@venizia/ignis 0.0.7-8 → 0.0.7

package/dist/components/auth/authorize/adapters/base-filtered.js

@@ -0,0 +1,90 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BaseFilteredAdapter = void 0;
+const ignis_helpers_1 = require("@venizia/ignis-helpers");
+const common_1 = require("../common");
+// Base Filtered Adapter — read-only template for casbin FilteredAdapter
+//
+// Generic parameters (ordered by likelihood of customization):
+//   TEntities  — entity configuration (subclass adds data-source-specific fields like tableName)
+//   TFilter    — filter shape passed to loadFilteredPolicy (opaque to the base)
+//   TPolicyRow — policy row shape consumed by toPolicyLine
+//
+// Subclasses implement the three query hooks; the base orchestrates loading,
+// provides shared formatters, and satisfies the no-op write contract.
+class BaseFilteredAdapter extends ignis_helpers_1.BaseHelper {
+    constructor(opts) {
+        super({ scope: opts.scope });
+        this.entities = opts.entities;
+    }
+    // FilteredAdapter — public API
+    async loadPolicy() {
+        return;
+    }
+    async loadFilteredPolicy(model, filter) {
+        const { Helper } = await import('casbin');
+        const rolePrincipal = this.entities.role.principalType;
+        const loadLine = (line) => Helper.loadPolicyLine(line, model);
+        // 1. Direct permissions assigned to the principal
+        const directLines = await this.buildDirectPolicies({ filter, rolePrincipal });
+        directLines.forEach(loadLine);
+        // 2. Role assignments + group lines
+        const { lines: groupLines, roleIds } = await this.buildGroupPolicies({ filter });
+        groupLines.forEach(loadLine);
+        // 3. Permissions inherited through roles
+        if (roleIds.length) {
+            const roleLines = await this.buildRolePolicies({ roleIds, rolePrincipal });
+            roleLines.forEach(loadLine);
+        }
+    }
+    isFiltered() {
+        return true;
+    }
+    // FilteredAdapter — no-op write methods (read-only adapter)
+    async savePolicy() {
+        return true;
+    }
+    async addPolicy() {
+        return;
+    }
+    async removePolicy() {
+        return;
+    }
+    async removeFilteredPolicy() {
+        return;
+    }
+    // Formatters — shared utilities for subclasses
+    /** Format a domain value with optional entity prefix (e.g., `"Organization_<uuid>"`). */
+    formatDomain(domain) {
+        if (!domain) {
+            return null;
+        }
+        const prefix = this.entities.domain?.principalType;
+        return prefix ? `${prefix}_${domain}` : domain;
+    }
+    /** Format a casbin grouping line: `g, <subject>, <role>[, <domain>]`. */
+    toGroupLine(opts) {
+        const { subject, role, domain } = opts;
+        if (domain) {
+            return [common_1.CasbinRuleVariants.G, subject, role, domain].join(', ');
+        }
+        return [common_1.CasbinRuleVariants.G, subject, role].join(', ');
+    }
+    /** Format a casbin policy line: `p, <subject>, [<domain>,] <resource>, <action>, <effect>`. */
+    toPolicyLine(opts) {
+        const { row } = opts;
+        const { code, action } = row;
+        const effect = row.effect ?? 'allow';
+        if (!action) {
+            return null;
+        }
+        const subject = `${row.subjectType}_${row.subjectId}`;
+        const domain = this.formatDomain(row.domain);
+        if (domain) {
+            return [common_1.CasbinRuleVariants.P, subject, domain, code, action, effect].join(', ');
+        }
+        return [common_1.CasbinRuleVariants.P, subject, code, action, effect].join(', ');
+    }
+}
+exports.BaseFilteredAdapter = BaseFilteredAdapter;
+//# sourceMappingURL=base-filtered.js.map

package/dist/components/auth/authorize/adapters/base-filtered.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-filtered.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/adapters/base-filtered.ts"],"names":[],"mappings":";;;AAAA,0DAAoE;AAEpE,sCAA+C;AA2B/C,wEAAwE;AACxE,EAAE;AACF,+DAA+D;AAC/D,iGAAiG;AACjG,gFAAgF;AAChF,2DAA2D;AAC3D,EAAE;AACF,6EAA6E;AAC7E,sEAAsE;AAEtE,MAAsB,mBAKpB,SAAQ,0BAAU;IAKlB,YAAY,IAA4C;QACtD,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED,+BAA+B;IAE/B,KAAK,CAAC,UAAU;QACd,OAAO;IACT,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAAY,EAAE,MAAe;QACpD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC;QACvD,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAEtE,kDAAkD;QAClD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;QAC9E,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAE9B,oCAAoC;QACpC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACjF,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAE7B,yCAAyC;QACzC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;YAC3E,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4DAA4D;IAE5D,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,SAAS;QACb,OAAO;IACT,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,OAAO;IACT,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,OAAO;IACT,CAAC;IAqBD,+CAA+C;IAE/C,yFAAyF;IAC/E,YAAY,CAAC,MAAqB;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;QACnD,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IACjD,CAAC;IAED,yEAAyE;IAC/D,WAAW,CAAC,IAA8D;QAClF,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACvC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,2BAAkB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,CAAC,2BAAkB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC;IAED,+FAA+F;IACrF,YAAY,CAAC,IAAyB;QAC9C,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QACrB,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;QAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC;QAErC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAE7C,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,2BAAkB,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClF,CAAC;QAED,OAAO,CAAC,2BAAkB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1E,CAAC;CACF;AA3HD,kDA2HC"}

