@venizia/ignis 0.0.7-2 → 0.0.7-21

package/dist/components/auth/authorize/models/abilities/string-resource.model.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StringAuthorizationResource = void 0;
+class StringAuthorizationResource {
+    static build(opts) {
+        return new StringAuthorizationResource(opts);
+    }
+    constructor(opts) {
+        this.value = opts.value;
+    }
+    compare(other) {
+        return this.value.localeCompare(other);
+    }
+    isEqual(other) {
+        return this.compare(other) === 0;
+    }
+}
+exports.StringAuthorizationResource = StringAuthorizationResource;
+//# sourceMappingURL=string-resource.model.js.map

package/dist/components/auth/authorize/models/abilities/string-resource.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"string-resource.model.js","sourceRoot":"","sources":["../../../../../../src/components/auth/authorize/models/abilities/string-resource.model.ts"],"names":[],"mappings":";;;AAEA,MAAa,2BAA2B;IAGtC,MAAM,CAAC,KAAK,CAAC,IAAuB;QAClC,OAAO,IAAI,2BAA2B,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,YAAY,IAAuB;QACjC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAC1B,CAAC;IAED,OAAO,CAAC,KAAa;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,CAAC,KAAa;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;CACF;AAlBD,kEAkBC"}

package/dist/components/auth/authorize/models/authorization-role.model.d.ts

@@ -0,0 +1,30 @@
+import type { IAuthorizationRole } from '../common';
+export declare class AuthorizationRole implements IAuthorizationRole {
+    readonly name: string;
+    readonly priority: number;
+    readonly delimiter: string;
+    static build(opts: {
+        name: string;
+        priority: number;
+        delimiter?: string;
+    }): AuthorizationRole;
+    constructor(opts: {
+        name: string;
+        priority: number;
+        delimiter?: string;
+    });
+    get identifier(): string;
+    compare(opts: {
+        target: IAuthorizationRole;
+    }): number;
+    isHigherThan(opts: {
+        target: IAuthorizationRole;
+    }): boolean;
+    isLowerThan(opts: {
+        target: IAuthorizationRole;
+    }): boolean;
+    isEqualTo(opts: {
+        target: IAuthorizationRole;
+    }): boolean;
+}
+//# sourceMappingURL=authorization-role.model.d.ts.map

package/dist/components/auth/authorize/models/authorization-role.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-role.model.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/models/authorization-role.model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAEpD,qBAAa,iBAAkB,YAAW,kBAAkB;IAC1D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,iBAAiB;gBAIjF,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE;IAMxE,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,OAAO,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,kBAAkB,CAAA;KAAE,GAAG,MAAM;IAIrD,YAAY,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,kBAAkB,CAAA;KAAE,GAAG,OAAO;IAI3D,WAAW,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,kBAAkB,CAAA;KAAE,GAAG,OAAO;IAI1D,SAAS,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,kBAAkB,CAAA;KAAE,GAAG,OAAO;CAGzD"}

package/dist/components/auth/authorize/models/authorization-role.model.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizationRole = void 0;
+class AuthorizationRole {
+    static build(opts) {
+        return new AuthorizationRole(opts);
+    }
+    constructor(opts) {
+        this.name = opts.name;
+        this.priority = opts.priority;
+        this.delimiter = opts.delimiter ?? '_';
+    }
+    get identifier() {
+        return [String(this.priority).padStart(3, '0'), this.name].join(this.delimiter);
+    }
+    compare(opts) {
+        return this.priority - opts.target.priority;
+    }
+    isHigherThan(opts) {
+        return this.compare(opts) > 0;
+    }
+    isLowerThan(opts) {
+        return this.compare(opts) < 0;
+    }
+    isEqualTo(opts) {
+        return this.compare(opts) === 0;
+    }
+}
+exports.AuthorizationRole = AuthorizationRole;
+//# sourceMappingURL=authorization-role.model.js.map

package/dist/components/auth/authorize/models/authorization-role.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-role.model.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/models/authorization-role.model.ts"],"names":[],"mappings":";;;AAEA,MAAa,iBAAiB;IAK5B,MAAM,CAAC,KAAK,CAAC,IAA4D;QACvE,OAAO,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,YAAY,IAA4D;QACtE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC;IACzC,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClF,CAAC;IAED,OAAO,CAAC,IAAoC;QAC1C,OAAO,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC9C,CAAC;IAED,YAAY,CAAC,IAAoC;QAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,WAAW,CAAC,IAAoC;QAC9C,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,SAAS,CAAC,IAAoC;QAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;CACF;AAlCD,8CAkCC"}

package/dist/components/auth/authorize/models/index.d.ts

@@ -0,0 +1,3 @@
+export * from './abilities';
+export * from './authorization-role.model';
+//# sourceMappingURL=index.d.ts.map

