC,QAAQ,OAAO;IAE/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,yBAAyB;gBAIpD,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE;IAInC,OAAO,CAAC,KAAK,EAAE,MAAM;IAOrB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGhC"}

package/dist/components/auth/authorize/models/abilities/string-action.model.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StringAuthorizationAction = void 0;
+class StringAuthorizationAction {
+    static { this.WILDCARD = '*'; }
+    static build(opts) {
+        return new StringAuthorizationAction(opts);
+    }
+    constructor(opts) {
+        this.value = opts.value;
+    }
+    compare(other) {
+        if (this.value === StringAuthorizationAction.WILDCARD) {
+            return 0;
+        }
+        return this.value.localeCompare(other);
+    }
+    isEqual(other) {
+        return this.compare(other) === 0;
+    }
+}
+exports.StringAuthorizationAction = StringAuthorizationAction;
+//# sourceMappingURL=string-action.model.js.map

package/dist/components/auth/authorize/models/abilities/string-action.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"string-action.model.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authorize/models/abilities/string-action.model.ts"],"names":[],"mappings":";;;AAEA,MAAa,yBAAyB;aACpB,aAAQ,GAAG,GAAG,CAAC;IAI/B,MAAM,CAAC,KAAK,CAAC,IAAuB;QAClC,OAAO,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,YAAY,IAAuB;QACjC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAC1B,CAAC;IAED,OAAO,CAAC,KAAa;QACnB,IAAI,IAAI,CAAC,KAAK,KAAK,yBAAyB,CAAC,QAAQ,EAAE,CAAC;YACtD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,CAAC,KAAa;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;;AAtBH,8DAuBC"}

package/dist/components/auth/authorize/models/abilities/string-resource.model.d.ts

@@ -0,0 +1,13 @@
+import type { IAuthorizationComparable } from '../../common';
+export declare class StringAuthorizationResource implements IAuthorizationComparable<string> {
+    readonly value: string;
+    static build(opts: {
+        value: string;
+    }): StringAuthorizationResource;
+    constructor(opts: {
+        value: string;
+    });
+    compare(other: string): number;
+    isEqual(other: string): boolean;
+}
+//# sourceMappingURL=string-resource.model.d.ts.map

package/dist/components/auth/authorize/models/abilities/string-resource.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"string-resource.model.d.ts","sourceRoot":"","sources":["../../../../../../src/components/auth/authorize/models/abilities/string-resource.model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAE7D,qBAAa,2BAA4B,YAAW,wBAAwB,CAAC,MAAM,CAAC;IAClF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,2BAA2B;gBAItD,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE;IAInC,OAAO,CAAC,KAAK,EAAE,MAAM;IAIrB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGhC"}