package/dist/components/auth/authorize/adapters/drizzle-casbin.d.ts

@@ -0,0 +1,40 @@
+import { IDataSource } from '../../../../base/datasources';
+import { BaseFilteredAdapter, type IBaseFilteredAdapterEntities, type ICasbinPolicyFilter } from './base-filtered';
+export interface IDrizzleCasbinEntities extends IBaseFilteredAdapterEntities {
+    permission: {
+        tableName: string;
+        principalType: string;
+    };
+    role: {
+        tableName: string;
+        principalType: string;
+    };
+    policyDefinition: {
+        tableName: string;
+        principalType: string;
+    };
+}
+export interface IDrizzleCasbinAdapterOptions {
+    dataSource: IDataSource;
+    entities: IDrizzleCasbinEntities;
+}
+export declare class DrizzleCasbinAdapter extends BaseFilteredAdapter<IDrizzleCasbinEntities> {
+    private dataSource;
+    private get connector();
+    constructor(opts: IDrizzleCasbinAdapterOptions);
+    protected buildDirectPolicies(opts: {
+        filter: ICasbinPolicyFilter;
+        rolePrincipal: string;
+    }): Promise<string[]>;
+    protected buildGroupPolicies(opts: {
+        filter: ICasbinPolicyFilter;
+    }): Promise<{
+        lines: string[];
+        roleIds: (string | number)[];
+    }>;
+    protected buildRolePolicies(opts: {
+        roleIds: (string | number)[];
+        rolePrincipal: string;
+    }): Promise<string[]>;
+}
+//# sourceMappingURL=drizzle-casbin.d.ts.map

package/dist/components/auth/authorize/adapters/drizzle-casbin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"drizzle-casbin.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/adapters/drizzle-casbin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAiB,MAAM,oBAAoB,CAAC;AAGhE,OAAO,EACL,mBAAmB,EACnB,KAAK,4BAA4B,EACjC,KAAK,mBAAmB,EAEzB,MAAM,iBAAiB,CAAC;AACzB,MAAM,WAAW,sBAAuB,SAAQ,4BAA4B;IAC1E,UAAU,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IACzD,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,gBAAgB,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;CAChE;AAED,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,WAAW,CAAC;IACxB,QAAQ,EAAE,sBAAsB,CAAC;CAClC;AAID,qBAAa,oBAAqB,SAAQ,mBAAmB,CAAC,sBAAsB,CAAC;IACnF,OAAO,CAAC,UAAU,CAAc;IAEhC,OAAO,KAAK,SAAS,GAEpB;gBAEW,IAAI,EAAE,4BAA4B;cAO9B,mBAAmB,CAAC,IAAI,EAAE;QACxC,MAAM,EAAE,mBAAmB,CAAC;QAC5B,aAAa,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;cAiCL,kBAAkB,CAAC,IAAI,EAAE;QACvC,MAAM,EAAE,mBAAmB,CAAC;KAC7B,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAA;KAAE,CAAC;cAqC9C,iBAAiB,CAAC,IAAI,EAAE;QACtC,OAAO,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;QAC7B,aAAa,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;CAoCtB"}