package/dist/components/auth/authorize/models/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/models/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,4BAA4B,CAAC"}

package/dist/components/auth/authorize/models/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./abilities"), exports);
+__exportStar(require("./authorization-role.model"), exports);
+//# sourceMappingURL=index.js.map

package/dist/components/auth/authorize/models/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/models/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8CAA4B;AAC5B,6DAA2C"}

package/dist/components/auth/authorize/providers/authorization.provider.d.ts

@@ -0,0 +1,10 @@
+import { BaseHelper } from '@venizia/ignis-helpers';
+import { IProvider } from '@venizia/ignis-inversion';
+import { TAuthorizeFn } from '../common';
+export declare class AuthorizationProvider extends BaseHelper implements IProvider<TAuthorizeFn> {
+    constructor();
+    value(): TAuthorizeFn;
+    private createAuthorizeMiddleware;
+    private extractUserRoles;
+}
+//# sourceMappingURL=authorization.provider.d.ts.map

package/dist/components/auth/authorize/providers/authorization.provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.provider.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/providers/authorization.provider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAkB,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAGrD,OAAO,EAA6D,YAAY,EAAE,MAAM,WAAW,CAAC;AAKpG,qBAAa,qBAAsB,SAAQ,UAAW,YAAW,SAAS,CAAC,YAAY,CAAC;;IAKtF,KAAK,IAAI,YAAY;IAMrB,OAAO,CAAC,yBAAyB;IAgIjC,OAAO,CAAC,gBAAgB;CAezB"}

package/dist/components/auth/authorize/providers/authorization.provider.js

@@ -0,0 +1,135 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthorizationProvider = void 0;
+const types_1 = require("../../../../base/controllers/common/types");
+const ignis_helpers_1 = require("@venizia/ignis-helpers");
+const factory_1 = require("hono/factory");
+const authenticate_1 = require("../../authenticate");
+const common_1 = require("../common");
+const enforcers_1 = require("../enforcers");
+// Authorization Provider — produces middleware factory via IProvider pattern
+class AuthorizationProvider extends ignis_helpers_1.BaseHelper {
+    constructor() {
+        super({ scope: AuthorizationProvider.name });
+    }
+    value() {
+        return opts => {
+            return this.createAuthorizeMiddleware(opts);
+        };
+    }
+    createAuthorizeMiddleware(opts) {
+        const { spec, enforcerName } = opts;
+        const logger = this.logger.for(this.createAuthorizeMiddleware.name);
+        return (0, factory_1.createMiddleware)(async (context, next) => {
+            const registry = enforcers_1.AuthorizationEnforcerRegistry.getInstance();
+            const options = registry.resolveOptions();
+            // 1. Check skip flag
+            const isSkipAuthorize = context.get(common_1.Authorization.SKIP_AUTHORIZATION);
+            if (isSkipAuthorize) {
+                logger.warn('SKIP checking authorization | path: %s', context.req.path);
+                return next();
+            }
+            // 2. Get authenticated user
+            const user = context.get(authenticate_1.Authentication.CURRENT_USER);
+            if (!user) {
+                throw (0, ignis_helpers_1.getError)({
+                    statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_4.Unauthorized,
+                    message: 'Authorization failed: No authenticated user found',
+                });
+            }
+            // 3. Check role-based shortcuts (alwaysAllowRoles + per-route allowedRoles)
+            const needsRoleCheck = options?.alwaysAllowRoles?.length || spec.allowedRoles?.length;
+            if (needsRoleCheck) {
+                const userRoles = this.extractUserRoles({ user });
+                if (options?.alwaysAllowRoles?.length &&
+                    userRoles.some(r => options.alwaysAllowRoles.includes(r))) {
+                    logger.warn('SKIP checking authorization | User has always-allow role | userRoles: %s', userRoles);
+                    return next();
+                }
+                if (spec.allowedRoles?.length && userRoles.some(r => spec.allowedRoles.includes(r))) {
+                    logger.warn('GRANT access | User has allowed role for route | userRoles: %s', userRoles);
+                    return next();
+                }
+            }
+            // 4. Execute voters
+            if (spec.voters?.length) {
+                for (const voter of spec.voters) {
+                    const decision = await voter({
+                        user,
+                        action: spec.action,
+                        resource: spec.resource,
+                        context: (0, types_1.asTypedContext)(context),
+                    });
+                    if (decision === common_1.AuthorizationDecisions.DENY) {
+                        throw (0, ignis_helpers_1.getError)({
+                            statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_4.Forbidden,
+                            message: `Authorization denied by voter | action: ${spec.action} | resource: ${spec.resource}`,
+                        });
+                    }
+                    if (decision === common_1.AuthorizationDecisions.ALLOW) {
+                        await next();
+                        return;
+                    }
+                    // ABSTAIN → continue to enforcer
+                }
+            }
+            // 5. Resolve enforcer — if none registered, skip authorization
+            if (!registry.hasEnforcers()) {
+                logger.debug('SKIP checking authorization | No enforcers registered | path: %s', context.req.path);
+                return next();
+            }
+            const resolvedName = enforcerName ?? registry.getDefaultEnforcerName();
+            const enforcer = await registry.resolveEnforcer({ name: resolvedName });
+            // 6. Build or retrieve cached rules
+            let rules = context.get(common_1.Authorization.RULES);
+            if (!rules) {
+                if (!user.principalType) {
+                    throw (0, ignis_helpers_1.getError)({
+                        statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_4.BadRequest,
+                        message: 'Authorization failed: user.principalType is required for enforcer-based authorization',
+                    });
+                }
+                rules = await enforcer.buildRules({
+                    user: user,
+                    context: (0, types_1.asTypedContext)(context),
+                });
+                context.set(common_1.Authorization.RULES, rules);
+            }
+            // 7. Evaluate permission via enforcer
+            let decision = await enforcer.evaluate({
+                rules,
+                request: {
+                    action: spec.action,
+                    resource: spec.resource,
+                    conditions: spec.conditions,
+                },
+                context: (0, types_1.asTypedContext)(context),
+            });
+            if (decision === common_1.AuthorizationDecisions.ABSTAIN) {
+                decision = options?.defaultDecision ?? common_1.AuthorizationDecisions.DENY;
+            }
+            if (decision !== common_1.AuthorizationDecisions.ALLOW) {
+                throw (0, ignis_helpers_1.getError)({
+                    statusCode: ignis_helpers_1.HTTP.ResultCodes.RS_4.Forbidden,
+                    message: `Authorization denied | action: ${spec.action} | resource: ${spec.resource}`,
+                });
+            }
+            await next();
+        });
+    }
+    extractUserRoles(opts) {
+        const { user } = opts;
+        const roles = user.roles;
+        if (!Array.isArray(roles)) {
+            return [];
+        }
+        return roles.map((r) => {
+            if (typeof r === 'string') {
+                return r;
+            }
+            return r.identifier ?? r.name ?? String(r.id ?? '');
+        });
+    }
+}
+exports.AuthorizationProvider = AuthorizationProvider;
+//# sourceMappingURL=authorization.provider.js.map