package/dist/components/auth/authorize/adapters/drizzle-casbin.js

@@ -0,0 +1,99 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DrizzleCasbinAdapter = void 0;
+const drizzle_orm_1 = require("drizzle-orm");
+const common_1 = require("../common");
+const base_filtered_1 = require("./base-filtered");
+// Drizzle Casbin Adapter — read-only FilteredAdapter using raw SQL queries
+class DrizzleCasbinAdapter extends base_filtered_1.BaseFilteredAdapter {
+    get connector() {
+        return this.dataSource.connector;
+    }
+    constructor(opts) {
+        super({ scope: DrizzleCasbinAdapter.name, entities: opts.entities });
+        this.dataSource = opts.dataSource;
+    }
+    // Query builders
+    async buildDirectPolicies(opts) {
+        const { permission: perm, policyDefinition: pd } = this.entities;
+        const { principalType, principalValue } = opts.filter;
+        const result = await this.connector.execute((0, drizzle_orm_1.sql) `
+      SELECT pd.variant, p.code, pd.action,
+             pd.subject_type AS "subjectType", pd.subject_id AS "subjectId",
+             pd.effect, pd.domain
+      FROM ${drizzle_orm_1.sql.identifier(pd.tableName)} pd
+      INNER JOIN ${drizzle_orm_1.sql.identifier(perm.tableName)} p ON pd.target_id = p.id
+      WHERE pd.variant = ${common_1.CasbinRuleVariants.POLICY}
+        AND pd.subject_type = ${principalType}
+        AND pd.subject_id = ${principalValue}
+        AND pd.target_type = ${perm.principalType}
+    `);
+        const policyLines = [];
+        if (!result.rows.length) {
+            return policyLines;
+        }
+        for (const row of result.rows) {
+            const line = this.toPolicyLine({ row });
+            if (!line) {
+                continue;
+            }
+            policyLines.push(line);
+        }
+        return policyLines;
+    }
+    async buildGroupPolicies(opts) {
+        const { role: rol, policyDefinition: pd } = this.entities;
+        const { principalType, principalValue } = opts.filter;
+        const result = await this.connector.execute((0, drizzle_orm_1.sql) `
+      SELECT pd.target_id AS "targetId", pd.domain
+      FROM ${drizzle_orm_1.sql.identifier(pd.tableName)} pd
+      WHERE pd.variant = ${common_1.CasbinRuleVariants.GROUP}
+        AND pd.subject_type = ${principalType}
+        AND pd.subject_id = ${principalValue}
+        AND pd.target_type = ${rol.principalType}
+    `);
+        const policyLines = [];
+        const roleIds = [];
+        if (!result.rows.length) {
+            return { lines: policyLines, roleIds };
+        }
+        for (const row of result.rows) {
+            roleIds.push(row.targetId);
+            policyLines.push(this.toGroupLine({
+                subject: `${principalType}_${principalValue}`,
+                role: `${rol.principalType}_${row.targetId}`,
+                domain: this.formatDomain(row.domain),
+            }));
+        }
+        return { lines: policyLines, roleIds };
+    }
+    async buildRolePolicies(opts) {
+        const { permission: perm, role: rol, policyDefinition: pd } = this.entities;
+        const { roleIds } = opts;
+        const result = await this.connector.execute((0, drizzle_orm_1.sql) `
+      SELECT pd.variant, p.code, pd.action,
+             pd.subject_type AS "subjectType", pd.subject_id AS "subjectId",
+             pd.effect, pd.domain
+      FROM ${drizzle_orm_1.sql.identifier(pd.tableName)} pd
+      INNER JOIN ${drizzle_orm_1.sql.identifier(perm.tableName)} p ON pd.target_id = p.id
+      WHERE pd.variant = ${common_1.CasbinRuleVariants.POLICY}
+        AND pd.subject_type = ${rol.principalType}
+        AND pd.subject_id IN (${drizzle_orm_1.sql.join(roleIds.map(id => (0, drizzle_orm_1.sql) `${id}`), (0, drizzle_orm_1.sql) `, `)})
+        AND pd.target_type = ${perm.principalType}
+    `);
+        const policyLines = [];
+        if (!result.rows.length) {
+            return policyLines;
+        }
+        for (const row of result.rows) {
+            const line = this.toPolicyLine({ row });
+            if (!line) {
+                continue;
+            }
+            policyLines.push(line);
+        }
+        return policyLines;
+    }
+}
+exports.DrizzleCasbinAdapter = DrizzleCasbinAdapter;
+//# sourceMappingURL=drizzle-casbin.js.map

package/dist/components/auth/authorize/adapters/drizzle-casbin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"drizzle-casbin.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/adapters/drizzle-casbin.ts"],"names":[],"mappings":";;;AACA,6CAAkC;AAClC,sCAA+C;AAC/C,mDAKyB;AAYzB,2EAA2E;AAE3E,MAAa,oBAAqB,SAAQ,mCAA2C;IAGnF,IAAY,SAAS;QACnB,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;IACnC,CAAC;IAED,YAAY,IAAkC;QAC5C,KAAK,CAAC,EAAE,KAAK,EAAE,oBAAoB,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACpC,CAAC;IAED,iBAAiB;IAEP,KAAK,CAAC,mBAAmB,CAAC,IAGnC;QACC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QACjE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QAEtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAiB,IAAA,iBAAG,EAAA;;;;aAItD,iBAAG,CAAC,UAAU,CAAC,EAAE,CAAC,SAAS,CAAC;mBACtB,iBAAG,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;2BACtB,2BAAkB,CAAC,MAAM;gCACpB,aAAa;8BACf,cAAc;+BACb,IAAI,CAAC,aAAa;KAC5C,CAAC,CAAC;QAEH,MAAM,WAAW,GAAkB,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACxB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;YACxC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,SAAS;YACX,CAAC;YAED,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAES,KAAK,CAAC,kBAAkB,CAAC,IAElC;QACC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC1D,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QAItD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAO,IAAA,iBAAG,EAAA;;aAE5C,iBAAG,CAAC,UAAU,CAAC,EAAE,CAAC,SAAS,CAAC;2BACd,2BAAkB,CAAC,KAAK;gCACnB,aAAa;8BACf,cAAc;+BACb,GAAG,CAAC,aAAa;KAC3C,CAAC,CAAC;QAEH,MAAM,WAAW,GAAkB,EAAE,CAAC;QACtC,MAAM,OAAO,GAAwB,EAAE,CAAC;QAExC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACxB,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;QACzC,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAE3B,WAAW,CAAC,IAAI,CACd,IAAI,CAAC,WAAW,CAAC;gBACf,OAAO,EAAE,GAAG,aAAa,IAAI,cAAc,EAAE;gBAC7C,IAAI,EAAE,GAAG,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,QAAQ,EAAE;gBAC5C,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;aACtC,CAAC,CACH,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;IACzC,CAAC;IAES,KAAK,CAAC,iBAAiB,CAAC,IAGjC;QACC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC5E,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QAEzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAiB,IAAA,iBAAG,EAAA;;;;aAItD,iBAAG,CAAC,UAAU,CAAC,EAAE,CAAC,SAAS,CAAC;mBACtB,iBAAG,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;2BACtB,2BAAkB,CAAC,MAAM;gCACpB,GAAG,CAAC,aAAa;gCACjB,iBAAG,CAAC,IAAI,CAC9B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAA,iBAAG,EAAA,GAAG,EAAE,EAAE,CAAC,EAC7B,IAAA,iBAAG,EAAA,IAAI,CACR;+BACsB,IAAI,CAAC,aAAa;KAC5C,CAAC,CAAC;QAEH,MAAM,WAAW,GAAkB,EAAE,CAAC;QAEtC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACxB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;YACxC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,SAAS;YACX,CAAC;YAED,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF;AAhID,oDAgIC"}

package/dist/components/auth/authorize/adapters/index.d.ts

@@ -0,0 +1,3 @@
+export * from './base-filtered';
+export * from './drizzle-casbin';
+//# sourceMappingURL=index.d.ts.map

package/dist/components/auth/authorize/adapters/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/adapters/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC"}

package/dist/components/auth/authorize/adapters/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./base-filtered"), exports);
+__exportStar(require("./drizzle-casbin"), exports);
+//# sourceMappingURL=index.js.map

package/dist/components/auth/authorize/adapters/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/adapters/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,kDAAgC;AAChC,mDAAiC"}

package/dist/components/auth/authorize/common/constants.d.ts

@@ -1,9 +1,9 @@
 import { TConstValue } from '@venizia/ignis-helpers';
 import { AuthorizationRole } from '../models/authorization-role.model';
 export declare class Authorization {
-    static readonly ABILITIES = "authorization.abilities";
+    static readonly RULES = "authorization.rules";
     static readonly SKIP_AUTHORIZATION = "authorization.skip";
-    static readonly AUTHORIZATION_ENFORCER = "authorization.enforcer";
+    static readonly ENFORCER = "authorization.enforcer";
 }
 export declare class AuthorizationActions {
     static readonly CREATE = "create";
@@ -11,7 +11,6 @@ export declare class AuthorizationActions {
     static readonly UPDATE = "update";
     static readonly DELETE = "delete";
     static readonly EXECUTE = "execute";
-    static readonly MANAGE = "manage";
     static readonly SCHEME_SET: Set<string>;
     static isValid(input: string): boolean;
 }
@@ -22,9 +21,11 @@ export declare class AuthorizationDecisions {
     static readonly ABSTAIN = "abstain";
     static readonly SCHEME_SET: Set<string>;
     static isValid(input: string): boolean;
+    static isAllow(input: string | number): boolean;
+    static isDeny(input: string | number): boolean;
+    static isAbstain(input: string | number): boolean;
 }
 export type TAuthorizationDecision = TConstValue<typeof AuthorizationDecisions>;
-export type TPermissionEffect = typeof AuthorizationDecisions.ALLOW | typeof AuthorizationDecisions.DENY;
 export declare class AuthorizationRoles {
     static readonly SUPER_ADMIN: AuthorizationRole;
     static readonly ADMIN: AuthorizationRole;
@@ -34,4 +35,36 @@ export declare class AuthorizationRoles {
     static readonly SCHEME_SET: Set<string>;
     static isValid(input: string): boolean;
 }
+export declare class AuthorizationEnforcerTypes {
+    static readonly CASBIN = "casbin";
+    static readonly CUSTOM = "custom";
+    static readonly SCHEME_SET: Set<string>;
+    static isValid(input: string): boolean;
+}
+export type TAuthorizationEnforcerType = TConstValue<typeof AuthorizationEnforcerTypes>;
+export declare class CasbinEnforcerCachedDrivers {
+    static readonly IN_MEMORY = "in-memory";
+    static readonly REDIS = "redis";
+    static readonly SCHEME_SET: Set<string>;
+    static isValid(input: string): boolean;
+}
+export type TCasbinEnforcerCachedDriver = TConstValue<typeof CasbinEnforcerCachedDrivers>;
+export declare class CasbinEnforcerModelDrivers {
+    static readonly FILE = "file";
+    static readonly TEXT = "text";
+    static readonly SCHEME_SET: Set<string>;
+    static isValid(input: string): boolean;
+}
+export type TCasbinEnforcerModelDriver = TConstValue<typeof CasbinEnforcerModelDrivers>;
+export declare class CasbinRuleVariants {
+    static readonly POLICY = "policy";
+    static readonly GROUP = "group";
+    /** Casbin line prefix for policy rules. */
+    static readonly P = "p";
+    /** Casbin line prefix for grouping rules. */
+    static readonly G = "g";
+    static readonly SCHEME_SET: Set<string>;
+    static isValid(input: string): boolean;
+}
+export type TCasbinRuleVariant = TConstValue<typeof CasbinRuleVariants>;
 //# sourceMappingURL=constants.d.ts.map