package/dist/components/auth/authorize/providers/authorization.provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.provider.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/providers/authorization.provider.ts"],"names":[],"mappings":";;;AAAA,2DAAiE;AACjE,0DAAoE;AAEpE,0CAAgD;AAChD,qDAA+D;AAC/D,sCAAoG;AACpG,4CAA6D;AAE7D,6EAA6E;AAE7E,MAAa,qBAAsB,SAAQ,0BAAU;IACnD;QACE,KAAK,CAAC,EAAE,KAAK,EAAE,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,EAAE;YACZ,OAAO,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC,CAAC;IACJ,CAAC;IAEO,yBAAyB,CAAC,IAAyD;QACzF,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;QAEpE,OAAO,IAAA,0BAAgB,EAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;YAC9C,MAAM,QAAQ,GAAG,yCAA6B,CAAC,WAAW,EAAE,CAAC;YAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;YAE1C,qBAAqB;YACrB,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAa,CAAC,kBAAkB,CAAC,CAAC;YACtE,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACxE,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,4BAA4B;YAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,6BAAc,CAAC,YAAY,CAA0B,CAAC;YAC/E,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAA,wBAAQ,EAAC;oBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY;oBAC9C,OAAO,EAAE,mDAAmD;iBAC7D,CAAC,CAAC;YACL,CAAC;YAED,4EAA4E;YAC5E,MAAM,cAAc,GAAG,OAAO,EAAE,gBAAgB,EAAE,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC;YACtF,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;gBAElD,IACE,OAAO,EAAE,gBAAgB,EAAE,MAAM;oBACjC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,gBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAC1D,CAAC;oBACD,MAAM,CAAC,IAAI,CACT,0EAA0E,EAC1E,SAAS,CACV,CAAC;oBACF,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;gBAED,IAAI,IAAI,CAAC,YAAY,EAAE,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,YAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrF,MAAM,CAAC,IAAI,CAAC,gEAAgE,EAAE,SAAS,CAAC,CAAC;oBACzF,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC;YAED,oBAAoB;YACpB,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;gBACxB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;oBAChC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC;wBAC3B,IAAI;wBACJ,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,OAAO,EAAE,IAAA,sBAAc,EAAC,OAAO,CAAC;qBACjC,CAAC,CAAC;oBAEH,IAAI,QAAQ,KAAK,+BAAsB,CAAC,IAAI,EAAE,CAAC;wBAC7C,MAAM,IAAA,wBAAQ,EAAC;4BACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS;4BAC3C,OAAO,EAAE,2CAA2C,IAAI,CAAC,MAAM,gBAAgB,IAAI,CAAC,QAAQ,EAAE;yBAC/F,CAAC,CAAC;oBACL,CAAC;oBAED,IAAI,QAAQ,KAAK,+BAAsB,CAAC,KAAK,EAAE,CAAC;wBAC9C,MAAM,IAAI,EAAE,CAAC;wBACb,OAAO;oBACT,CAAC;oBAED,iCAAiC;gBACnC,CAAC;YACH,CAAC;YAED,+DAA+D;YAC/D,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;gBAC7B,MAAM,CAAC,KAAK,CACV,kEAAkE,EAClE,OAAO,CAAC,GAAG,CAAC,IAAI,CACjB,CAAC;gBACF,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,YAAY,GAAG,YAAY,IAAI,QAAQ,CAAC,sBAAsB,EAAE,CAAC;YACvE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YAExE,oCAAoC;YACpC,IAAI,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAa,CAAC,KAAK,CAAC,CAAC;YAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;oBACxB,MAAM,IAAA,wBAAQ,EAAC;wBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU;wBAC5C,OAAO,EACL,uFAAuF;qBAC1F,CAAC,CAAC;gBACL,CAAC;gBAED,KAAK,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC;oBAChC,IAAI,EAAE,IAA6C;oBACnD,OAAO,EAAE,IAAA,sBAAc,EAAC,OAAO,CAAC;iBACjC,CAAC,CAAC;gBACH,OAAO,CAAC,GAAG,CAAC,sBAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1C,CAAC;YAED,sCAAsC;YACtC,IAAI,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC;gBACrC,KAAK;gBACL,OAAO,EAAE;oBACP,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;iBAC5B;gBACD,OAAO,EAAE,IAAA,sBAAc,EAAC,OAAO,CAAC;aACjC,CAAC,CAAC;YAEH,IAAI,QAAQ,KAAK,+BAAsB,CAAC,OAAO,EAAE,CAAC;gBAChD,QAAQ,GAAG,OAAO,EAAE,eAAe,IAAI,+BAAsB,CAAC,IAAI,CAAC;YACrE,CAAC;YAED,IAAI,QAAQ,KAAK,+BAAsB,CAAC,KAAK,EAAE,CAAC;gBAC9C,MAAM,IAAA,wBAAQ,EAAC;oBACb,UAAU,EAAE,oBAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS;oBAC3C,OAAO,EAAE,kCAAkC,IAAI,CAAC,MAAM,gBAAgB,IAAI,CAAC,QAAQ,EAAE;iBACtF,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,EAAE,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,gBAAgB,CAAC,IAAyB;QAChD,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAEzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAgE,EAAE,EAAE;YACpF,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC1B,OAAO,CAAC,CAAC;YACX,CAAC;YACD,OAAO,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AA1JD,sDA0JC"}

package/dist/components/auth/authorize/providers/index.d.ts

@@ -0,0 +1,2 @@
+export * from './authorization.provider';
+//# sourceMappingURL=index.d.ts.map

package/dist/components/auth/authorize/providers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/providers/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC"}

package/dist/components/auth/authorize/providers/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./authorization.provider"), exports);
+//# sourceMappingURL=index.js.map

package/dist/components/auth/authorize/providers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/providers/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2DAAyC"}

package/dist/components/auth/base/abstract-auth-registry.d.ts

@@ -0,0 +1,27 @@
+import { Container } from '../../../helpers/inversion/container';
+import { BaseHelper, TClass } from '@venizia/ignis-helpers';
+export type TRegistryDescriptor<TItem> = {
+    container: Container;
+    targetClass: TClass<TItem>;
+};
+export declare abstract class AbstractAuthRegistry<TItem> extends BaseHelper {
+    protected descriptors: Map<string, TRegistryDescriptor<TItem>>;
+    constructor(opts: {
+        scope: string;
+    });
+    protected abstract getBindingPrefix(): string;
+    getKey(opts: {
+        name: string;
+    }): string;
+    getDefaultName(): string;
+    protected registerDescriptor(opts: {
+        container: Container;
+        target: TClass<TItem>;
+        name: string;
+    }): void;
+    reset(): void;
+    protected resolveDescriptor(opts: {
+        name: string;
+    }): TItem;
+}
+//# sourceMappingURL=abstract-auth-registry.d.ts.map