package/dist/components/auth/authorize/common/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/common/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAGvE,qBAAa,aAAa;IACxB,MAAM,CAAC,QAAQ,CAAC,SAAS,6BAA6B;IACtD,MAAM,CAAC,QAAQ,CAAC,kBAAkB,wBAAwB;IAC1D,MAAM,CAAC,QAAQ,CAAC,sBAAsB,4BAA4B;CACnE;AAGD,qBAAa,oBAAoB;IAC/B,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY;IAClC,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAC9B,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY;IAClC,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY;IAClC,MAAM,CAAC,QAAQ,CAAC,OAAO,aAAa;IACpC,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY;IAElC,MAAM,CAAC,QAAQ,CAAC,UAAU,cAOvB;IAEH,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AACD,MAAM,MAAM,oBAAoB,GAAG,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAG5E,qBAAa,sBAAsB;IACjC,MAAM,CAAC,QAAQ,CAAC,KAAK,WAAW;IAChC,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAC9B,MAAM,CAAC,QAAQ,CAAC,OAAO,aAAa;IAEpC,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAkD;IAE5E,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AACD,MAAM,MAAM,sBAAsB,GAAG,WAAW,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAChF,MAAM,MAAM,iBAAiB,GACzB,OAAO,sBAAsB,CAAC,KAAK,GACnC,OAAO,sBAAsB,CAAC,IAAI,CAAC;AAGvC,qBAAa,kBAAkB;IAC7B,MAAM,CAAC,QAAQ,CAAC,WAAW,oBAGxB;IACH,MAAM,CAAC,QAAQ,CAAC,KAAK,oBAGlB;IACH,MAAM,CAAC,QAAQ,CAAC,IAAI,oBAGjB;IACH,MAAM,CAAC,QAAQ,CAAC,KAAK,oBAGlB;IACH,MAAM,CAAC,QAAQ,CAAC,YAAY,oBAGzB;IAEH,MAAM,CAAC,QAAQ,CAAC,UAAU,cAMvB;IAEH,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/common/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAEvE,qBAAa,aAAa;IACxB,MAAM,CAAC,QAAQ,CAAC,KAAK,yBAAyB;IAC9C,MAAM,CAAC,QAAQ,CAAC,kBAAkB,wBAAwB;IAC1D,MAAM,CAAC,QAAQ,CAAC,QAAQ,4BAA4B;CACrD;AAED,qBAAa,oBAAoB;IAC/B,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY;IAClC,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAC9B,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY;IAClC,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY;IAClC,MAAM,CAAC,QAAQ,CAAC,OAAO,aAAa;IAEpC,MAAM,CAAC,QAAQ,CAAC,UAAU,cAMvB;IAEH,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AACD,MAAM,MAAM,oBAAoB,GAAG,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAE5E,qBAAa,sBAAsB;IACjC,MAAM,CAAC,QAAQ,CAAC,KAAK,WAAW;IAChC,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAC9B,MAAM,CAAC,QAAQ,CAAC,OAAO,aAAa;IAEpC,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAkD;IAE5E,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAItC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO;IAO/C,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO;IAO9C,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO;CAMlD;AACD,MAAM,MAAM,sBAAsB,GAAG,WAAW,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEhF,qBAAa,kBAAkB;IAC7B,MAAM,CAAC,QAAQ,CAAC,WAAW,oBAGxB;IACH,MAAM,CAAC,QAAQ,CAAC,KAAK,oBAGlB;IACH,MAAM,CAAC,QAAQ,CAAC,IAAI,oBAGjB;IACH,MAAM,CAAC,QAAQ,CAAC,KAAK,oBAGlB;IACH,MAAM,CAAC,QAAQ,CAAC,YAAY,oBAGzB;IAEH,MAAM,CAAC,QAAQ,CAAC,UAAU,cAMvB;IAEH,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,qBAAa,0BAA0B;IACrC,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY;IAClC,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY;IAElC,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAuC;IAEjE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,0BAA0B,GAAG,WAAW,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAExF,qBAAa,2BAA2B;IACtC,MAAM,CAAC,QAAQ,CAAC,SAAS,eAAe;IACxC,MAAM,CAAC,QAAQ,CAAC,KAAK,WAAW;IAEhC,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAyC;IAEnE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,2BAA2B,GAAG,WAAW,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAE1F,qBAAa,0BAA0B;IACrC,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAC9B,MAAM,CAAC,QAAQ,CAAC,IAAI,UAAU;IAE9B,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAmC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,0BAA0B,GAAG,WAAW,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAExF,qBAAa,kBAAkB;IAC7B,MAAM,CAAC,QAAQ,CAAC,MAAM,YAAY;IAClC,MAAM,CAAC,QAAQ,CAAC,KAAK,WAAW;IAEhC,2CAA2C;IAC3C,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO;IACxB,6CAA6C;IAC7C,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO;IAExB,MAAM,CAAC,QAAQ,CAAC,UAAU,cAAsC;IAEhE,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;CAGvC;AAED,MAAM,MAAM,kBAAkB,GAAG,WAAW,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/components/auth/authorize/common/constants.js