package/dist/components/auth/base/abstract-auth-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"abstract-auth-registry.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/base/abstract-auth-registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAY,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAKtE,MAAM,MAAM,mBAAmB,CAAC,KAAK,IAAI;IACvC,SAAS,EAAE,SAAS,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;CAC5B,CAAC;AAEF,8BAAsB,oBAAoB,CAAC,KAAK,CAAE,SAAQ,UAAU;IAClE,SAAS,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;gBAEnD,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE;IAKnC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,IAAI,MAAM;IAE7C,MAAM,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM;IAQtC,cAAc,IAAI,MAAM;IAUxB,SAAS,CAAC,kBAAkB,CAAC,IAAI,EAAE;QACjC,SAAS,EAAE,SAAS,CAAC;QACrB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,IAAI;IAUR,KAAK,IAAI,IAAI;IAIb,SAAS,CAAC,iBAAiB,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,KAAK;CAuB3D"}

package/dist/components/auth/base/abstract-auth-registry.js

@@ -0,0 +1,62 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AbstractAuthRegistry = void 0;
+const ignis_inversion_1 = require("@venizia/ignis-inversion");
+const ignis_helpers_1 = require("@venizia/ignis-helpers");
+const isEmpty_1 = __importDefault(require("lodash/isEmpty"));
+class AbstractAuthRegistry extends ignis_helpers_1.BaseHelper {
+    constructor(opts) {
+        super(opts);
+        this.descriptors = new Map();
+    }
+    getKey(opts) {
+        if (!opts?.name || (0, isEmpty_1.default)(opts.name)) {
+            throw (0, ignis_helpers_1.getError)({ message: `[getKey] Invalid name | name: ${opts.name}` });
+        }
+        return [this.getBindingPrefix(), opts.name].join('.');
+    }
+    getDefaultName() {
+        const firstName = this.descriptors.keys().next().value;
+        if (!firstName) {
+            throw (0, ignis_helpers_1.getError)({
+                message: `[${this.constructor.name}] No items registered`,
+            });
+        }
+        return firstName;
+    }
+    registerDescriptor(opts) {
+        const { container, target, name } = opts;
+        this.descriptors.set(name, { container, targetClass: target });
+        container
+            .bind({ key: this.getKey({ name }) })
+            .toClass(target)
+            .setScope(ignis_inversion_1.BindingScopes.SINGLETON);
+    }
+    reset() {
+        this.descriptors.clear();
+    }
+    resolveDescriptor(opts) {
+        const { name } = opts;
+        const metadata = this.descriptors.get(name);
+        if (!metadata) {
+            throw (0, ignis_helpers_1.getError)({
+                message: `[${this.constructor.name}] Descriptor not found: ${name}`,
+            });
+        }
+        const { container } = metadata;
+        const instance = container.get({
+            key: this.getKey({ name }),
+        });
+        if (!instance) {
+            throw (0, ignis_helpers_1.getError)({
+                message: `[${this.constructor.name}] Failed to resolve: ${name}`,
+            });
+        }
+        return instance;
+    }
+}
+exports.AbstractAuthRegistry = AbstractAuthRegistry;
+//# sourceMappingURL=abstract-auth-registry.js.map

package/dist/components/auth/base/abstract-auth-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"abstract-auth-registry.js","sourceRoot":"","sources":["../../../../src/components/auth/base/abstract-auth-registry.ts"],"names":[],"mappings":";;;;;;AAAA,8DAAyD;AAEzD,0DAAsE;AACtE,6DAAqC;AASrC,MAAsB,oBAA4B,SAAQ,0BAAU;IAGlE,YAAY,IAAuB;QACjC,KAAK,CAAC,IAAI,CAAC,CAAC;QACZ,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,EAAE,CAAC;IAC/B,CAAC;IAID,MAAM,CAAC,IAAsB;QAC3B,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,IAAA,iBAAO,EAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAA,wBAAQ,EAAC,EAAE,OAAO,EAAE,iCAAiC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;IAED,cAAc;QACZ,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QACvD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,uBAAuB;aAC1D,CAAC,CAAC;QACL,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAES,kBAAkB,CAAC,IAI5B;QACC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAEzC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/D,SAAS;aACN,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;aACpC,OAAO,CAAC,MAAM,CAAC;aACf,QAAQ,CAAC,+BAAa,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAES,iBAAiB,CAAC,IAAsB;QAChD,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE5C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,2BAA2B,IAAI,EAAE;aACpE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;QAC/B,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAQ;YACpC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,wBAAwB,IAAI,EAAE;aACjE,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AArED,oDAqEC"}

package/dist/components/auth/base/index.d.ts

@@ -0,0 +1,2 @@
+export * from './abstract-auth-registry';
+//# sourceMappingURL=index.d.ts.map

package/dist/components/auth/base/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/components/auth/base/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC"}

package/dist/components/auth/base/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./abstract-auth-registry"), exports);
+//# sourceMappingURL=index.js.map

package/dist/components/auth/base/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/components/auth/base/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2DAAyC"}