@@ -1,36 +1,31 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthorizationRoles = exports.AuthorizationDecisions = exports.AuthorizationActions = exports.Authorization = void 0;
+exports.CasbinRuleVariants = exports.CasbinEnforcerModelDrivers = exports.CasbinEnforcerCachedDrivers = exports.AuthorizationEnforcerTypes = exports.AuthorizationRoles = exports.AuthorizationDecisions = exports.AuthorizationActions = exports.Authorization = void 0;
 const authorization_role_model_1 = require("../models/authorization-role.model");
-// --------------------------------------------------------------------------------------------------------
 class Authorization {
-    static { this.ABILITIES = 'authorization.abilities'; }
+    static { this.RULES = 'authorization.rules'; }
     static { this.SKIP_AUTHORIZATION = 'authorization.skip'; }
-    static { this.AUTHORIZATION_ENFORCER = 'authorization.enforcer'; }
+    static { this.ENFORCER = 'authorization.enforcer'; }
 }
 exports.Authorization = Authorization;
-// --------------------------------------------------------------------------------------------------------
 class AuthorizationActions {
     static { this.CREATE = 'create'; }
     static { this.READ = 'read'; }
     static { this.UPDATE = 'update'; }
     static { this.DELETE = 'delete'; }
     static { this.EXECUTE = 'execute'; }
-    static { this.MANAGE = 'manage'; }
     static { this.SCHEME_SET = new Set([
         this.CREATE,
         this.READ,
         this.UPDATE,
         this.DELETE,
         this.EXECUTE,
-        this.MANAGE,
     ]); }
     static isValid(input) {
         return this.SCHEME_SET.has(input);
     }
 }
 exports.AuthorizationActions = AuthorizationActions;
-// --------------------------------------------------------------------------------------------------------
 class AuthorizationDecisions {
     static { this.ALLOW = 'allow'; }
     static { this.DENY = 'deny'; }
@@ -39,9 +34,26 @@ class AuthorizationDecisions {
     static isValid(input) {
         return this.SCHEME_SET.has(input);
     }
+    static isAllow(input) {
+        if (typeof input === 'number') {
+            return input > 0;
+        }
+        return input.toLowerCase() === this.ALLOW;
+    }
+    static isDeny(input) {
+        if (typeof input === 'number') {
+            return input < 0;
+        }
+        return input.toLowerCase() === this.DENY;
+    }
+    static isAbstain(input) {
+        if (typeof input === 'number') {
+            return input === 0;
+        }
+        return input.toLowerCase() === this.ABSTAIN;
+    }
 }
 exports.AuthorizationDecisions = AuthorizationDecisions;
-// --------------------------------------------------------------------------------------------------------
 class AuthorizationRoles {
     static { this.SUPER_ADMIN = authorization_role_model_1.AuthorizationRole.build({
         name: 'super-admin',
@@ -75,4 +87,44 @@ class AuthorizationRoles {
     }
 }
 exports.AuthorizationRoles = AuthorizationRoles;
+class AuthorizationEnforcerTypes {
+    static { this.CASBIN = 'casbin'; }
+    static { this.CUSTOM = 'custom'; }
+    static { this.SCHEME_SET = new Set([this.CASBIN, this.CUSTOM]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+exports.AuthorizationEnforcerTypes = AuthorizationEnforcerTypes;
+class CasbinEnforcerCachedDrivers {
+    static { this.IN_MEMORY = 'in-memory'; }
+    static { this.REDIS = 'redis'; }
+    static { this.SCHEME_SET = new Set([this.IN_MEMORY, this.REDIS]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+exports.CasbinEnforcerCachedDrivers = CasbinEnforcerCachedDrivers;
+class CasbinEnforcerModelDrivers {
+    static { this.FILE = 'file'; }
+    static { this.TEXT = 'text'; }
+    static { this.SCHEME_SET = new Set([this.FILE, this.TEXT]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+exports.CasbinEnforcerModelDrivers = CasbinEnforcerModelDrivers;
+class CasbinRuleVariants {
+    static { this.POLICY = 'policy'; }
+    static { this.GROUP = 'group'; }
+    /** Casbin line prefix for policy rules. */
+    static { this.P = 'p'; }
+    /** Casbin line prefix for grouping rules. */
+    static { this.G = 'g'; }
+    static { this.SCHEME_SET = new Set([this.POLICY, this.GROUP]); }
+    static isValid(input) {
+        return this.SCHEME_SET.has(input);
+    }
+}
+exports.CasbinRuleVariants = CasbinRuleVariants;
 //# sourceMappingURL=constants.js.map