package/dist/components/auth/context-variables.d.ts

@@ -0,0 +1,14 @@
+import { IdType } from '../../base/models/common/types';
+import { Authentication } from './authenticate/common/constants';
+import { Authorization } from './authorize/common/constants';
+import type { IAuthUser } from './authenticate/common/types';
+declare module 'hono' {
+    interface ContextVariableMap {
+        [Authentication.CURRENT_USER]: IAuthUser;
+        [Authentication.AUDIT_USER_ID]: IdType;
+        [Authentication.SKIP_AUTHENTICATION]: boolean;
+        [Authorization.RULES]: unknown;
+        [Authorization.SKIP_AUTHORIZATION]: boolean;
+    }
+}
+//# sourceMappingURL=context-variables.d.ts.map

package/dist/components/auth/context-variables.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-variables.d.ts","sourceRoot":"","sources":["../../../src/components/auth/context-variables.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAE7D,OAAO,QAAQ,MAAM,CAAC;IAEpB,UAAU,kBAAkB;QAC1B,CAAC,cAAc,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC;QACzC,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QACvC,CAAC,cAAc,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;QAC9C,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAC/B,CAAC,aAAa,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;KAC7C;CACF"}

package/dist/components/auth/context-variables.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=context-variables.js.map

package/dist/components/auth/context-variables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-variables.js","sourceRoot":"","sources":["../../../src/components/auth/context-variables.ts"],"names":[],"mappings":""}

package/dist/components/auth/index.d.ts

@@ -1,4 +1,6 @@
 export * from './authenticate';
 export * from './authorize';
+export * from './base';
+export * from './context-variables';
 export * from './models';
 //# sourceMappingURL=index.d.ts.map

package/dist/components/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/components/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,QAAQ,CAAC;AACvB,cAAc,qBAAqB,CAAC;AACpC,cAAc,UAAU,CAAC"}

package/dist/components/auth/index.js

@@ -16,5 +16,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./authenticate"), exports);
 __exportStar(require("./authorize"), exports);
+__exportStar(require("./base"), exports);
+__exportStar(require("./context-variables"), exports);
 __exportStar(require("./models"), exports);
 //# sourceMappingURL=index.js.map

package/dist/components/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/components/auth/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA+B;AAC/B,8CAA4B;AAC5B,2CAAyB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/components/auth/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA+B;AAC/B,8CAA4B;AAC5B,yCAAuB;AACvB,sDAAoC;AACpC,2CAAyB"}

package/dist/components/auth/models/entities/index.d.ts

@@ -1,6 +1,5 @@
-export * from './permission-mapping.model';
 export * from './permission.model';
+export * from './policy-definition.model';
 export * from './role.model';
-export * from './user-role.model';
 export * from './user.model';
 //# sourceMappingURL=index.d.ts.map

package/dist/components/auth/models/entities/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/index.ts"],"names":[],"mappings":"AAAA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC"}

package/dist/components/auth/models/entities/index.js

@@ -14,9 +14,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./permission-mapping.model"), exports);
 __exportStar(require("./permission.model"), exports);
+__exportStar(require("./policy-definition.model"), exports);
 __exportStar(require("./role.model"), exports);
-__exportStar(require("./user-role.model"), exports);
 __exportStar(require("./user.model"), exports);
 //# sourceMappingURL=index.js.map

package/dist/components/auth/models/entities/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6DAA2C;AAC3C,qDAAmC;AACnC,+CAA6B;AAC7B,oDAAkC;AAClC,+CAA6B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AACnC,4DAA0C;AAC1C,+CAA6B;AAC7B,+CAA6B"}

package/dist/components/auth/models/entities/permission.model.d.ts

@@ -7,7 +7,6 @@ export type TPermissionCommonColumns = {
     code: NotNull<PgTextBuilderInitial<string, [string, ...string[]]>>;
     name: NotNull<PgTextBuilderInitial<string, [string, ...string[]]>>;
     subject: NotNull<PgTextBuilderInitial<string, [string, ...string[]]>>;
-    pType: NotNull<PgTextBuilderInitial<string, [string, ...string[]]>>;
     action: NotNull<PgTextBuilderInitial<string, [string, ...string[]]>>;
     scope: NotNull<PgTextBuilderInitial<string, [string, ...string[]]>>;
 };

package/dist/components/auth/models/entities/permission.model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permission.model.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/permission.model.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAW,uBAAuB,EAAE,oBAAoB,EAAQ,MAAM,qBAAqB,CAAC;AAGnG,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,IAAI,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACnE,IAAI,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACnE,OAAO,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACtE,KAAK,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACpE,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACrE,KAAK,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;CACrE,CAAC;AAEF,KAAK,oBAAoB,CAAC,IAAI,SAAS,kBAAkB,GAAG,SAAS,GAAG,SAAS,IAAI,IAAI,SAAS;IAChG,MAAM,EAAE,MAAM,MAAM,CAAC;CACtB,GACG,MAAM,SAAS,QAAQ,GACrB,wBAAwB,GAAG;IACzB,QAAQ,EAAE,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;CAC/D,GACD,wBAAwB,GAAG;IACzB,QAAQ,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;CAC3C,GACH,wBAAwB,GAAG;IACzB,QAAQ,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;CAC3C,CAAC;AAEN,eAAO,MAAM,sBAAsB,GAAI,IAAI,SAAS,kBAAkB,GAAG,SAAS,EAChF,OAAO,IAAI,KACV,oBAAoB,CAAC,IAAI,CAgC3B,CAAC"}
+{"version":3,"file":"permission.model.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/permission.model.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAW,uBAAuB,EAAE,oBAAoB,EAAQ,MAAM,qBAAqB,CAAC;AAEnG,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,IAAI,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACnE,IAAI,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACnE,OAAO,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACrE,KAAK,EAAE,OAAO,CAAC,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;CACrE,CAAC;AAEF,KAAK,oBAAoB,CAAC,IAAI,SAAS,kBAAkB,GAAG,SAAS,GAAG,SAAS,IAAI,IAAI,SAAS;IAChG,MAAM,EAAE,MAAM,MAAM,CAAC;CACtB,GACG,MAAM,SAAS,QAAQ,GACrB,wBAAwB,GAAG;IACzB,QAAQ,EAAE,oBAAoB,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;CAC/D,GACD,wBAAwB,GAAG;IACzB,QAAQ,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;CAC3C,GACH,wBAAwB,GAAG;IACzB,QAAQ,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;CAC3C,CAAC;AAEN,eAAO,MAAM,sBAAsB,GAAI,IAAI,SAAS,kBAAkB,GAAG,SAAS,EAChF,OAAO,IAAI,KACV,oBAAoB,CAAC,IAAI,CA8B3B,CAAC"}

package/dist/components/auth/models/entities/permission.model.js

@@ -11,7 +11,6 @@ const extraPermissionColumns = (opts) => {
                 code: (0, pg_core_1.text)('code').unique().notNull(),
                 name: (0, pg_core_1.text)('name').notNull(),
                 subject: (0, pg_core_1.text)('subject').notNull(),
-                pType: (0, pg_core_1.text)('p_type').notNull(),
                 action: (0, pg_core_1.text)('action').notNull(),
                 scope: (0, pg_core_1.text)('scope').notNull(),
                 parentId: (0, pg_core_1.integer)('parent_id'),
@@ -22,7 +21,6 @@ const extraPermissionColumns = (opts) => {
                 code: (0, pg_core_1.text)('code').unique().notNull(),
                 name: (0, pg_core_1.text)('name').notNull(),
                 subject: (0, pg_core_1.text)('subject').notNull(),
-                pType: (0, pg_core_1.text)('p_type').notNull(),
                 action: (0, pg_core_1.text)('action').notNull(),
                 scope: (0, pg_core_1.text)('scope').notNull(),
                 parentId: (0, pg_core_1.text)('parent_id'),