package/dist/components/auth/authorize/common/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/common/constants.ts"],"names":[],"mappings":";;;AACA,iFAAuE;AAEvE,2GAA2G;AAC3G,MAAa,aAAa;aACR,cAAS,GAAG,yBAAyB,CAAC;aACtC,uBAAkB,GAAG,oBAAoB,CAAC;aAC1C,2BAAsB,GAAG,wBAAwB,CAAC;;AAHpE,sCAIC;AAED,2GAA2G;AAC3G,MAAa,oBAAoB;aACf,WAAM,GAAG,QAAQ,CAAC;aAClB,SAAI,GAAG,MAAM,CAAC;aACd,WAAM,GAAG,QAAQ,CAAC;aAClB,WAAM,GAAG,QAAQ,CAAC;aAClB,YAAO,GAAG,SAAS,CAAC;aACpB,WAAM,GAAG,QAAQ,CAAC;aAElB,eAAU,GAAG,IAAI,GAAG,CAAC;QACnC,IAAI,CAAC,MAAM;QACX,IAAI,CAAC,IAAI;QACT,IAAI,CAAC,MAAM;QACX,IAAI,CAAC,MAAM;QACX,IAAI,CAAC,OAAO;QACZ,IAAI,CAAC,MAAM;KACZ,CAAC,CAAC;IAEH,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAnBH,oDAoBC;AAGD,2GAA2G;AAC3G,MAAa,sBAAsB;aACjB,UAAK,GAAG,OAAO,CAAC;aAChB,SAAI,GAAG,MAAM,CAAC;aACd,YAAO,GAAG,SAAS,CAAC;aAEpB,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAE5E,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AATH,wDAUC;AAMD,2GAA2G;AAC3G,MAAa,kBAAkB;aACb,gBAAW,GAAG,4CAAiB,CAAC,KAAK,CAAC;QACpD,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,GAAG;KACd,CAAC,CAAC;aACa,UAAK,GAAG,4CAAiB,CAAC,KAAK,CAAC;QAC9C,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,GAAG;KACd,CAAC,CAAC;aACa,SAAI,GAAG,4CAAiB,CAAC,KAAK,CAAC;QAC7C,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,EAAE;KACb,CAAC,CAAC;aACa,UAAK,GAAG,4CAAiB,CAAC,KAAK,CAAC;QAC9C,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,CAAC;KACZ,CAAC,CAAC;aACa,iBAAY,GAAG,4CAAiB,CAAC,KAAK,CAAC;QACrD,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,CAAC;KACZ,CAAC,CAAC;aAEa,eAAU,GAAG,IAAI,GAAG,CAAS;QAC3C,IAAI,CAAC,WAAW,CAAC,UAAU;QAC3B,IAAI,CAAC,KAAK,CAAC,UAAU;QACrB,IAAI,CAAC,IAAI,CAAC,UAAU;QACpB,IAAI,CAAC,KAAK,CAAC,UAAU;QACrB,IAAI,CAAC,YAAY,CAAC,UAAU;KAC7B,CAAC,CAAC;IAEH,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAhCH,gDAiCC"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/common/constants.ts"],"names":[],"mappings":";;;AACA,iFAAuE;AAEvE,MAAa,aAAa;aACR,UAAK,GAAG,qBAAqB,CAAC;aAC9B,uBAAkB,GAAG,oBAAoB,CAAC;aAC1C,aAAQ,GAAG,wBAAwB,CAAC;;AAHtD,sCAIC;AAED,MAAa,oBAAoB;aACf,WAAM,GAAG,QAAQ,CAAC;aAClB,SAAI,GAAG,MAAM,CAAC;aACd,WAAM,GAAG,QAAQ,CAAC;aAClB,WAAM,GAAG,QAAQ,CAAC;aAClB,YAAO,GAAG,SAAS,CAAC;aAEpB,eAAU,GAAG,IAAI,GAAG,CAAC;QACnC,IAAI,CAAC,MAAM;QACX,IAAI,CAAC,IAAI;QACT,IAAI,CAAC,MAAM;QACX,IAAI,CAAC,MAAM;QACX,IAAI,CAAC,OAAO;KACb,CAAC,CAAC;IAEH,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAjBH,oDAkBC;AAGD,MAAa,sBAAsB;aACjB,UAAK,GAAG,OAAO,CAAC;aAChB,SAAI,GAAG,MAAM,CAAC;aACd,YAAO,GAAG,SAAS,CAAC;aAEpB,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAE5E,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,CAAC,OAAO,CAAC,KAAsB;QACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,GAAG,CAAC,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,KAAK,CAAC;IAC5C,CAAC;IAED,MAAM,CAAC,MAAM,CAAC,KAAsB;QAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,GAAG,CAAC,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC;IAC3C,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,KAAsB;QACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC;IAC9C,CAAC;;AA9BH,wDA+BC;AAGD,MAAa,kBAAkB;aACb,gBAAW,GAAG,4CAAiB,CAAC,KAAK,CAAC;QACpD,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,GAAG;KACd,CAAC,CAAC;aACa,UAAK,GAAG,4CAAiB,CAAC,KAAK,CAAC;QAC9C,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,GAAG;KACd,CAAC,CAAC;aACa,SAAI,GAAG,4CAAiB,CAAC,KAAK,CAAC;QAC7C,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,EAAE;KACb,CAAC,CAAC;aACa,UAAK,GAAG,4CAAiB,CAAC,KAAK,CAAC;QAC9C,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,CAAC;KACZ,CAAC,CAAC;aACa,iBAAY,GAAG,4CAAiB,CAAC,KAAK,CAAC;QACrD,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,CAAC;KACZ,CAAC,CAAC;aAEa,eAAU,GAAG,IAAI,GAAG,CAAS;QAC3C,IAAI,CAAC,WAAW,CAAC,UAAU;QAC3B,IAAI,CAAC,KAAK,CAAC,UAAU;QACrB,IAAI,CAAC,IAAI,CAAC,UAAU;QACpB,IAAI,CAAC,KAAK,CAAC,UAAU;QACrB,IAAI,CAAC,YAAY,CAAC,UAAU;KAC7B,CAAC,CAAC;IAEH,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAhCH,gDAiCC;AAED,MAAa,0BAA0B;aACrB,WAAM,GAAG,QAAQ,CAAC;aAClB,WAAM,GAAG,QAAQ,CAAC;aAElB,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAEjE,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,gEASC;AAID,MAAa,2BAA2B;aACtB,cAAS,GAAG,WAAW,CAAC;aACxB,UAAK,GAAG,OAAO,CAAC;aAEhB,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAEnE,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,kEASC;AAID,MAAa,0BAA0B;aACrB,SAAI,GAAG,MAAM,CAAC;aACd,SAAI,GAAG,MAAM,CAAC;aAEd,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAE7D,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AARH,gEASC;AAID,MAAa,kBAAkB;aACb,WAAM,GAAG,QAAQ,CAAC;aAClB,UAAK,GAAG,OAAO,CAAC;IAEhC,2CAA2C;aAC3B,MAAC,GAAG,GAAG,CAAC;IACxB,6CAA6C;aAC7B,MAAC,GAAG,GAAG,CAAC;aAER,eAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAEhE,MAAM,CAAC,OAAO,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;;AAbH,gDAcC"}