package/dist/components/auth/models/entities/permission.model.js.map

@@ -1 +1 @@
-{"version":3,"file":"permission.model.js","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/permission.model.ts"],"names":[],"mappings":";;;AAAA,0DAAkD;AAElD,iDAAmG;AA8B5F,MAAM,sBAAsB,GAAG,CACpC,IAAW,EACiB,EAAE;IAC9B,MAAM,EAAE,MAAM,GAAG,QAAQ,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;IAEzC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO;gBACL,IAAI,EAAE,IAAA,cAAI,EAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;gBACrC,IAAI,EAAE,IAAA,cAAI,EAAC,MAAM,CAAC,CAAC,OAAO,EAAE;gBAC5B,OAAO,EAAE,IAAA,cAAI,EAAC,SAAS,CAAC,CAAC,OAAO,EAAE;gBAClC,KAAK,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;gBAC/B,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;gBAChC,KAAK,EAAE,IAAA,cAAI,EAAC,OAAO,CAAC,CAAC,OAAO,EAAE;gBAC9B,QAAQ,EAAE,IAAA,iBAAO,EAAC,WAAW,CAAC;aACD,CAAC;QAClC,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO;gBACL,IAAI,EAAE,IAAA,cAAI,EAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;gBACrC,IAAI,EAAE,IAAA,cAAI,EAAC,MAAM,CAAC,CAAC,OAAO,EAAE;gBAC5B,OAAO,EAAE,IAAA,cAAI,EAAC,SAAS,CAAC,CAAC,OAAO,EAAE;gBAClC,KAAK,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;gBAC/B,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;gBAChC,KAAK,EAAE,IAAA,cAAI,EAAC,OAAO,CAAC,CAAC,OAAO,EAAE;gBAC9B,QAAQ,EAAE,IAAA,cAAI,EAAC,WAAW,CAAC;aACE,CAAC;QAClC,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,qDAAqD,MAAM,EAAE;aACvE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAlCW,QAAA,sBAAsB,0BAkCjC"}
+{"version":3,"file":"permission.model.js","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/permission.model.ts"],"names":[],"mappings":";;;AAAA,0DAAkD;AAElD,iDAAmG;AA4B5F,MAAM,sBAAsB,GAAG,CACpC,IAAW,EACiB,EAAE;IAC9B,MAAM,EAAE,MAAM,GAAG,QAAQ,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;IAEzC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO;gBACL,IAAI,EAAE,IAAA,cAAI,EAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;gBACrC,IAAI,EAAE,IAAA,cAAI,EAAC,MAAM,CAAC,CAAC,OAAO,EAAE;gBAC5B,OAAO,EAAE,IAAA,cAAI,EAAC,SAAS,CAAC,CAAC,OAAO,EAAE;gBAClC,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;gBAChC,KAAK,EAAE,IAAA,cAAI,EAAC,OAAO,CAAC,CAAC,OAAO,EAAE;gBAC9B,QAAQ,EAAE,IAAA,iBAAO,EAAC,WAAW,CAAC;aACD,CAAC;QAClC,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO;gBACL,IAAI,EAAE,IAAA,cAAI,EAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;gBACrC,IAAI,EAAE,IAAA,cAAI,EAAC,MAAM,CAAC,CAAC,OAAO,EAAE;gBAC5B,OAAO,EAAE,IAAA,cAAI,EAAC,SAAS,CAAC,CAAC,OAAO,EAAE;gBAClC,MAAM,EAAE,IAAA,cAAI,EAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;gBAChC,KAAK,EAAE,IAAA,cAAI,EAAC,OAAO,CAAC,CAAC,OAAO,EAAE;gBAC9B,QAAQ,EAAE,IAAA,cAAI,EAAC,WAAW,CAAC;aACE,CAAC;QAClC,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,IAAA,wBAAQ,EAAC;gBACb,OAAO,EAAE,qDAAqD,MAAM,EAAE;aACvE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAhCW,QAAA,sBAAsB,0BAgCjC"}

package/dist/components/auth/models/entities/policy-definition.model.d.ts

@@ -0,0 +1,24 @@
+import { integer, text } from 'drizzle-orm/pg-core';
+export type TPolicyDefinitionOptions = {
+    idType?: 'string' | 'number';
+};
+export type TPolicyDefinitionCommonColumns = {
+    variant: ReturnType<typeof text>;
+    subjectType: ReturnType<typeof text>;
+    targetType: ReturnType<typeof text>;
+    action: ReturnType<typeof text>;
+    effect: ReturnType<typeof text>;
+    domain: ReturnType<typeof text>;
+};
+type TPolicyDefinitionColumnDef<Opts extends TPolicyDefinitionOptions | undefined = undefined> = Opts extends {
+    idType: 'string';
+} ? TPolicyDefinitionCommonColumns & {
+    subjectId: ReturnType<typeof text>;
+    targetId: ReturnType<typeof text>;
+} : TPolicyDefinitionCommonColumns & {
+    subjectId: ReturnType<typeof integer>;
+    targetId: ReturnType<typeof integer>;
+};
+export declare const extraPolicyDefinitionColumns: <Opts extends TPolicyDefinitionOptions | undefined>(opts?: Opts) => TPolicyDefinitionColumnDef<Opts>;
+export {};
+//# sourceMappingURL=policy-definition.model.d.ts.map

package/dist/components/auth/models/entities/policy-definition.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-definition.model.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/models/entities/policy-definition.model.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,OAAO,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;IACjC,WAAW,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;IACrC,UAAU,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;IACpC,MAAM,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;IAChC,MAAM,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;IAChC,MAAM,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;CACjC,CAAC;AAEF,KAAK,0BAA0B,CAAC,IAAI,SAAS,wBAAwB,GAAG,SAAS,GAAG,SAAS,IAC3F,IAAI,SAAS;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GAC7B,8BAA8B,GAAG;IAC/B,SAAS,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;IACnC,QAAQ,EAAE,UAAU,CAAC,OAAO,IAAI,CAAC,CAAC;CACnC,GACD,8BAA8B,GAAG;IAC/B,SAAS,EAAE,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;IACtC,QAAQ,EAAE,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;CACtC,CAAC;AAER,eAAO,MAAM,4BAA4B,GAAI,IAAI,SAAS,wBAAwB,GAAG,SAAS,EAC5F,OAAO,IAAI,KACV,0BAA0B,CAAC,IAAI,CAiCjC,CAAC"}