package/dist/components/auth/authorize/common/keys.d.ts

@@ -1,7 +1,6 @@
 export declare class AuthorizeBindingKeys {
     static readonly OPTIONS = "@app/authorize/options";
-    static readonly ENFORCER = "@app/authorize/enforcer";
     static readonly ALWAYS_ALLOW_ROLES = "@app/authorize/always-allow-roles";
-    static readonly NORMALIZE_PAYLOAD_FN = "@app/authorize/normalize-payload-fn";
+    static enforcerOptions(name: string): string;
 }
 //# sourceMappingURL=keys.d.ts.map

package/dist/components/auth/authorize/common/keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/common/keys.ts"],"names":[],"mappings":"AAAA,qBAAa,oBAAoB;IAC/B,MAAM,CAAC,QAAQ,CAAC,OAAO,4BAA4B;IACnD,MAAM,CAAC,QAAQ,CAAC,QAAQ,6BAA6B;IACrD,MAAM,CAAC,QAAQ,CAAC,kBAAkB,uCAAuC;IACzE,MAAM,CAAC,QAAQ,CAAC,oBAAoB,yCAAyC;CAC9E"}
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/common/keys.ts"],"names":[],"mappings":"AAAA,qBAAa,oBAAoB;IAC/B,MAAM,CAAC,QAAQ,CAAC,OAAO,4BAA4B;IACnD,MAAM,CAAC,QAAQ,CAAC,kBAAkB,uCAAuC;IAEzE,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;CAG7C"}

package/dist/components/auth/authorize/common/keys.js

@@ -3,9 +3,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthorizeBindingKeys = void 0;
 class AuthorizeBindingKeys {
     static { this.OPTIONS = '@app/authorize/options'; }
-    static { this.ENFORCER = '@app/authorize/enforcer'; }
     static { this.ALWAYS_ALLOW_ROLES = '@app/authorize/always-allow-roles'; }
-    static { this.NORMALIZE_PAYLOAD_FN = '@app/authorize/normalize-payload-fn'; }
+    static enforcerOptions(name) {
+        return `@app/authorize/enforcers/${name}/options`;
+    }
 }
 exports.AuthorizeBindingKeys = AuthorizeBindingKeys;
 //# sourceMappingURL=keys.js.map

package/dist/components/auth/authorize/common/keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/common/keys.ts"],"names":[],"mappings":";;;AAAA,MAAa,oBAAoB;aACf,YAAO,GAAG,wBAAwB,CAAC;aACnC,aAAQ,GAAG,yBAAyB,CAAC;aACrC,uBAAkB,GAAG,mCAAmC,CAAC;aACzD,yBAAoB,GAAG,qCAAqC,CAAC;;AAJ/E,oDAKC"}
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../../../src/components/auth/authorize/common/keys.ts"],"names":[],"mappings":";;;AAAA,MAAa,oBAAoB;aACf,YAAO,GAAG,wBAAwB,CAAC;aACnC,uBAAkB,GAAG,mCAAmC,CAAC;IAEzE,MAAM,CAAC,eAAe,CAAC,IAAY;QACjC,OAAO,4BAA4B,IAAI,UAAU,CAAC;IACpD,CAAC;;AANH,oDAOC"}